$ rpki-client -vvf rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft File: acCJt6SOfabuTwH-xqmOCtL6gQs.mft (raw, json) Hash identifier: uwN4s3Xbm1tPetm26hoeuoKuJV21GOyQ578l+CbisAw= Subject key identifier: 97:2D:D0:6B:23:FB:CF:EF:C4:B5:A4:A6:E2:29:93:A7:7B:EA:C3:1C Authority key identifier: 69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B Certificate issuer: /CN=A91D32F4/serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Certificate serial: 0250 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft Manifest number: 0244 Signing time: Wed 05 Nov 2025 01:56:04 +0000 Manifest this update: Wed 05 Nov 2025 01:56:03 +0000 Manifest next update: Wed 12 Nov 2025 01:56:03 +0000 Files and hashes: 1: acCJt6SOfabuTwH-xqmOCtL6gQs.crl (hash: a2OmKXtRnOJLoH04KKAGiTHddL2uBexovINdfdEz21I=) 2: 350CDCB44ED611ED84336740C4F9AE02.roa (hash: Rl7cC9aD2+HUzvALoJy+W3POWuoH4LCYbv/U7VQpjNA=) 3: 4214E284606911EFBDF1A71AC4F9AE02.roa (hash: 6Nzq1WoXAkjRrieEemeMX09rMtSXxNTIJXhrfWNFeNg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:56:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D32F4, serialNumber=69C089B7A48E7DA6EE4F01FEC6A98E0AD2FA810B Validity Not Before: Nov 5 01:56:03 2025 GMT Not After : Nov 12 01:56:03 2025 GMT Subject: CN=690aaeb4-75bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fb:a4:6a:b6:d6:f7:e7:e5:5f:c2:12:9a:e5: 1c:35:85:2f:ff:73:af:b2:cf:be:6d:9e:5c:d4:83: 81:d0:af:71:73:ae:97:a5:cd:94:68:b0:99:29:46: b1:cc:5a:b7:19:c4:18:bd:48:fa:9a:02:55:eb:29: 68:74:bf:09:41:38:18:69:fb:db:b8:9a:45:97:71: 32:d5:64:dd:f0:ad:28:89:de:8d:dc:2b:75:d7:bc: 99:01:e2:1a:d1:ca:55:96:30:37:6f:77:2e:58:05: 41:4b:63:07:a3:98:a4:72:fa:00:31:6e:2e:06:69: 9e:ab:6b:02:bd:97:3e:69:bd:67:62:a8:9d:46:d7: e0:2a:f6:31:8e:36:f7:ab:fa:15:9b:3d:64:ca:0c: 77:04:ac:3b:44:64:11:9f:3b:bc:1b:58:e5:97:6d: 70:79:55:3d:f5:08:2f:cd:bf:8f:2e:e3:dc:6d:bf: c1:58:19:80:b8:e7:6b:ea:42:62:92:cc:44:00:60: fb:d9:04:fd:50:26:2d:b6:4e:e0:35:d7:63:e2:4f: b7:5b:53:8f:05:1e:ea:5f:6e:46:dc:a9:47:3c:af: 45:9e:0b:c6:25:f1:31:40:97:70:f8:bd:73:42:79: c4:a4:77:00:1a:e9:5d:69:3c:d7:7f:aa:59:fa:42: 7d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:2D:D0:6B:23:FB:CF:EF:C4:B5:A4:A6:E2:29:93:A7:7B:EA:C3:1C X509v3 Authority Key Identifier: keyid:69:C0:89:B7:A4:8E:7D:A6:EE:4F:01:FE:C6:A9:8E:0A:D2:FA:81:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/acCJt6SOfabuTwH-xqmOCtL6gQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D32F4/B4CA77964DE011EDA6F01048C4F9AE02/acCJt6SOfabuTwH-xqmOCtL6gQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:55:aa:0e:5d:e4:2a:bf:cf:b6:1d:4a:c6:ec:2a:35:1c:b1: b9:e2:3c:eb:16:10:3b:e3:a4:26:60:fc:6d:ec:aa:43:b7:3d: 4b:71:82:ad:7a:ee:bc:4d:56:dd:c0:13:30:2c:cb:20:58:52: 4d:7b:8f:9a:8f:d9:82:34:1e:17:f4:c9:a0:dc:c1:76:eb:b8: aa:5f:e1:ef:9c:d2:04:7c:ce:d1:f0:9c:03:cb:54:dc:50:10: 68:2c:c8:19:e0:11:af:60:c7:a0:bd:b8:1a:60:e8:86:68:e6: a3:9d:d4:0e:ab:4c:41:ea:a6:4e:75:3a:de:07:9d:3d:74:c5: fe:69:54:d1:b4:77:72:07:79:9a:fa:62:e8:3c:7a:75:5a:14: a2:31:86:27:b5:57:27:86:39:71:be:3c:4e:ab:8f:a5:19:ec: f6:43:f1:47:78:16:73:b6:91:70:a6:a8:26:04:0f:aa:39:23: 84:28:2e:08:33:ab:a9:2d:3c:74:ba:32:77:0d:2d:a8:04:31: b5:09:b3:f8:50:4c:57:c5:5d:2c:27:3b:cb:35:3b:f8:94:38: 0e:9e:36:8b:53:49:10:3b:ac:8c:e4:c1:16:21:3b:d6:69:4b: 0e:24:0c:90:10:50:b4:90:ec:2c:8a:4a:55:c5:6e:bd:19:fb: 1e:cf:58:5a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyRjQxMTAvBgNVBAUTKDY5QzA4OUI3QTQ4RTdEQTZFRTRGMDFGRUM2QTk4RTBB RDJGQTgxMEIwHhcNMjUxMTA1MDE1NjAzWhcNMjUxMTEyMDE1NjAzWjAYMRYwFAYD VQQDEw02OTBhYWViNC03NWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyvukarbW9+flX8ISmuUcNYUv/3Ovss++bZ5c1IOB0K9xc66Xpc2UaLCZKUax zFq3GcQYvUj6mgJV6ylodL8JQTgYafvbuJpFl3Ey1WTd8K0oid6N3Ct117yZAeIa 0cpVljA3b3cuWAVBS2MHo5ikcvoAMW4uBmmeq2sCvZc+ab1nYqidRtfgKvYxjjb3 q/oVmz1kygx3BKw7RGQRnzu8G1jll21weVU99Qgvzb+PLuPcbb/BWBmAuOdr6kJi ksxEAGD72QT9UCYttk7gNddj4k+3W1OPBR7qX25G3KlHPK9FngvGJfExQJdw+L1z QnnEpHcAGuldaTzXf6pZ+kJ9eQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJct0Gsj +8/vxLWkpuIpk6d76sMcMB8GA1UdIwQYMBaAFGnAibekjn2m7k8B/sapjgrS+oEL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzJGNC9CNENBNzc5NjRE RTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2ZhYnVUd0gteHFtT0N0TDZn UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FjQ0p0NlNPZmFidVR3SC14cW1PQ3RMNmdRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzJGNC9CNENBNzc5NjRERTAxMUVEQTZGMDEwNDhDNEY5QUUwMi9hY0NKdDZTT2Zh YnVUd0gteHFtT0N0TDZnUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBiVaoOXeQqv8+2HUrG7Co1HLG54jzrFhA746QmYPxt7KpDtz1LcYKt eu68TVbdwBMwLMsgWFJNe4+aj9mCNB4X9Mmg3MF267iqX+HvnNIEfM7R8JwDy1Tc UBBoLMgZ4BGvYMegvbgaYOiGaOajndQOq0xB6qZOdTreB509dMX+aVTRtHdyB3ma +mLoPHp1WhSiMYYntVcnhjlxvjxOq4+lGez2Q/FHeBZztpFwpqgmBA+qOSOEKC4I M6upLTx0ujJ3DS2oBDG1CbP4UExXxV0sJzvLNTv4lDgOnjaLU0kQO6yM5MEWITvW aUsOJAyQEFC0kOwsikpVxW69Gfsez1ha -----END CERTIFICATE-----Generated at Wed Nov 5 19:25:17 2025 by rpki-client