$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft File: g675MVKyUIy8gKNifjon6HvP3so.mft (raw, json) Hash identifier: +mBKfY1BD7C6qYMzAlLQ5d8vkWcs3cgEVWjW1YlbXN4= Subject key identifier: 1E:39:15:D1:DF:D2:71:D0:48:5F:DC:AB:43:12:92:C4:4A:81:66:93 Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft Manifest number: 082D Signing time: Tue 04 Nov 2025 20:55:11 +0000 Manifest this update: Tue 04 Nov 2025 20:55:10 +0000 Manifest next update: Tue 11 Nov 2025 20:55:10 +0000 Files and hashes: 1: g675MVKyUIy8gKNifjon6HvP3so.crl (hash: zROo0YfFzhLh3K+Vffmc3ufNE8TdKFCGA4EatdO4p9w=) 2: 1229795E652C11EB9B039023C4F9AE02.roa (hash: eB6jpfzkEyGBZh+SZTE0lOYtKObRo5aMeXareF4tcfY=) 3: 51B1F2A665D911EBA6089869C4F9AE02.roa (hash: BRTjFa3VaO5mZBCwL3I9ZNLwh8/q1ESDbEK3Wu3mXHM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:55:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: Nov 4 20:55:10 2025 GMT Not After : Nov 11 20:55:10 2025 GMT Subject: CN=690a682f-4b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:d2:a3:19:84:c9:0f:f0:66:1e:11:fd:5f: 45:f9:2c:92:fe:b2:a3:bd:74:7a:d7:81:ce:f8:08: 8b:14:2a:34:64:b0:42:53:0c:93:90:b9:b1:38:25: 68:f7:25:fd:2a:fe:11:3c:0e:79:8b:66:e1:b3:76: 95:42:c3:12:f6:5c:73:50:7a:68:16:7b:6b:7e:3a: 2e:27:99:5f:53:5e:02:fb:2b:0a:94:db:74:fe:a2: 75:93:60:9b:41:43:a0:c3:54:22:22:1a:da:dd:81: 80:4b:53:a1:bb:7d:da:73:38:6b:09:0b:0f:e5:4b: 66:dd:10:5b:a8:12:cc:14:24:1d:58:16:e1:32:e0: 10:2b:05:a8:fe:3b:79:01:4b:ab:77:b7:d8:df:d8: f1:a8:80:09:78:d6:33:02:80:65:87:27:06:f9:b2: cb:63:d8:2d:69:02:35:51:fd:35:57:c8:1b:b6:26: 89:70:9f:14:95:62:b1:11:fa:cd:35:61:38:82:6d: 5a:21:92:e7:35:64:ba:a9:ba:77:be:64:55:22:4d: 13:97:d3:c6:b2:6b:8f:42:df:ae:b0:27:04:3c:66: 78:f8:f3:94:a3:c7:3a:44:c4:d5:7e:41:d1:9d:a4: 50:4e:5f:42:04:e8:e1:81:85:ed:e5:39:17:1b:55: 93:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:39:15:D1:DF:D2:71:D0:48:5F:DC:AB:43:12:92:C4:4A:81:66:93 X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:ec:f3:fc:fd:91:13:f1:69:ee:f2:38:d0:a5:a9:da:6d:73: 81:fc:c2:64:8a:c0:e4:fb:d5:69:50:8f:f6:25:61:74:10:e5: ff:17:70:da:7f:bc:e8:cb:2e:17:3a:be:61:db:11:4c:81:67: 04:83:d6:f5:78:b8:4e:a0:91:41:0b:65:67:b2:fe:91:fd:ee: ed:7b:fa:1a:a3:f3:f1:a1:3c:0f:f9:8b:78:87:d8:a7:e1:63: 14:55:4f:2f:10:95:65:d4:94:83:9b:ca:a9:59:29:cd:c2:a5: b7:cc:84:f4:72:68:a7:c4:d4:21:66:cf:0d:cd:bf:53:71:2b: a0:a5:ad:b7:ab:9e:29:5b:62:5a:ce:76:af:c2:ed:de:48:01: eb:d7:35:e4:a0:f0:c1:98:ab:d1:7b:28:92:8f:1f:17:30:ae: 0e:a1:ea:8b:b8:41:8a:90:07:10:68:0a:1a:11:ca:6f:87:7a: b4:40:7c:80:b0:8b:10:9e:52:80:8a:96:4e:fd:37:e0:71:39: a7:c7:e9:ad:a5:85:34:5a:cc:dd:96:ee:74:97:b5:7b:d4:3e: c5:57:31:ac:66:7b:13:a4:a9:24:0c:45:df:50:65:d3:00:98: 76:c7:51:15:28:ea:a0:01:ca:ed:a2:20:8c:42:16:73:34:cf: 50:f9:eb:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjUxMTA0MjA1NTEwWhcNMjUxMTExMjA1NTEwWjAYMRYwFAYD VQQDEw02OTBhNjgyZi00YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs0LSoxmEyQ/wZh4R/V9F+SyS/rKjvXR614HO+AiLFCo0ZLBCUwyTkLmxOCVo 9yX9Kv4RPA55i2bhs3aVQsMS9lxzUHpoFntrfjouJ5lfU14C+ysKlNt0/qJ1k2Cb QUOgw1QiIhra3YGAS1Ohu33aczhrCQsP5Utm3RBbqBLMFCQdWBbhMuAQKwWo/jt5 AUurd7fY39jxqIAJeNYzAoBlhycG+bLLY9gtaQI1Uf01V8gbtiaJcJ8UlWKxEfrN NWE4gm1aIZLnNWS6qbp3vmRVIk0Tl9PGsmuPQt+usCcEPGZ4+POUo8c6RMTVfkHR naRQTl9CBOjhgYXt5TkXG1WTgQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB45FdHf 0nHQSF/cq0MSksRKgWaTMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Mjk4RC8yQ0IxMUZDRUYxQTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJ eThnS05pZmpvbjZIdlAzc28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCn7PP8/ZET8Wnu8jjQpanabXOB/MJkisDk+9VpUI/2JWF0EOX/F3Da f7zoyy4XOr5h2xFMgWcEg9b1eLhOoJFBC2Vnsv6R/e7te/oao/PxoTwP+Yt4h9in 4WMUVU8vEJVl1JSDm8qpWSnNwqW3zIT0cminxNQhZs8Nzb9TcSugpa23q54pW2Ja znavwu3eSAHr1zXkoPDBmKvReyiSjx8XMK4OoeqLuEGKkAcQaAoaEcpvh3q0QHyA sIsQnlKAipZO/TfgcTmnx+mtpYU0Wszdlu50l7V71D7FVzGsZnsTpKkkDEXfUGXT AJh2x1EVKOqgAcrtoiCMQhZzNM9Q+esT -----END CERTIFICATE-----Generated at Wed Nov 5 01:43:31 2025 by rpki-client