$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: os3fRqz/L8NNOQhkEz9zJuzADl3z/RCcKxC8sFiNtqY= Subject key identifier: 1C:19:35:BA:9A:BE:4E:F2:8B:62:DF:23:CA:D5:CD:8E:6B:EC:23:C9 Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1C3C Signing time: Tue 04 Nov 2025 16:19:22 +0000 Manifest this update: Tue 04 Nov 2025 16:19:22 +0000 Manifest next update: Tue 11 Nov 2025 16:19:22 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: WoA6cq0RSjQ3g6EmrXkHCcnu24FxL2F4nkfiySnW6CI=) 2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: HlzDRvwYW6pbsuj+o87VDQGvtNc1OKZ6zMxo32jSfko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7258 (0x1c5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Nov 4 16:19:22 2025 GMT Not After : Nov 11 16:19:22 2025 GMT Subject: CN=690a278a-a048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:1e:67:8b:78:d7:60:57:60:5f:8b:14:39:ad: 54:ec:ee:9f:b0:46:14:c1:48:74:e9:bc:3e:70:59: 66:68:c6:33:91:a8:a3:e3:aa:bb:60:f7:c4:f0:cc: 54:3c:f1:f2:34:c4:c7:7c:20:37:ee:06:7e:e6:41: 19:1b:bc:30:30:e9:ae:a2:7f:d3:2f:a7:19:10:90: 28:07:b3:cc:3b:b4:78:15:36:3f:84:c3:49:cb:9e: 8a:a4:72:09:f0:0e:ac:ce:d0:d3:2d:1f:16:76:10: 32:f5:2f:4d:21:00:82:90:ec:db:86:ee:f7:cf:12: 1b:e4:92:6e:06:12:f0:ec:40:4c:d0:ea:97:93:ea: f0:f1:0e:33:e5:12:91:2d:86:ed:13:89:a1:63:c7: 60:8d:f2:b8:89:1b:39:0a:c9:58:01:1f:b1:bb:0e: c2:56:ea:3b:3e:cc:5a:1b:4b:aa:c6:0c:68:a2:1f: 54:a4:43:11:7c:07:8a:2c:58:06:ee:29:d5:b6:4f: 9e:95:70:56:30:3b:b4:95:65:b3:c7:de:a6:61:a0: 5d:1a:95:84:cc:af:43:48:ad:10:83:12:9f:26:51: 78:fb:cc:be:af:35:35:d5:9b:6a:76:1d:f3:b2:1d: a8:2c:5a:22:c6:89:a3:22:a7:70:bd:3e:da:50:1d: 96:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:19:35:BA:9A:BE:4E:F2:8B:62:DF:23:CA:D5:CD:8E:6B:EC:23:C9 X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6d:58:77:b9:e7:ac:2e:e7:00:0f:09:f8:c3:23:bc:9e:e8: 13:59:bd:e1:73:1f:60:b6:3f:95:7f:7f:9c:f7:eb:9f:3a:47: 3a:2e:a9:2f:04:4a:63:b8:9f:ac:fa:35:2a:e5:40:c6:5e:5c: f1:71:4c:18:bc:54:01:73:60:5a:9a:49:56:7e:67:36:e8:79: 64:81:e4:70:c2:62:83:9b:cf:15:4f:dd:52:d5:04:bc:d9:02: 4e:31:48:3f:3d:b4:00:3b:e1:3d:8e:c6:8d:a9:0a:67:6e:e6: 94:96:dc:9f:68:10:f7:02:c8:c1:5f:67:47:ef:87:a6:43:3c: a2:d7:b1:56:89:50:c9:8d:d5:13:10:ab:76:fa:5c:af:7b:0d: 8e:51:bf:82:97:24:63:d0:bd:05:b8:aa:f9:e7:4d:47:a6:63: 0f:25:b9:23:46:b8:f5:5b:20:3e:df:ac:0b:27:ad:99:d4:41: 98:e7:6b:b4:8b:c0:9e:6f:79:6a:52:7d:1c:2e:d6:35:e8:aa: f4:c4:30:3b:62:08:fd:8c:52:d6:4d:c8:5b:1b:ab:51:a5:f1: e5:14:1c:78:12:50:93:1e:b5:f1:cc:e6:42:10:29:2f:1d:bd: 6a:0d:1b:1e:64:3a:fa:80:3a:83:f1:20:af:ac:68:2b:e9:67: 0a:d8:ef:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUxMTA0MTYxOTIyWhcNMjUxMTExMTYxOTIyWjAYMRYwFAYD VQQDEw02OTBhMjc4YS1hMDQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxh5ni3jXYFdgX4sUOa1U7O6fsEYUwUh06bw+cFlmaMYzkaij46q7YPfE8MxU PPHyNMTHfCA37gZ+5kEZG7wwMOmuon/TL6cZEJAoB7PMO7R4FTY/hMNJy56KpHIJ 8A6sztDTLR8WdhAy9S9NIQCCkOzbhu73zxIb5JJuBhLw7EBM0OqXk+rw8Q4z5RKR LYbtE4mhY8dgjfK4iRs5CslYAR+xuw7CVuo7PsxaG0uqxgxooh9UpEMRfAeKLFgG 7inVtk+elXBWMDu0lWWzx96mYaBdGpWEzK9DSK0QgxKfJlF4+8y+rzU11Ztqdh3z sh2oLFoixomjIqdwvT7aUB2WfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwZNbqa vk7yi2LfI8rVzY5r7CPJMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnbVh3ueesLucADwn4wyO8nugTWb3hcx9gtj+Vf3+c9+ufOkc6Lqkv BEpjuJ+s+jUq5UDGXlzxcUwYvFQBc2BamklWfmc26HlkgeRwwmKDm88VT91S1QS8 2QJOMUg/PbQAO+E9jsaNqQpnbuaUltyfaBD3AsjBX2dH74emQzyi17FWiVDJjdUT EKt2+lyvew2OUb+ClyRj0L0FuKr5501HpmMPJbkjRrj1WyA+36wLJ62Z1EGY52u0 i8Ceb3lqUn0cLtY16Kr0xDA7Ygj9jFLWTchbG6tRpfHlFBx4ElCTHrXxzOZCECkv Hb1qDRseZDr6gDqD8SCvrGgr6WcK2O+3 -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:20 2025 by rpki-client