$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: YJASVsyJvDwLVfGRPegrD8mGiaGazLth0R23n+zUMJA= Subject key identifier: 67:BE:F6:97:58:60:59:17:DA:6D:53:27:57:CA:1D:E9:D8:02:DB:05 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CB8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CA9 Signing time: Tue 04 Nov 2025 18:20:26 +0000 Manifest this update: Tue 04 Nov 2025 18:20:26 +0000 Manifest next update: Tue 11 Nov 2025 18:20:26 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: iLLBRmJl5Z4ncjfLl8upQfDRChU5JszeAKhVBAmLo9M=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 9COC4JU57eLtq+93AZXJxKxezKMRUvq8Ungs1T3DP7c=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: EAQL7hv/BTjKApjc3ZIYKNpClj0rUyMUA1WrPrbN2NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:20:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3256 (0xcb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Nov 4 18:20:26 2025 GMT Not After : Nov 11 18:20:26 2025 GMT Subject: CN=690a43ea-9076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c2:7b:7c:fe:c4:5c:c3:7c:96:90:73:14:37: d0:39:36:fe:ef:cf:fa:7e:ba:27:aa:48:43:61:30: c1:94:db:4e:ad:23:ec:1f:29:f0:2a:d2:f9:24:f9: 2f:5c:2f:43:d8:5f:58:68:b5:f4:00:ef:77:80:15: 83:90:30:45:57:60:1f:23:52:a8:dc:2d:4b:f8:4e: 01:bd:bc:45:44:ad:e5:f1:fb:8c:2d:09:72:9a:63: 14:26:7f:27:56:cb:66:86:70:db:e9:44:02:c0:cc: ca:73:ea:5a:0d:f9:2b:a5:8f:19:24:f1:5a:d5:72: cd:19:e6:29:c9:46:34:e0:52:a7:7c:17:9b:4a:7b: a7:63:4b:9d:42:e1:eb:5a:f2:03:9b:d4:4e:f0:ee: fd:82:ae:65:bc:c5:00:61:dd:0b:fd:d6:70:d4:c2: bf:24:f3:fe:3a:f6:f1:75:30:32:c2:9b:b4:6e:28: bc:81:87:34:7c:85:b2:d8:01:a7:18:fc:84:08:2c: 1b:e5:b4:ce:e9:f2:67:87:24:a0:ab:dd:a8:fc:b8: c3:27:9c:dd:98:34:cb:9a:d7:5a:fe:b0:67:b7:8a: 9a:54:75:8e:1c:e6:7c:42:26:d8:96:64:b0:27:35: e3:02:a5:01:64:de:bb:96:b9:1e:26:b3:db:29:46: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:BE:F6:97:58:60:59:17:DA:6D:53:27:57:CA:1D:E9:D8:02:DB:05 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:fd:5a:b5:da:59:31:28:27:61:ab:33:8b:ca:56:39:ef:d7: e5:5c:1f:ae:b7:bb:70:84:00:f3:91:00:15:a5:3e:b0:18:72: a5:36:93:d7:a3:5f:5e:e5:d7:9d:ad:32:47:cc:e4:a9:28:da: 1d:72:e0:be:99:69:24:ec:f1:1f:c5:a6:98:59:34:b5:af:d0: e5:05:28:c6:eb:cf:09:dd:8e:27:86:90:b2:61:c6:21:d8:b7: 4d:7f:ab:0f:fb:58:9b:12:7c:6b:a3:8c:18:69:07:3a:a6:df: e3:0c:b5:d7:ef:23:d7:6f:76:7f:7c:f5:8f:d7:c5:e4:1a:2d: 05:3f:ce:35:ad:bc:24:3c:f1:89:7b:b4:0a:76:e0:2f:44:66: 0f:25:ee:2d:11:e8:bf:45:22:32:ca:65:cb:2c:61:f3:40:07: 26:2a:89:d9:da:9b:aa:1d:53:9f:6d:9c:da:f0:6e:83:f9:42: 11:9e:01:e1:5c:9c:3d:72:15:3b:6d:c8:bd:58:2c:6a:fc:35: f3:bb:03:81:d3:64:da:73:c1:a9:1e:cc:98:7c:21:ac:cd:15: f2:7e:38:ef:f6:0d:ac:cf:f1:1b:c3:1c:55:6e:84:f1:04:20: 8d:7b:ec:35:d9:0f:35:1b:52:42:24:fc:30:14:08:bd:51:72: 1e:57:63:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMTA0MTgyMDI2WhcNMjUxMTExMTgyMDI2WjAYMRYwFAYD VQQDEw02OTBhNDNlYS05MDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyMJ7fP7EXMN8lpBzFDfQOTb+78/6fronqkhDYTDBlNtOrSPsHynwKtL5JPkv XC9D2F9YaLX0AO93gBWDkDBFV2AfI1Ko3C1L+E4BvbxFRK3l8fuMLQlymmMUJn8n VstmhnDb6UQCwMzKc+paDfkrpY8ZJPFa1XLNGeYpyUY04FKnfBebSnunY0udQuHr WvIDm9RO8O79gq5lvMUAYd0L/dZw1MK/JPP+OvbxdTAywpu0bii8gYc0fIWy2AGn GPyECCwb5bTO6fJnhySgq92o/LjDJ5zdmDTLmtda/rBnt4qaVHWOHOZ8QibYlmSw JzXjAqUBZN67lrkeJrPbKUbIxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGe+9pdY YFkX2m1TJ1fKHenYAtsFMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX/Vq12lkxKCdhqzOLylY579flXB+ut7twhADzkQAVpT6wGHKlNpPX o19e5dedrTJHzOSpKNodcuC+mWkk7PEfxaaYWTS1r9DlBSjG688J3Y4nhpCyYcYh 2LdNf6sP+1ibEnxro4wYaQc6pt/jDLXX7yPXb3Z/fPWP18XkGi0FP841rbwkPPGJ e7QKduAvRGYPJe4tEei/RSIyymXLLGHzQAcmKonZ2puqHVOfbZza8G6D+UIRngHh XJw9chU7bci9WCxq/DXzuwOB02Tac8GpHsyYfCGszRXyfjjv9g2sz/EbwxxVboTx BCCNe+w12Q81G1JCJPwwFAi9UXIeV2P5 -----END CERTIFICATE-----Generated at Wed Nov 5 15:24:45 2025 by rpki-client