$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: MHUdicNqHcTParcBYqReAFHwR4Sv+uI98YT4j5H92tU= Subject key identifier: BF:72:DA:08:5D:E8:DE:F7:C1:D4:9C:0C:CE:B4:C9:09:7A:85:AF:DE Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 06A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 068D Signing time: Tue 04 Nov 2025 22:36:14 +0000 Manifest this update: Tue 04 Nov 2025 22:36:14 +0000 Manifest next update: Tue 11 Nov 2025 22:36:14 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: E8QSZMMJuhQ0V+UoPItZsuW30owIvqvlsTBbxRZOFc8=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: 71fJuckCoKbzUc34v7gFsGAjPnIuO7itiiyZ85r0nVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1697 (0x6a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Nov 4 22:36:14 2025 GMT Not After : Nov 11 22:36:14 2025 GMT Subject: CN=690a7fde-8b15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:56:c5:26:83:74:6e:aa:c3:e0:d1:9e:ec:ae: 04:9f:82:25:51:16:1c:bc:1e:6e:00:ff:34:57:88: 22:79:ba:e6:64:ea:9c:52:b0:1d:b0:94:04:48:42: 75:4d:11:63:3a:e5:97:6f:02:79:38:6a:5d:23:00: 19:3a:2d:0f:d7:22:2d:43:95:b1:53:17:dd:6c:95: f7:68:7c:03:3a:9e:76:b1:6c:2f:5f:ad:a7:08:12: 42:27:52:38:7b:35:ac:91:97:e4:24:75:0e:1b:1e: f8:aa:ec:47:78:7f:7f:b2:38:d6:28:fe:e9:84:be: e9:3d:eb:f3:7f:da:4d:14:d5:56:48:16:e9:04:71: 29:1b:1e:5f:74:ea:c2:a4:b3:fb:f6:ba:b4:46:35: 64:ea:b0:b9:59:6a:8e:0d:90:b8:83:c1:93:11:0d: 9d:82:34:29:14:7e:b9:45:dd:39:7e:a2:06:a3:df: 82:2e:d3:a4:5c:f8:59:f7:c0:96:ed:fd:8d:14:6a: b3:47:7f:db:d9:54:10:69:8d:91:e9:6b:cb:17:e0: 1d:f7:a2:94:15:8d:08:bd:7b:54:b6:26:b7:f5:07: 2d:88:0f:df:82:12:f4:cc:8e:7b:a1:aa:ef:9e:f2: f4:e8:79:12:03:b0:d2:1a:d2:fe:b0:c0:e6:2a:1c: 26:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:72:DA:08:5D:E8:DE:F7:C1:D4:9C:0C:CE:B4:C9:09:7A:85:AF:DE X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c4:d7:27:b8:7f:5c:48:11:12:39:21:75:ed:fc:d6:be:a2:6b: 91:d2:a9:d4:11:b0:24:57:0b:da:13:f9:18:6d:ca:15:22:82: 06:b3:5d:08:21:0c:93:e6:c1:c0:15:07:f1:fb:68:b9:52:5a: bb:77:02:72:d8:eb:ac:6b:50:ae:cb:ec:fd:db:f6:7e:c5:11: 61:9a:50:2b:fc:fe:5e:1d:29:2b:54:54:f0:7a:6e:d2:08:6b: 6e:40:b5:41:a1:43:21:25:14:3b:3e:e4:48:87:d2:9d:43:90: 03:04:60:40:aa:6d:9c:93:1c:2d:69:9d:7d:a9:f8:ba:fc:a0: 00:9d:0d:6c:cf:e1:13:53:de:e2:1a:d9:c6:13:b6:57:bb:62: 06:55:d7:de:e7:18:cc:2a:29:46:e4:53:d2:14:46:fd:96:59: 89:5b:8f:79:3c:fd:75:c5:16:fc:85:b5:75:51:fa:86:fe:17: 28:32:29:44:3b:e7:14:7f:02:6f:f6:b1:e8:a5:af:aa:72:95: b4:d9:c4:57:24:9a:79:bd:1f:01:cf:83:d7:e1:58:8e:49:6a: 6e:55:34:e4:19:02:7d:2b:be:23:11:22:a6:b2:60:7e:f6:54: 48:8b:a3:de:f8:52:a0:5c:b9:e8:04:7b:48:92:70:7f:f5:cd: 2d:65:37:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUxMTA0MjIzNjE0WhcNMjUxMTExMjIzNjE0WjAYMRYwFAYD VQQDEw02OTBhN2ZkZS04YjE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA51bFJoN0bqrD4NGe7K4En4IlURYcvB5uAP80V4giebrmZOqcUrAdsJQESEJ1 TRFjOuWXbwJ5OGpdIwAZOi0P1yItQ5WxUxfdbJX3aHwDOp52sWwvX62nCBJCJ1I4 ezWskZfkJHUOGx74quxHeH9/sjjWKP7phL7pPevzf9pNFNVWSBbpBHEpGx5fdOrC pLP79rq0RjVk6rC5WWqODZC4g8GTEQ2dgjQpFH65Rd05fqIGo9+CLtOkXPhZ98CW 7f2NFGqzR3/b2VQQaY2R6WvLF+Ad96KUFY0IvXtUtia39QctiA/fghL0zI57oarv nvL06HkSA7DSGtL+sMDmKhwmuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL9y2ghd 6N73wdScDM60yQl6ha/eMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDE1ye4f1xIERI5IXXt/Na+omuR0qnUEbAkVwvaE/kYbcoVIoIGs10I IQyT5sHAFQfx+2i5Ulq7dwJy2Ousa1Cuy+z92/Z+xRFhmlAr/P5eHSkrVFTwem7S CGtuQLVBoUMhJRQ7PuRIh9KdQ5ADBGBAqm2ckxwtaZ19qfi6/KAAnQ1sz+ETU97i GtnGE7ZXu2IGVdfe5xjMKilG5FPSFEb9llmJW495PP11xRb8hbV1UfqG/hcoMilE O+cUfwJv9rHopa+qcpW02cRXJJp5vR8Bz4PX4ViOSWpuVTTkGQJ9K74jESKmsmB+ 9lRIi6Pe+FKgXLnoBHtIknB/9c0tZTcB -----END CERTIFICATE-----Generated at Wed Nov 5 21:31:07 2025 by rpki-client