$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft File: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft (raw, json) Hash identifier: HdDgsCKxXkognf6fWV2UqVQSkNSijyPodCGKLysKdLY= Subject key identifier: D6:3D:6E:C7:16:B8:97:66:28:E5:63:65:4D:83:42:16:AC:19:78:2A Authority key identifier: D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 Certificate issuer: /CN=A91DA8C2/serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Certificate serial: 79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft Manifest number: 78 Signing time: Mon 03 Nov 2025 06:48:43 +0000 Manifest this update: Mon 03 Nov 2025 06:48:43 +0000 Manifest next update: Mon 10 Nov 2025 06:48:43 +0000 Files and hashes: 1: 0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl (hash: Ynx0p31prnOmbUTRUvlzbgFEQtrNoVVCByqZRwUIBVk=) 2: 32EE2B68005411F08A6FEB4BC4F9AE02.roa (hash: wwcr+8+DOyZmloRteEL56x1j3vM+7vfdbP5INKVgy7U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:48:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 121 (0x79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA8C2, serialNumber=D24FCCAD3ACE7FFE5BF02A6A8F68C0602E1C1B51 Validity Not Before: Nov 3 06:48:43 2025 GMT Not After : Nov 10 06:48:43 2025 GMT Subject: CN=6908504b-b894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:41:d3:ce:54:e0:87:39:a5:df:82:ff:4f:52: be:7d:fd:8a:f9:85:5f:1e:c9:a4:90:24:ae:9c:10: 61:cf:bc:89:dd:4a:83:9b:4e:65:b8:09:fe:de:d8: d1:29:b6:da:7e:17:de:c6:1e:61:26:50:7f:bd:0a: 4e:75:1f:be:21:10:55:a9:24:9c:f6:b5:a8:8f:43: f0:13:82:89:89:e2:1f:00:d4:2b:2a:68:86:8f:33: ca:fb:5a:13:0e:ae:65:7b:5c:b0:63:84:9a:0c:6e: d7:17:1d:cd:b2:36:d1:ea:98:74:59:06:b3:d1:01: 80:0a:9d:84:5f:95:39:ce:60:56:50:2e:87:d2:66: ff:56:12:9a:dc:70:03:1e:af:3e:ac:22:16:6a:53: 0f:72:6d:6b:b7:84:ab:00:b1:a3:36:3c:34:7f:bc: 33:a3:6f:89:4d:3b:fc:9e:e0:2c:ac:2e:45:2b:ec: 37:5b:a6:6e:51:b4:18:c6:b3:2a:81:56:4f:e0:16: 37:27:52:58:65:5c:72:cf:2b:d7:41:2b:1d:bd:ab: fb:f6:dd:e6:23:86:43:28:86:83:a6:07:df:5b:2b: 61:f6:97:c6:ee:18:e4:f1:a3:0e:5a:3e:0d:4a:e0: 4c:92:4c:a3:e5:72:06:05:61:fe:99:1b:28:45:83: bc:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:3D:6E:C7:16:B8:97:66:28:E5:63:65:4D:83:42:16:AC:19:78:2A X509v3 Authority Key Identifier: keyid:D2:4F:CC:AD:3A:CE:7F:FE:5B:F0:2A:6A:8F:68:C0:60:2E:1C:1B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA8C2/95A69BE2005311F08E73E14AC4F9AE02/0k_MrTrOf_5b8Cpqj2jAYC4cG1E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:06:cb:3d:1f:be:dc:39:a2:6f:e8:10:ae:6a:d4:3c:1c:e1: d5:6d:5c:df:ae:65:3b:78:8c:f3:80:be:e1:aa:49:10:ae:48: 98:69:b8:b0:4a:55:21:6d:28:24:97:6e:6f:76:ba:79:3c:4e: b4:2c:fa:b2:45:dc:33:07:22:97:77:ec:eb:72:1b:cf:0c:a6: ce:a5:50:fc:89:11:00:b6:0b:9d:2b:33:dc:1e:66:be:ac:e2: 88:60:34:50:47:6a:04:e2:2c:33:97:f7:8c:87:2d:2c:de:3e: ec:25:55:e6:d7:3c:29:f5:f4:21:2c:9f:8a:fc:17:6d:92:42: 6b:b6:cd:a4:f8:69:5d:28:8c:4e:5d:ce:93:80:6a:a2:f0:f6: 8f:2c:27:59:79:e5:03:2e:e4:8a:c9:f9:3a:84:be:0f:70:06: 54:8a:e0:30:e7:8f:0f:f6:53:2d:5f:84:d0:20:c4:6f:29:21: 2e:5a:40:2c:52:e8:45:48:7c:dc:5e:af:da:c6:29:b4:c9:0e: f4:51:89:4c:cf:39:3c:76:62:9c:60:ad:bb:55:df:a5:4d:a5: b6:c6:a7:98:4e:ca:f2:ac:2c:0b:d8:41:48:83:a5:a8:95:5e: 9c:30:b0:f4:56:3c:c9:97:72:dd:96:3d:ea:66:b2:f6:a2:cf: 02:c4:7f:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBeTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QThDMjExMC8GA1UEBRMoRDI0RkNDQUQzQUNFN0ZGRTVCRjAyQTZBOEY2OEMwNjAy RTFDMUI1MTAeFw0yNTExMDMwNjQ4NDNaFw0yNTExMTAwNjQ4NDNaMBgxFjAUBgNV BAMTDTY5MDg1MDRiLWI4OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5QdPOVOCHOaXfgv9PUr59/Yr5hV8eyaSQJK6cEGHPvIndSoObTmW4Cf7e2NEp ttp+F97GHmEmUH+9Ck51H74hEFWpJJz2taiPQ/ATgomJ4h8A1CsqaIaPM8r7WhMO rmV7XLBjhJoMbtcXHc2yNtHqmHRZBrPRAYAKnYRflTnOYFZQLofSZv9WEprccAMe rz6sIhZqUw9ybWu3hKsAsaM2PDR/vDOjb4lNO/ye4CysLkUr7Ddbpm5RtBjGsyqB Vk/gFjcnUlhlXHLPK9dBKx29q/v23eYjhkMohoOmB99bK2H2l8buGOTxow5aPg1K 4EySTKPlcgYFYf6ZGyhFg7wjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1j1uxxa4 l2Yo5WNlTYNCFqwZeCowHwYDVR0jBBgwFoAU0k/MrTrOf/5b8Cpqj2jAYC4cG1Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBOEMyLzk1QTY5QkUyMDA1 MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81YjhDcHFqMmpBWUM0Y0cx RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMGtfTXJUck9mXzViOENwcWoyakFZQzRjRzFFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURB OEMyLzk1QTY5QkUyMDA1MzExRjA4RTczRTE0QUM0RjlBRTAyLzBrX01yVHJPZl81 YjhDcHFqMmpBWUM0Y0cxRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQGyz0fvtw5om/oEK5q1Dwc4dVtXN+uZTt4jPOAvuGqSRCuSJhpuLBK VSFtKCSXbm92unk8TrQs+rJF3DMHIpd37OtyG88Mps6lUPyJEQC2C50rM9weZr6s 4ohgNFBHagTiLDOX94yHLSzePuwlVebXPCn19CEsn4r8F22SQmu2zaT4aV0ojE5d zpOAaqLw9o8sJ1l55QMu5IrJ+TqEvg9wBlSK4DDnjw/2Uy1fhNAgxG8pIS5aQCxS 6EVIfNxer9rGKbTJDvRRiUzPOTx2YpxgrbtV36VNpbbGp5hOyvKsLAvYQUiDpaiV XpwwsPRWPMmXct2WPepmsvaizwLEf98= -----END CERTIFICATE-----Generated at Wed Nov 5 08:01:29 2025 by rpki-client