$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft File: cM9awmFE6NdDsVID4mwiBG-iQHo.mft (raw, json) Hash identifier: yThLYmCEMb43DrkfW59m1AqfW+SZps+wVgj6GndPW3U= Subject key identifier: 5A:A3:68:6E:E8:6F:7C:B0:AD:F8:36:1B:20:43:E5:E9:EC:7A:16:65 Authority key identifier: 70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A Certificate issuer: /CN=A91DB128/serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Certificate serial: 01E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft Manifest number: 01E1 Signing time: Wed 05 Nov 2025 02:50:25 +0000 Manifest this update: Wed 05 Nov 2025 02:50:24 +0000 Manifest next update: Wed 12 Nov 2025 02:50:24 +0000 Files and hashes: 1: cM9awmFE6NdDsVID4mwiBG-iQHo.crl (hash: 7Z/aFP+vVvVict8Gt8++sfq/1r3vW3WqplNsUNq1Ks8=) 2: ABD7D9FCDDEC11EDB14EDA32C4F9AE02.roa (hash: ViKM5e5iyaoZ2fwSNhoyHsddKA5yuwX0C7qKIyKJX7Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 487 (0x1e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB128, serialNumber=70CF5AC26144E8D743B15203E26C22046FA2407A Validity Not Before: Nov 5 02:50:24 2025 GMT Not After : Nov 12 02:50:24 2025 GMT Subject: CN=690abb71-c628 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c1:b9:0b:c3:82:cd:97:c4:3b:48:07:60:a6: 1f:ca:72:1f:88:68:31:74:95:ba:f9:4a:d8:75:a0: 9d:b8:a9:0d:2e:4b:9c:fe:2f:10:45:9f:3a:c4:a1: fc:f7:84:7e:d8:6f:42:c2:fb:25:17:89:9b:82:36: 6c:02:89:cb:45:a4:de:93:62:b8:46:16:9f:e3:aa: 91:c8:ac:ff:f8:90:8b:bc:ee:fe:11:5c:6d:2f:27: 5c:63:fc:e2:fb:9c:18:be:ed:b0:14:a3:8e:ac:f1: 16:23:37:44:ec:50:cf:4d:c0:3e:77:cd:12:d2:34: 30:07:2c:f6:cf:f9:fb:c7:2c:b0:cc:13:91:a3:06: 9b:d9:f2:b8:8d:1e:9d:ea:ad:8c:1f:15:63:6b:52: a4:17:b3:58:7a:ac:40:41:cb:8f:f9:79:05:09:9b: 17:4b:15:eb:c1:03:50:11:4c:90:21:4d:b3:e8:59: 4a:bb:76:ab:40:69:c2:80:b6:d6:96:ce:7c:68:3c: ae:4e:0d:99:d0:06:76:2a:7f:93:6b:f5:dc:f1:76: db:d5:34:60:fa:ed:e3:07:4a:d2:92:99:77:a4:e9: e2:91:eb:ff:70:07:b5:67:b3:9b:e9:ed:1f:18:4d: bf:5b:27:b5:ef:24:19:c2:2e:01:23:64:9d:43:b7: f9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:A3:68:6E:E8:6F:7C:B0:AD:F8:36:1B:20:43:E5:E9:EC:7A:16:65 X509v3 Authority Key Identifier: keyid:70:CF:5A:C2:61:44:E8:D7:43:B1:52:03:E2:6C:22:04:6F:A2:40:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM9awmFE6NdDsVID4mwiBG-iQHo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB128/7BF23AC4DDE811EDBF8C973AC4F9AE02/cM9awmFE6NdDsVID4mwiBG-iQHo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:1a:ec:6b:68:cf:2a:83:2d:3d:79:39:a0:2f:9b:c5:75:3b: 2a:1f:13:91:4c:be:fc:50:73:1b:c2:41:2f:5d:86:1d:4f:73: 24:c7:7f:5f:46:e6:98:39:5d:ee:23:0c:80:6d:fe:88:f0:9f: 31:5e:74:aa:20:f2:dd:61:bc:ef:16:2e:85:25:d7:ec:1c:22: cb:12:fc:0b:e4:f7:65:e2:a6:88:8d:13:1a:07:28:90:d1:fe: 80:d8:20:63:8e:90:82:4f:b4:ba:ac:4c:86:47:36:ec:f5:95: 77:4b:c5:ef:28:c6:ae:65:17:2f:72:24:3e:c0:f6:f8:2c:7d: 7e:88:6c:2f:58:9a:0b:6d:9d:11:be:c1:e6:06:50:b2:fd:cc: b5:59:ea:24:c6:d9:33:37:32:29:ed:04:4b:26:71:c3:b6:42: b1:a0:2a:a2:e9:4a:e9:b3:49:95:71:86:50:7a:3a:83:90:69: 07:8b:8f:37:86:5c:aa:c6:af:d0:31:e3:46:fb:17:39:9f:08: 2e:bc:d0:76:fd:f8:5f:18:e0:91:5e:72:3e:8b:53:f4:18:27: ab:e5:e7:ca:fa:99:00:4f:e1:c6:f1:8f:bc:8f:73:31:38:97: 83:cd:34:a5:e2:6b:27:55:c6:56:c0:72:c3:dd:03:10:5a:1c: bc:1e:56:db -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAecwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIxMjgxMTAvBgNVBAUTKDcwQ0Y1QUMyNjE0NEU4RDc0M0IxNTIwM0UyNkMyMjA0 NkZBMjQwN0EwHhcNMjUxMTA1MDI1MDI0WhcNMjUxMTEyMDI1MDI0WjAYMRYwFAYD VQQDEw02OTBhYmI3MS1jNjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnsG5C8OCzZfEO0gHYKYfynIfiGgxdJW6+UrYdaCduKkNLkuc/i8QRZ86xKH8 94R+2G9CwvslF4mbgjZsAonLRaTek2K4Rhaf46qRyKz/+JCLvO7+EVxtLydcY/zi +5wYvu2wFKOOrPEWIzdE7FDPTcA+d80S0jQwByz2z/n7xyywzBORowab2fK4jR6d 6q2MHxVja1KkF7NYeqxAQcuP+XkFCZsXSxXrwQNQEUyQIU2z6FlKu3arQGnCgLbW ls58aDyuTg2Z0AZ2Kn+Ta/Xc8Xbb1TRg+u3jB0rSkpl3pOnikev/cAe1Z7Ob6e0f GE2/Wye17yQZwi4BI2SdQ7f5PwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFqjaG7o b3ywrfg2GyBD5ensehZlMB8GA1UdIwQYMBaAFHDPWsJhROjXQ7FSA+JsIgRvokB6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjEyOC83QkYyM0FDNERE RTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZOZERzVklENG13aUJHLWlR SG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NNOWF3bUZFNk5kRHNWSUQ0bXdpQkctaVFIby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjEyOC83QkYyM0FDNERERTgxMUVEQkY4Qzk3M0FDNEY5QUUwMi9jTTlhd21GRTZO ZERzVklENG13aUJHLWlRSG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuGuxraM8qgy09eTmgL5vFdTsqHxORTL78UHMbwkEvXYYdT3Mkx39f RuaYOV3uIwyAbf6I8J8xXnSqIPLdYbzvFi6FJdfsHCLLEvwL5Pdl4qaIjRMaByiQ 0f6A2CBjjpCCT7S6rEyGRzbs9ZV3S8XvKMauZRcvciQ+wPb4LH1+iGwvWJoLbZ0R vsHmBlCy/cy1WeokxtkzNzIp7QRLJnHDtkKxoCqi6Urps0mVcYZQejqDkGkHi483 hlyqxq/QMeNG+xc5nwguvNB2/fhfGOCRXnI+i1P0GCer5efK+pkAT+HG8Y+8j3Mx OJeDzTSl4msnVcZWwHLD3QMQWhy8Hlbb -----END CERTIFICATE-----Generated at Wed Nov 5 11:02:48 2025 by rpki-client