$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft File: SXscTqbbFagx-8FyKi9jR0UM80E.mft (raw, json) Hash identifier: 9lIHXoREPPuZDK/ydMRuv6v8rCZg4uCvwcs9xF/p5uU= Subject key identifier: E3:A3:6B:5C:A0:8A:20:A2:61:90:D5:32:69:C1:71:14:E9:86:51:A5 Authority key identifier: 49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 Certificate issuer: /CN=A91D366E/serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Certificate serial: 34DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft Manifest number: 34D8 Signing time: Tue 04 Nov 2025 15:19:26 +0000 Manifest this update: Tue 04 Nov 2025 15:19:26 +0000 Manifest next update: Tue 11 Nov 2025 15:19:26 +0000 Files and hashes: 1: SXscTqbbFagx-8FyKi9jR0UM80E.crl (hash: Kotb1VfERBPmVghGvv0Jf0yonOusAEWU1UcRoavSPTU=) 2: E72434CA69E011EFBD9DBA75C4F9AE02.roa (hash: rYc9zikfT0tRDa7zasMyBZpEVFa00oL4CS7Q4S+HlQg=) 3: E6C24E8669E011EFBD9DBA75C4F9AE02.roa (hash: 0DLMcfV/Llm+3fYXZIJn54Ysw/AzVCrvYXgQgG2YQmU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13533 (0x34dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366E, serialNumber=497B1C4EA6DB15A831FBC1722A2F6347450CF341 Validity Not Before: Nov 4 15:19:26 2025 GMT Not After : Nov 11 15:19:26 2025 GMT Subject: CN=690a197e-3e77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:87:1e:da:4c:3e:6d:8d:99:be:a9:68:58: 6d:c0:d7:07:0d:a8:e2:91:e1:38:df:26:51:38:61: 38:a6:ff:93:d2:ab:b3:5e:4c:38:97:b1:4f:37:01: 82:1e:e3:83:16:5c:8b:68:14:ff:53:b5:2a:18:b7: 0e:5f:e5:95:03:1b:7a:d6:cf:00:f1:1f:22:b4:e8: 65:50:6e:31:54:5b:c1:f7:6d:a7:4a:3f:c1:b6:03: b3:a6:63:1d:3a:62:e9:5a:e0:bc:7a:c7:0d:7a:89: 43:1f:ba:5e:c8:1e:74:9c:13:6d:8d:ad:9c:d1:b7: 1e:5f:34:3f:2c:bc:a4:c2:84:fb:fb:4c:67:d5:6c: 0c:82:5c:2d:79:47:b5:cc:4d:86:c5:0a:af:82:0e: fd:e7:7a:3c:c7:c8:aa:20:15:64:d3:02:34:47:dc: 2f:8b:ef:55:58:f3:de:e3:9a:e4:80:46:7d:10:48: ee:ec:e7:01:3e:c6:9c:a7:7a:04:84:62:c8:fb:6d: a7:66:b3:d3:8a:be:e8:c1:a9:b9:be:2c:70:87:b5: 70:17:d2:d2:26:ed:2d:d5:f2:28:8a:c5:c9:bb:ac: 12:18:61:c1:b7:2b:16:e8:15:5b:a9:e7:b3:e3:b2: 4a:8c:bb:bf:3f:3b:69:b1:0a:8c:43:0e:c7:16:60: 40:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:A3:6B:5C:A0:8A:20:A2:61:90:D5:32:69:C1:71:14:E9:86:51:A5 X509v3 Authority Key Identifier: keyid:49:7B:1C:4E:A6:DB:15:A8:31:FB:C1:72:2A:2F:63:47:45:0C:F3:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SXscTqbbFagx-8FyKi9jR0UM80E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366E/DD455CDA1DA911E2BC9B34A508B02CD2/SXscTqbbFagx-8FyKi9jR0UM80E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:03:35:32:68:8c:ea:f4:de:fb:f4:14:89:50:9a:69:df:0c: 07:0e:e8:5c:e2:52:fe:b1:9b:aa:84:bf:7f:6f:ee:4b:c0:0e: 47:09:7c:06:fc:b2:6f:14:19:7b:51:f3:43:c0:26:d7:fe:da: a8:7a:18:9c:b6:6b:5a:5b:6c:4d:73:63:c9:96:0f:c6:43:7a: 45:2c:4a:64:e0:1f:c3:ae:ba:fd:a8:72:13:b8:17:fe:0d:c7: 56:79:c8:2c:d9:0e:1c:40:cf:a5:03:a4:b9:ba:cb:cb:7a:11: 65:33:6d:b2:d4:7b:58:33:00:33:39:ef:72:e2:da:ba:60:4b: f4:9e:26:d3:ef:38:93:74:ff:9a:b9:f5:81:19:fb:b5:31:79: ce:52:d3:b9:b8:bd:10:87:9d:59:df:d9:35:37:3e:24:84:59: 56:08:a4:b7:fa:68:d7:b7:50:04:c4:5a:c0:7c:1a:dd:cb:7e: da:c6:f2:00:66:fd:68:bd:73:db:c6:48:29:69:0d:22:5c:4b: 6c:e6:48:99:ed:3f:04:37:5f:e8:79:3d:88:d1:9b:1a:a3:06: d5:4b:d6:66:76:d9:6e:13:27:cc:d2:d5:7a:ac:e3:09:f1:8c: 77:07:1a:9d:8b:98:7b:a1:35:bb:d1:95:7e:da:d5:09:37:c4: ca:8e:80:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkUxMTAvBgNVBAUTKDQ5N0IxQzRFQTZEQjE1QTgzMUZCQzE3MjJBMkY2MzQ3 NDUwQ0YzNDEwHhcNMjUxMTA0MTUxOTI2WhcNMjUxMTExMTUxOTI2WjAYMRYwFAYD VQQDEw02OTBhMTk3ZS0zZTc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmSHHtpMPm2Nmb6paFhtwNcHDajikeE43yZROGE4pv+T0quzXkw4l7FPNwGC HuODFlyLaBT/U7UqGLcOX+WVAxt61s8A8R8itOhlUG4xVFvB922nSj/BtgOzpmMd OmLpWuC8escNeolDH7peyB50nBNtja2c0bceXzQ/LLykwoT7+0xn1WwMglwteUe1 zE2GxQqvgg7953o8x8iqIBVk0wI0R9wvi+9VWPPe45rkgEZ9EEju7OcBPsacp3oE hGLI+22nZrPTir7owam5vixwh7VwF9LSJu0t1fIoisXJu6wSGGHBtysW6BVbqeez 47JKjLu/PztpsQqMQw7HFmBAmwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOOja1yg iiCiYZDVMmnBcRTphlGlMB8GA1UdIwQYMBaAFEl7HE6m2xWoMfvBciovY0dFDPNB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2RS9ERDQ1NUNEQTFE QTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZhZ3gtOEZ5S2k5alIwVU04 MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NYc2NUcWJiRmFneC04RnlLaTlqUjBVTTgwRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2RS9ERDQ1NUNEQTFEQTkxMUUyQkM5QjM0QTUwOEIwMkNEMi9TWHNjVHFiYkZh Z3gtOEZ5S2k5alIwVU04MEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByAzUyaIzq9N779BSJUJpp3wwHDuhc4lL+sZuqhL9/b+5LwA5HCXwG /LJvFBl7UfNDwCbX/tqoehictmtaW2xNc2PJlg/GQ3pFLEpk4B/Drrr9qHITuBf+ DcdWecgs2Q4cQM+lA6S5usvLehFlM22y1HtYMwAzOe9y4tq6YEv0nibT7ziTdP+a ufWBGfu1MXnOUtO5uL0Qh51Z39k1Nz4khFlWCKS3+mjXt1AExFrAfBrdy37axvIA Zv1ovXPbxkgpaQ0iXEts5kiZ7T8EN1/oeT2I0ZsaowbVS9ZmdtluEyfM0tV6rOMJ 8Yx3Bxqdi5h7oTW70ZV+2tUJN8TKjoBF -----END CERTIFICATE-----Generated at Wed Nov 5 05:47:19 2025 by rpki-client