$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft File: CROi4pwkcA4hQx4EweNJf9X5qAA.mft (raw, json) Hash identifier: WO43ADdDu6WEvXe5S8NwRU7qBdau21FPftY6WlLIlfE= Subject key identifier: D2:8D:42:59:B4:DE:D3:BE:CB:18:73:81:5C:FB:6D:B3:4C:7C:9B:00 Authority key identifier: 09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 Certificate issuer: /CN=A91D65C2/serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Certificate serial: 0162 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft Manifest number: 0159 Signing time: Mon 03 Nov 2025 04:09:52 +0000 Manifest this update: Mon 03 Nov 2025 04:09:51 +0000 Manifest next update: Mon 10 Nov 2025 04:09:51 +0000 Files and hashes: 1: CROi4pwkcA4hQx4EweNJf9X5qAA.crl (hash: cqB4ua2OHNPuY8JTN0XJ3dYiUsBV13Ntqw5gNN8ITAU=) 2: C3A53484B06011EEA1D18B7FC4F9AE02.roa (hash: 6BXa0l0XZh/eGvl4ynq5V2Aj3lZVf/u92wrWO9e9+lA=) 3: AA134FD6BD1411EE95F45624C4F9AE02.roa (hash: 0ui5S8hmz9C0Ock78UXOuJaT2l8PyKzUulCehXJDbXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:09:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 354 (0x162) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65C2, serialNumber=0913A2E29C24700E21431E04C1E3497FD5F9A800 Validity Not Before: Nov 3 04:09:51 2025 GMT Not After : Nov 10 04:09:51 2025 GMT Subject: CN=69082b0f-a8f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b8:57:cf:55:9b:03:72:10:af:c0:3d:9e:65: a7:d0:3d:44:82:d6:17:99:97:57:46:67:a6:91:e7: 9a:f2:41:2a:e6:c8:c5:27:d6:93:b8:91:f1:66:ef: 59:a3:bd:36:81:b8:32:80:ea:50:ab:d6:90:c7:a1: 50:49:bf:22:15:03:3f:90:3b:c7:17:36:33:87:c7: d9:de:4a:d9:2a:9c:a1:b8:f8:c4:9f:05:95:d3:87: 34:05:4e:68:5c:45:a7:b5:21:ca:5a:bf:a2:6d:21: f7:3c:09:20:31:21:e7:92:2f:f6:d4:fc:15:4b:17: 9d:17:8e:1c:c7:05:c3:76:2b:47:9f:c7:88:19:55: 80:58:16:d1:ec:72:df:d6:ea:2b:99:be:d3:f8:c5: 19:67:23:38:b2:4e:fb:e8:ca:b9:95:6d:98:64:0a: 95:c8:d3:23:82:c4:d7:e5:9a:eb:b6:15:67:46:3d: 68:cb:27:2c:7a:b9:76:e0:5e:34:0c:26:57:05:bb: d8:bd:2b:76:20:24:bd:cb:c9:09:c3:66:25:9c:3e: 66:6b:b4:de:d2:dd:19:38:1b:3b:6e:2a:fc:85:65: 2a:ce:78:e5:7b:23:38:f8:a2:2f:90:f3:79:86:c3: 3c:37:ad:97:67:8e:ad:f5:85:7b:20:06:c9:fc:f5: cd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:8D:42:59:B4:DE:D3:BE:CB:18:73:81:5C:FB:6D:B3:4C:7C:9B:00 X509v3 Authority Key Identifier: keyid:09:13:A2:E2:9C:24:70:0E:21:43:1E:04:C1:E3:49:7F:D5:F9:A8:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CROi4pwkcA4hQx4EweNJf9X5qAA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65C2/76EE795CB06011EEBBBF657CC4F9AE02/CROi4pwkcA4hQx4EweNJf9X5qAA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:cc:39:80:5d:ce:70:3c:3e:42:04:ae:44:96:4f:4b:50:60: f4:82:5f:78:88:9f:ae:e3:c1:cd:c8:34:2d:62:61:5d:0e:87: 57:72:90:9a:9d:df:17:62:78:c1:34:8c:51:33:49:09:6b:f1: 91:19:1a:81:61:c0:5c:45:69:13:fa:ce:ca:95:b4:f0:e1:fd: a2:c8:4d:eb:20:3c:c9:48:f2:7c:62:dd:e0:41:3e:39:ad:aa: 77:2a:95:fd:b6:8e:94:5b:7d:6d:8b:50:34:e2:d2:be:d9:7d: 5a:ac:d3:00:ac:5f:e6:50:45:09:c9:2a:e7:8b:7b:2d:17:a9: 92:47:5a:19:28:b4:08:c7:85:fd:be:e9:1f:7c:da:eb:bf:81: 40:e6:0e:61:aa:a1:ba:1d:b5:89:83:81:50:1f:e5:b5:1d:43: f2:65:75:84:a8:47:92:55:35:03:56:c5:63:75:02:05:53:93: e8:13:79:67:d8:f3:09:14:8b:e0:ea:49:fc:6b:50:4b:bc:30: b5:ac:56:9d:ef:39:fb:79:a3:26:8a:4f:78:10:20:1f:81:b0: 85:4d:33:15:e8:fc:be:1f:9f:80:10:58:8a:b1:58:08:d6:e9: 1c:2a:6e:da:04:a4:36:03:5e:6d:56:93:37:c4:c6:86:e1:b1: de:8a:ef:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAWIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1QzIxMTAvBgNVBAUTKDA5MTNBMkUyOUMyNDcwMEUyMTQzMUUwNEMxRTM0OTdG RDVGOUE4MDAwHhcNMjUxMTAzMDQwOTUxWhcNMjUxMTEwMDQwOTUxWjAYMRYwFAYD VQQDEw02OTA4MmIwZi1hOGY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrhXz1WbA3IQr8A9nmWn0D1EgtYXmZdXRmemkeea8kEq5sjFJ9aTuJHxZu9Z o702gbgygOpQq9aQx6FQSb8iFQM/kDvHFzYzh8fZ3krZKpyhuPjEnwWV04c0BU5o XEWntSHKWr+ibSH3PAkgMSHnki/21PwVSxedF44cxwXDditHn8eIGVWAWBbR7HLf 1uormb7T+MUZZyM4sk776Mq5lW2YZAqVyNMjgsTX5ZrrthVnRj1oyycserl24F40 DCZXBbvYvSt2ICS9y8kJw2YlnD5ma7Te0t0ZOBs7bir8hWUqznjleyM4+KIvkPN5 hsM8N62XZ46t9YV7IAbJ/PXNXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNKNQlm0 3tO+yxhzgVz7bbNMfJsAMB8GA1UdIwQYMBaAFAkTouKcJHAOIUMeBMHjSX/V+agA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVDMi83NkVFNzk1Q0Iw NjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NBNGhReDRFd2VOSmY5WDVx QUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NST2k0cHdrY0E0aFF4NEV3ZU5KZjlYNXFBQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVDMi83NkVFNzk1Q0IwNjAxMUVFQkJCRjY1N0NDNEY5QUUwMi9DUk9pNHB3a2NB NGhReDRFd2VOSmY5WDVxQUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0zDmAXc5wPD5CBK5Elk9LUGD0gl94iJ+u48HNyDQtYmFdDodXcpCa nd8XYnjBNIxRM0kJa/GRGRqBYcBcRWkT+s7KlbTw4f2iyE3rIDzJSPJ8Yt3gQT45 rap3KpX9to6UW31ti1A04tK+2X1arNMArF/mUEUJySrni3stF6mSR1oZKLQIx4X9 vukffNrrv4FA5g5hqqG6HbWJg4FQH+W1HUPyZXWEqEeSVTUDVsVjdQIFU5PoE3ln 2PMJFIvg6kn8a1BLvDC1rFad7zn7eaMmik94ECAfgbCFTTMV6Py+H5+AEFiKsVgI 1ukcKm7aBKQ2A15tVpM3xMaG4bHeiu+P -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:05 2025 by rpki-client