$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft File: _KxvqDHo9aKEE0yVqNAg_LyOyfI.mft (raw, json) Hash identifier: ZivnkMSMtmpM/W+TMd2K9c1m73FgTHbWf43g0f8Sw/g= Subject key identifier: 50:A5:09:AF:93:16:32:F7:E8:B3:63:ED:74:19:52:A7:B5:EF:52:99 Authority key identifier: FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 Certificate issuer: /CN=A91EB820/serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Certificate serial: 37 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft Manifest number: 36 Signing time: Mon 03 Nov 2025 07:34:58 +0000 Manifest this update: Mon 03 Nov 2025 07:34:57 +0000 Manifest next update: Mon 10 Nov 2025 07:34:57 +0000 Files and hashes: 1: _KxvqDHo9aKEE0yVqNAg_LyOyfI.crl (hash: HGUarjkwUMdhPlznY33b5UtgMdaENSjUqRbnIZYFU2Q=) 2: D918B46C684211F0BE03503CC4F9AE02.roa (hash: IhK2cshQpEX+npxu/NN0aCUzUVi2L+34EqYhm+54jyI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB820, serialNumber=FCAC6FA831E8F5A284134C95A8D020FCBC8EC9F2 Validity Not Before: Nov 3 07:34:57 2025 GMT Not After : Nov 10 07:34:57 2025 GMT Subject: CN=69085b22-8a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:da:1d:7a:b8:a1:62:ff:33:bc:29:c1:06:83: c0:71:2e:67:35:13:68:96:44:a4:8b:e9:07:85:53: 47:7b:3a:3b:2f:0e:97:ce:c4:45:d4:61:fa:61:e7: 6a:87:45:9f:a7:da:49:76:58:dd:c8:50:87:7e:25: 47:57:83:cc:7d:d1:cc:da:9a:b5:89:7e:84:a8:80: 29:bb:ca:72:76:cb:19:6b:d5:fe:73:1d:b1:1a:8a: 62:3c:8d:a7:b4:7c:62:52:76:1a:10:8c:54:92:ad: a1:75:88:92:41:1f:8b:60:30:ba:8a:43:23:11:1b: 13:57:64:66:cf:63:6a:39:90:bb:8d:61:e6:70:ff: 8c:0c:56:c4:55:15:8b:59:8d:58:49:d2:ba:4b:c7: 65:b9:e0:f8:5e:b4:b6:b1:ea:12:dd:0d:78:29:e9: 7d:1e:e1:07:1e:23:99:bd:3d:cc:bc:f8:78:78:e7: fc:36:e5:12:61:1f:c5:73:a1:92:d2:d1:29:f6:e7: 54:04:59:6c:36:27:8f:2d:65:5d:8e:75:a2:20:e6: 7b:ce:1d:13:f4:fe:4c:f1:92:b6:26:de:22:bd:cd: e3:b7:0f:18:64:ff:ba:f7:7b:43:9d:1d:6d:a3:85: db:00:c8:11:54:10:b2:e9:ad:e6:23:02:33:6d:9a: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A5:09:AF:93:16:32:F7:E8:B3:63:ED:74:19:52:A7:B5:EF:52:99 X509v3 Authority Key Identifier: keyid:FC:AC:6F:A8:31:E8:F5:A2:84:13:4C:95:A8:D0:20:FC:BC:8E:C9:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_KxvqDHo9aKEE0yVqNAg_LyOyfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB820/90A8B08A684011F0A940476BC4F9AE02/_KxvqDHo9aKEE0yVqNAg_LyOyfI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:17:69:3c:76:69:7b:7b:45:6d:d0:35:15:4c:bd:57:0f:c2: db:5b:ab:fa:41:5f:6b:ee:de:05:79:1a:49:56:49:2d:65:c3: 29:0b:35:a3:2b:b6:5b:42:de:e9:38:8f:87:33:c3:2e:d5:e5: 47:3d:e8:8c:df:18:aa:9f:53:ac:42:68:db:7d:55:63:0f:30: be:11:da:d3:d3:cb:e7:4d:69:72:92:12:90:fc:bc:78:90:8e: 52:f5:e8:e8:94:84:2a:2a:2a:97:b3:51:d3:f0:22:b9:bc:a3: b4:e1:2b:aa:4d:2d:6f:9f:44:6c:09:79:b6:c7:94:42:45:7d: ff:d1:1c:39:25:1c:6e:43:8a:3c:08:7a:4e:f5:ff:85:86:3b: af:85:b4:6e:3c:66:6e:be:4e:79:ef:ca:83:c3:c3:40:4d:79: 3e:5c:90:eb:7d:28:52:0b:ac:94:99:25:76:96:9f:0c:8a:57: a4:2a:0d:39:61:e0:f7:4b:c2:97:30:4e:e6:36:ad:37:94:84: 42:4d:81:bc:dd:e0:24:30:e8:48:21:5e:4c:a9:f6:e1:21:ba: 56:84:90:86:e0:3a:44:81:a5:57:77:14:ee:fe:92:b6:4c:a6: 12:77:b2:6a:5e:2a:a2:28:ed:11:40:1d:b4:0e:de:5a:4c:e4: a6:3e:70:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QjgyMDExMC8GA1UEBRMoRkNBQzZGQTgzMUU4RjVBMjg0MTM0Qzk1QThEMDIwRkNC QzhFQzlGMjAeFw0yNTExMDMwNzM0NTdaFw0yNTExMTAwNzM0NTdaMBgxFjAUBgNV BAMTDTY5MDg1YjIyLThhNjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC42h16uKFi/zO8KcEGg8BxLmc1E2iWRKSL6QeFU0d7OjsvDpfOxEXUYfph52qH RZ+n2kl2WN3IUId+JUdXg8x90czamrWJfoSogCm7ynJ2yxlr1f5zHbEaimI8jae0 fGJSdhoQjFSSraF1iJJBH4tgMLqKQyMRGxNXZGbPY2o5kLuNYeZw/4wMVsRVFYtZ jVhJ0rpLx2W54PhetLax6hLdDXgp6X0e4QceI5m9Pcy8+Hh45/w25RJhH8VzoZLS 0Sn251QEWWw2J48tZV2OdaIg5nvOHRP0/kzxkrYm3iK9zeO3Dxhk/7r3e0OdHW2j hdsAyBFUELLpreYjAjNtmhLTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUKUJr5MW Mvfos2PtdBlSp7XvUpkwHwYDVR0jBBgwFoAU/KxvqDHo9aKEE0yVqNAg/LyOyfIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCODIwLzkwQThCMDhBNjg0 MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFLRUUweVZxTkFnX0x5T3lm SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX0t4dnFESG85YUtFRTB5VnFOQWdfTHlPeWZJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC ODIwLzkwQThCMDhBNjg0MDExRjBBOTQwNDc2QkM0RjlBRTAyL19LeHZxREhvOWFL RUUweVZxTkFnX0x5T3lmSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAK4XaTx2aXt7RW3QNRVMvVcPwttbq/pBX2vu3gV5GklWSS1lwykLNaMr tltC3uk4j4czwy7V5Uc96IzfGKqfU6xCaNt9VWMPML4R2tPTy+dNaXKSEpD8vHiQ jlL16OiUhCoqKpezUdPwIrm8o7ThK6pNLW+fRGwJebbHlEJFff/RHDklHG5DijwI ek71/4WGO6+FtG48Zm6+TnnvyoPDw0BNeT5ckOt9KFILrJSZJXaWnwyKV6QqDTlh 4PdLwpcwTuY2rTeUhEJNgbzd4CQw6EghXkyp9uEhulaEkIbgOkSBpVd3FO7+krZM phJ3smpeKqIo7RFAHbQO3lpM5KY+cDc= -----END CERTIFICATE-----Generated at Wed Nov 5 09:18:48 2025 by rpki-client