$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft File: 0S_1veXU0upxiMsALH_wFtyZTXI.mft (raw, json) Hash identifier: BA5Q/3NSB1dF74OjTit+AygbehZ5yJvKLKQ72xYhi90= Subject key identifier: A2:11:E1:A7:90:D4:0E:B2:5B:A7:97:D0:19:CE:D9:33:1A:85:00:46 Authority key identifier: D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 Certificate issuer: /CN=A91EA623/serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Certificate serial: 0565 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft Manifest number: 0563 Signing time: Tue 04 Nov 2025 03:09:06 +0000 Manifest this update: Tue 04 Nov 2025 03:09:05 +0000 Manifest next update: Tue 11 Nov 2025 03:09:05 +0000 Files and hashes: 1: 0S_1veXU0upxiMsALH_wFtyZTXI.crl (hash: 47g37LjnUzVv24RD45u/O6LkcMBng8t4Omge5cDixdA=) 2: 9CD333C6B92B11F09402D810C4F9AE02.roa (hash: V3sarL+FrCY0k0yCUIbon3gPbo07HsyruaUuXsvwjyw=) 3: C6212596B5FF11F0A3F6A41AC4F9AE02.roa (hash: dLroQstuUWWHmwVK5ZuVa5vVeBr08ixLMCdD4jTJFpA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 03:09:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1381 (0x565) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA623, serialNumber=D12FF5BDE5D4D2EA7188CB002C7FF016DC994D72 Validity Not Before: Nov 4 03:09:05 2025 GMT Not After : Nov 11 03:09:05 2025 GMT Subject: CN=69096e52-dbc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:d7:88:ff:cc:de:a8:fb:4d:d8:ce:cc:46:a4: 54:f3:33:db:2a:22:8b:de:9b:d2:e6:bb:eb:3a:42: a4:6e:ca:98:27:d0:c4:48:60:7f:6e:1a:7a:fe:2e: 15:b5:25:dd:27:fd:aa:5c:10:35:45:3b:01:d9:02: 83:33:75:7e:71:f6:40:a4:5e:7f:56:87:fb:0f:ed: a8:62:5a:6c:bf:72:27:74:bd:fa:e5:4e:48:d9:4a: 87:10:54:a4:1e:ee:d2:d5:89:82:8b:b1:3c:e7:94: 23:7f:b9:8f:c2:0b:63:6b:a0:c7:d9:e2:20:dc:de: f8:8b:27:80:09:6f:2d:f6:33:7f:4c:25:5d:9a:f3: a1:f5:f2:99:4d:19:ab:d8:80:d8:7a:dc:ca:99:4c: d6:fa:af:44:07:10:89:05:02:3a:33:41:9a:a8:8b: a1:e0:15:6e:c2:b0:a2:c9:f7:94:16:5c:4a:3c:04: d7:46:27:4e:b5:a1:e6:d6:5a:c4:41:68:6c:fa:3e: 66:96:66:4c:25:0a:9b:7e:47:59:cd:25:6e:01:4e: 22:dd:75:80:2a:57:af:01:1a:60:fc:d7:dd:97:c7: 98:12:02:5d:b2:ef:a2:8c:f9:7f:2c:2e:3a:93:fc: f2:6d:38:d9:6d:72:ab:98:b1:92:17:b0:fc:2b:7d: f5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:11:E1:A7:90:D4:0E:B2:5B:A7:97:D0:19:CE:D9:33:1A:85:00:46 X509v3 Authority Key Identifier: keyid:D1:2F:F5:BD:E5:D4:D2:EA:71:88:CB:00:2C:7F:F0:16:DC:99:4D:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0S_1veXU0upxiMsALH_wFtyZTXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA623/D3167F0A060C11ECAF675043C4F9AE02/0S_1veXU0upxiMsALH_wFtyZTXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:2c:f0:59:0c:1f:43:ef:6c:91:ba:c3:70:2d:5e:7f:1d:e7: 32:41:26:c9:6f:4a:d3:e4:b4:b5:9e:f9:44:49:53:3b:38:fa: c2:ff:cf:b1:54:a4:e5:2a:89:d0:1c:f0:14:f2:68:cf:fd:72: d0:fa:7e:21:c2:f0:d7:a4:a7:90:f8:d2:9c:15:8a:f1:1d:6d: 55:45:20:da:39:b3:44:63:b8:96:62:7f:d9:76:1f:f1:ff:c9: e9:be:14:aa:20:25:ad:98:dd:79:e9:df:72:77:5c:92:d0:39: e3:29:58:bb:53:b5:ad:f2:a1:75:35:00:d0:c4:de:9a:36:5b: ba:71:dd:06:18:75:92:e8:c2:d8:2d:0d:23:91:a6:3d:af:b8: 0e:70:1c:db:3b:28:3c:d2:b4:93:a4:5e:af:a8:dd:09:bf:94: cb:e0:03:c3:53:be:9f:74:8a:9d:cd:12:4a:b0:fe:4e:1d:97: 5d:e1:20:ef:2b:d5:c9:fb:8a:0a:2c:af:13:ba:5c:7a:c8:86: 98:83:99:74:ac:1d:23:4c:80:a3:3a:75:4d:cb:5c:59:ab:b0: 8e:a5:90:ae:26:67:91:b0:08:2f:2f:0c:67:6f:5b:bc:df:b0: de:07:7b:91:50:ff:36:d3:9c:c0:fc:c8:81:0f:d4:02:47:5e: 42:b7:32:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE2MjMxMTAvBgNVBAUTKEQxMkZGNUJERTVENEQyRUE3MTg4Q0IwMDJDN0ZGMDE2 REM5OTRENzIwHhcNMjUxMTA0MDMwOTA1WhcNMjUxMTExMDMwOTA1WjAYMRYwFAYD VQQDEw02OTA5NmU1Mi1kYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArdeI/8zeqPtN2M7MRqRU8zPbKiKL3pvS5rvrOkKkbsqYJ9DESGB/bhp6/i4V tSXdJ/2qXBA1RTsB2QKDM3V+cfZApF5/Vof7D+2oYlpsv3IndL365U5I2UqHEFSk Hu7S1YmCi7E855Qjf7mPwgtja6DH2eIg3N74iyeACW8t9jN/TCVdmvOh9fKZTRmr 2IDYetzKmUzW+q9EBxCJBQI6M0GaqIuh4BVuwrCiyfeUFlxKPATXRidOtaHm1lrE QWhs+j5mlmZMJQqbfkdZzSVuAU4i3XWAKlevARpg/Nfdl8eYEgJdsu+ijPl/LC46 k/zybTjZbXKrmLGSF7D8K331pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKIR4aeQ 1A6yW6eX0BnO2TMahQBGMB8GA1UdIwQYMBaAFNEv9b3l1NLqcYjLACx/8BbcmU1y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTYyMy9EMzE2N0YwQTA2 MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1cHhpTXNBTEhfd0Z0eVpU WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBTXzF2ZVhVMHVweGlNc0FMSF93RnR5WlRYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTYyMy9EMzE2N0YwQTA2MEMxMUVDQUY2NzUwNDNDNEY5QUUwMi8wU18xdmVYVTB1 cHhpTXNBTEhfd0Z0eVpUWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdLPBZDB9D72yRusNwLV5/HecyQSbJb0rT5LS1nvlESVM7OPrC/8+x VKTlKonQHPAU8mjP/XLQ+n4hwvDXpKeQ+NKcFYrxHW1VRSDaObNEY7iWYn/Zdh/x /8npvhSqICWtmN156d9yd1yS0DnjKVi7U7Wt8qF1NQDQxN6aNlu6cd0GGHWS6MLY LQ0jkaY9r7gOcBzbOyg80rSTpF6vqN0Jv5TL4APDU76fdIqdzRJKsP5OHZdd4SDv K9XJ+4oKLK8Tulx6yIaYg5l0rB0jTICjOnVNy1xZq7COpZCuJmeRsAgvLwxnb1u8 37DeB3uRUP8205zA/MiBD9QCR15CtzLR -----END CERTIFICATE-----Generated at Wed Nov 5 00:25:12 2025 by rpki-client