$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft File: t0bN0xcqIBHwIYn_La14fSnAEek.mft (raw, json) Hash identifier: ytVYT7o9z/WU/zxsB+vhXk1VSXsF44pNyCNL6lQAqnQ= Subject key identifier: 2D:EE:62:DF:EC:1B:11:2F:16:D7:60:64:98:00:65:17:A5:38:D1:48 Authority key identifier: B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 Certificate issuer: /CN=A91C1B92/serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Certificate serial: 0E08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft Manifest number: 0E00 Signing time: Tue 04 Nov 2025 17:55:50 +0000 Manifest this update: Tue 04 Nov 2025 17:55:49 +0000 Manifest next update: Tue 11 Nov 2025 17:55:49 +0000 Files and hashes: 1: t0bN0xcqIBHwIYn_La14fSnAEek.crl (hash: I9vVQTEXhH0EvBLsXdvc8PBrS2V6jgMRzIGXKEp0Ssg=) 2: F8AC3DD8DB9111E9B70EDD2EC4F9AE02.roa (hash: Ik/3X8YIb0qhd0Fqkle1gmGuYbSdF2VymS/D7TZSlFk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:55:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3592 (0xe08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1B92, serialNumber=B746CDD3172A2011F02189FF2DAD787D29C011E9 Validity Not Before: Nov 4 17:55:49 2025 GMT Not After : Nov 11 17:55:49 2025 GMT Subject: CN=690a3e25-333b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:09:83:a0:8c:1f:14:d6:42:01:a3:12:a9:52: d9:fe:b9:0a:53:f9:0b:e9:f3:14:31:67:17:b0:be: 86:47:ca:af:21:30:8c:83:04:77:a0:1a:a3:68:2b: db:66:5a:ac:54:43:8d:f2:48:d1:49:0a:20:9f:b8: f8:29:e6:07:4a:25:20:a5:27:ea:b9:74:5b:81:12: 13:d7:1a:5e:8d:10:c8:1d:57:5a:b7:c9:20:c7:e8: c3:4d:e7:72:5d:d3:ec:dc:aa:e5:ab:40:83:b1:2d: 1f:6e:9d:f2:fb:63:8e:5d:90:82:4b:e9:36:ff:ab: bc:07:65:c0:92:06:7d:37:69:78:31:89:f2:37:2d: 5c:77:2c:0e:4f:47:cf:dc:a2:7c:b1:ed:a6:02:a8: 2f:d2:fa:da:3a:95:76:09:5f:d4:da:da:32:b1:a7: a4:72:6f:4b:38:ff:c6:96:c4:39:a1:f8:8a:97:8b: a8:8e:22:2f:c1:85:31:47:95:41:51:84:3a:2d:c7: 64:14:92:3a:7d:d1:af:75:e0:f4:fb:82:dc:70:d4: c5:43:e0:32:3c:f9:96:c0:3d:5b:4f:72:d5:ab:a2: ae:2d:03:c4:9e:aa:82:97:15:3c:bb:69:f3:6b:ba: 84:9b:df:de:85:32:86:b9:6b:61:fc:90:50:a2:22: a6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EE:62:DF:EC:1B:11:2F:16:D7:60:64:98:00:65:17:A5:38:D1:48 X509v3 Authority Key Identifier: keyid:B7:46:CD:D3:17:2A:20:11:F0:21:89:FF:2D:AD:78:7D:29:C0:11:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t0bN0xcqIBHwIYn_La14fSnAEek.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1B92/AABFC49ABD6011E9956A0F19C4F9AE02/t0bN0xcqIBHwIYn_La14fSnAEek.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c2:2c:aa:2e:62:0a:f6:2d:70:d6:53:d0:fe:24:89:a1:6c:4a: e3:37:fc:a2:e6:e5:da:05:b9:86:33:99:1d:18:43:3d:27:42: 15:d0:e3:3c:58:c9:02:8c:db:97:12:fb:ef:48:1f:81:75:22: 4b:14:2c:18:bf:c6:23:f7:76:5e:52:80:f0:37:9e:01:5c:50: 2e:43:b9:d0:f5:5d:3c:ca:42:6f:00:e0:1f:37:cd:da:ab:2e: d7:05:c2:63:2c:8c:0a:12:1f:7e:f6:b1:ed:1b:34:aa:60:a3: cc:f5:d6:9e:5d:e0:ef:a7:0d:66:9f:11:25:b9:31:ec:84:77: b4:01:90:7d:d6:6e:7c:a4:72:1e:9d:56:fc:6e:bd:55:44:9f: bb:0f:ee:28:25:52:2f:45:f2:cd:ba:4e:11:27:a7:52:a3:a9: c6:16:25:74:6d:d0:3a:c8:c2:b8:78:c8:5d:2e:b4:11:4b:e4: b9:3f:10:a1:a4:0b:e1:0b:67:a3:32:9f:e3:6a:be:0c:ec:9a: 9e:25:a3:48:85:1f:25:87:13:09:8d:fa:55:6c:b9:8a:db:7b: 2b:11:a1:69:e7:9a:09:0d:85:a4:cb:18:91:90:ea:b3:49:89: 37:74:47:9c:9c:ed:f2:15:9c:06:9c:d0:99:9b:93:66:bd:95: 29:b2:5c:ef -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFCOTIxMTAvBgNVBAUTKEI3NDZDREQzMTcyQTIwMTFGMDIxODlGRjJEQUQ3ODdE MjlDMDExRTkwHhcNMjUxMTA0MTc1NTQ5WhcNMjUxMTExMTc1NTQ5WjAYMRYwFAYD VQQDEw02OTBhM2UyNS0zMzNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQmDoIwfFNZCAaMSqVLZ/rkKU/kL6fMUMWcXsL6GR8qvITCMgwR3oBqjaCvb ZlqsVEON8kjRSQogn7j4KeYHSiUgpSfquXRbgRIT1xpejRDIHVdat8kgx+jDTedy XdPs3Krlq0CDsS0fbp3y+2OOXZCCS+k2/6u8B2XAkgZ9N2l4MYnyNy1cdywOT0fP 3KJ8se2mAqgv0vraOpV2CV/U2toysaekcm9LOP/GlsQ5ofiKl4uojiIvwYUxR5VB UYQ6LcdkFJI6fdGvdeD0+4LccNTFQ+AyPPmWwD1bT3LVq6KuLQPEnqqClxU8u2nz a7qEm9/ehTKGuWth/JBQoiKmsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3uYt/s GxEvFtdgZJgAZRelONFIMB8GA1UdIwQYMBaAFLdGzdMXKiAR8CGJ/y2teH0pwBHp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUI5Mi9BQUJGQzQ5QUJE NjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlCSHdJWW5fTGExNGZTbkFF ZWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3QwYk4weGNxSUJId0lZbl9MYTE0ZlNuQUVlay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MUI5Mi9BQUJGQzQ5QUJENjAxMUU5OTU2QTBGMTlDNEY5QUUwMi90MGJOMHhjcUlC SHdJWW5fTGExNGZTbkFFZWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDCLKouYgr2LXDWU9D+JImhbErjN/yi5uXaBbmGM5kdGEM9J0IV0OM8 WMkCjNuXEvvvSB+BdSJLFCwYv8Yj93ZeUoDwN54BXFAuQ7nQ9V08ykJvAOAfN83a qy7XBcJjLIwKEh9+9rHtGzSqYKPM9daeXeDvpw1mnxEluTHshHe0AZB91m58pHIe nVb8br1VRJ+7D+4oJVIvRfLNuk4RJ6dSo6nGFiV0bdA6yMK4eMhdLrQRS+S5PxCh pAvhC2ejMp/jar4M7JqeJaNIhR8lhxMJjfpVbLmK23srEaFp55oJDYWkyxiRkOqz SYk3dEecnO3yFZwGnNCZm5NmvZUpslzv -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:36 2025 by rpki-client