$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: ogG+QG9igzQyqETrXfsIC4dLtge6WsdjqINiDRf67YQ= Subject key identifier: A9:EF:61:59:25:80:9E:F0:50:00:01:8C:77:D2:FB:0D:65:96:60:8A Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 081D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 0810 Signing time: Tue 04 Nov 2025 21:02:11 +0000 Manifest this update: Tue 04 Nov 2025 21:02:10 +0000 Manifest next update: Tue 11 Nov 2025 21:02:10 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: QJyHc6jYq+/wBLMYhy67W6lKZcZwyeWcAIeBh7U8Iyw=) 2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: RLRjH/J0+me+Vx3yyTHl66wKq7FxNXMRxmdR2kAu53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2077 (0x81d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Nov 4 21:02:10 2025 GMT Not After : Nov 11 21:02:10 2025 GMT Subject: CN=690a69d2-c168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:bc:38:56:6f:95:38:f7:f2:da:f0:ab:0f: 98:30:c2:10:c0:67:ff:62:0f:48:5e:59:e9:33:06: cf:fb:90:99:e3:be:e9:56:7e:97:04:55:08:ff:c4: 80:33:26:1b:c8:a3:9d:73:9d:91:e4:36:98:b1:c5: 4b:d0:55:9e:fa:0f:2e:57:b1:d7:06:8a:ea:b4:e2: 86:86:fc:0d:0c:f8:20:cf:b2:f0:81:15:84:61:26: a6:24:cd:cd:da:b8:4d:ac:8d:48:c7:e5:b9:83:9c: fa:27:e6:b6:9e:2a:5e:68:3b:8c:12:c8:95:d3:b3: e3:ab:3f:e4:cd:a3:c2:9b:56:45:cb:4e:19:e6:5a: 90:d2:6c:a3:d5:5f:7c:c3:8f:11:bb:fc:82:b5:0f: 2a:9c:19:64:33:41:5f:d7:86:02:c5:07:a9:bb:6f: 38:c8:97:9d:16:f3:1f:88:de:9d:18:d4:17:39:dc: 62:96:20:76:2d:22:37:4b:67:4f:e4:ce:d8:a7:a0: ef:c0:6c:13:f2:f3:6b:74:6e:88:bb:46:9c:29:61: 16:b0:77:0b:6d:c0:8d:44:02:d9:d5:27:42:fc:2d: 2a:75:b6:6a:db:5b:ca:bd:3f:ee:28:ea:4a:ea:88: 19:c7:cc:4b:4f:ed:f0:55:a4:1d:fa:3b:7c:55:b4: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:EF:61:59:25:80:9E:F0:50:00:01:8C:77:D2:FB:0D:65:96:60:8A X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:77:bf:59:ee:52:c1:33:d7:19:c5:1c:de:0f:24:f4:0d:6a: 1c:6d:c7:94:98:0f:a4:40:4d:94:f1:5b:4f:48:28:54:3d:6b: cd:87:81:0c:5c:a4:11:d2:67:25:2a:bc:b4:c0:93:05:24:d0: 20:e6:aa:52:ea:59:cb:62:5f:17:6c:e5:b1:f2:08:e7:66:22: bd:41:df:24:f8:39:c8:c0:48:a0:95:33:83:59:05:40:4e:b2: 00:92:d5:18:db:b3:a6:2c:69:d5:b5:44:48:31:91:77:b1:4b: bb:b6:28:b6:1d:06:3e:21:c7:c5:a1:ec:a2:bc:ca:f2:01:6a: cf:1c:d7:8b:2a:96:9c:8b:f8:20:5a:aa:1f:bd:5b:9b:2e:2b: 02:05:e2:72:18:6f:40:98:12:13:bd:fe:03:3d:38:89:08:ac: d7:1c:e1:96:2a:f6:73:05:60:38:da:da:41:0d:5e:d9:b0:47: e0:b3:f6:26:24:6d:e6:58:9e:8e:36:c8:b3:fb:60:9f:19:f6: c0:31:a3:7b:20:91:72:34:c0:a8:0b:6a:8e:2a:d9:fa:01:26: a2:e9:39:68:8c:26:b5:08:2d:b5:b5:92:c9:f6:16:b3:a3:d8: c4:ce:42:af:48:1f:0f:be:47:fe:3e:22:1e:9e:bd:d5:66:c6: f1:2f:0d:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCB0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUxMTA0MjEwMjEwWhcNMjUxMTExMjEwMjEwWjAYMRYwFAYD VQQDEw02OTBhNjlkMi1jMTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxbW8OFZvlTj38trwqw+YMMIQwGf/Yg9IXlnpMwbP+5CZ477pVn6XBFUI/8SA MyYbyKOdc52R5DaYscVL0FWe+g8uV7HXBorqtOKGhvwNDPggz7LwgRWEYSamJM3N 2rhNrI1Ix+W5g5z6J+a2nipeaDuMEsiV07Pjqz/kzaPCm1ZFy04Z5lqQ0myj1V98 w48Ru/yCtQ8qnBlkM0Ff14YCxQepu284yJedFvMfiN6dGNQXOdxiliB2LSI3S2dP 5M7Yp6DvwGwT8vNrdG6Iu0acKWEWsHcLbcCNRALZ1SdC/C0qdbZq21vKvT/uKOpK 6ogZx8xLT+3wVaQd+jt8VbQmiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnvYVkl gJ7wUAABjHfS+w1llmCKMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqd79Z7lLBM9cZxRzeDyT0DWocbceUmA+kQE2U8VtPSChUPWvNh4EM XKQR0mclKry0wJMFJNAg5qpS6lnLYl8XbOWx8gjnZiK9Qd8k+DnIwEiglTODWQVA TrIAktUY27OmLGnVtURIMZF3sUu7tii2HQY+IcfFoeyivMryAWrPHNeLKpaci/gg WqofvVubLisCBeJyGG9AmBITvf4DPTiJCKzXHOGWKvZzBWA42tpBDV7ZsEfgs/Ym JG3mWJ6ONsiz+2CfGfbAMaN7IJFyNMCoC2qOKtn6ASai6TlojCa1CC21tZLJ9haz o9jEzkKvSB8Pvkf+PiIenr3VZsbxLw29 -----END CERTIFICATE-----Generated at Wed Nov 5 16:44:02 2025 by rpki-client