$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft File: tSlwZVVtKyKTSTXnUgcivVMz2k8.mft (raw, json) Hash identifier: ndZn4Ttb0NzZA6Fkd+tS8X7wCzrjh57ps83aPyoHpfQ= Subject key identifier: 3C:D5:11:97:A1:81:5D:F8:5A:63:A4:0E:05:88:61:11:79:43:3B:21 Authority key identifier: B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F Certificate issuer: /CN=A91CD7A4/serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Certificate serial: 01C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft Manifest number: 01BF Signing time: Wed 05 Nov 2025 03:09:09 +0000 Manifest this update: Wed 05 Nov 2025 03:09:08 +0000 Manifest next update: Wed 12 Nov 2025 03:09:08 +0000 Files and hashes: 1: tSlwZVVtKyKTSTXnUgcivVMz2k8.crl (hash: mA+6DClLq3rEY4sKdvsw8GIMAZjU/dhe84jp46kZxek=) 2: 275245323AB511F0AE5E5919C4F9AE02.roa (hash: IHKKhIw85fk9s47CrpZDKzzYoR/RN4XUlJphLrYmJyk=) 3: AD47BEC4320611EE845F4A5AC4F9AE02.roa (hash: P7EwycxEH4BjaRzRhYFgj1fovDv1DxA8C+5endacXNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 453 (0x1c5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CD7A4, serialNumber=B5297065556D2B22934935E7520722BD5333DA4F Validity Not Before: Nov 5 03:09:08 2025 GMT Not After : Nov 12 03:09:08 2025 GMT Subject: CN=690abfd4-6de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a2:0e:d5:e0:af:df:14:ae:4d:f0:07:76:a8: 97:b6:4b:3b:39:31:8c:77:d0:c4:bb:b8:6e:08:47: 29:50:f5:a1:14:ad:90:40:66:62:72:85:9c:0e:f4: f8:fe:69:69:73:e6:66:99:22:08:43:ad:46:12:91: f4:95:ac:8f:dc:23:a6:a0:f2:92:02:04:1f:67:e4: 5f:a7:f9:5c:e4:5b:cb:ac:db:83:90:8a:94:1d:80: 10:40:24:30:78:6c:4a:c2:6b:c0:32:ae:2d:8c:ec: 48:1d:aa:19:3d:72:34:67:88:66:76:f5:7d:d4:e0: 49:e7:a7:7f:df:36:1a:ba:8f:f5:58:c5:e3:12:44: 60:81:5f:a7:c3:6c:af:be:68:5c:20:3a:c9:69:1b: bf:6f:6b:5b:21:03:09:c8:a0:94:b8:5a:93:a6:1a: d2:e2:99:fd:9a:16:bb:4e:29:c9:7f:2e:e2:6c:cf: 48:f6:44:00:8c:ea:01:d3:03:17:8b:27:e5:ca:91: 0a:19:df:d5:68:cb:eb:49:64:08:22:80:59:81:1f: 1a:64:95:2a:7a:04:27:8a:d7:fa:31:e2:66:50:fe: 03:dd:89:e8:e5:2c:df:15:8a:a9:95:2a:77:5e:a6: 55:d7:71:a1:b6:3d:80:15:21:1f:a5:82:20:6d:5b: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:D5:11:97:A1:81:5D:F8:5A:63:A4:0E:05:88:61:11:79:43:3B:21 X509v3 Authority Key Identifier: keyid:B5:29:70:65:55:6D:2B:22:93:49:35:E7:52:07:22:BD:53:33:DA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tSlwZVVtKyKTSTXnUgcivVMz2k8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD7A4/3CC71996118711EEB39FE243C4F9AE02/tSlwZVVtKyKTSTXnUgcivVMz2k8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ce:41:e0:e0:f9:bb:c5:09:74:fd:42:10:b1:e9:2f:b5:f0:9b: a6:c9:4f:85:a0:b0:f0:70:dd:98:ec:66:1a:f5:98:0a:3b:d3: 1c:76:ea:a0:fe:81:f9:df:65:7b:2b:6b:4f:50:10:cd:a3:c8: ec:a8:e9:05:d9:93:40:25:3a:bc:84:c8:4e:7d:5a:d7:d9:83: 4c:80:27:f2:24:5c:11:de:a5:e6:db:4f:7e:f1:2a:e2:79:e0: ab:fa:ca:91:a0:41:82:fd:43:1d:a6:e1:a2:da:59:9d:42:40: a3:6d:00:fb:75:f8:0c:b0:b7:a2:55:c7:c8:c6:4d:f7:a0:0b: 27:94:ba:fc:1a:38:8c:5e:cd:2d:a4:14:09:e0:01:fc:45:3e: 95:0f:c8:78:9e:12:48:44:9a:40:f4:81:eb:ae:12:13:2f:b6: b6:2d:2a:42:42:80:57:23:12:be:a0:2b:df:0c:fa:08:ef:bb: a9:de:a4:9d:0f:f0:5e:5e:2c:20:e0:ba:02:c5:bb:c8:f5:7f: b3:31:76:54:0b:70:47:3d:59:1c:f1:90:e9:53:fc:69:40:76: 6c:be:ab:97:63:02:4e:67:54:ca:c6:d0:83:18:e1:82:54:e1: 80:29:e6:e5:62:b5:9c:c4:ab:7d:f4:49:99:8b:64:01:42:15: d6:8c:8d:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0Q3QTQxMTAvBgNVBAUTKEI1Mjk3MDY1NTU2RDJCMjI5MzQ5MzVFNzUyMDcyMkJE NTMzM0RBNEYwHhcNMjUxMTA1MDMwOTA4WhcNMjUxMTEyMDMwOTA4WjAYMRYwFAYD VQQDEw02OTBhYmZkNC02ZGU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsKIO1eCv3xSuTfAHdqiXtks7OTGMd9DEu7huCEcpUPWhFK2QQGZicoWcDvT4 /mlpc+ZmmSIIQ61GEpH0layP3COmoPKSAgQfZ+Rfp/lc5FvLrNuDkIqUHYAQQCQw eGxKwmvAMq4tjOxIHaoZPXI0Z4hmdvV91OBJ56d/3zYauo/1WMXjEkRggV+nw2yv vmhcIDrJaRu/b2tbIQMJyKCUuFqTphrS4pn9mha7TinJfy7ibM9I9kQAjOoB0wMX iyflypEKGd/VaMvrSWQIIoBZgR8aZJUqegQnitf6MeJmUP4D3Yno5SzfFYqplSp3 XqZV13Ghtj2AFSEfpYIgbVvPxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDzVEZeh gV34WmOkDgWIYRF5QzshMB8GA1UdIwQYMBaAFLUpcGVVbSsik0k151IHIr1TM9pP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRDdBNC8zQ0M3MTk5NjEx ODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5S1RTVFhuVWdjaXZWTXoy azguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RTbHdaVlZ0S3lLVFNUWG5VZ2NpdlZNejJrOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RDdBNC8zQ0M3MTk5NjExODcxMUVFQjM5RkUyNDNDNEY5QUUwMi90U2x3WlZWdEt5 S1RTVFhuVWdjaXZWTXoyazgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDOQeDg+bvFCXT9QhCx6S+18JumyU+FoLDwcN2Y7GYa9ZgKO9Mcduqg /oH532V7K2tPUBDNo8jsqOkF2ZNAJTq8hMhOfVrX2YNMgCfyJFwR3qXm209+8Sri eeCr+sqRoEGC/UMdpuGi2lmdQkCjbQD7dfgMsLeiVcfIxk33oAsnlLr8GjiMXs0t pBQJ4AH8RT6VD8h4nhJIRJpA9IHrrhITL7a2LSpCQoBXIxK+oCvfDPoI77up3qSd D/BeXiwg4LoCxbvI9X+zMXZUC3BHPVkc8ZDpU/xpQHZsvquXYwJOZ1TKxtCDGOGC VOGAKeblYrWcxKt99EmZi2QBQhXWjI0A -----END CERTIFICATE-----Generated at Wed Nov 5 20:55:08 2025 by rpki-client