$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft File: R0Blek4vuGe_tE2_bLi8HdGywg4.mft (raw, json) Hash identifier: rW1K1Jc/doW/d9IkUOGTSJq7OKNdlcawRovXOTodsss= Subject key identifier: 80:13:33:BB:61:04:64:2F:88:48:C3:BF:2B:EE:20:2A:7E:AF:38:D4 Authority key identifier: 47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E Certificate issuer: /CN=A91BA733/serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Certificate serial: 02CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft Manifest number: 02C9 Signing time: Wed 05 Nov 2025 01:29:15 +0000 Manifest this update: Wed 05 Nov 2025 01:29:14 +0000 Manifest next update: Wed 12 Nov 2025 01:29:14 +0000 Files and hashes: 1: R0Blek4vuGe_tE2_bLi8HdGywg4.crl (hash: I7TjytaPcjuORnFSqVzZzH0Tdr4NcXAC6TDjsYn/YwU=) 2: 7AD326AC663911EDA919A02AC4F9AE02.roa (hash: e4e/2weEWR9V4/NE3J2YPV05BSS+/w2P0bwX2/dmeeA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:29:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 719 (0x2cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA733, serialNumber=4740657A4E2FB867BFB44DBF6CB8BC1DD1B2C20E Validity Not Before: Nov 5 01:29:14 2025 GMT Not After : Nov 12 01:29:14 2025 GMT Subject: CN=690aa86a-4e9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:d8:97:e0:85:38:e4:e3:1c:f9:30:99:a3: eb:be:da:1c:c1:fa:ad:17:3d:0a:2e:df:32:79:ae: 5f:67:99:3a:33:1c:05:47:46:23:2d:90:31:6d:70: c4:0c:20:db:44:b5:7b:87:ca:dc:d3:ba:63:8d:e8: 64:9d:80:68:4c:f4:56:88:a8:de:e7:c4:a2:06:87: 99:c2:86:dc:9f:ee:29:9c:ba:b5:cc:f7:9f:30:79: 8b:8e:2f:09:62:d0:85:cd:5d:29:86:91:f3:21:84: 3d:98:02:95:d6:4f:79:be:f1:60:a6:91:da:0d:99: 41:c5:ae:ee:17:73:5c:0e:b2:c3:42:02:cc:ed:42: 94:41:44:d4:0e:a3:4a:49:98:71:4f:6c:0c:6f:f0: d8:2f:43:60:3b:98:b1:be:8f:e7:d5:67:0f:cc:3a: 80:7e:7c:08:b4:e8:0d:51:53:08:fb:08:ee:82:00: 91:e7:96:df:70:35:36:4b:d0:c7:b0:6f:d0:19:d4: e4:14:d3:9f:1d:d5:ac:be:d8:2f:03:d5:47:90:49: c2:ef:f4:00:50:fb:66:dc:b7:3d:1e:d1:06:60:2f: 50:54:e8:b7:b5:f3:ff:33:24:fc:46:65:43:60:a9: 45:8c:f5:be:61:ec:aa:0a:d9:37:6a:1f:6f:c8:d0: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:13:33:BB:61:04:64:2F:88:48:C3:BF:2B:EE:20:2A:7E:AF:38:D4 X509v3 Authority Key Identifier: keyid:47:40:65:7A:4E:2F:B8:67:BF:B4:4D:BF:6C:B8:BC:1D:D1:B2:C2:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0Blek4vuGe_tE2_bLi8HdGywg4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA733/333872A20D7411EDA896062FC4F9AE02/R0Blek4vuGe_tE2_bLi8HdGywg4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:4f:e0:f3:8c:c4:c3:0d:4f:ef:62:fa:7a:6e:bf:63:eb:d4: 61:07:f8:45:a9:32:b2:14:56:da:d4:da:e6:1c:bb:1d:83:8d: 51:35:0c:a1:9d:f4:a9:8b:0f:14:b0:10:e1:b9:23:61:18:00: 7a:e3:b6:c7:50:6d:a8:aa:3f:a2:55:7d:fb:8e:79:f9:cf:d5: fd:86:68:2a:61:c8:f2:0f:1d:76:6b:90:b4:82:9f:dc:60:6c: 5d:57:a1:98:23:b9:64:98:92:35:01:3f:2a:b1:94:75:03:be: dc:d6:85:0e:18:36:3a:47:89:78:d6:0f:98:a1:c3:ae:5b:ad: 8d:e3:7c:f5:14:e1:c6:07:75:62:49:76:b0:18:8e:11:52:57: 53:39:2d:fe:d6:6a:f5:e5:7c:a1:2f:6c:29:4d:5e:e0:83:af: 2a:17:f0:10:14:08:23:c0:c1:64:a3:5e:ed:8b:31:ad:0b:97: b0:61:3d:07:2f:cf:fd:84:c0:1b:1d:1f:f7:ee:35:c4:22:1f: b3:26:70:6d:73:80:1a:b6:8f:85:d2:c8:32:df:55:79:a2:d7: 52:39:33:0c:af:de:11:7d:67:77:17:6d:d2:93:b8:2a:a0:d3: 42:f1:11:50:dc:fe:bd:da:64:2f:85:27:02:e9:22:d7:0f:cf: 2a:6b:7a:ed -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE3MzMxMTAvBgNVBAUTKDQ3NDA2NTdBNEUyRkI4NjdCRkI0NERCRjZDQjhCQzFE RDFCMkMyMEUwHhcNMjUxMTA1MDEyOTE0WhcNMjUxMTEyMDEyOTE0WjAYMRYwFAYD VQQDEw02OTBhYTg2YS00ZTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscrYl+CFOOTjHPkwmaPrvtocwfqtFz0KLt8yea5fZ5k6MxwFR0YjLZAxbXDE DCDbRLV7h8rc07pjjehknYBoTPRWiKje58SiBoeZwobcn+4pnLq1zPefMHmLji8J YtCFzV0phpHzIYQ9mAKV1k95vvFgppHaDZlBxa7uF3NcDrLDQgLM7UKUQUTUDqNK SZhxT2wMb/DYL0NgO5ixvo/n1WcPzDqAfnwItOgNUVMI+wjuggCR55bfcDU2S9DH sG/QGdTkFNOfHdWsvtgvA9VHkEnC7/QAUPtm3Lc9HtEGYC9QVOi3tfP/MyT8RmVD YKlFjPW+YeyqCtk3ah9vyNDAHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIATM7th BGQviEjDvyvuICp+rzjUMB8GA1UdIwQYMBaAFEdAZXpOL7hnv7RNv2y4vB3RssIO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTczMy8zMzM4NzJBMjBE NzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVHZV90RTJfYkxpOEhkR3l3 ZzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IwQmxlazR2dUdlX3RFMl9iTGk4SGRHeXdnNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTczMy8zMzM4NzJBMjBENzQxMUVEQTg5NjA2MkZDNEY5QUUwMi9SMEJsZWs0dnVH ZV90RTJfYkxpOEhkR3l3ZzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVT+DzjMTDDU/vYvp6br9j69RhB/hFqTKyFFba1NrmHLsdg41RNQyh nfSpiw8UsBDhuSNhGAB647bHUG2oqj+iVX37jnn5z9X9hmgqYcjyDx12a5C0gp/c YGxdV6GYI7lkmJI1AT8qsZR1A77c1oUOGDY6R4l41g+YocOuW62N43z1FOHGB3Vi SXawGI4RUldTOS3+1mr15XyhL2wpTV7gg68qF/AQFAgjwMFko17tizGtC5ewYT0H L8/9hMAbHR/37jXEIh+zJnBtc4Aato+F0sgy31V5otdSOTMMr94RfWd3F23Sk7gq oNNC8RFQ3P692mQvhScC6SLXD88qa3rt -----END CERTIFICATE-----Generated at Wed Nov 5 05:42:26 2025 by rpki-client