$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: xfAS8xUd5HVV5eGaFalyGD7sJ+PeG6S/l98h23IyQqc= Subject key identifier: 90:8B:53:DE:42:87:87:AE:53:D7:E4:40:04:D6:36:8A:4D:13:36:52 Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 1F Signing time: Mon 03 Nov 2025 07:46:03 +0000 Manifest this update: Mon 03 Nov 2025 07:46:03 +0000 Manifest next update: Mon 10 Nov 2025 07:46:03 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: WwmLWrucv52NitghUfVWCcpoRqCL+1oa5fJ1gPSLa4o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:46:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Nov 3 07:46:03 2025 GMT Not After : Nov 10 07:46:03 2025 GMT Subject: CN=69085dbb-887b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:aa:3d:56:49:c4:ed:ed:7e:28:d7:ec:ee:20: 99:93:74:cd:55:7d:05:80:46:ca:0a:65:32:2c:bc: 0c:6a:0e:95:4a:ec:a1:58:2d:0e:4b:f0:fd:51:58: 1a:04:23:f0:81:6c:cd:2b:e5:ea:42:17:25:6b:7c: 5f:48:d1:db:9d:18:1e:ce:3d:08:f3:5e:f3:f6:63: 11:cd:d9:c6:b3:88:b8:c9:98:12:27:f3:44:78:9d: 3e:46:d7:6e:ce:0a:ab:49:75:3d:f1:f3:af:9b:f6: 00:fa:30:74:81:21:e3:77:fc:e3:cd:cc:08:e5:a1: 01:45:aa:9b:e7:23:7c:cd:01:62:3b:cd:ea:36:61: 1d:b5:35:3f:ac:bc:04:a5:f8:84:13:c4:08:f0:cd: 95:a5:03:51:d1:72:8c:b9:1d:dc:ee:16:38:f0:98: 8a:5b:b8:4e:b5:e4:f5:1b:c8:d4:32:8b:86:67:15: 1f:b5:2e:f2:26:af:16:f5:c2:b4:a4:1d:ac:fb:9c: d0:c7:38:17:f7:71:26:65:90:79:17:93:5f:16:f8: fe:6a:7f:f8:a7:c7:0c:f4:44:49:f0:ab:ff:6d:65: 17:cc:07:a2:b9:57:fa:33:b2:53:4f:d5:0c:0c:60: 07:f3:ee:38:9b:78:ea:d9:d9:66:a6:08:f2:64:cd: ae:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8B:53:DE:42:87:87:AE:53:D7:E4:40:04:D6:36:8A:4D:13:36:52 X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:3d:bb:af:fe:e0:a8:5d:d9:16:35:ba:b6:53:88:23:45:bd: c2:86:7e:71:7f:c2:3f:c9:e3:c0:b0:d4:85:05:d0:2f:92:1a: 9e:37:c9:79:8a:88:d3:50:17:d4:c2:a8:39:4a:50:a6:37:80: 1f:d6:64:d4:2f:f2:48:6e:7d:62:22:99:45:b8:cc:f3:a8:c2: 41:aa:36:3a:67:59:8e:27:f7:b4:3a:97:37:4e:99:27:03:95: 83:2e:d5:ba:c7:a5:06:3e:6f:a4:c9:b6:60:3a:31:4e:ee:f6: 4a:59:e9:fc:cb:e2:76:c8:f0:a3:22:46:87:ba:27:f9:a3:4a: 33:95:2f:30:12:5f:63:89:25:5d:cc:ef:36:41:4d:91:c1:b6: 03:9a:81:01:0c:0e:60:96:c6:c8:de:fb:9f:7a:33:da:74:c2: 0f:06:96:af:fe:bd:94:35:55:c1:90:a0:a1:d0:a0:f0:fc:94: 42:3d:5d:bc:b8:fd:69:09:fa:90:1b:15:ca:70:55:ac:bc:da: 49:1f:68:99:6c:7b:63:b4:d2:8a:cf:fc:91:4a:73:e6:f0:b6: a2:90:9c:1a:7d:82:2b:73:4f:c4:80:18:8e:23:e2:07:fb:64: 09:f1:be:60:f9:e0:7f:0f:50:f2:42:77:b7:75:9a:48:24:6e: 69:87:84:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTExMDMwNzQ2MDNaFw0yNTExMTAwNzQ2MDNaMBgxFjAUBgNV BAMTDTY5MDg1ZGJiLTg4N2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHqj1WScTt7X4o1+zuIJmTdM1VfQWARsoKZTIsvAxqDpVK7KFYLQ5L8P1RWBoE I/CBbM0r5epCFyVrfF9I0dudGB7OPQjzXvP2YxHN2caziLjJmBIn80R4nT5G127O CqtJdT3x86+b9gD6MHSBIeN3/OPNzAjloQFFqpvnI3zNAWI7zeo2YR21NT+svASl +IQTxAjwzZWlA1HRcoy5HdzuFjjwmIpbuE615PUbyNQyi4ZnFR+1LvImrxb1wrSk Haz7nNDHOBf3cSZlkHkXk18W+P5qf/inxwz0REnwq/9tZRfMB6K5V/ozslNP1QwM YAfz7jibeOrZ2WamCPJkza4DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUkItT3kKH h65T1+RABNY2ik0TNlIwHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIE9u6/+4Khd2RY1urZTiCNFvcKGfnF/wj/J48Cw1IUF0C+SGp43yXmK iNNQF9TCqDlKUKY3gB/WZNQv8khufWIimUW4zPOowkGqNjpnWY4n97Q6lzdOmScD lYMu1brHpQY+b6TJtmA6MU7u9kpZ6fzL4nbI8KMiRoe6J/mjSjOVLzASX2OJJV3M 7zZBTZHBtgOagQEMDmCWxsje+596M9p0wg8Glq/+vZQ1VcGQoKHQoPD8lEI9Xby4 /WkJ+pAbFcpwVay82kkfaJlse2O00orP/JFKc+bwtqKQnBp9gitzT8SAGI4j4gf7 ZAnxvmD54H8PUPJCd7d1mkgkbmmHhEI= -----END CERTIFICATE-----Generated at Wed Nov 5 05:37:48 2025 by rpki-client