$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: MpZUzGNYGvFfAW17cGs+VGVnxb5DmYSejRZs/DxtQSE= Subject key identifier: 20:E2:E6:90:82:55:D1:89:2C:3A:9D:EE:7E:3E:94:58:F5:C6:7E:0F Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 0172 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 016E Signing time: Wed 05 Nov 2025 04:02:39 +0000 Manifest this update: Wed 05 Nov 2025 04:02:38 +0000 Manifest next update: Wed 12 Nov 2025 04:02:38 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: t19fBY9d9KOJ+UUNV0SYs+52sggKCX+zsYMXutVvVmw=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Nov 5 04:02:38 2025 GMT Not After : Nov 12 04:02:38 2025 GMT Subject: CN=690acc5e-abad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fe:9c:80:d7:50:78:70:e8:73:7f:b0:7c:90: 4a:3b:e8:b3:7d:33:7e:19:be:fa:a9:35:35:06:a8: 9e:0c:dd:39:3d:54:74:d9:a3:5f:25:05:45:2f:fe: 39:3d:56:b5:19:7e:e4:00:6a:a6:2e:a8:5c:86:62: 9c:1d:50:a2:27:c9:07:73:3f:a6:20:7a:8b:ca:88: 05:b9:2f:79:52:38:93:ae:e7:16:4b:53:7f:32:78: bb:52:ad:6f:09:62:fb:71:a0:c2:db:67:fe:ae:ed: 2e:67:34:79:c4:f4:5c:1c:45:5c:48:f5:fb:57:29: 20:5d:f3:ed:8c:5b:3d:fb:ba:0a:3d:4d:7a:83:73: bc:55:35:64:40:79:90:dc:9a:c0:1a:8a:f8:19:1f: bc:4a:9a:1a:64:c6:21:a2:d3:b2:99:a2:17:38:62: d4:67:6e:03:f0:fa:6e:16:fb:71:c2:50:52:9d:99: 91:d2:41:72:78:c2:a4:ec:29:f3:d4:04:67:8f:be: 90:f6:c2:63:d3:5b:5b:f5:57:9d:39:87:60:cc:9c: 83:a7:93:2a:c6:14:b2:0c:7e:cb:c8:5e:57:06:bf: df:73:0c:5f:7c:a4:b3:b6:97:96:9b:05:4d:fc:6a: e0:23:35:f3:47:4e:0b:ca:79:af:b7:3c:92:74:c0: e9:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E2:E6:90:82:55:D1:89:2C:3A:9D:EE:7E:3E:94:58:F5:C6:7E:0F X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f7:ff:cd:d2:3f:bd:67:7c:79:65:f8:b7:78:27:05:17:0c: ad:76:50:37:f2:f5:b6:1b:2d:32:ac:74:fc:04:ff:c9:01:e0: bd:6d:ae:64:d2:aa:c2:85:5c:bd:e4:d5:aa:c8:9f:23:17:59: da:23:80:b6:1b:9b:16:24:69:fa:ba:33:72:b9:9d:ba:52:f9: 5f:1d:5e:24:42:44:3d:1e:39:2c:a9:e8:e9:64:c0:52:f9:56: 53:31:15:f9:75:ff:46:4f:e2:e0:6b:82:9f:44:54:55:69:5d: 47:17:27:8e:a0:ad:4c:ed:ea:46:98:c2:39:d2:07:21:13:80: c5:5e:c8:b0:82:bc:e7:74:51:c4:e4:d9:f0:08:10:28:77:8d: 1c:d4:3f:b6:4e:26:00:17:83:ec:92:f2:a0:33:72:c8:df:66: 39:c0:7a:61:53:34:57:e5:c9:c9:fc:53:69:5c:a5:c6:c8:6e: c1:02:e4:62:72:4e:0b:d5:eb:6d:89:bd:12:94:68:19:b5:7f: 30:6f:01:ad:22:bf:71:c9:e0:fb:81:35:80:01:a0:b9:1e:aa: e7:d7:23:1a:25:52:c3:77:be:8f:18:1c:53:96:d2:5d:0e:51: e0:82:58:1b:41:9b:e0:be:ec:4f:f8:a8:95:8e:41:6e:f6:c6: f7:e0:93:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUxMTA1MDQwMjM4WhcNMjUxMTEyMDQwMjM4WjAYMRYwFAYD VQQDEw02OTBhY2M1ZS1hYmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyP6cgNdQeHDoc3+wfJBKO+izfTN+Gb76qTU1BqieDN05PVR02aNfJQVFL/45 PVa1GX7kAGqmLqhchmKcHVCiJ8kHcz+mIHqLyogFuS95UjiTrucWS1N/Mni7Uq1v CWL7caDC22f+ru0uZzR5xPRcHEVcSPX7VykgXfPtjFs9+7oKPU16g3O8VTVkQHmQ 3JrAGor4GR+8SpoaZMYhotOymaIXOGLUZ24D8PpuFvtxwlBSnZmR0kFyeMKk7Cnz 1ARnj76Q9sJj01tb9VedOYdgzJyDp5MqxhSyDH7LyF5XBr/fcwxffKSztpeWmwVN /GrgIzXzR04LynmvtzySdMDpBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCDi5pCC VdGJLDqd7n4+lFj1xn4PMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAO9//N0j+9Z3x5Zfi3eCcFFwytdlA38vW2Gy0yrHT8BP/JAeC9ba5k 0qrChVy95NWqyJ8jF1naI4C2G5sWJGn6ujNyuZ26UvlfHV4kQkQ9HjksqejpZMBS +VZTMRX5df9GT+Lga4KfRFRVaV1HFyeOoK1M7epGmMI50gchE4DFXsiwgrzndFHE 5NnwCBAod40c1D+2TiYAF4PskvKgM3LI32Y5wHphUzRX5cnJ/FNpXKXGyG7BAuRi ck4L1ettib0SlGgZtX8wbwGtIr9xyeD7gTWAAaC5Hqrn1yMaJVLDd76PGBxTltJd DlHgglgbQZvgvuxP+KiVjkFu9sb34JOs -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:24 2025 by rpki-client