$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft File: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft (raw, json) Hash identifier: Ofjhta2GGMVIz3oA+PnDvWxArgAps8ubtatS/FzEVU0= Subject key identifier: B2:FA:28:46:21:4D:60:69:C2:F7:8C:47:46:FA:6E:F5:03:52:E8:F9 Authority key identifier: B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 Certificate issuer: /CN=A91D5320/serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Certificate serial: 01B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft Manifest number: 01B1 Signing time: Wed 05 Nov 2025 03:20:01 +0000 Manifest this update: Wed 05 Nov 2025 03:20:01 +0000 Manifest next update: Wed 12 Nov 2025 03:20:01 +0000 Files and hashes: 1: sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl (hash: EiyYxNkDU6EkCur084rYCiZJx6Kv2OtVxLF3h8h3KUc=) 2: E7B472CE2DC811EEBADF8E61C4F9AE02.roa (hash: 5HgkoEjy2X/F47jraS1FxwE/N3K0sTH/50e9DNotSWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 439 (0x1b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5320, serialNumber=B191AE2068146F9C739BEA6CD59E792C4F897B76 Validity Not Before: Nov 5 03:20:01 2025 GMT Not After : Nov 12 03:20:01 2025 GMT Subject: CN=690ac261-19cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4b:f1:6d:d4:32:24:ac:84:30:3e:94:e9:b5: 68:97:a1:ea:08:52:2f:8e:ba:ab:f3:c3:9e:b4:5f: 56:fe:3c:a4:98:e9:e3:ea:f3:ef:dc:21:09:24:d7: 2f:3a:c2:04:8e:6a:99:7f:4a:c9:ed:ff:b1:c7:6e: a4:bd:6c:e6:a5:9c:3f:74:bb:40:18:37:02:d8:c8: 05:2f:bc:24:be:e6:34:58:85:57:0f:9a:e0:ff:63: 87:a2:af:47:72:80:15:54:f2:7f:4e:3f:1e:ef:e0: e7:87:df:af:e4:99:d8:a7:a8:38:56:b0:0f:47:6d: ba:16:c2:50:e0:a1:d2:a7:9e:2b:48:5e:17:7b:59: 40:57:87:46:1a:df:af:a5:14:b8:1d:cd:0f:5b:49: 14:39:e5:a8:5e:42:e0:6c:e9:92:f9:0f:19:ef:1a: bd:09:af:50:7a:fb:a7:74:b5:15:b8:27:f2:d4:af: 93:0f:bc:d2:ee:f5:d2:45:c7:09:bb:b3:8c:ad:bf: 36:50:a9:92:ac:f9:28:06:a0:6b:df:04:a4:57:03: f9:34:d2:1c:4a:fd:bc:93:60:38:5e:bf:55:2b:d1: b0:7a:0b:10:27:5a:39:ec:da:4e:8a:f9:da:06:9f: 5d:67:e2:1a:07:b3:3c:4f:26:16:8b:a1:6d:91:ce: fe:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:FA:28:46:21:4D:60:69:C2:F7:8C:47:46:FA:6E:F5:03:52:E8:F9 X509v3 Authority Key Identifier: keyid:B1:91:AE:20:68:14:6F:9C:73:9B:EA:6C:D5:9E:79:2C:4F:89:7B:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5320/78CCFE4E2DC811EE9370D348C4F9AE02/sZGuIGgUb5xzm-ps1Z55LE-Je3Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:e3:6b:62:f7:6b:43:5a:47:48:be:83:cc:08:b3:2a:0d:7a: 47:0b:8a:55:58:42:2f:9a:f6:99:c7:5d:ee:93:06:d8:db:15: f9:97:46:43:b0:8e:ac:51:d8:50:80:ee:a5:6f:3c:ce:c4:df: 6c:7d:bb:b3:ee:26:72:06:eb:29:77:fa:f3:b4:53:a7:54:0d: ee:67:0b:13:66:8d:e4:6d:be:f1:1d:d4:70:f8:fb:df:a0:f9: 95:23:ec:b2:44:31:2e:1b:d9:a2:c4:e1:da:d2:37:d1:c4:67: b4:39:73:55:1f:9e:c1:b0:33:93:1f:f8:83:32:f7:c1:ab:45: 4e:ee:a9:62:87:59:f5:63:db:3a:bc:7d:1c:c4:39:f1:a7:c4: 46:a1:09:27:76:3a:2c:0d:64:8d:1d:86:42:0c:eb:83:85:01: d4:68:ea:de:e4:ef:7b:07:ab:a1:95:f0:ba:23:a3:42:f4:4d: 79:f1:53:9b:e8:76:9e:16:9f:41:73:bc:96:55:a5:50:09:e1: 0c:ba:6b:45:a2:d0:9a:86:61:13:43:1a:43:6a:3b:22:a6:1b: 52:45:e8:77:f0:77:26:d0:83:67:77:e6:f7:2c:b8:d6:4c:e6: 64:c7:81:4b:42:60:bd:0d:d3:0e:16:80:4a:25:33:a4:22:93: 46:6a:83:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDUzMjAxMTAvBgNVBAUTKEIxOTFBRTIwNjgxNDZGOUM3MzlCRUE2Q0Q1OUU3OTJD NEY4OTdCNzYwHhcNMjUxMTA1MDMyMDAxWhcNMjUxMTEyMDMyMDAxWjAYMRYwFAYD VQQDEw02OTBhYzI2MS0xOWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyEvxbdQyJKyEMD6U6bVol6HqCFIvjrqr88OetF9W/jykmOnj6vPv3CEJJNcv OsIEjmqZf0rJ7f+xx26kvWzmpZw/dLtAGDcC2MgFL7wkvuY0WIVXD5rg/2OHoq9H coAVVPJ/Tj8e7+Dnh9+v5JnYp6g4VrAPR226FsJQ4KHSp54rSF4Xe1lAV4dGGt+v pRS4Hc0PW0kUOeWoXkLgbOmS+Q8Z7xq9Ca9QevundLUVuCfy1K+TD7zS7vXSRccJ u7OMrb82UKmSrPkoBqBr3wSkVwP5NNIcSv28k2A4Xr9VK9GwegsQJ1o57NpOivna Bp9dZ+IaB7M8TyYWi6Ftkc7+AQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLL6KEYh TWBpwveMR0b6bvUDUuj5MB8GA1UdIwQYMBaAFLGRriBoFG+cc5vqbNWeeSxPiXt2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENTMyMC83OENDRkU0RTJE QzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1eHptLXBzMVo1NUxFLUpl M1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NaR3VJR2dVYjV4em0tcHMxWjU1TEUtSmUzWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NTMyMC83OENDRkU0RTJEQzgxMUVFOTM3MEQzNDhDNEY5QUUwMi9zWkd1SUdnVWI1 eHptLXBzMVo1NUxFLUplM1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf42ti92tDWkdIvoPMCLMqDXpHC4pVWEIvmvaZx13ukwbY2xX5l0ZD sI6sUdhQgO6lbzzOxN9sfbuz7iZyBuspd/rztFOnVA3uZwsTZo3kbb7xHdRw+Pvf oPmVI+yyRDEuG9mixOHa0jfRxGe0OXNVH57BsDOTH/iDMvfBq0VO7qlih1n1Y9s6 vH0cxDnxp8RGoQkndjosDWSNHYZCDOuDhQHUaOre5O97B6uhlfC6I6NC9E158VOb 6HaeFp9Bc7yWVaVQCeEMumtFotCahmETQxpDajsiphtSReh38Hcm0INnd+b3LLjW TOZkx4FLQmC9DdMOFoBKJTOkIpNGaoNR -----END CERTIFICATE-----Generated at Wed Nov 5 05:50:20 2025 by rpki-client