$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: leWecuIj2dzNNMMVJU44ygec2Mav3pafA17M4lesJzk= Subject key identifier: ED:9D:EB:B2:B4:A7:0E:27:1B:1B:F5:09:3B:69:28:5E:E1:37:13:D3 Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0865 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0B9C Signing time: Tue 04 Nov 2025 20:42:38 +0000 Manifest this update: Tue 04 Nov 2025 20:42:37 +0000 Manifest next update: Tue 11 Nov 2025 20:42:37 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: 2trLCcBEfIfj7k6GBoULQfIIJG0vQKshuEP0gHJuZ7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:42:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2149 (0x865) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Nov 4 20:42:37 2025 GMT Not After : Nov 11 20:42:37 2025 GMT Subject: CN=690a653e-674a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:3c:aa:19:51:6c:06:54:08:8b:ab:fc:01:37: 7e:6c:3d:0c:d3:74:1a:00:53:6c:6d:6a:28:90:91: ac:93:45:01:88:30:35:8a:71:3e:a5:1a:70:97:02: 36:86:fa:d8:f7:82:0a:a7:99:93:bd:bb:f3:2e:1c: 17:76:03:e6:bd:4a:0c:b8:b9:db:0f:af:1e:e5:59: 10:78:de:b1:ac:3f:31:8d:70:05:a7:d7:43:f3:f0: 27:30:99:23:be:40:dc:60:35:f2:a4:87:e8:da:94: 0d:f2:09:76:a7:1e:ae:bd:84:c9:f2:de:9c:f0:11: 6c:ad:f9:f7:66:01:66:a7:93:53:5f:6a:cb:0c:97: 54:d1:a8:19:26:85:e1:87:89:69:87:81:35:9e:9b: ca:7c:d7:e7:1c:16:ee:24:b3:fe:71:88:ce:a7:ed: 0d:3c:01:fc:ee:5b:6a:0b:25:14:de:76:b1:e7:39: c3:cd:3a:8b:24:54:b2:8e:9c:1b:b0:2c:2a:29:eb: 2c:53:2e:93:ad:0e:df:21:46:b8:83:7a:f4:c3:74: 8a:94:71:bc:36:9f:20:dc:28:5d:26:dd:33:9b:a4: 15:b4:03:2f:5e:7e:11:c1:c7:2e:72:33:52:56:51: 7f:b3:be:ac:a3:b0:02:00:c6:1a:63:b6:8a:47:3a: 33:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:9D:EB:B2:B4:A7:0E:27:1B:1B:F5:09:3B:69:28:5E:E1:37:13:D3 X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:3e:93:5b:09:6c:f4:5f:cc:14:e9:9e:ee:d3:04:47:56:c2: e3:cc:45:bc:96:3d:4c:af:c1:4e:fc:6c:d9:61:ea:f1:92:0b: 11:9b:ed:9a:17:69:4a:82:d7:7a:1b:33:a7:52:81:7b:ed:d9: e7:d1:e0:07:ce:79:03:f4:15:18:fb:d7:fc:00:be:1a:c8:54: 59:da:24:e8:b4:a8:c0:b1:ef:dd:78:e5:74:3a:4a:a3:b5:c1: fa:50:c8:94:87:98:19:0a:92:c4:b2:ed:d7:89:f9:8e:1b:36: 61:40:ae:71:7c:9e:84:83:61:1a:f4:65:86:c2:61:72:a1:44: 44:0b:af:35:cc:ad:a0:8f:4d:29:09:ca:d7:35:53:07:76:52: 0f:21:7a:1c:2f:fe:73:9f:fa:be:ef:cb:9d:40:86:41:20:f3: 75:cb:62:4e:37:58:98:4c:12:91:d1:d0:d7:35:f3:c6:60:a0: a7:16:cb:94:cf:1a:9d:b5:9f:21:b3:1d:e1:05:6b:cf:ed:97: 62:5c:d4:bf:d9:14:c9:15:42:33:55:d7:92:39:d4:4c:20:33: 83:26:ac:e5:f1:59:3a:24:c3:94:1e:a5:a0:91:aa:18:a1:31: 7d:2b:12:ab:cc:58:c5:c0:e9:fe:5b:57:8a:fa:f4:31:64:e9: 26:6f:bc:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUxMTA0MjA0MjM3WhcNMjUxMTExMjA0MjM3WjAYMRYwFAYD VQQDEw02OTBhNjUzZS02NzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9jyqGVFsBlQIi6v8ATd+bD0M03QaAFNsbWookJGsk0UBiDA1inE+pRpwlwI2 hvrY94IKp5mTvbvzLhwXdgPmvUoMuLnbD68e5VkQeN6xrD8xjXAFp9dD8/AnMJkj vkDcYDXypIfo2pQN8gl2px6uvYTJ8t6c8BFsrfn3ZgFmp5NTX2rLDJdU0agZJoXh h4lph4E1npvKfNfnHBbuJLP+cYjOp+0NPAH87ltqCyUU3nax5znDzTqLJFSyjpwb sCwqKessUy6TrQ7fIUa4g3r0w3SKlHG8Np8g3ChdJt0zm6QVtAMvXn4RwccucjNS VlF/s76so7ACAMYaY7aKRzozPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2d67K0 pw4nGxv1CTtpKF7hNxPTMB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAPpNbCWz0X8wU6Z7u0wRHVsLjzEW8lj1Mr8FO/GzZYerxkgsRm+2a F2lKgtd6GzOnUoF77dnn0eAHznkD9BUY+9f8AL4ayFRZ2iTotKjAse/deOV0Okqj tcH6UMiUh5gZCpLEsu3XifmOGzZhQK5xfJ6Eg2Ea9GWGwmFyoUREC681zK2gj00p CcrXNVMHdlIPIXocL/5zn/q+78udQIZBIPN1y2JON1iYTBKR0dDXNfPGYKCnFsuU zxqdtZ8hsx3hBWvP7ZdiXNS/2RTJFUIzVdeSOdRMIDODJqzl8Vk6JMOUHqWgkaoY oTF9KxKrzFjFwOn+W1eK+vQxZOkmb7y9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:56 2025 by rpki-client