$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft File: rLcCUesVt11CKaohMePZqHwpRcA.mft (raw, json) Hash identifier: Pk+PXqjJckcRzA0NPr5qy3cGgkCz9qSmT9MmLzflCnw= Subject key identifier: 64:4A:6F:F8:3A:F2:77:87:09:5B:F1:A0:52:83:3A:D6:86:86:34:DC Authority key identifier: AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 Certificate issuer: /CN=A91EFC94/serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Certificate serial: C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft Manifest number: BF Signing time: Mon 03 Nov 2025 05:55:21 +0000 Manifest this update: Mon 03 Nov 2025 05:55:20 +0000 Manifest next update: Mon 10 Nov 2025 05:55:20 +0000 Files and hashes: 1: rLcCUesVt11CKaohMePZqHwpRcA.crl (hash: xs6VHxaEXHxwXuqL2XQUsyi8YS1bS2W1Ibr5euPKj70=) 2: 9ABFC32C94F811EF92676015C4F9AE02.roa (hash: gWk0VsOcbG73/lmCIcmaJtgvf1O8GLTJ+JuzqZmFgTQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:55:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFC94, serialNumber=ACB70251EB15B75D4229AA2131E3D9A87C2945C0 Validity Not Before: Nov 3 05:55:20 2025 GMT Not After : Nov 10 05:55:20 2025 GMT Subject: CN=690843c8-3890 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:92:95:66:49:9d:9a:5b:38:06:26:9e:b8:fc: 2f:55:dd:00:20:3a:54:43:fd:39:04:20:d8:18:e3: 09:66:78:8f:52:b2:df:90:f9:29:85:30:56:11:6e: 9b:81:07:ae:89:bf:26:5f:63:ee:27:49:a9:b7:bd: ad:29:ae:62:31:87:bc:6f:f1:6b:d3:1e:65:65:fd: ff:03:25:99:b1:0c:4b:cf:16:56:5c:e1:56:8c:14: 2b:1b:bc:64:24:ea:86:d1:55:bf:03:2a:8f:ee:f9: da:e0:b9:15:22:6c:2b:4e:52:31:21:ea:3b:a7:69: 25:ce:ec:35:06:2b:79:86:93:b9:ff:c1:d3:04:ec: c0:15:16:9e:1f:c4:5a:d7:57:cd:ed:a2:fe:8b:17: e7:36:76:ab:8d:cc:ef:59:cd:1e:d1:85:69:47:dc: 40:b4:4b:16:0b:56:13:49:54:5e:24:01:60:04:4c: 9b:e1:38:99:18:ec:f4:5c:fa:83:55:9a:23:2a:61: 7d:fa:f5:6d:e2:e6:e1:63:8e:2c:4b:98:1d:de:b0: 11:75:db:54:d9:91:a1:b2:63:72:f4:56:13:fb:b0: fa:ac:af:29:3a:87:00:35:85:77:03:fe:69:5e:ad: 3a:7b:78:1e:01:b6:4f:07:6c:ca:90:d8:a7:3c:9b: f7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:4A:6F:F8:3A:F2:77:87:09:5B:F1:A0:52:83:3A:D6:86:86:34:DC X509v3 Authority Key Identifier: keyid:AC:B7:02:51:EB:15:B7:5D:42:29:AA:21:31:E3:D9:A8:7C:29:45:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rLcCUesVt11CKaohMePZqHwpRcA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFC94/B1449C4E94DA11EF89086D21C4F9AE02/rLcCUesVt11CKaohMePZqHwpRcA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:11:92:c9:c5:00:43:69:90:ad:c9:35:ff:ad:2a:f4:27:ae: 9f:01:6a:00:32:b1:b9:15:9b:8f:2e:58:c0:46:ac:d5:89:80: bf:ac:d4:fe:70:17:8e:b0:ed:f2:c7:f0:a8:2f:ff:71:d1:54: de:48:23:e4:ce:6a:a6:1b:58:81:a3:cd:38:0f:49:01:6f:35: 40:b3:3e:f3:5e:fc:5f:8e:bc:04:0d:c2:f7:d0:07:e3:17:4d: 2f:4a:42:91:53:44:fc:b3:94:67:bd:2f:af:ef:43:8f:ec:1e: a5:08:ba:82:9a:1a:87:13:2b:76:56:54:cd:aa:51:5f:e1:c2: 2d:21:55:3e:31:3d:5f:fa:92:4e:b6:c5:57:78:d2:7e:58:24: e3:7e:1a:66:01:97:ac:82:9a:df:d4:62:a7:1f:09:ff:20:80: 79:37:a2:f3:3f:c9:72:9a:32:75:a2:90:73:d3:8b:4d:f1:2c: 95:8e:49:a6:fc:27:23:d3:f7:e6:79:e3:e1:1d:0b:60:70:83: c3:d8:05:19:e2:79:95:89:b2:c6:4c:f6:af:c2:1b:c0:77:79: 2c:53:cd:a6:be:07:68:c2:9b:cf:10:59:7d:c9:e2:d7:ac:47: b1:d2:aa:de:3d:ec:b5:87:08:15:ba:34:63:07:21:1b:85:3b: ad:1a:c9:a2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDOTQxMTAvBgNVBAUTKEFDQjcwMjUxRUIxNUI3NUQ0MjI5QUEyMTMxRTNEOUE4 N0MyOTQ1QzAwHhcNMjUxMTAzMDU1NTIwWhcNMjUxMTEwMDU1NTIwWjAYMRYwFAYD VQQDEw02OTA4NDNjOC0zODkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5KVZkmdmls4BiaeuPwvVd0AIDpUQ/05BCDYGOMJZniPUrLfkPkphTBWEW6b gQeuib8mX2PuJ0mpt72tKa5iMYe8b/Fr0x5lZf3/AyWZsQxLzxZWXOFWjBQrG7xk JOqG0VW/AyqP7vna4LkVImwrTlIxIeo7p2klzuw1Bit5hpO5/8HTBOzAFRaeH8Ra 11fN7aL+ixfnNnarjczvWc0e0YVpR9xAtEsWC1YTSVReJAFgBEyb4TiZGOz0XPqD VZojKmF9+vVt4ubhY44sS5gd3rARddtU2ZGhsmNy9FYT+7D6rK8pOocANYV3A/5p Xq06e3geAbZPB2zKkNinPJv3WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGRKb/g6 8neHCVvxoFKDOtaGhjTcMB8GA1UdIwQYMBaAFKy3AlHrFbddQimqITHj2ah8KUXA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkM5NC9CMTQ0OUM0RTk0 REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQxMUNLYW9oTWVQWnFId3BS Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JMY0NVZXNWdDExQ0thb2hNZVBacUh3cFJjQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkM5NC9CMTQ0OUM0RTk0REExMUVGODkwODZEMjFDNEY5QUUwMi9yTGNDVWVzVnQx MUNLYW9oTWVQWnFId3BSY0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmEZLJxQBDaZCtyTX/rSr0J66fAWoAMrG5FZuPLljARqzViYC/rNT+ cBeOsO3yx/CoL/9x0VTeSCPkzmqmG1iBo804D0kBbzVAsz7zXvxfjrwEDcL30Afj F00vSkKRU0T8s5RnvS+v70OP7B6lCLqCmhqHEyt2VlTNqlFf4cItIVU+MT1f+pJO tsVXeNJ+WCTjfhpmAZesgprf1GKnHwn/IIB5N6LzP8lymjJ1opBz04tN8SyVjkmm /Ccj0/fmeePhHQtgcIPD2AUZ4nmVibLGTPavwhvAd3ksU82mvgdowpvPEFl9yeLX rEex0qrePey1hwgVujRjByEbhTutGsmi -----END CERTIFICATE-----Generated at Tue Nov 4 08:19:59 2025 by rpki-client