$ rpki-client -vvf rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft File: 33nDugFSYeOshDI5zkcDWQHWapQ.mft (raw, json) Hash identifier: 1g3JpPgvyZjjgVIPv26DRDbTr9EBVkqDk+yAzZh/lnM= Subject key identifier: 23:E1:61:94:27:33:67:79:92:12:88:0C:C8:26:70:8C:30:9D:BB:65 Authority key identifier: DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 Certificate issuer: /CN=A91C572B/serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Certificate serial: 01CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft Manifest number: 01C2 Signing time: Mon 03 Nov 2025 03:00:49 +0000 Manifest this update: Mon 03 Nov 2025 03:00:48 +0000 Manifest next update: Mon 10 Nov 2025 03:00:48 +0000 Files and hashes: 1: 33nDugFSYeOshDI5zkcDWQHWapQ.crl (hash: SyVgJVHpkaM/okgcCgAypmEP3DT1GhF8eY//x41ufJY=) 2: 18DC0A381C0311EE9B0F2938C4F9AE02.roa (hash: wznc2xIu+Db8dBh8TB4MLEtEwoDgpd9YS1hyNvKSiTQ=) 3: 17C68D301C0311EE9B0F2938C4F9AE02.roa (hash: iplB9XZjSOwQ5O2H5iEJJvDG/Nz+QwUOR0kvaV5InLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 460 (0x1cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C572B, serialNumber=DF79C3BA015261E3AC843239CE47035901D66A94 Validity Not Before: Nov 3 03:00:48 2025 GMT Not After : Nov 10 03:00:48 2025 GMT Subject: CN=69081ae0-5aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ca:8e:4b:40:8f:eb:f2:c1:7c:08:f4:4c:b8: bd:5f:93:8e:f3:10:5b:5d:77:8e:5c:d6:09:cb:38: 78:ad:00:57:0d:51:d4:a8:22:b5:e0:cc:e5:0a:e4: 32:1a:3a:bb:4b:03:e3:2a:9a:9a:85:8c:9a:71:78: 40:3d:e4:c3:d4:53:c9:a1:6c:69:6d:9e:89:11:89: 6c:7a:49:5f:b5:75:7a:2f:60:31:3c:29:47:ba:74: 69:b0:03:d5:9a:9e:7b:f2:97:8b:6e:62:40:47:6b: fa:01:a6:6b:0c:33:7c:28:a3:47:a2:fd:55:93:54: 2b:b5:32:d1:fa:ec:91:9a:8c:ab:ae:0b:47:6b:9c: 5c:37:cd:a5:13:1b:4a:2b:0c:30:13:f3:8e:fc:b3: 8b:53:2f:c5:87:e7:01:e4:a3:67:7b:5b:38:ec:32: b1:9a:35:74:57:bd:9a:e6:c3:d1:1f:3d:9f:99:ab: 2c:09:69:0a:30:fd:a2:fe:fa:16:40:63:3a:33:da: 17:01:8a:d7:2f:05:16:ae:c6:cf:83:25:ae:02:93: c6:ae:5d:6b:23:70:c2:40:4c:14:7d:4c:3e:2d:02: c4:1a:70:0d:4d:ca:ce:d1:9a:c9:25:dc:f3:a9:50: c7:16:a2:31:9c:23:ec:0d:e9:a5:a3:b6:8b:14:cc: d1:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E1:61:94:27:33:67:79:92:12:88:0C:C8:26:70:8C:30:9D:BB:65 X509v3 Authority Key Identifier: keyid:DF:79:C3:BA:01:52:61:E3:AC:84:32:39:CE:47:03:59:01:D6:6A:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/33nDugFSYeOshDI5zkcDWQHWapQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C572B/F7E5C1680E9A11EEA6449E71C4F9AE02/33nDugFSYeOshDI5zkcDWQHWapQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:00:b7:db:69:cc:5a:84:ca:e1:63:4b:e9:2e:e8:f6:e0:ae: da:f7:94:4e:e5:9e:73:6c:6d:61:a4:f0:df:85:7f:a7:38:df: a6:49:bb:29:ec:dd:f3:f9:d7:37:59:b7:f6:fe:44:76:79:3d: b3:b7:6b:a8:89:4b:f4:c6:9e:6c:a9:a0:6f:89:de:b1:cb:55: 8c:fb:6b:cd:4b:0c:1b:cf:4b:0a:17:db:fc:81:3f:a4:da:4e: 72:8a:3d:50:00:88:f2:d2:52:67:63:99:ac:4d:26:6c:ce:22: 63:f4:45:ac:1c:90:bf:4e:5c:7d:d4:05:f1:6c:ff:d9:30:c2: 2d:ff:2c:79:72:9b:61:08:04:7b:3a:00:73:24:51:29:0b:0d: b8:bf:22:8d:c6:c5:4f:88:1b:b6:35:b5:2c:dd:51:d4:08:3c: b9:45:31:19:8c:56:54:7d:45:e3:9c:6a:6f:cb:6f:97:4b:73: 73:1a:bb:12:27:22:2f:c8:bd:4b:2e:4c:59:03:82:d2:e8:01: 05:7d:85:f4:6e:bf:d9:31:28:1e:a9:b4:16:51:33:ce:c0:45: 7c:38:6a:e4:13:b1:37:74:97:d0:54:c7:c1:b1:8a:cc:da:60: fb:11:b1:2d:e6:a9:93:72:28:29:f3:8d:28:1b:36:60:18:22: 07:a6:05:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU3MkIxMTAvBgNVBAUTKERGNzlDM0JBMDE1MjYxRTNBQzg0MzIzOUNFNDcwMzU5 MDFENjZBOTQwHhcNMjUxMTAzMDMwMDQ4WhcNMjUxMTEwMDMwMDQ4WjAYMRYwFAYD VQQDEw02OTA4MWFlMC01YWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx8qOS0CP6/LBfAj0TLi9X5OO8xBbXXeOXNYJyzh4rQBXDVHUqCK14MzlCuQy Gjq7SwPjKpqahYyacXhAPeTD1FPJoWxpbZ6JEYlseklftXV6L2AxPClHunRpsAPV mp578peLbmJAR2v6AaZrDDN8KKNHov1Vk1QrtTLR+uyRmoyrrgtHa5xcN82lExtK KwwwE/OO/LOLUy/Fh+cB5KNne1s47DKxmjV0V72a5sPRHz2fmassCWkKMP2i/voW QGM6M9oXAYrXLwUWrsbPgyWuApPGrl1rI3DCQEwUfUw+LQLEGnANTcrO0ZrJJdzz qVDHFqIxnCPsDemlo7aLFMzRoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPhYZQn M2d5khKIDMgmcIwwnbtlMB8GA1UdIwQYMBaAFN95w7oBUmHjrIQyOc5HA1kB1mqU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTcyQi9GN0U1QzE2ODBF OUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1llT3NoREk1emtjRFdRSFdh cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMzbkR1Z0ZTWWVPc2hESTV6a2NEV1FIV2FwUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTcyQi9GN0U1QzE2ODBFOUExMUVFQTY0NDlFNzFDNEY5QUUwMi8zM25EdWdGU1ll T3NoREk1emtjRFdRSFdhcFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdALfbacxahMrhY0vpLuj24K7a95RO5Z5zbG1hpPDfhX+nON+mSbsp 7N3z+dc3Wbf2/kR2eT2zt2uoiUv0xp5sqaBvid6xy1WM+2vNSwwbz0sKF9v8gT+k 2k5yij1QAIjy0lJnY5msTSZsziJj9EWsHJC/Tlx91AXxbP/ZMMIt/yx5cpthCAR7 OgBzJFEpCw24vyKNxsVPiBu2NbUs3VHUCDy5RTEZjFZUfUXjnGpvy2+XS3NzGrsS JyIvyL1LLkxZA4LS6AEFfYX0br/ZMSgeqbQWUTPOwEV8OGrkE7E3dJfQVMfBsYrM 2mD7EbEt5qmTcigp840oGzZgGCIHpgUb -----END CERTIFICATE-----Generated at Tue Nov 4 12:40:49 2025 by rpki-client