$ rpki-client -vvf rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft File: pStC19RpVfQoUSa7DcS-qnNKkr0.mft (raw, json) Hash identifier: v2+juRdBnp9DJHI+unQGA7e32CwBulrSjn8k1cXnyIM= Subject key identifier: 6E:1F:93:28:28:88:51:DD:57:58:63:04:B3:E8:C2:58:79:D1:4F:4D Authority key identifier: A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD Certificate issuer: /CN=A91E51AD/serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Certificate serial: 34DA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft Manifest number: 34DA Signing time: Tue 04 Nov 2025 14:39:35 +0000 Manifest this update: Tue 04 Nov 2025 14:39:34 +0000 Manifest next update: Tue 11 Nov 2025 14:39:34 +0000 Files and hashes: 1: pStC19RpVfQoUSa7DcS-qnNKkr0.crl (hash: MCuVYJPoKME4Ec7o7vNa02OTi59G7grRVDWwmeTRojY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E51AD, serialNumber=A52B42D7D46955F4285126BB0DC4BEAA734A92BD Validity Not Before: Nov 4 14:39:34 2025 GMT Not After : Nov 11 14:39:34 2025 GMT Subject: CN=690a1027-4e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2f:cb:12:54:70:c7:1f:49:da:70:85:4e:64: 44:0c:d7:15:7b:62:2d:56:c4:ca:da:99:5e:42:c3: a0:20:9a:9d:fc:73:28:e5:3b:f4:8c:1b:f0:5d:f4: 73:ea:0c:c8:57:63:43:6f:b5:5c:7a:06:f2:cd:73: 7f:f6:b8:2e:b0:44:b2:3b:c6:9c:26:3a:78:0a:bc: f3:68:62:98:27:89:9c:c4:9b:4f:c4:34:c3:06:58: bd:45:73:12:38:d7:64:f0:2c:03:d4:b0:47:33:5d: 68:1b:f1:56:1e:d5:e0:c0:71:6f:f6:27:77:38:1b: d5:b4:bc:98:dc:87:67:89:33:9e:98:a6:76:b8:79: 86:5e:68:63:84:d1:9a:9d:f9:2b:fe:81:e0:b6:5c: 4f:ea:2f:d7:d7:00:29:dd:40:d8:71:b4:2a:79:d1: 99:93:01:c5:32:cb:a0:29:f2:42:9a:23:87:86:41: 96:f3:1c:03:d8:4e:b0:44:59:51:2e:f5:f7:48:1b: 70:e4:63:3b:e8:19:ba:e3:14:94:29:0b:79:1b:c7: 27:2f:d2:e2:81:f5:55:c4:b9:98:50:f6:8f:c6:95: 05:cb:b7:4f:06:2a:d2:3c:ff:44:fd:74:96:f7:19: 8c:a7:94:ab:85:4d:5a:f2:da:44:42:ae:3b:3e:af: a5:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:1F:93:28:28:88:51:DD:57:58:63:04:B3:E8:C2:58:79:D1:4F:4D X509v3 Authority Key Identifier: keyid:A5:2B:42:D7:D4:69:55:F4:28:51:26:BB:0D:C4:BE:AA:73:4A:92:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pStC19RpVfQoUSa7DcS-qnNKkr0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E51AD/229581D41D8C11E2B7B428E708B02CD2/pStC19RpVfQoUSa7DcS-qnNKkr0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:54:45:f7:3c:82:19:2f:3d:6c:13:ed:bc:0b:3b:06:a8:8c: 56:7e:ab:46:d8:70:6c:6e:96:29:7d:2d:75:9b:37:64:71:29: 59:ee:1f:a0:22:b2:0d:9b:5b:9b:dc:99:ff:a5:29:cc:ec:fa: ed:80:05:fe:29:90:88:c0:86:eb:cc:29:c2:a8:c5:9f:e4:c7: 62:cd:43:1b:e3:c5:ff:09:54:95:4d:09:35:d6:3b:40:e5:d2: fb:88:a8:46:23:1e:c6:b7:d4:1c:93:9c:96:30:f7:fd:bb:e9: e2:a2:d7:5e:f0:a4:82:a1:b9:55:b1:5b:94:aa:ab:88:9e:97: af:5e:a6:b2:8b:1c:35:97:06:1f:ae:6c:c9:27:30:3c:30:7a: 41:ad:28:c5:f0:2d:32:18:e1:c7:7b:02:c3:3c:d8:48:7a:a0: 6b:18:74:b9:bf:f2:68:86:c3:90:9e:b6:48:e5:98:cf:2a:32: 53:84:8f:4f:2a:3a:ec:22:49:07:ef:c7:c4:b5:c7:d5:d5:c3: 51:5c:5b:c9:8a:a9:5c:5a:c9:c7:5d:5a:b1:d8:4b:7a:9a:fa: d7:15:08:72:0c:9f:a3:0f:70:ba:ee:7b:87:f3:5a:44:62:76: 5c:ac:e7:a0:00:04:97:d8:2a:5b:2e:93:76:9b:7a:f1:91:7f: 49:05:f7:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUxQUQxMTAvBgNVBAUTKEE1MkI0MkQ3RDQ2OTU1RjQyODUxMjZCQjBEQzRCRUFB NzM0QTkyQkQwHhcNMjUxMTA0MTQzOTM0WhcNMjUxMTExMTQzOTM0WjAYMRYwFAYD VQQDEw02OTBhMTAyNy00ZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzS/LElRwxx9J2nCFTmREDNcVe2ItVsTK2pleQsOgIJqd/HMo5Tv0jBvwXfRz 6gzIV2NDb7VcegbyzXN/9rgusESyO8acJjp4CrzzaGKYJ4mcxJtPxDTDBli9RXMS ONdk8CwD1LBHM11oG/FWHtXgwHFv9id3OBvVtLyY3IdniTOemKZ2uHmGXmhjhNGa nfkr/oHgtlxP6i/X1wAp3UDYcbQqedGZkwHFMsugKfJCmiOHhkGW8xwD2E6wRFlR LvX3SBtw5GM76Bm64xSUKQt5G8cnL9LigfVVxLmYUPaPxpUFy7dPBirSPP9E/XSW 9xmMp5SrhU1a8tpEQq47Pq+lgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG4fkygo iFHdV1hjBLPowlh50U9NMB8GA1UdIwQYMBaAFKUrQtfUaVX0KFEmuw3EvqpzSpK9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTFBRC8yMjk1ODFENDFE OEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZmUW9VU2E3RGNTLXFuTktr cjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BTdEMxOVJwVmZRb1VTYTdEY1MtcW5OS2tyMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTFBRC8yMjk1ODFENDFEOEMxMUUyQjdCNDI4RTcwOEIwMkNEMi9wU3RDMTlScFZm UW9VU2E3RGNTLXFuTktrcjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZVEX3PIIZLz1sE+28CzsGqIxWfqtG2HBsbpYpfS11mzdkcSlZ7h+g IrINm1ub3Jn/pSnM7PrtgAX+KZCIwIbrzCnCqMWf5MdizUMb48X/CVSVTQk11jtA 5dL7iKhGIx7Gt9Qck5yWMPf9u+niotde8KSCoblVsVuUqquInpevXqayixw1lwYf rmzJJzA8MHpBrSjF8C0yGOHHewLDPNhIeqBrGHS5v/JohsOQnrZI5ZjPKjJThI9P KjrsIkkH78fEtcfV1cNRXFvJiqlcWsnHXVqx2Et6mvrXFQhyDJ+jD3C67nuH81pE YnZcrOegAASX2CpbLpN2m3rxkX9JBfex -----END CERTIFICATE-----Generated at Wed Nov 5 17:49:13 2025 by rpki-client