$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft File: voMTRZEKyCwYqIMcLYUK5bOOUA8.mft (raw, json) Hash identifier: z3S/KPOGrWtkeK6zX2OCtjdpEnyzYjO/yXNiu7JTCRM= Subject key identifier: 78:8F:36:FA:9B:0F:7F:D0:DF:02:51:CB:73:6C:55:07:55:73:95:A6 Authority key identifier: BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F Certificate issuer: /CN=A91B8C13/serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Certificate serial: 07EA Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft Manifest number: 07E9 Signing time: Tue 04 Nov 2025 15:20:14 +0000 Manifest this update: Tue 04 Nov 2025 15:20:13 +0000 Manifest next update: Tue 11 Nov 2025 15:20:13 +0000 Files and hashes: 1: voMTRZEKyCwYqIMcLYUK5bOOUA8.crl (hash: LAfZjs5LJ+XPj3+5fi80S7+bFJHyZdwqg0zxmHzJh9E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2026 (0x7ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C13, serialNumber=BE831345910AC82C18A8831C2D850AE5B38E500F Validity Not Before: Nov 4 15:20:13 2025 GMT Not After : Nov 11 15:20:13 2025 GMT Subject: CN=690a19ae-073e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ac:20:de:26:e0:2f:d8:85:46:38:6d:24:41: 18:83:a7:bf:2d:5b:e4:8f:64:7e:b3:92:1d:e8:ac: 19:fe:98:47:74:d1:7b:95:6d:2d:71:4e:ba:d2:0b: 80:ae:e8:20:c2:5b:63:f2:ea:a4:be:a1:0f:88:4f: ed:4f:72:44:81:0b:d0:a7:bb:05:8d:76:68:55:1a: 1b:b2:0c:b3:ab:bb:87:3e:e5:0f:f8:f9:9c:1b:ab: 83:18:65:cb:85:13:ac:90:6a:5e:25:ef:04:a6:95: eb:b5:8b:10:91:94:c1:5a:ea:40:e5:aa:c8:49:e6: 71:17:c9:44:d1:c9:cb:e0:eb:0c:dd:86:c9:79:0f: 1a:11:16:16:f7:18:da:b6:06:ad:46:53:4e:2f:0c: 70:21:f8:d0:ee:90:1d:b8:3f:b0:b6:9c:9e:e1:6c: d6:76:81:18:5c:59:5e:b6:ae:df:b2:22:e8:7d:ed: bb:a9:bf:4f:6a:59:2e:d3:46:5a:9d:32:b7:2b:74: 0a:17:ca:93:df:c0:b6:0b:27:c1:b5:7b:32:f9:82: 87:ec:4f:75:27:0a:76:36:b6:50:8d:db:d7:39:55: fe:fe:0b:40:41:b4:1b:a6:fd:86:d9:59:79:a1:c0: 7e:34:56:8d:53:fc:ed:c7:43:bf:55:19:6e:00:bc: 96:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:8F:36:FA:9B:0F:7F:D0:DF:02:51:CB:73:6C:55:07:55:73:95:A6 X509v3 Authority Key Identifier: keyid:BE:83:13:45:91:0A:C8:2C:18:A8:83:1C:2D:85:0A:E5:B3:8E:50:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/voMTRZEKyCwYqIMcLYUK5bOOUA8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C13/F89C4F680D6811EB849BDF3EC4F9AE02/voMTRZEKyCwYqIMcLYUK5bOOUA8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b6:22:67:96:fe:25:c7:33:02:3c:84:ae:30:cf:3a:3f:9d:52: 01:2a:fa:53:f2:a2:a8:1a:fa:c2:d2:cd:d8:20:da:99:69:58: 53:bd:fc:c5:e1:9e:64:6c:fd:f7:d1:5a:48:e0:8f:57:ce:ae: 46:ce:80:70:8e:c5:41:ac:f2:10:77:48:a9:31:7e:87:5a:34: a6:49:fe:c2:9e:c2:f2:a3:ad:e5:7d:1f:39:f7:ff:f4:a4:d5: b8:44:c3:92:9c:10:4f:7f:9b:47:d8:a0:64:de:68:46:11:b9: b6:67:7c:f6:77:fa:9b:c2:47:d9:02:07:19:62:be:cb:14:71: 12:82:4d:74:1c:eb:aa:e0:68:b8:ae:58:b5:33:70:bf:06:ae: b9:1e:40:b6:3c:4c:c0:fd:86:96:16:4c:c8:b2:2f:25:fe:3e: ab:e6:88:ac:a5:df:cf:83:eb:58:d7:dc:6b:f9:26:03:d4:7b: 3d:57:d7:32:b5:96:c3:15:db:f5:c1:c7:17:c0:e0:ed:f2:30: c3:d7:4d:12:70:9f:0f:07:50:6d:b0:fb:d1:d5:2b:e6:95:9b: 60:29:6b:a7:b3:e3:f4:e8:eb:d4:74:da:92:f8:44:4f:51:20: a3:b6:b9:3d:a4:e9:5f:d0:74:8e:eb:a3:57:13:1e:8c:f5:37: f5:8b:3d:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDMTMxMTAvBgNVBAUTKEJFODMxMzQ1OTEwQUM4MkMxOEE4ODMxQzJEODUwQUU1 QjM4RTUwMEYwHhcNMjUxMTA0MTUyMDEzWhcNMjUxMTExMTUyMDEzWjAYMRYwFAYD VQQDEw02OTBhMTlhZS0wNzNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn6wg3ibgL9iFRjhtJEEYg6e/LVvkj2R+s5Id6KwZ/phHdNF7lW0tcU660guA ruggwltj8uqkvqEPiE/tT3JEgQvQp7sFjXZoVRobsgyzq7uHPuUP+PmcG6uDGGXL hROskGpeJe8EppXrtYsQkZTBWupA5arISeZxF8lE0cnL4OsM3YbJeQ8aERYW9xja tgatRlNOLwxwIfjQ7pAduD+wtpye4WzWdoEYXFletq7fsiLofe27qb9Palku00Za nTK3K3QKF8qT38C2CyfBtXsy+YKH7E91Jwp2NrZQjdvXOVX+/gtAQbQbpv2G2Vl5 ocB+NFaNU/ztx0O/VRluALyWyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHiPNvqb D3/Q3wJRy3NsVQdVc5WmMB8GA1UdIwQYMBaAFL6DE0WRCsgsGKiDHC2FCuWzjlAP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEMxMy9GODlDNEY2ODBE NjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lDd1lxSU1jTFlVSzViT09V QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3ZvTVRSWkVLeUN3WXFJTWNMWVVLNWJPT1VBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEMxMy9GODlDNEY2ODBENjgxMUVCODQ5QkRGM0VDNEY5QUUwMi92b01UUlpFS3lD d1lxSU1jTFlVSzViT09VQTgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC2ImeW/iXHMwI8hK4wzzo/nVIBKvpT8qKoGvrC0s3YINqZaVhTvfzF 4Z5kbP330VpI4I9Xzq5GzoBwjsVBrPIQd0ipMX6HWjSmSf7CnsLyo63lfR859//0 pNW4RMOSnBBPf5tH2KBk3mhGEbm2Z3z2d/qbwkfZAgcZYr7LFHESgk10HOuq4Gi4 rli1M3C/Bq65HkC2PEzA/YaWFkzIsi8l/j6r5oispd/Pg+tY19xr+SYD1Hs9V9cy tZbDFdv1wccXwODt8jDD100ScJ8PB1BtsPvR1SvmlZtgKWuns+P06OvUdNqS+ERP USCjtrk9pOlf0HSO66NXEx6M9Tf1iz2z -----END CERTIFICATE-----Generated at Wed Nov 5 17:42:03 2025 by rpki-client