$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft File: c_S729eiHW57nkv1sMgXIszCHWc.mft (raw, json) Hash identifier: QECeVOImwsonC0U/pUADmKbZL8m4luczpZm9TiwwzRs= Subject key identifier: EA:71:70:18:1A:83:46:27:19:EF:CF:EE:0C:C5:AC:47:0B:E5:0D:FF Authority key identifier: 73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 Certificate issuer: /CN=A91BDDB8/serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Certificate serial: 121D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft Manifest number: 120F Signing time: Tue 04 Nov 2025 17:14:40 +0000 Manifest this update: Tue 04 Nov 2025 17:14:40 +0000 Manifest next update: Tue 11 Nov 2025 17:14:40 +0000 Files and hashes: 1: c_S729eiHW57nkv1sMgXIszCHWc.crl (hash: gdedm0v1s/EzKLllFCF9uiF+AAG0o7AYjiLLMQwexFs=) 2: 732BAF02BF5D11EB8199C943C4F9AE02.roa (hash: 19PePHoFF22nUkndMtbal1vAJr/Bweg8ayj4IBTrMGk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:14:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4637 (0x121d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDDB8, serialNumber=73F4BBDBD7A21D6E7B9E4BF5B0C81722CCC21D67 Validity Not Before: Nov 4 17:14:40 2025 GMT Not After : Nov 11 17:14:40 2025 GMT Subject: CN=690a3480-92c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d1:61:e4:a6:81:da:27:d5:ac:ae:5b:a7:6f: 66:91:9d:c8:79:5b:07:70:61:15:55:31:d0:63:b6: 5c:09:18:a5:67:99:34:49:b4:eb:5c:a8:95:f2:95: b3:e2:85:40:44:3a:23:43:83:d6:55:e6:5a:a8:aa: b8:b0:ec:38:5e:d5:1a:03:b3:20:a8:4b:dd:8a:90: e1:2b:fa:59:0b:65:66:1a:20:87:d8:fa:3d:28:d5: b1:88:14:d6:4f:50:4e:25:3e:01:71:bb:f0:4e:ec: 0d:55:e1:26:89:d9:17:f8:21:be:31:3b:54:34:3a: 29:b1:d5:56:ec:7a:c4:fb:e4:5c:19:f2:2e:13:b8: db:c8:16:dd:af:17:ed:0e:d0:95:54:20:6b:b8:26: 5d:fd:52:cb:d3:3c:d4:8e:72:b0:57:a5:27:88:ce: f3:a6:27:48:b5:01:16:a5:5d:d8:f4:e2:11:dc:b6: d2:c8:48:c5:7e:71:5d:db:3b:6a:c6:29:f0:0b:f3: e5:cd:8c:b0:37:14:a2:9b:af:81:be:99:b6:08:29: 9d:f8:7e:92:03:d8:4f:02:9b:86:26:7e:45:6c:9a: 39:15:5a:b1:06:46:d7:cb:34:f7:20:16:74:80:cc: 94:4e:2c:3b:0a:56:be:7a:8f:93:44:49:14:73:45: 35:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:71:70:18:1A:83:46:27:19:EF:CF:EE:0C:C5:AC:47:0B:E5:0D:FF X509v3 Authority Key Identifier: keyid:73:F4:BB:DB:D7:A2:1D:6E:7B:9E:4B:F5:B0:C8:17:22:CC:C2:1D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c_S729eiHW57nkv1sMgXIszCHWc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDDB8/D3DD37F8F3B311E888D37228C4F9AE02/c_S729eiHW57nkv1sMgXIszCHWc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:18:98:e6:ba:79:74:1b:15:9a:b4:1d:7e:83:ae:78:73:65: 22:3c:f4:f3:b7:db:f9:83:0d:36:95:d2:a7:86:78:c0:1a:a6: f1:d4:8a:38:6f:bf:73:7f:d8:40:54:ab:7f:80:cc:53:87:4a: 32:ad:98:ee:2a:11:c7:61:97:1b:eb:ce:a0:2d:50:dc:ee:b2: cf:18:2d:01:d6:e6:86:1e:1b:d2:a8:8d:cd:82:7e:09:25:b9: 0f:5e:7b:16:12:f0:2f:9c:72:d5:04:a4:a8:a8:62:88:6b:d3: be:75:f7:c7:a8:95:ad:a8:dc:df:40:74:e4:ac:25:a1:a9:2d: 57:e2:7d:09:cd:67:65:fd:e1:fc:fc:ef:ea:08:8f:f6:6e:73: f3:75:0b:a3:16:43:8f:55:a4:5d:d6:c4:e7:17:02:1e:cd:02: e7:14:dd:8c:de:28:3d:08:1a:14:68:15:1e:95:ad:96:92:5b: 3c:69:96:cd:54:b7:93:59:45:dd:f2:a5:19:db:ed:f3:8c:ad: 81:13:39:c4:9f:03:6d:bd:b0:bd:3c:b6:7f:af:8a:94:30:57: 2f:b6:28:8a:83:48:46:ef:98:22:6a:f1:98:2e:1a:91:db:cc: 26:bf:4b:3d:25:71:c2:a9:5f:3e:b2:4a:fd:15:2f:78:ca:53: 88:f0:dc:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkREQjgxMTAvBgNVBAUTKDczRjRCQkRCRDdBMjFENkU3QjlFNEJGNUIwQzgxNzIy Q0NDMjFENjcwHhcNMjUxMTA0MTcxNDQwWhcNMjUxMTExMTcxNDQwWjAYMRYwFAYD VQQDEw02OTBhMzQ4MC05MmM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dFh5KaB2ifVrK5bp29mkZ3IeVsHcGEVVTHQY7ZcCRilZ5k0SbTrXKiV8pWz 4oVARDojQ4PWVeZaqKq4sOw4XtUaA7MgqEvdipDhK/pZC2VmGiCH2Po9KNWxiBTW T1BOJT4BcbvwTuwNVeEmidkX+CG+MTtUNDopsdVW7HrE++RcGfIuE7jbyBbdrxft DtCVVCBruCZd/VLL0zzUjnKwV6UniM7zpidItQEWpV3Y9OIR3LbSyEjFfnFd2ztq xinwC/PlzYywNxSim6+Bvpm2CCmd+H6SA9hPApuGJn5FbJo5FVqxBkbXyzT3IBZ0 gMyUTiw7Cla+eo+TREkUc0U1/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOpxcBga g0YnGe/P7gzFrEcL5Q3/MB8GA1UdIwQYMBaAFHP0u9vXoh1ue55L9bDIFyLMwh1n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRERCOC9EM0REMzdGOEYz QjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhXNTdua3Yxc01nWElzekNI V2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NfUzcyOWVpSFc1N25rdjFzTWdYSXN6Q0hXYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RERCOC9EM0REMzdGOEYzQjMxMUU4ODhEMzcyMjhDNEY5QUUwMi9jX1M3MjllaUhX NTdua3Yxc01nWElzekNIV2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnGJjmunl0GxWatB1+g654c2UiPPTzt9v5gw02ldKnhnjAGqbx1Io4 b79zf9hAVKt/gMxTh0oyrZjuKhHHYZcb686gLVDc7rLPGC0B1uaGHhvSqI3Ngn4J JbkPXnsWEvAvnHLVBKSoqGKIa9O+dffHqJWtqNzfQHTkrCWhqS1X4n0JzWdl/eH8 /O/qCI/2bnPzdQujFkOPVaRd1sTnFwIezQLnFN2M3ig9CBoUaBUela2Wkls8aZbN VLeTWUXd8qUZ2+3zjK2BEznEnwNtvbC9PLZ/r4qUMFcvtiiKg0hG75giavGYLhqR 28wmv0s9JXHCqV8+skr9FS94ylOI8Nx/ -----END CERTIFICATE-----Generated at Wed Nov 5 17:05:35 2025 by rpki-client