$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft File: 29u3f7gUXp1EhgdPtz74TVSOpiI.mft (raw, json) Hash identifier: wcl2bpR8M5OFW30c5GDPF9NDSOtuZTIo6e+RyXI5X90= Subject key identifier: 9C:A9:F6:B7:9E:8F:CC:7D:2F:9E:7A:66:A1:BC:96:78:2C:4C:AD:98 Authority key identifier: DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 Certificate issuer: /CN=A91E1511/serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Certificate serial: 0118 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft Manifest number: 0115 Signing time: Mon 03 Nov 2025 05:20:23 +0000 Manifest this update: Mon 03 Nov 2025 05:20:22 +0000 Manifest next update: Mon 10 Nov 2025 05:20:22 +0000 Files and hashes: 1: 29u3f7gUXp1EhgdPtz74TVSOpiI.crl (hash: qalo0juhyXR1zqQtoYir1wjdb7UUmJFhZeW4kUDhZZE=) 2: 5741EB0A159311EFA0CC790BC4F9AE02.roa (hash: 3KeKRAYcVLwnSbJoAYUDe3/acL2PtFihgbt3K89oRLA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:20:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1511, serialNumber=DBDBB77FB8145E9D4486074FB73EF84D548EA622 Validity Not Before: Nov 3 05:20:22 2025 GMT Not After : Nov 10 05:20:22 2025 GMT Subject: CN=69083b97-b905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3d:fb:4a:5e:04:53:b8:9b:99:95:50:95:29: ca:d9:a9:2c:81:4b:fc:d7:b1:eb:7f:0c:64:07:0a: 78:11:e9:33:71:e1:a0:3e:e7:27:56:f4:7d:45:cc: 6e:0a:72:da:aa:b7:31:0d:2c:2d:fd:60:c4:d6:1c: 7f:4f:94:9a:a2:5b:71:90:c3:f2:49:0a:fe:47:c7: 52:c0:92:cb:21:2a:b4:9d:11:65:53:33:f2:a8:0f: 64:55:e1:c8:83:ed:d7:23:44:05:f6:c0:cc:e0:5a: 5b:1a:d7:28:10:80:e0:46:7d:b2:03:a0:90:d4:38: f6:a4:32:14:3a:4a:2d:12:b3:02:1e:de:cf:f2:70: ef:0c:23:47:91:46:fd:29:c9:21:00:de:36:1d:66: 5b:12:1c:61:1b:a9:15:8a:d2:76:81:80:d7:00:3a: f8:e6:03:b1:86:83:55:49:30:5e:fa:20:c6:bb:0b: ba:05:54:cc:07:0c:54:54:d9:67:cd:0d:cb:d4:06: 62:0b:93:0b:54:95:2a:c6:d8:28:f5:83:e6:06:29: d9:23:6e:11:17:d8:db:1b:53:9b:27:5c:7a:5c:d8: 02:88:20:8c:40:39:d2:07:4f:23:99:3e:23:ca:c2: 02:42:de:96:a8:61:89:01:57:e6:26:64:7e:a2:d1: 7a:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A9:F6:B7:9E:8F:CC:7D:2F:9E:7A:66:A1:BC:96:78:2C:4C:AD:98 X509v3 Authority Key Identifier: keyid:DB:DB:B7:7F:B8:14:5E:9D:44:86:07:4F:B7:3E:F8:4D:54:8E:A6:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29u3f7gUXp1EhgdPtz74TVSOpiI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1511/8D34323C13F811EFA384CE23C4F9AE02/29u3f7gUXp1EhgdPtz74TVSOpiI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:b3:18:74:3a:63:44:b8:6e:29:58:5a:f8:19:aa:92:49:53: 82:51:94:8a:8e:e6:08:98:ee:fc:b6:bb:0c:16:ce:94:b3:59: 26:76:74:bd:e6:85:32:e9:08:6b:a1:35:03:2d:4f:d0:f4:7d: 99:9d:c0:8a:5c:27:d0:95:d0:be:44:4e:e4:56:85:47:cd:20: da:b2:c7:7f:f9:ec:58:cf:ad:85:f0:6c:ea:77:64:d4:1c:f4: f8:80:c4:e7:fa:bb:ed:98:1a:ac:21:c4:dc:37:20:9d:ef:ca: d8:59:b1:25:68:6d:49:f2:04:ef:52:e0:af:d9:1b:e4:9f:56: 24:20:cb:6d:68:d5:9c:55:eb:95:81:fa:c7:ea:cf:d7:7b:52: 4a:4c:48:da:8c:4e:4b:13:9d:9d:0e:8f:32:29:b5:4d:2e:06: 3a:7c:21:ed:55:35:f7:26:b7:53:5b:c0:5a:a1:ff:f7:6b:43: 27:b6:29:fb:ce:82:39:1b:40:e2:5a:ef:7b:dd:23:b8:c3:8d: 9b:01:f7:32:25:e2:e9:8f:69:8f:5b:75:d1:70:55:db:b3:b9: ac:a6:6c:07:ab:e5:51:19:20:ca:f7:6c:1c:77:15:26:7b:27: 8c:50:61:9a:7e:8f:38:d9:d9:13:46:ca:0a:d3:04:37:85:b3: 38:94:eb:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1MTExMTAvBgNVBAUTKERCREJCNzdGQjgxNDVFOUQ0NDg2MDc0RkI3M0VGODRE NTQ4RUE2MjIwHhcNMjUxMTAzMDUyMDIyWhcNMjUxMTEwMDUyMDIyWjAYMRYwFAYD VQQDEw02OTA4M2I5Ny1iOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT37Sl4EU7ibmZVQlSnK2aksgUv817HrfwxkBwp4EekzceGgPucnVvR9Rcxu CnLaqrcxDSwt/WDE1hx/T5SaoltxkMPySQr+R8dSwJLLISq0nRFlUzPyqA9kVeHI g+3XI0QF9sDM4FpbGtcoEIDgRn2yA6CQ1Dj2pDIUOkotErMCHt7P8nDvDCNHkUb9 KckhAN42HWZbEhxhG6kVitJ2gYDXADr45gOxhoNVSTBe+iDGuwu6BVTMBwxUVNln zQ3L1AZiC5MLVJUqxtgo9YPmBinZI24RF9jbG1ObJ1x6XNgCiCCMQDnSB08jmT4j ysICQt6WqGGJAVfmJmR+otF6zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJyp9ree j8x9L556ZqG8lngsTK2YMB8GA1UdIwQYMBaAFNvbt3+4FF6dRIYHT7c++E1UjqYi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTUxMS84RDM0MzIzQzEz RjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhwMUVoZ2RQdHo3NFRWU09w aUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5dTNmN2dVWHAxRWhnZFB0ejc0VFZTT3BpSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTUxMS84RDM0MzIzQzEzRjgxMUVGQTM4NENFMjNDNEY5QUUwMi8yOXUzZjdnVVhw MUVoZ2RQdHo3NFRWU09waUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJsxh0OmNEuG4pWFr4GaqSSVOCUZSKjuYImO78trsMFs6Us1kmdnS9 5oUy6QhroTUDLU/Q9H2ZncCKXCfQldC+RE7kVoVHzSDassd/+exYz62F8Gzqd2TU HPT4gMTn+rvtmBqsIcTcNyCd78rYWbElaG1J8gTvUuCv2Rvkn1YkIMttaNWcVeuV gfrH6s/Xe1JKTEjajE5LE52dDo8yKbVNLgY6fCHtVTX3JrdTW8Baof/3a0Mntin7 zoI5G0DiWu973SO4w42bAfcyJeLpj2mPW3XRcFXbs7mspmwHq+VRGSDK92wcdxUm eyeMUGGafo842dkTRsoK0wQ3hbM4lOu9 -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:31 2025 by rpki-client