$ rpki-client -vvf rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft File: 9jTAsSwZeK8-iQxSj8csj3R9uYA.mft (raw, json) Hash identifier: VgpZVugnb7iOXOcy9YrxpEh0+mMI9glI3m5hVzNvDEo= Subject key identifier: CD:11:FA:72:2D:BC:E4:A8:6A:2F:CB:3D:84:62:D4:A1:04:BB:7E:96 Authority key identifier: F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 Certificate issuer: /CN=A91C798A/serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Certificate serial: 0391 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft Manifest number: 038C Signing time: Wed 05 Nov 2025 00:53:02 +0000 Manifest this update: Wed 05 Nov 2025 00:53:02 +0000 Manifest next update: Wed 12 Nov 2025 00:53:02 +0000 Files and hashes: 1: 9jTAsSwZeK8-iQxSj8csj3R9uYA.crl (hash: 5OOpF5sFkWPCad0jglwjFpuLb3rERLq0x05SdviePhI=) 2: 2173FE4EC0A611ECB6A6996CC4F9AE02.roa (hash: AvM4EHFc35a+/i0JOm+PYVnypM/t1zc/v7lGdHSDzQQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 913 (0x391) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C798A, serialNumber=F634C0B12C1978AF3E890C528FC72C8F747DB980 Validity Not Before: Nov 5 00:53:02 2025 GMT Not After : Nov 12 00:53:02 2025 GMT Subject: CN=690a9fee-b8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:88:b6:3b:9a:af:87:a7:e3:9a:89:b4:44: d8:f1:c6:a3:5a:ae:03:29:7a:46:ed:12:68:c2:aa: 1b:52:09:05:02:e2:e9:97:99:13:e0:a1:16:d6:ab: ec:11:3c:f6:c2:a0:f9:47:ac:72:6b:73:39:4a:91: 1f:f5:5e:01:c8:e0:84:67:39:d5:54:20:91:f1:84: b1:9b:9d:ea:73:43:33:b8:5f:ae:0d:f7:a4:14:8f: c4:93:43:bb:81:96:09:d8:00:5a:3f:0d:50:fc:00: c2:24:d1:d0:24:fc:30:84:99:b6:d4:72:fa:6d:c0: 32:fc:41:6e:dc:0c:e1:32:c6:fd:05:82:8f:0b:f6: e4:66:a0:5a:ae:bd:c0:28:94:35:1a:c7:e7:c1:30: e7:5c:9b:2e:6f:17:62:d2:eb:5e:39:93:1f:9b:47: c0:b6:8b:72:97:66:1c:7f:7e:73:cd:61:8b:3d:8d: b0:f5:eb:c7:d6:ba:c3:ed:00:e3:9a:04:c7:4e:bf: 48:db:f9:00:1c:92:5d:d3:86:22:16:95:32:fc:d1: 91:91:00:15:ec:8f:d7:ea:53:df:af:ab:40:cf:e3: 40:fc:e9:cd:44:1c:a5:f4:80:80:2f:1c:ba:2d:11: dc:b6:f6:1f:8b:5d:14:3a:21:cd:5e:23:dc:67:f8: c2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:11:FA:72:2D:BC:E4:A8:6A:2F:CB:3D:84:62:D4:A1:04:BB:7E:96 X509v3 Authority Key Identifier: keyid:F6:34:C0:B1:2C:19:78:AF:3E:89:0C:52:8F:C7:2C:8F:74:7D:B9:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9jTAsSwZeK8-iQxSj8csj3R9uYA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C798A/CF5FD6B8C0A111EC8AE24528C4F9AE02/9jTAsSwZeK8-iQxSj8csj3R9uYA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a0:15:0e:5f:44:c5:86:a0:b0:d3:58:3e:8b:55:5c:83:76: 2b:9f:31:c5:b3:9f:f7:5f:0a:c1:0b:ff:83:4f:dc:e5:5e:a7: 67:35:1c:2e:23:52:a3:bc:4d:e3:13:9e:6c:31:c7:74:f9:01: 24:94:4d:4f:3d:1a:64:82:52:97:a7:c3:91:4f:95:71:c0:00: dd:98:64:76:cd:13:1d:a2:ce:e8:34:70:e4:f4:f3:23:34:7a: 3d:8c:56:17:19:12:e7:e1:04:f0:7c:85:d7:37:b7:20:c7:73: fb:14:09:e0:d3:4d:f7:0a:3f:29:7c:01:ef:b7:72:5f:16:1e: 8d:17:41:5b:8d:0c:05:26:e5:66:c3:15:b0:cd:4c:8d:06:a5: f9:25:00:0d:75:e3:0e:d9:1b:98:72:4a:fd:28:40:73:b5:db: 08:69:d8:65:e4:1e:dd:e4:2c:80:22:e1:d5:c8:05:eb:7e:a7: 13:1a:2b:61:69:b3:b8:c2:f4:01:37:3e:f8:e0:8e:07:15:9a: 4f:7f:c6:6c:f3:90:59:50:60:4b:53:0a:c6:01:01:d1:f3:de: 38:f1:58:04:34:f5:8d:c1:f6:98:37:33:22:d8:1e:bd:58:f3: 9c:fb:a6:5c:8a:88:75:fb:ae:1c:01:5f:77:5c:4a:9c:e5:fe: 3c:26:68:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA5EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzc5OEExMTAvBgNVBAUTKEY2MzRDMEIxMkMxOTc4QUYzRTg5MEM1MjhGQzcyQzhG NzQ3REI5ODAwHhcNMjUxMTA1MDA1MzAyWhcNMjUxMTEyMDA1MzAyWjAYMRYwFAYD VQQDEw02OTBhOWZlZS1iOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzk+Itjuar4en45qJtETY8cajWq4DKXpG7RJowqobUgkFAuLpl5kT4KEW1qvs ETz2wqD5R6xya3M5SpEf9V4ByOCEZznVVCCR8YSxm53qc0MzuF+uDfekFI/Ek0O7 gZYJ2ABaPw1Q/ADCJNHQJPwwhJm21HL6bcAy/EFu3AzhMsb9BYKPC/bkZqBarr3A KJQ1GsfnwTDnXJsubxdi0uteOZMfm0fAtotyl2Ycf35zzWGLPY2w9evH1rrD7QDj mgTHTr9I2/kAHJJd04YiFpUy/NGRkQAV7I/X6lPfr6tAz+NA/OnNRByl9ICALxy6 LRHctvYfi10UOiHNXiPcZ/jCQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM0R+nIt vOSoai/LPYRi1KEEu36WMB8GA1UdIwQYMBaAFPY0wLEsGXivPokMUo/HLI90fbmA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzk4QS9DRjVGRDZCOEMw QTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVLOC1pUXhTajhjc2ozUjl1 WUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlqVEFzU3daZUs4LWlReFNqOGNzajNSOXVZQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD Nzk4QS9DRjVGRDZCOEMwQTExMUVDOEFFMjQ1MjhDNEY5QUUwMi85alRBc1N3WmVL OC1pUXhTajhjc2ozUjl1WUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAqoBUOX0TFhqCw01g+i1Vcg3YrnzHFs5/3XwrBC/+DT9zlXqdnNRwu I1KjvE3jE55sMcd0+QEklE1PPRpkglKXp8ORT5VxwADdmGR2zRMdos7oNHDk9PMj NHo9jFYXGRLn4QTwfIXXN7cgx3P7FAng0033Cj8pfAHvt3JfFh6NF0FbjQwFJuVm wxWwzUyNBqX5JQANdeMO2RuYckr9KEBztdsIadhl5B7d5CyAIuHVyAXrfqcTGith abO4wvQBNz744I4HFZpPf8Zs85BZUGBLUwrGAQHR89448VgENPWNwfaYNzMi2B69 WPOc+6Zcioh1+64cAV93XEqc5f48Jmge -----END CERTIFICATE-----Generated at Wed Nov 5 05:44:35 2025 by rpki-client