$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: m8yzY60i+gAg4uNmDVs72tKCQepg5pIkjRFm/a0dgXA= Subject key identifier: ED:D4:50:BC:7F:7E:F5:63:28:38:1D:E1:D0:F6:03:20:FF:D4:57:14 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: FC Signing time: Mon 03 Nov 2025 05:10:26 +0000 Manifest this update: Mon 03 Nov 2025 05:10:25 +0000 Manifest next update: Mon 10 Nov 2025 05:10:25 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: jFJUM84VfXOGCO6QFRseo6NI0Kfsh4e+sukPZxvvvJ4=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Nov 3 05:10:25 2025 GMT Not After : Nov 10 05:10:25 2025 GMT Subject: CN=69083941-ad08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:4d:3d:24:c0:a9:95:24:da:1b:1a:02:ab: 47:9d:cb:f4:06:f7:9d:1a:7e:f0:87:5e:7b:2d:06: fe:19:8c:55:38:12:56:36:75:c2:b2:c6:45:b6:3b: 36:1c:97:30:dd:d7:09:07:54:bc:02:97:0c:31:76: a2:4d:a0:fd:a9:b0:8a:de:d6:9a:3e:42:e5:29:70: 73:24:98:89:be:50:fd:b3:a3:6d:02:d4:b9:58:29: d1:34:ef:90:e5:38:da:c7:a4:5b:87:62:40:2a:74: 1f:30:53:12:17:3b:39:08:59:6b:07:2c:51:50:3a: e8:94:6a:7f:5f:7b:df:a6:fd:eb:48:37:4b:cd:2f: 57:dc:4d:34:33:7d:67:7d:b2:7e:99:df:d5:88:56: 31:eb:0e:20:14:a5:93:e3:0c:da:db:da:1a:ef:0b: 98:1f:c6:b3:90:4c:b3:d4:eb:4c:36:a3:49:1d:2a: 20:a2:0c:a5:69:dd:8a:03:16:7d:12:c3:e2:b9:09: c5:7f:69:84:3b:05:33:1c:d7:b5:67:a5:b1:b5:71: bc:61:19:f4:f0:b6:73:4f:cb:2e:2f:e4:6a:5e:ff: 19:4b:78:d6:c7:49:a8:3d:0e:4b:cd:13:28:23:d4: a8:b8:a7:39:d0:ce:e2:0d:b5:d1:58:f5:f4:be:52: 43:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D4:50:BC:7F:7E:F5:63:28:38:1D:E1:D0:F6:03:20:FF:D4:57:14 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:98:44:ab:c8:cd:ce:eb:68:cf:ee:80:7e:47:fb:40:fc:64: fb:6b:c6:40:78:0b:21:fc:2b:ed:ec:0b:39:ec:de:77:46:ea: 86:72:b7:7d:88:23:32:1c:16:f1:87:91:d7:3e:72:5e:d0:2e: b4:b6:3b:d0:0e:b7:64:be:cf:52:6a:df:b1:c0:a7:83:c6:b0: ea:bd:b1:4d:0e:87:28:cd:53:c2:63:66:b2:0b:1f:37:52:aa: d2:e1:cf:77:29:c9:d5:d7:e1:5a:d7:e4:7e:e4:34:23:e8:f7: 32:50:a6:59:d7:05:a4:65:ab:53:52:16:e0:43:fe:aa:e7:c9: e5:85:1c:a3:e2:bd:ae:6e:4c:55:02:2e:47:0c:bc:e3:89:b7: f8:87:95:52:29:36:5a:bf:0e:97:d5:79:9d:e4:73:40:dd:1f: 6a:40:57:5f:b3:3c:35:5f:13:b1:66:75:e5:60:70:c9:d4:92: aa:52:8f:6a:b0:92:c1:c8:48:4b:4b:20:51:61:a3:a0:47:4f: 77:ea:10:23:ff:82:08:90:4f:1e:0b:8f:18:f8:ca:15:41:42: cb:44:dd:e9:af:a7:7a:43:ae:59:24:e3:03:f7:e8:54:db:14: 88:26:f8:77:7a:8b:5d:39:ff:08:e4:a6:0d:d2:04:55:d4:ff: b0:e1:6f:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUxMTAzMDUxMDI1WhcNMjUxMTEwMDUxMDI1WjAYMRYwFAYD VQQDEw02OTA4Mzk0MS1hZDA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA35BNPSTAqZUk2hsaAqtHncv0BvedGn7wh157LQb+GYxVOBJWNnXCssZFtjs2 HJcw3dcJB1S8ApcMMXaiTaD9qbCK3taaPkLlKXBzJJiJvlD9s6NtAtS5WCnRNO+Q 5Tjax6Rbh2JAKnQfMFMSFzs5CFlrByxRUDrolGp/X3vfpv3rSDdLzS9X3E00M31n fbJ+md/ViFYx6w4gFKWT4wza29oa7wuYH8azkEyz1OtMNqNJHSogogylad2KAxZ9 EsPiuQnFf2mEOwUzHNe1Z6WxtXG8YRn08LZzT8suL+RqXv8ZS3jWx0moPQ5LzRMo I9SouKc50M7iDbXRWPX0vlJDlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3UULx/ fvVjKDgd4dD2AyD/1FcUMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAmESryM3O62jP7oB+R/tA/GT7a8ZAeAsh/Cvt7As57N53RuqGcrd9 iCMyHBbxh5HXPnJe0C60tjvQDrdkvs9Sat+xwKeDxrDqvbFNDocozVPCY2ayCx83 UqrS4c93KcnV1+Fa1+R+5DQj6PcyUKZZ1wWkZatTUhbgQ/6q58nlhRyj4r2ubkxV Ai5HDLzjibf4h5VSKTZavw6X1Xmd5HNA3R9qQFdfszw1XxOxZnXlYHDJ1JKqUo9q sJLByEhLSyBRYaOgR0936hAj/4IIkE8eC48Y+MoVQULLRN3pr6d6Q65ZJOMD9+hU 2xSIJvh3eotdOf8I5KYN0gRV1P+w4W+r -----END CERTIFICATE-----Generated at Tue Nov 4 16:27:36 2025 by rpki-client