$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft File: V-g9gYxmEEbA4OLv5TjuEncAqjM.mft (raw, json) Hash identifier: IWcCZCSEo7cu0EboTqvVzoRSYNrhRdSh3RSsMEFpnhc= Subject key identifier: F5:AE:5B:F3:96:66:67:91:EA:C7:7A:C4:7C:F0:66:81:F7:77:44:35 Authority key identifier: 57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33 Certificate issuer: /CN=A91DD1CC/serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33 Certificate serial: 4A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft Manifest number: 4A Signing time: Wed 05 Nov 2025 07:31:28 +0000 Manifest this update: Wed 05 Nov 2025 07:31:28 +0000 Manifest next update: Wed 12 Nov 2025 07:31:28 +0000 Files and hashes: 1: V-g9gYxmEEbA4OLv5TjuEncAqjM.crl (hash: bO2MrRaPijHmEkE8WSDesfBnJpxjyg0EiBEWlbG85+Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:31:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74 (0x4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=57E83D818C661046C0E0E2EFE538EE127700AA33 Validity Not Before: Nov 5 07:31:28 2025 GMT Not After : Nov 12 07:31:28 2025 GMT Subject: CN=690afd50-5dfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:fa:b6:8f:63:43:0c:be:e8:e8:5a:2c:af: 6d:d2:82:43:89:96:f9:f4:68:2d:e2:b6:29:51:9c: e2:77:be:36:6d:64:82:bc:f9:94:e9:fe:67:3f:8c: 19:92:06:63:d8:29:ee:1a:96:8d:c0:82:a4:fe:f0: 2a:2f:dc:fd:78:98:85:8a:ba:00:89:6b:04:23:f9: f9:63:86:34:09:bc:0c:91:6a:57:b8:48:30:91:21: 27:9a:4d:4e:56:7e:86:69:8e:89:41:23:b9:4f:8b: 6c:11:be:26:86:be:22:65:0d:58:21:e1:6b:f2:de: 38:a6:41:f0:cd:c8:1c:57:59:b8:5d:b4:92:4c:b1: 19:a5:41:9b:7a:bb:d3:e7:e3:aa:60:f8:c1:6e:c2: fa:14:e8:55:92:eb:e7:a1:7b:0a:ca:af:2d:14:8a: 21:be:3b:68:42:cf:e1:50:94:ed:30:65:c5:d1:b1: d6:e2:83:f5:e7:61:1d:0e:10:04:27:b9:0e:55:2d: b0:97:ee:76:9a:a0:97:0e:6d:ca:27:ab:56:98:24: b5:db:e4:e2:2b:a0:e7:cc:7f:17:a5:cd:73:58:fc: 65:f3:db:e4:22:53:ea:3d:84:0d:84:4a:3c:16:d6: c5:07:67:f3:c2:8f:b0:6a:b7:c7:f7:61:e4:ce:19: 37:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:AE:5B:F3:96:66:67:91:EA:C7:7A:C4:7C:F0:66:81:F7:77:44:35 X509v3 Authority Key Identifier: keyid:57:E8:3D:81:8C:66:10:46:C0:E0:E2:EF:E5:38:EE:12:77:00:AA:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V-g9gYxmEEbA4OLv5TjuEncAqjM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7C1E344C4A3A11F0BD5C1B4FC4F9AE02/V-g9gYxmEEbA4OLv5TjuEncAqjM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:21:75:f9:f9:35:82:6c:5c:d2:fc:6f:a1:e4:c6:3b:7e:fe: 5a:60:8f:6f:6d:66:c7:26:04:08:aa:d6:18:5e:c9:0b:88:6a: 1c:79:07:40:37:ac:ad:4b:8e:33:74:24:50:87:0c:1c:c5:6e: 40:53:1d:93:cc:31:bd:15:4c:3a:aa:3e:38:0c:89:93:41:83: 62:09:14:70:ce:2d:b9:d6:47:97:82:d4:1a:79:44:43:69:24: 14:ea:e7:32:ce:c7:ce:f1:8e:54:cf:98:43:ab:e8:7d:f8:4f: 06:a7:fc:ae:18:91:8a:3d:83:34:cd:27:a5:1f:ad:d7:1e:b7: 49:3b:43:de:c9:2f:b7:0c:3c:60:4e:27:8a:2b:55:72:a3:43: d8:b9:0e:a0:8f:16:50:59:d6:aa:f0:81:a3:e5:a8:70:82:71: e9:cd:52:b0:71:43:e5:09:90:03:1d:43:05:23:30:fd:8d:4c: 41:9e:38:ae:ac:9d:1a:0d:2f:eb:46:9b:37:fe:7c:95:07:d0: 10:30:ca:89:44:ed:37:72:a9:f9:8f:9a:94:29:fb:0c:88:7e: a4:7e:9d:1a:da:9a:e5:42:38:c0:30:f1:c1:a6:51:07:d3:fe: 44:a1:96:88:80:16:c9:5b:dd:2d:a9:02:ee:2d:1e:0e:9f:bf: 3a:c0:70:a5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBSjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTdFODNEODE4QzY2MTA0NkMwRTBFMkVGRTUzOEVFMTI3 NzAwQUEzMzAeFw0yNTExMDUwNzMxMjhaFw0yNTExMTIwNzMxMjhaMBgxFjAUBgNV BAMTDTY5MGFmZDUwLTVkZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKCPq2j2NDDL7o6Fosr23SgkOJlvn0aC3itilRnOJ3vjZtZIK8+ZTp/mc/jBmS BmPYKe4alo3AgqT+8Cov3P14mIWKugCJawQj+fljhjQJvAyRale4SDCRISeaTU5W foZpjolBI7lPi2wRviaGviJlDVgh4Wvy3jimQfDNyBxXWbhdtJJMsRmlQZt6u9Pn 46pg+MFuwvoU6FWS6+ehewrKry0UiiG+O2hCz+FQlO0wZcXRsdbig/XnYR0OEAQn uQ5VLbCX7naaoJcObconq1aYJLXb5OIroOfMfxelzXNY/GXz2+QiU+o9hA2ESjwW 1sUHZ/PCj7Bqt8f3YeTOGTfDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9a5b85Zm Z5Hqx3rEfPBmgfd3RDUwHwYDVR0jBBgwFoAUV+g9gYxmEEbA4OLv5TjuEncAqjMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzdDMUUzNDRDNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1YtZzlnWXhtRUViQTRPTHY1VGp1RW5jQXFq TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVi1nOWdZeG1FRWJBNE9MdjVUanVFbmNBcWpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURE MUNDLzdDMUUzNDRDNEEzQTExRjBCRDVDMUI0RkM0RjlBRTAyL1YtZzlnWXhtRUVi QTRPTHY1VGp1RW5jQXFqTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACkhdfn5NYJsXNL8b6Hkxjt+/lpgj29tZscmBAiq1hheyQuIahx5B0A3 rK1LjjN0JFCHDBzFbkBTHZPMMb0VTDqqPjgMiZNBg2IJFHDOLbnWR5eC1Bp5RENp JBTq5zLOx87xjlTPmEOr6H34Twan/K4YkYo9gzTNJ6Ufrdcet0k7Q97JL7cMPGBO J4orVXKjQ9i5DqCPFlBZ1qrwgaPlqHCCcenNUrBxQ+UJkAMdQwUjMP2NTEGeOK6s nRoNL+tGmzf+fJUH0BAwyolE7TdyqfmPmpQp+wyIfqR+nRramuVCOMAw8cGmUQfT /kShloiAFslb3S2pAu4tHg6fvzrAcKU= -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:19 2025 by rpki-client