$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft File: mGsNU3ZLyD3A4HLsrzacefIqOdc.mft (raw, json) Hash identifier: +FD6iI6xfJ5lOXxj0gs5SCat+5htAp5KDrEmdQkozDk= Subject key identifier: AF:10:8C:79:7A:70:B1:DA:C6:6C:29:05:08:92:0F:5E:09:AD:04:13 Authority key identifier: 98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 Certificate issuer: /CN=A91DD799/serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Certificate serial: 075D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft Manifest number: 075D Signing time: Tue 04 Nov 2025 14:52:00 +0000 Manifest this update: Tue 04 Nov 2025 14:51:59 +0000 Manifest next update: Tue 11 Nov 2025 14:51:59 +0000 Files and hashes: 1: mGsNU3ZLyD3A4HLsrzacefIqOdc.crl (hash: 2kc6RWK9hsIFE8V0geK4KXbdwOCP38TxImh0sDsaSME=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:51:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1885 (0x75d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD799, serialNumber=986B0D53764BC83DC0E072ECAF369C79F22A39D7 Validity Not Before: Nov 4 14:51:59 2025 GMT Not After : Nov 11 14:51:59 2025 GMT Subject: CN=690a130f-42be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:1a:84:f0:aa:10:5b:72:6c:36:f5:d9:72:fc: 2d:5c:18:c4:8b:91:bf:06:74:46:be:91:14:0a:7a: 7e:aa:0e:2e:1d:7d:90:0f:99:16:3e:75:e2:8b:ba: b2:94:0b:8a:a5:e4:7c:db:44:16:7d:f8:2b:28:99: fd:3e:63:71:28:90:42:50:33:c7:9f:04:ca:8c:de: 96:09:f9:e3:7a:f1:0d:4b:20:cf:59:46:85:6d:f9: 92:79:45:20:15:32:38:54:0d:fd:09:0d:55:5e:bc: e9:c3:73:6a:2c:aa:0c:96:2d:9f:9a:19:6f:dd:b6: 96:68:1f:a3:1f:cf:a8:c1:53:a9:e6:57:00:03:be: af:2a:aa:c5:38:bd:c3:2a:80:73:95:f5:55:de:9e: 3c:27:2b:5d:d4:de:22:a5:86:0f:1a:e3:45:34:a7: e2:91:8e:1a:d9:f0:8c:61:75:30:72:43:d1:a1:c5: 34:6c:bc:ef:cd:96:4a:2b:da:43:2a:75:df:2c:da: 7d:2e:eb:e7:b3:2a:d0:f2:2e:d1:a7:eb:a8:03:3d: 08:4f:43:f6:26:98:fe:54:43:e8:4b:c9:1c:3e:fd: 30:69:b8:74:02:08:26:08:3e:ff:17:43:7d:fb:45: 8c:e4:c6:c4:79:d6:f9:60:60:9a:24:1c:a9:84:81: 90:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:10:8C:79:7A:70:B1:DA:C6:6C:29:05:08:92:0F:5E:09:AD:04:13 X509v3 Authority Key Identifier: keyid:98:6B:0D:53:76:4B:C8:3D:C0:E0:72:EC:AF:36:9C:79:F2:2A:39:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGsNU3ZLyD3A4HLsrzacefIqOdc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD799/13CA82FA43FB11EB9F73D63CC4F9AE02/mGsNU3ZLyD3A4HLsrzacefIqOdc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:b0:02:a5:6c:7a:88:f1:12:c7:27:b5:82:15:bc:57:8a:1c: 4d:01:7e:15:ef:85:48:02:98:c0:a0:6e:81:14:13:99:b5:91: 3c:cb:7c:d6:8f:22:bc:97:3d:23:75:f7:bd:4b:62:5c:95:53: ca:dd:79:a3:11:cb:f2:96:27:c0:15:d0:f9:f8:53:cf:a7:b3: 54:ad:b8:53:19:e1:8e:fd:04:0e:94:f9:94:b2:5e:c1:b7:28: e3:93:42:6b:b6:96:53:60:d3:40:c8:ee:f7:30:17:0b:96:26: 6d:67:e2:42:5b:72:d8:74:a7:41:3f:38:af:84:5a:8b:24:41: 62:7f:91:0e:36:63:ce:30:d2:ba:d6:61:bb:d0:a6:e7:7e:0c: 91:b6:37:06:e2:33:0e:b2:2f:65:55:dc:a0:1a:8a:14:b0:42: 4f:6c:b8:09:57:d7:f8:7a:4f:6f:19:fa:8e:42:34:be:7c:6f: 1c:53:9d:e2:69:c9:f7:04:f2:2b:54:2a:0e:92:8e:67:8c:4e: d7:b6:ee:56:88:79:fc:0c:a5:e8:7f:cd:92:0e:52:66:f4:77: 43:c5:9f:57:76:ae:a4:4e:18:c2:a3:a1:d6:3d:36:fa:ab:59: 4a:36:3e:d7:8b:c1:14:f7:13:a0:df:0f:fb:d5:25:f6:56:78: 32:3c:f3:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3OTkxMTAvBgNVBAUTKDk4NkIwRDUzNzY0QkM4M0RDMEUwNzJFQ0FGMzY5Qzc5 RjIyQTM5RDcwHhcNMjUxMTA0MTQ1MTU5WhcNMjUxMTExMTQ1MTU5WjAYMRYwFAYD VQQDEw02OTBhMTMwZi00MmJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwhqE8KoQW3JsNvXZcvwtXBjEi5G/BnRGvpEUCnp+qg4uHX2QD5kWPnXii7qy lAuKpeR820QWffgrKJn9PmNxKJBCUDPHnwTKjN6WCfnjevENSyDPWUaFbfmSeUUg FTI4VA39CQ1VXrzpw3NqLKoMli2fmhlv3baWaB+jH8+owVOp5lcAA76vKqrFOL3D KoBzlfVV3p48Jytd1N4ipYYPGuNFNKfikY4a2fCMYXUwckPRocU0bLzvzZZKK9pD KnXfLNp9LuvnsyrQ8i7Rp+uoAz0IT0P2Jpj+VEPoS8kcPv0wabh0AggmCD7/F0N9 +0WM5MbEedb5YGCaJByphIGQGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK8QjHl6 cLHaxmwpBQiSD14JrQQTMB8GA1UdIwQYMBaAFJhrDVN2S8g9wOBy7K82nHnyKjnX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc5OS8xM0NBODJGQTQz RkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlEM0E0SExzcnphY2VmSXFP ZGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21Hc05VM1pMeUQzQTRITHNyemFjZWZJcU9kYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc5OS8xM0NBODJGQTQzRkIxMUVCOUY3M0Q2M0NDNEY5QUUwMi9tR3NOVTNaTHlE M0E0SExzcnphY2VmSXFPZGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYsAKlbHqI8RLHJ7WCFbxXihxNAX4V74VIApjAoG6BFBOZtZE8y3zW jyK8lz0jdfe9S2JclVPK3XmjEcvylifAFdD5+FPPp7NUrbhTGeGO/QQOlPmUsl7B tyjjk0JrtpZTYNNAyO73MBcLliZtZ+JCW3LYdKdBPzivhFqLJEFif5EONmPOMNK6 1mG70KbnfgyRtjcG4jMOsi9lVdygGooUsEJPbLgJV9f4ek9vGfqOQjS+fG8cU53i acn3BPIrVCoOko5njE7Xtu5WiHn8DKXof82SDlJm9HdDxZ9Xdq6kThjCo6HWPTb6 q1lKNj7Xi8EU9xOg3w/71SX2VngyPPPE -----END CERTIFICATE-----Generated at Wed Nov 5 04:43:49 2025 by rpki-client