$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft File: 25K4P0wYeDkNakTmrtV6d1ImNRI.mft (raw, json) Hash identifier: e0BjyDi1VUNcQPoyiFfuSkbFb6ELCScxHwT2KVOvpu0= Subject key identifier: 8A:6E:4F:93:45:46:2B:45:10:54:FD:30:36:CB:D5:BF:16:AE:3F:7F Authority key identifier: DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 Certificate issuer: /CN=A91BBD5B/serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Certificate serial: 1D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft Manifest number: 1D5B Signing time: Tue 04 Nov 2025 16:13:43 +0000 Manifest this update: Tue 04 Nov 2025 16:13:42 +0000 Manifest next update: Tue 11 Nov 2025 16:13:42 +0000 Files and hashes: 1: 25K4P0wYeDkNakTmrtV6d1ImNRI.crl (hash: 5Xj4j+18JGsHySHlXKcNaR5adh98Ei5hESGg4RY2jSk=) 2: AB9480A6BB6811E69E8D1212C4F9AE02.roa (hash: kiqsqwNMBPh3qwxfNJAfqtQq0GlxcHUCDHglujirUPs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7527 (0x1d67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBD5B, serialNumber=DB92B83F4C1878390D6A44E6AED57A7752263512 Validity Not Before: Nov 4 16:13:42 2025 GMT Not After : Nov 11 16:13:42 2025 GMT Subject: CN=690a2637-8039 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d3:a8:7e:dc:96:18:f1:48:d8:9a:5f:1a:3b: 72:f6:e6:29:f0:31:db:e5:a0:8a:18:ea:99:e3:a9: 9c:d6:d4:eb:c3:64:f5:ee:bf:28:76:96:19:35:a4: 7e:c4:90:9e:e9:30:95:ea:41:d9:64:2e:56:73:04: 1d:ef:48:fa:bf:3a:a4:c4:82:9b:d6:d0:69:e2:8f: da:8e:96:19:05:b2:ea:b6:66:72:83:3f:ab:d4:2a: 23:1f:fe:6f:fa:61:00:e3:83:6d:a6:ff:eb:47:60: 57:7e:d6:36:2c:b5:c0:2e:76:5c:59:0e:34:4b:84: 9f:b2:29:f7:18:1d:a3:11:8d:94:e1:c4:d2:6b:f6: c3:0e:5f:51:3e:fa:22:55:56:f1:11:91:aa:2e:b5: 5a:64:67:e0:75:75:e4:4e:37:e6:81:47:d6:ee:6d: 52:76:53:75:ad:e2:8a:f2:c1:96:47:9d:d6:bf:cc: 11:2c:4f:90:9b:b8:bb:1d:a6:79:5e:54:cf:83:fe: 6d:ca:2a:55:ce:05:8f:4b:bf:af:c7:89:d2:c5:3b: 07:b5:3a:70:a9:b8:c0:82:81:e5:41:3e:c6:fc:76: 19:7c:ec:48:b3:9d:d1:ba:e8:6f:0e:94:69:5f:01: 36:6c:ce:0f:38:a8:7d:4a:5b:a7:12:e4:44:29:24: 86:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:6E:4F:93:45:46:2B:45:10:54:FD:30:36:CB:D5:BF:16:AE:3F:7F X509v3 Authority Key Identifier: keyid:DB:92:B8:3F:4C:18:78:39:0D:6A:44:E6:AE:D5:7A:77:52:26:35:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/25K4P0wYeDkNakTmrtV6d1ImNRI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBD5B/1702FC3EBB6711E6AE24040FC4F9AE02/25K4P0wYeDkNakTmrtV6d1ImNRI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:6d:1b:e9:38:2e:79:36:b2:6f:e9:90:3b:db:93:b1:26:10: b7:9e:83:c7:e8:63:e1:a0:3e:3a:c3:61:04:f8:c6:a4:03:a5: 8d:69:29:50:36:f2:8d:e6:12:aa:67:94:9f:03:89:96:52:42: 8b:83:ff:3f:ea:09:f5:87:f8:76:dd:e1:07:98:a9:e3:c2:60: b9:2e:d6:11:e2:29:e1:9b:ec:56:db:16:f5:06:31:d6:0e:c0: 37:86:4c:3b:5f:53:aa:49:98:1f:f7:7e:d2:a3:bc:56:f9:2e: b3:85:4f:d8:9d:a9:39:28:ae:6d:02:e1:d9:a2:42:37:0b:94: cb:d2:5d:90:3a:86:19:da:fe:fc:8a:80:08:c3:53:41:6b:b6: de:1e:2b:11:5b:32:b4:b6:bd:3e:aa:6b:73:8d:b3:90:2f:e9: 0e:24:a2:c5:f2:55:ee:4d:1f:dc:dd:4a:e7:3f:6e:4a:7b:a7: b4:d8:85:77:2d:48:63:5f:9c:cf:06:99:1d:4e:0e:41:c1:5c: 54:3c:92:ba:f3:f8:d8:14:c6:ac:64:17:3d:09:6f:d2:84:eb: 06:55:ff:7c:73:ea:2d:3d:9d:15:3a:18:0b:62:9b:de:ff:71: 26:41:6e:06:af:82:60:b2:14:22:91:b7:ce:4f:3e:e3:ea:fc: 5e:15:7d:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJENUIxMTAvBgNVBAUTKERCOTJCODNGNEMxODc4MzkwRDZBNDRFNkFFRDU3QTc3 NTIyNjM1MTIwHhcNMjUxMTA0MTYxMzQyWhcNMjUxMTExMTYxMzQyWjAYMRYwFAYD VQQDEw02OTBhMjYzNy04MDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptOoftyWGPFI2JpfGjty9uYp8DHb5aCKGOqZ46mc1tTrw2T17r8odpYZNaR+ xJCe6TCV6kHZZC5WcwQd70j6vzqkxIKb1tBp4o/ajpYZBbLqtmZygz+r1CojH/5v +mEA44Ntpv/rR2BXftY2LLXALnZcWQ40S4Sfsin3GB2jEY2U4cTSa/bDDl9RPvoi VVbxEZGqLrVaZGfgdXXkTjfmgUfW7m1SdlN1reKK8sGWR53Wv8wRLE+Qm7i7HaZ5 XlTPg/5tyipVzgWPS7+vx4nSxTsHtTpwqbjAgoHlQT7G/HYZfOxIs53RuuhvDpRp XwE2bM4POKh9SlunEuREKSSGPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpuT5NF RitFEFT9MDbL1b8Wrj9/MB8GA1UdIwQYMBaAFNuSuD9MGHg5DWpE5q7VendSJjUS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkQ1Qi8xNzAyRkMzRUJC NjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVEa05ha1RtcnRWNmQxSW1O UkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI1SzRQMHdZZURrTmFrVG1ydFY2ZDFJbU5SSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkQ1Qi8xNzAyRkMzRUJCNjcxMUU2QUUyNDA0MEZDNEY5QUUwMi8yNUs0UDB3WWVE a05ha1RtcnRWNmQxSW1OUkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzbRvpOC55NrJv6ZA725OxJhC3noPH6GPhoD46w2EE+MakA6WNaSlQ NvKN5hKqZ5SfA4mWUkKLg/8/6gn1h/h23eEHmKnjwmC5LtYR4inhm+xW2xb1BjHW DsA3hkw7X1OqSZgf937So7xW+S6zhU/Ynak5KK5tAuHZokI3C5TL0l2QOoYZ2v78 ioAIw1NBa7beHisRWzK0tr0+qmtzjbOQL+kOJKLF8lXuTR/c3UrnP25Ke6e02IV3 LUhjX5zPBpkdTg5BwVxUPJK68/jYFMasZBc9CW/ShOsGVf98c+otPZ0VOhgLYpve /3EmQW4Gr4JgshQikbfOTz7j6vxeFX2f -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:49 2025 by rpki-client