$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft File: foUuJJ2cR8tllecBfQfeJ8OUrwk.mft (raw, json) Hash identifier: 3deBMYHT4B26myevW0woLtZL5EYo+4zbFCKGhOhpMps= Subject key identifier: 2C:34:46:4D:74:7A:BF:27:93:DF:69:45:F4:7D:BF:AE:53:34:28:35 Authority key identifier: 7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 Certificate issuer: /CN=A91E5D61/serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Certificate serial: 352E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft Manifest number: 4849 Signing time: Tue 04 Nov 2025 14:21:03 +0000 Manifest this update: Tue 04 Nov 2025 14:21:02 +0000 Manifest next update: Tue 11 Nov 2025 14:21:02 +0000 Files and hashes: 1: foUuJJ2cR8tllecBfQfeJ8OUrwk.crl (hash: rnBZWcl3PtSDBM7NMrxO58W/LU7x0ZFyY8Op0nF6Xqw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13614 (0x352e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D61, serialNumber=7E852E249D9C47CB6595E7017D07DE27C394AF09 Validity Not Before: Nov 4 14:21:02 2025 GMT Not After : Nov 11 14:21:02 2025 GMT Subject: CN=690a0bce-ee88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:76:0b:ee:0c:e8:47:b1:b2:f1:81:4b:5e:77: 00:e8:ee:38:80:5c:56:19:c0:61:12:91:91:e0:66: 61:71:31:06:20:d7:cc:19:59:47:4f:bd:89:f8:eb: f3:76:6c:1b:c3:57:86:1a:91:36:d2:9f:f7:f3:48: 2d:53:0c:72:88:4b:2d:29:59:80:52:6f:f3:3b:cd: e2:23:7c:9c:35:d9:18:60:d7:17:0d:0b:b8:e7:c2: 6b:64:9e:ef:5c:cc:df:0d:40:67:bd:85:96:ca:c9: ed:5f:f2:95:c3:19:9e:e9:f1:3c:12:61:5f:18:15: ee:73:70:1c:41:87:50:d0:0f:f6:bb:d0:da:a6:2c: c0:41:18:da:92:9a:8d:52:79:cb:45:19:28:0a:9d: d3:c9:98:a2:8d:1f:5b:ec:fd:b2:15:31:38:1f:5d: 64:57:4a:2b:44:5d:9f:a7:43:19:05:04:c1:a7:df: 0d:91:09:9f:00:14:24:22:e1:5e:1f:12:8a:74:3e: 72:69:b9:4e:48:59:0e:96:b9:49:d1:f9:a2:96:ee: 78:bc:78:b0:95:52:e8:0c:3c:25:57:40:7c:f7:5b: b9:41:e8:96:8b:2f:6f:3f:fe:6c:7e:6b:12:3b:13: 17:08:61:bc:cd:81:96:35:78:d1:96:60:02:ba:77: 2c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:34:46:4D:74:7A:BF:27:93:DF:69:45:F4:7D:BF:AE:53:34:28:35 X509v3 Authority Key Identifier: keyid:7E:85:2E:24:9D:9C:47:CB:65:95:E7:01:7D:07:DE:27:C3:94:AF:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/foUuJJ2cR8tllecBfQfeJ8OUrwk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5D61/0C6A0C9E1D7911E2879E38C508B02CD2/foUuJJ2cR8tllecBfQfeJ8OUrwk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:52:25:54:b5:71:4c:d6:76:65:3b:7c:19:a7:b5:f6:15:84: 59:2a:26:14:69:df:ae:8b:69:a7:07:6f:11:d2:45:0d:19:4a: 96:3a:2e:ef:1f:b8:57:77:09:d7:92:24:d3:e7:61:2c:f8:36: 0c:2a:c8:97:e3:48:e7:e8:8c:ad:56:42:6c:58:a1:65:f2:b5: 15:14:09:14:ca:b6:57:fe:ad:15:c6:fd:f7:4e:be:72:9c:75: 9d:ea:4d:9d:3d:9b:ec:10:90:ca:de:84:23:8c:f2:84:ef:2d: cd:ed:d3:a4:93:0c:58:b1:df:d8:60:57:2b:f4:63:c8:be:23: 6c:27:13:9e:fc:df:74:59:b4:ea:4c:6f:81:8b:e4:33:bd:c9: 55:f7:7b:37:e8:ae:15:c2:2a:6c:62:09:f1:6d:e6:8e:eb:fe: 85:b6:11:5e:75:0f:1e:69:46:c2:39:30:5b:5e:16:2b:85:4d: 66:07:7c:4e:44:27:63:59:e3:ef:27:13:a8:3e:4e:20:0a:92: f2:4e:41:38:0f:75:a1:a1:ed:f2:a8:c5:0a:61:b9:4c:62:fd: ad:42:94:bf:46:e6:ad:c0:a6:4c:b8:cf:bb:18:4c:c8:5c:b6: 26:ee:e0:fe:85:47:a2:c6:28:63:f8:95:9e:ef:41:48:21:03: 77:94:75:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVENjExMTAvBgNVBAUTKDdFODUyRTI0OUQ5QzQ3Q0I2NTk1RTcwMTdEMDdERTI3 QzM5NEFGMDkwHhcNMjUxMTA0MTQyMTAyWhcNMjUxMTExMTQyMTAyWjAYMRYwFAYD VQQDEw02OTBhMGJjZS1lZTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8HYL7gzoR7Gy8YFLXncA6O44gFxWGcBhEpGR4GZhcTEGINfMGVlHT72J+Ovz dmwbw1eGGpE20p/380gtUwxyiEstKVmAUm/zO83iI3ycNdkYYNcXDQu458JrZJ7v XMzfDUBnvYWWysntX/KVwxme6fE8EmFfGBXuc3AcQYdQ0A/2u9DapizAQRjakpqN UnnLRRkoCp3TyZiijR9b7P2yFTE4H11kV0orRF2fp0MZBQTBp98NkQmfABQkIuFe HxKKdD5yablOSFkOlrlJ0fmilu54vHiwlVLoDDwlV0B891u5QeiWiy9vP/5sfmsS OxMXCGG8zYGWNXjRlmACuncs5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCw0Rk10 er8nk99pRfR9v65TNCg1MB8GA1UdIwQYMBaAFH6FLiSdnEfLZZXnAX0H3ifDlK8J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUQ2MS8wQzZBMEM5RTFE NzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4dGxsZWNCZlFmZUo4T1Vy d2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZvVXVKSjJjUjh0bGxlY0JmUWZlSjhPVXJ3ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUQ2MS8wQzZBMEM5RTFENzkxMUUyODc5RTM4QzUwOEIwMkNEMi9mb1V1SkoyY1I4 dGxsZWNCZlFmZUo4T1Vyd2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6UiVUtXFM1nZlO3wZp7X2FYRZKiYUad+ui2mnB28R0kUNGUqWOi7v H7hXdwnXkiTT52Es+DYMKsiX40jn6IytVkJsWKFl8rUVFAkUyrZX/q0Vxv33Tr5y nHWd6k2dPZvsEJDK3oQjjPKE7y3N7dOkkwxYsd/YYFcr9GPIviNsJxOe/N90WbTq TG+Bi+QzvclV93s36K4VwipsYgnxbeaO6/6FthFedQ8eaUbCOTBbXhYrhU1mB3xO RCdjWePvJxOoPk4gCpLyTkE4D3Whoe3yqMUKYblMYv2tQpS/RuatwKZMuM+7GEzI XLYm7uD+hUeixihj+JWe70FIIQN3lHUs -----END CERTIFICATE-----Generated at Wed Nov 5 19:48:03 2025 by rpki-client