$ rpki-client -vvf rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft File: 92dQUVu3YtGADFrmxsLbJP6VLQI.mft (raw, json) Hash identifier: EiUPN1Jka1wTIysmtimI4rmMrfoRabgRHrbzWtLNLdk= Subject key identifier: 99:F9:A6:3C:4D:7C:F7:DD:C0:A6:5C:40:48:82:8F:17:D8:92:4C:8D Authority key identifier: F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 Certificate issuer: /CN=A91C83EA/serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Certificate serial: 2AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft Manifest number: 2AC9 Signing time: Tue 04 Nov 2025 15:36:15 +0000 Manifest this update: Tue 04 Nov 2025 15:36:14 +0000 Manifest next update: Tue 11 Nov 2025 15:36:14 +0000 Files and hashes: 1: 92dQUVu3YtGADFrmxsLbJP6VLQI.crl (hash: np9bf3njeaASw00OOpUAvn8SppUmBenha42UgAng6sM=) 2: 2ED1150C561D11E7B003DF26C4F9AE02.roa (hash: hRXVDS2SOPtJ34LPdCH4GrMLjogwv7F/rCNwzymK5NA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10976 (0x2ae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C83EA, serialNumber=F76750515BB762D1800C5AE6C6C2DB24FE952D02 Validity Not Before: Nov 4 15:36:14 2025 GMT Not After : Nov 11 15:36:14 2025 GMT Subject: CN=690a1d6f-7e6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:19:8f:45:9b:65:a2:0d:93:fc:ac:15:ab:64: 6d:2c:8d:f3:eb:8d:1f:e2:29:8f:53:06:6e:c9:b4: f4:84:1a:96:22:77:40:2d:ef:99:bd:dd:97:dc:3c: 11:03:ad:a1:ae:6b:68:32:be:21:73:82:3b:32:26: 1d:81:c5:76:4a:38:59:c2:00:7f:70:7b:c8:28:6f: 6d:d2:4b:c8:be:24:4c:00:dd:dd:c6:b1:70:db:ea: 87:35:60:6b:75:b4:bd:58:07:9e:a2:9f:8e:ab:bc: 87:9d:fb:c8:01:73:a1:43:fc:0f:9c:e4:9e:ce:c5: b9:81:52:ef:41:09:ff:67:2c:92:cf:8e:18:62:70: 1b:5b:be:99:5d:40:e7:c3:f9:d0:4f:ae:c2:e9:7b: 29:7d:d2:42:40:07:aa:8a:b8:da:63:d3:19:e6:80: f5:32:a2:8e:a3:42:27:ed:b5:66:38:37:9a:c2:af: f4:2d:57:73:44:ea:e7:4a:2a:ea:40:b7:89:b4:f7: 1c:4c:43:4a:07:ac:fc:04:8d:0e:de:95:d5:8e:8e: 93:f2:22:1e:7f:f5:64:37:1a:a7:2e:52:c3:1e:b2: 99:87:41:cd:04:4d:b2:f5:be:f0:f8:b1:04:32:b4: ab:f2:85:6c:58:04:94:90:fc:57:d0:e4:b9:d9:1e: 53:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F9:A6:3C:4D:7C:F7:DD:C0:A6:5C:40:48:82:8F:17:D8:92:4C:8D X509v3 Authority Key Identifier: keyid:F7:67:50:51:5B:B7:62:D1:80:0C:5A:E6:C6:C2:DB:24:FE:95:2D:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/92dQUVu3YtGADFrmxsLbJP6VLQI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C83EA/D82C61E81C4511E494A76F1BC4F9AE02/92dQUVu3YtGADFrmxsLbJP6VLQI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fe:17:cf:79:77:21:fb:6a:63:43:f4:c4:31:86:48:d0:45: 38:82:72:e0:e7:85:0c:a1:a7:1c:50:d9:8f:7f:85:89:b2:c3: cc:de:eb:ee:e4:31:f7:ee:b4:f3:32:4d:c1:be:09:db:c6:76: e1:95:e2:51:90:7f:49:89:6d:4b:ef:d4:99:e3:ab:ef:28:d3: 89:7e:d1:fc:3f:8b:97:0c:68:c0:06:66:ab:53:ed:9a:23:de: 5c:fd:4b:1c:0a:a8:15:00:74:21:bb:aa:e2:28:6e:6a:37:bc: cf:c7:6d:3c:47:41:90:28:15:0f:ce:e7:ce:8a:ee:20:97:29: 28:e7:50:2b:66:07:60:ff:58:6d:ec:b2:c5:b1:0a:8f:28:08: 80:da:31:a5:89:13:6d:e0:be:2f:bd:36:b7:bc:e2:06:65:7f: 74:ff:1b:21:7a:16:11:1f:98:bd:ec:92:6a:71:0c:fc:29:85: ae:2e:7c:1d:58:7c:b5:c8:93:d9:45:08:fd:ca:27:df:ef:ee: ae:36:04:8d:17:42:60:fc:58:e1:2e:0b:1a:dc:ff:71:21:ee: 9b:15:02:c3:d0:15:b0:b5:77:f1:14:05:f9:78:69:90:9c:d7: 20:8b:68:1c:c1:5a:d0:ef:0e:f1:1b:a1:5d:d0:33:2a:28:3d: 20:86:94:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzRUExMTAvBgNVBAUTKEY3Njc1MDUxNUJCNzYyRDE4MDBDNUFFNkM2QzJEQjI0 RkU5NTJEMDIwHhcNMjUxMTA0MTUzNjE0WhcNMjUxMTExMTUzNjE0WjAYMRYwFAYD VQQDEw02OTBhMWQ2Zi03ZTZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBmPRZtlog2T/KwVq2RtLI3z640f4imPUwZuybT0hBqWIndALe+Zvd2X3DwR A62hrmtoMr4hc4I7MiYdgcV2SjhZwgB/cHvIKG9t0kvIviRMAN3dxrFw2+qHNWBr dbS9WAeeop+Oq7yHnfvIAXOhQ/wPnOSezsW5gVLvQQn/ZyySz44YYnAbW76ZXUDn w/nQT67C6XspfdJCQAeqirjaY9MZ5oD1MqKOo0In7bVmODeawq/0LVdzROrnSirq QLeJtPccTENKB6z8BI0O3pXVjo6T8iIef/VkNxqnLlLDHrKZh0HNBE2y9b7w+LEE MrSr8oVsWASUkPxX0OS52R5TYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJn5pjxN fPfdwKZcQEiCjxfYkkyNMB8GA1UdIwQYMBaAFPdnUFFbt2LRgAxa5sbC2yT+lS0C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODNFQS9EODJDNjFFODFD NDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0R0FERnJteHNMYkpQNlZM UUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkyZFFVVnUzWXRHQURGcm14c0xiSlA2VkxRSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODNFQS9EODJDNjFFODFDNDUxMUU0OTRBNzZGMUJDNEY5QUUwMi85MmRRVVZ1M1l0 R0FERnJteHNMYkpQNlZMUUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB/hfPeXch+2pjQ/TEMYZI0EU4gnLg54UMoaccUNmPf4WJssPM3uvu 5DH37rTzMk3BvgnbxnbhleJRkH9JiW1L79SZ46vvKNOJftH8P4uXDGjABmarU+2a I95c/UscCqgVAHQhu6riKG5qN7zPx208R0GQKBUPzufOiu4glyko51ArZgdg/1ht 7LLFsQqPKAiA2jGliRNt4L4vvTa3vOIGZX90/xshehYRH5i97JJqcQz8KYWuLnwd WHy1yJPZRQj9yiff7+6uNgSNF0Jg/FjhLgsa3P9xIe6bFQLD0BWwtXfxFAX5eGmQ nNcgi2gcwVrQ7w7xG6Fd0DMqKD0ghpSe -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:43 2025 by rpki-client