$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft File: a-rAl7V48XydcRl3ez9RFPvglxs.mft (raw, json) Hash identifier: 70ZXUjb7mLJsyCR+cOkfAAYGCVuboDzJlLAGWjd2bi4= Subject key identifier: E8:FF:FE:4C:75:49:5F:CD:A0:4F:C4:DE:79:D8:5D:25:48:E1:2B:11 Authority key identifier: 6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B Certificate issuer: /CN=A91C5A9F/serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Certificate serial: 0D03 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft Manifest number: 0CEB Signing time: Tue 04 Nov 2025 18:13:52 +0000 Manifest this update: Tue 04 Nov 2025 18:13:52 +0000 Manifest next update: Tue 11 Nov 2025 18:13:52 +0000 Files and hashes: 1: a-rAl7V48XydcRl3ez9RFPvglxs.crl (hash: rdaqRbP5W6J1CKA+wcuBPI8DdxlBYgiyA6fiTJ89olc=) 2: 498956B8FFC411EEB2369013C4F9AE02.roa (hash: Q8R6RdYUX7rY4VWbBZw5PBzAwbilsPbivqpkW+dr/Ec=) 3: 48B3316EFFC411EEB2369013C4F9AE02.roa (hash: rkTwGBJDEcILt7naFyYrumMd/+qJZboX4q6K9aobNao=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:13:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3331 (0xd03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C5A9F, serialNumber=6BEAC097B578F17C9D7119777B3F5114FBE0971B Validity Not Before: Nov 4 18:13:52 2025 GMT Not After : Nov 11 18:13:52 2025 GMT Subject: CN=690a4260-a065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1e:39:aa:5f:ef:11:9a:6b:47:da:c3:88:25: c5:d8:1d:5b:fe:7a:23:0a:7f:3c:b1:e8:fb:e7:64: ac:91:39:0a:93:78:c8:d5:cb:56:18:9b:5d:fa:9d: cb:d2:e0:56:8d:69:73:82:2d:9d:db:a5:ff:52:dd: a9:13:ad:e1:80:8a:10:74:8e:fe:da:c8:c4:4d:67: 98:57:34:2c:41:ee:06:a8:73:a1:7d:f2:c2:48:ac: f3:6c:93:d5:31:e4:b7:96:b1:fb:5a:f1:05:af:a7: 0d:07:68:21:ae:c6:77:b8:37:6f:9f:90:f2:ab:1a: ab:78:b0:de:5d:61:86:74:d2:17:6f:8b:41:47:54: 6d:da:95:3e:cf:97:fb:b5:06:66:df:4c:b4:e0:fd: e0:2b:b9:10:90:53:d3:6e:b3:e9:71:99:b0:0e:27: 25:43:c0:cf:77:a6:62:63:c3:1e:5a:01:d9:bf:d5: 70:ff:a0:0e:ef:c4:fe:dc:94:de:cb:d3:16:bf:ef: 91:a0:20:c1:ed:f7:46:bd:c5:86:54:49:be:42:20: c2:e0:01:cb:b5:fa:f4:84:5b:20:f7:b9:96:ed:42: 71:f6:e7:a7:d2:4c:1b:9f:e3:94:32:75:15:bd:6f: f3:82:95:d4:b9:96:5c:e2:3c:91:d2:22:f1:da:b8: 86:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FF:FE:4C:75:49:5F:CD:A0:4F:C4:DE:79:D8:5D:25:48:E1:2B:11 X509v3 Authority Key Identifier: keyid:6B:EA:C0:97:B5:78:F1:7C:9D:71:19:77:7B:3F:51:14:FB:E0:97:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a-rAl7V48XydcRl3ez9RFPvglxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5A9F/021A960CF67811E9B5209625C4F9AE02/a-rAl7V48XydcRl3ez9RFPvglxs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:cc:f3:6b:67:04:9a:e0:5c:17:c3:5c:f0:f6:28:10:7c:fc: 4d:cd:db:9a:52:dc:2b:64:d3:1f:71:b4:90:b5:a0:86:cf:6e: 98:3a:ca:1b:c3:9a:a2:20:9d:b2:e0:45:ec:48:4f:4d:3a:ec: 9d:ab:46:af:6a:ee:f0:ab:a4:ce:31:31:6c:b5:a8:d9:92:1c: d1:66:66:55:f4:92:f8:a1:3c:81:c6:69:4e:81:b9:72:48:60: 36:29:84:a9:08:af:78:50:ee:44:e4:b9:2c:3f:2b:f3:d3:42: 0b:a1:8d:43:71:31:34:4f:c1:80:53:50:6a:05:72:a8:a4:c8: c2:84:c0:14:97:a0:e4:ae:71:49:73:c3:a7:a4:6c:09:5a:d1: 81:f0:cc:00:07:c4:e7:7d:55:e2:c5:84:97:45:f0:5f:da:e2: 26:82:6d:24:91:7b:39:bb:1a:b6:8e:9e:59:11:9f:fb:13:e2: 11:de:38:11:4a:d7:7a:7c:ff:b6:f0:f1:59:d8:5a:49:87:6d: 8c:95:df:4f:df:fa:e6:1d:4e:42:5a:bf:ac:e4:50:27:30:b9: 8a:7d:ef:25:a1:91:f6:fc:bf:3b:12:74:4c:36:39:a0:f4:cf: 06:77:dd:81:4f:0c:8c:4c:da:af:ed:45:eb:eb:38:f3:d4:1f: 2e:80:d0:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDQMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzVBOUYxMTAvBgNVBAUTKDZCRUFDMDk3QjU3OEYxN0M5RDcxMTk3NzdCM0Y1MTE0 RkJFMDk3MUIwHhcNMjUxMTA0MTgxMzUyWhcNMjUxMTExMTgxMzUyWjAYMRYwFAYD VQQDEw02OTBhNDI2MC1hMDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArx45ql/vEZprR9rDiCXF2B1b/nojCn88sej752SskTkKk3jI1ctWGJtd+p3L 0uBWjWlzgi2d26X/Ut2pE63hgIoQdI7+2sjETWeYVzQsQe4GqHOhffLCSKzzbJPV MeS3lrH7WvEFr6cNB2ghrsZ3uDdvn5DyqxqreLDeXWGGdNIXb4tBR1Rt2pU+z5f7 tQZm30y04P3gK7kQkFPTbrPpcZmwDiclQ8DPd6ZiY8MeWgHZv9Vw/6AO78T+3JTe y9MWv++RoCDB7fdGvcWGVEm+QiDC4AHLtfr0hFsg97mW7UJx9uen0kwbn+OUMnUV vW/zgpXUuZZc4jyR0iLx2riGJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOj//kx1 SV/NoE/E3nnYXSVI4SsRMB8GA1UdIwQYMBaAFGvqwJe1ePF8nXEZd3s/URT74Jcb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNUE5Ri8wMjFBOTYwQ0Y2 NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhYeWRjUmwzZXo5UkZQdmds eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2EtckFsN1Y0OFh5ZGNSbDNlejlSRlB2Z2x4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NUE5Ri8wMjFBOTYwQ0Y2NzgxMUU5QjUyMDk2MjVDNEY5QUUwMi9hLXJBbDdWNDhY eWRjUmwzZXo5UkZQdmdseHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGzPNrZwSa4FwXw1zw9igQfPxNzduaUtwrZNMfcbSQtaCGz26YOsob w5qiIJ2y4EXsSE9NOuydq0avau7wq6TOMTFstajZkhzRZmZV9JL4oTyBxmlOgbly SGA2KYSpCK94UO5E5LksPyvz00ILoY1DcTE0T8GAU1BqBXKopMjChMAUl6DkrnFJ c8OnpGwJWtGB8MwAB8TnfVXixYSXRfBf2uImgm0kkXs5uxq2jp5ZEZ/7E+IR3jgR Std6fP+28PFZ2FpJh22Mld9P3/rmHU5CWr+s5FAnMLmKfe8loZH2/L87EnRMNjmg 9M8Gd92BTwyMTNqv7UXr6zjz1B8ugNDH -----END CERTIFICATE-----Generated at Wed Nov 5 22:34:13 2025 by rpki-client