$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft File: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json) Hash identifier: WaPuLJoLlp1mxrf3v2BSV4fa/FFCdHqTNskl60IZGUw= Subject key identifier: 82:8D:D0:4D:65:4F:2C:F0:B1:56:1C:2F:A9:F3:DC:D3:CC:D6:51:83 Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 Certificate issuer: /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96 Certificate serial: 34E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft Manifest number: 34DD Signing time: Sun 02 Nov 2025 14:31:50 +0000 Manifest this update: Sun 02 Nov 2025 14:31:49 +0000 Manifest next update: Sun 09 Nov 2025 14:31:49 +0000 Files and hashes: 1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: 8sWiU0Uv+OOs4da/Yv/wIvQ+vC+M0IFMI53O46WvKM4=) 2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: ZrPgwoRLGJ2fTtJOsuC6YjXCZss5mwGvBq/beIOJfYA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13537 (0x34e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96 Validity Not Before: Nov 2 14:31:49 2025 GMT Not After : Nov 9 14:31:49 2025 GMT Subject: CN=69076b55-7092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:24:d2:46:48:ec:9f:89:85:9b:48:11:d2:b9: 6e:1f:85:94:25:3d:de:15:5f:28:36:e8:96:18:36: 36:4e:44:20:4d:27:55:3f:91:4c:f6:06:af:2b:1e: 46:a8:ec:47:ae:51:db:92:ce:c4:b6:c0:4d:c9:74: 6c:f7:28:8b:e4:d2:bc:e3:e1:d4:9f:61:c1:9d:08: 6e:4f:1a:3b:39:4a:29:9f:76:b0:f1:b9:4a:06:f7: 4b:90:33:c1:b1:75:6b:53:9a:ec:e3:9b:ac:32:21: 00:5a:96:51:d5:15:b5:c1:a2:1e:e9:6b:19:af:94: 19:6f:6a:b9:14:f1:9b:4c:2b:31:40:4b:c1:1e:eb: 9a:87:e5:4a:8b:16:c6:05:9e:8e:3b:df:50:03:21: c9:18:da:43:90:75:fd:88:bf:f7:a2:44:df:da:1f: a9:bc:e1:7b:8f:7d:58:ca:6d:ab:7b:e1:5b:f3:23: d7:78:7e:34:8b:26:2e:8a:b0:b3:3f:1c:c5:2d:5b: d9:33:f5:90:b5:5d:6f:83:2f:15:0f:ef:e6:ea:b4: 41:5f:e5:c0:92:20:c8:1f:89:75:b9:95:6b:ed:79: 7d:be:40:88:90:d5:f0:5f:9d:53:ab:42:37:aa:26: 79:b4:8e:ab:70:ac:23:5e:36:6a:66:b1:ac:d7:34: f9:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8D:D0:4D:65:4F:2C:F0:B1:56:1C:2F:A9:F3:DC:D3:CC:D6:51:83 X509v3 Authority Key Identifier: keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:03:fb:55:d6:5f:f4:af:a1:31:9f:38:ef:a4:22:b2:48:a0: 9a:d3:8e:fc:71:7b:7b:c6:9d:9a:88:5b:24:78:a6:b8:47:49: 31:20:61:fc:ac:38:d0:19:a1:1a:15:fa:7f:06:c0:4e:b8:8e: b3:bf:09:04:c7:4f:3a:65:9b:29:39:c8:d3:30:be:ad:50:23: dd:01:1e:eb:6a:85:c5:ff:e3:69:d1:83:93:d4:be:f1:7b:53: 2f:86:37:a1:8c:82:a0:f1:f3:e7:c2:25:d2:54:42:11:77:24: 4b:8a:6a:17:06:1f:f2:c8:50:7b:7b:4f:82:14:7d:0d:eb:b2: 03:d8:ec:a5:0e:ae:8d:11:d9:3c:13:e6:10:50:47:1a:cd:c0: a6:c0:9e:c9:af:7f:8c:40:6f:46:52:d0:1e:24:2a:d2:cf:df: 7c:fa:6f:1d:23:48:26:0a:7b:d2:29:03:84:4d:3f:bf:bf:3f: a5:41:a3:fe:9a:52:c8:2c:75:f9:cc:b0:79:8b:7a:bd:ea:19: 6a:86:6a:56:72:16:07:4f:c7:49:57:2f:bc:02:f4:02:63:bf: c9:ba:8a:a8:79:b7:51:bb:9d:63:77:db:c2:e7:89:7d:ad:71: dc:95:49:30:53:50:94:c6:b0:c8:41:fa:63:94:86:c1:0e:60: a8:99:4f:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JGNDcxMTAvBgNVBAUTKDMyNjM3MUUzOTk4MjRGODAwNEVEOTY3NTY4MTk3NjA4 ODFCN0NEOTYwHhcNMjUxMTAyMTQzMTQ5WhcNMjUxMTA5MTQzMTQ5WjAYMRYwFAYD VQQDEw02OTA3NmI1NS03MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiTSRkjsn4mFm0gR0rluH4WUJT3eFV8oNuiWGDY2TkQgTSdVP5FM9gavKx5G qOxHrlHbks7EtsBNyXRs9yiL5NK84+HUn2HBnQhuTxo7OUopn3aw8blKBvdLkDPB sXVrU5rs45usMiEAWpZR1RW1waIe6WsZr5QZb2q5FPGbTCsxQEvBHuuah+VKixbG BZ6OO99QAyHJGNpDkHX9iL/3okTf2h+pvOF7j31Yym2re+Fb8yPXeH40iyYuirCz PxzFLVvZM/WQtV1vgy8VD+/m6rRBX+XAkiDIH4l1uZVr7Xl9vkCIkNXwX51Tq0I3 qiZ5tI6rcKwjXjZqZrGs1zT5OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIKN0E1l TyzwsVYcL6nz3NPM1lGDMB8GA1UdIwQYMBaAFDJjceOZgk+ABO2WdWgZdgiBt82W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkY0Ny8zNzBDQTJDMDFE OEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0QUU3WloxYUJsMkNJRzN6 WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01tTng0NW1DVDRBRTdaWjFhQmwyQ0lHM3paWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QkY0Ny8zNzBDQTJDMDFEOEExMUUyQjc5QjEzRTQwOEIwMkNEMi9NbU54NDVtQ1Q0 QUU3WloxYUJsMkNJRzN6WlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOA/tV1l/0r6ExnzjvpCKySKCa0478cXt7xp2aiFskeKa4R0kxIGH8 rDjQGaEaFfp/BsBOuI6zvwkEx086ZZspOcjTML6tUCPdAR7raoXF/+Np0YOT1L7x e1MvhjehjIKg8fPnwiXSVEIRdyRLimoXBh/yyFB7e0+CFH0N67ID2OylDq6NEdk8 E+YQUEcazcCmwJ7Jr3+MQG9GUtAeJCrSz998+m8dI0gmCnvSKQOETT+/vz+lQaP+ mlLILHX5zLB5i3q96hlqhmpWchYHT8dJVy+8AvQCY7/JuoqoebdRu51jd9vC54l9 rXHclUkwU1CUxrDIQfpjlIbBDmComU/Q -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:16 2025 by rpki-client