$ rpki-client -vvf rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft File: i29QUS89IfFe7mdUeBjiY79cXRQ.mft (raw, json) Hash identifier: 3pEoS+Hoef/dxv1is/JL4u5HM2RM1TDpYio6k17H1ro= Subject key identifier: 06:92:C2:75:BD:BE:FA:20:CA:4C:9F:F4:91:C0:18:59:7E:3D:30:1A Authority key identifier: 8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 Certificate issuer: /CN=A91E431E/serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Certificate serial: 069C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft Manifest number: 0697 Signing time: Sun 02 Nov 2025 22:18:38 +0000 Manifest this update: Sun 02 Nov 2025 22:18:37 +0000 Manifest next update: Sun 09 Nov 2025 22:18:37 +0000 Files and hashes: 1: i29QUS89IfFe7mdUeBjiY79cXRQ.crl (hash: XqyVc+X7MELmo1oRHo2IwyR4blkTuIS7KU+Au3HzxdI=) 2: 51CBE4868C6711EB98B7B279C4F9AE02.roa (hash: am0gLM47UswkhQ7d8ve9CDz5IVO8+0wgLFBI3jyuYpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:18:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1692 (0x69c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E431E, serialNumber=8B6F50512F3D21F15EEE67547818E263BF5C5D14 Validity Not Before: Nov 2 22:18:37 2025 GMT Not After : Nov 9 22:18:37 2025 GMT Subject: CN=6907d8be-86f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1d:2f:bb:bd:90:59:2c:dd:84:96:e9:b7:43: ad:43:43:7c:2d:48:f1:3c:56:71:e6:18:d3:8a:ec: f7:62:59:c1:0d:b2:3f:1e:5d:00:21:d9:b5:d0:2c: 17:12:73:8f:d1:cf:9e:91:9c:13:f2:70:ef:d3:55: 02:76:c0:5f:e7:5a:4b:73:d6:1b:1a:b1:e6:64:88: 6c:a6:95:9f:08:04:44:02:f8:7d:bd:ee:7a:60:15: 0e:fe:8c:5c:7b:ab:36:03:47:76:2e:9a:d1:db:f6: 0a:af:1d:f3:dd:a9:53:73:0b:99:5a:99:8c:60:f6: 3f:27:8c:f7:d3:be:a8:ff:17:4f:68:7c:41:66:e8: 00:99:de:df:cb:b4:48:53:8b:d7:3e:36:db:3f:3b: 20:f1:2b:a7:15:e3:21:77:0d:34:19:be:b5:26:ac: 47:61:90:b7:63:21:b1:10:d8:a8:e8:18:3e:16:cf: 75:c0:04:70:df:d1:1d:da:3c:8a:a5:c6:22:3f:16: 55:80:1d:85:41:3c:6b:f6:4e:e3:16:ee:39:7f:b4: 97:0b:0a:4d:38:09:02:4d:fe:fc:ae:c5:5a:24:72: d6:d2:98:82:c8:7d:6d:11:2e:5b:3a:28:9e:90:a3: b2:a6:2d:47:ea:9e:47:5f:8f:ad:47:7d:60:96:03: 36:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:92:C2:75:BD:BE:FA:20:CA:4C:9F:F4:91:C0:18:59:7E:3D:30:1A X509v3 Authority Key Identifier: keyid:8B:6F:50:51:2F:3D:21:F1:5E:EE:67:54:78:18:E2:63:BF:5C:5D:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i29QUS89IfFe7mdUeBjiY79cXRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E431E/7A8481968C6511EBAAF80376C4F9AE02/i29QUS89IfFe7mdUeBjiY79cXRQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2e:11:28:95:82:02:7e:d1:cb:92:60:c7:0e:89:bc:49:ba: c9:93:b6:71:fb:7e:d5:11:5d:f5:26:9d:a4:af:77:fc:a7:fe: e1:8c:ae:fa:6f:f1:76:3c:fa:65:c6:25:cd:69:08:6e:c1:98: b6:10:34:ad:b1:92:ca:9d:c9:57:5c:1b:b3:68:e6:a8:73:b2: 80:26:4c:9f:60:c8:19:be:96:01:c2:01:7d:06:ff:18:76:8e: 42:4b:18:a1:ae:74:e3:d8:1c:ff:bc:e1:66:db:05:6b:35:2e: b7:55:8b:ce:7b:6c:95:09:8c:8c:3f:39:e6:0e:cd:dd:c1:10: ee:2f:ee:46:16:3c:e7:67:6e:bd:e2:bc:5f:a1:85:65:1f:34: e8:42:d4:85:80:38:8c:43:41:1b:3b:9e:14:39:21:6b:2e:b8: 58:96:58:f1:bd:e1:b8:fa:c5:e3:81:d8:ee:c9:ae:3c:1c:d7: 57:00:2a:71:07:72:c6:77:6c:4f:c8:2f:7a:81:58:9a:38:0f: 9f:96:1d:6a:4c:a9:0b:d5:27:cd:27:5d:ce:a1:17:af:cd:69: 2b:c8:86:7f:f2:08:60:41:67:2d:da:b2:1d:d9:9f:d3:26:5f: 49:ad:57:21:58:87:0e:85:a7:a8:25:99:82:22:ae:72:72:8a: 80:6e:75:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQzMUUxMTAvBgNVBAUTKDhCNkY1MDUxMkYzRDIxRjE1RUVFNjc1NDc4MThFMjYz QkY1QzVEMTQwHhcNMjUxMTAyMjIxODM3WhcNMjUxMTA5MjIxODM3WjAYMRYwFAYD VQQDEw02OTA3ZDhiZS04NmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth0vu72QWSzdhJbpt0OtQ0N8LUjxPFZx5hjTiuz3YlnBDbI/Hl0AIdm10CwX EnOP0c+ekZwT8nDv01UCdsBf51pLc9YbGrHmZIhsppWfCAREAvh9ve56YBUO/oxc e6s2A0d2LprR2/YKrx3z3alTcwuZWpmMYPY/J4z3076o/xdPaHxBZugAmd7fy7RI U4vXPjbbPzsg8SunFeMhdw00Gb61JqxHYZC3YyGxENio6Bg+Fs91wARw39Ed2jyK pcYiPxZVgB2FQTxr9k7jFu45f7SXCwpNOAkCTf78rsVaJHLW0piCyH1tES5bOiie kKOypi1H6p5HX4+tR31glgM20QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAaSwnW9 vvogykyf9JHAGFl+PTAaMB8GA1UdIwQYMBaAFItvUFEvPSHxXu5nVHgY4mO/XF0U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDMxRS83QTg0ODE5NjhD NjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlmRmU3bWRVZUJqaVk3OWNY UlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2kyOVFVUzg5SWZGZTdtZFVlQmppWTc5Y1hSUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDMxRS83QTg0ODE5NjhDNjUxMUVCQUFGODAzNzZDNEY5QUUwMi9pMjlRVVM4OUlm RmU3bWRVZUJqaVk3OWNYUlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9LhEolYICftHLkmDHDom8SbrJk7Zx+37VEV31Jp2kr3f8p/7hjK76 b/F2PPplxiXNaQhuwZi2EDStsZLKnclXXBuzaOaoc7KAJkyfYMgZvpYBwgF9Bv8Y do5CSxihrnTj2Bz/vOFm2wVrNS63VYvOe2yVCYyMPznmDs3dwRDuL+5GFjznZ269 4rxfoYVlHzToQtSFgDiMQ0EbO54UOSFrLrhYlljxveG4+sXjgdjuya48HNdXACpx B3LGd2xPyC96gViaOA+flh1qTKkL1SfNJ13OoRevzWkryIZ/8ghgQWct2rId2Z/T Jl9JrVchWIcOhaeoJZmCIq5ycoqAbnWP -----END CERTIFICATE-----Generated at Tue Nov 4 08:18:23 2025 by rpki-client