$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft File: rea1d9VLWrCQBc5hO7E2SGUuams.mft (raw, json) Hash identifier: l/H/q5GMeIQ4lmE05KN3PojDGuoOpmQPp5Ig4VJDh8Y= Subject key identifier: 73:49:87:68:B3:79:A6:31:19:2C:5C:D1:A4:13:89:C6:A7:99:A4:3A Authority key identifier: AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B Certificate issuer: /CN=A91F4553/serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Certificate serial: 05A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft Manifest number: 05A4 Signing time: Sun 02 Nov 2025 23:08:36 +0000 Manifest this update: Sun 02 Nov 2025 23:08:35 +0000 Manifest next update: Sun 09 Nov 2025 23:08:35 +0000 Files and hashes: 1: rea1d9VLWrCQBc5hO7E2SGUuams.crl (hash: JoGsFg8XXvlPnG7b4PJO/goxt8/3L6tANq4hCm/CWgQ=) 2: A1491F7CEB7811EB9134133BC4F9AE02.roa (hash: C9U0iPB8A/9VqWcnQG5AxuP08um0L5X8KsDf++uFfPM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1449 (0x5a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4553, serialNumber=ADE6B577D54B5AB09005CE613BB13648652E6A6B Validity Not Before: Nov 2 23:08:35 2025 GMT Not After : Nov 9 23:08:35 2025 GMT Subject: CN=6907e473-41b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:2f:f8:67:22:34:d9:a0:16:38:79:16:48:71: f3:4a:2c:f7:90:c4:73:38:67:8a:ac:d7:66:1d:1d: 2c:5c:c5:da:c2:f8:ab:fe:81:63:9a:39:55:68:0c: 2c:dc:f5:44:64:0a:2b:97:d9:ed:8e:24:5c:13:78: 8e:2c:63:73:5b:1c:60:00:64:f4:45:c8:f7:6e:a1: fc:91:4d:d0:35:78:bc:6b:87:95:9f:20:85:99:b4: 81:93:eb:fd:87:c3:b3:5f:b6:d5:43:50:73:a6:36: 78:2d:07:a5:8e:93:6a:b5:13:40:99:b4:6e:76:50: 80:d2:c1:76:6b:96:9e:ac:1f:28:01:7e:63:fd:eb: ea:7d:4c:2a:3f:43:49:bf:51:57:4b:e3:7d:2e:04: 30:21:4a:cf:86:ae:ad:0e:3c:0f:be:9e:d9:92:46: 56:7f:15:31:02:d1:06:65:d1:c3:eb:c8:30:6b:2e: 06:4c:47:8b:4f:4d:c0:6e:31:82:b7:39:5f:03:da: 35:c6:c6:8f:8f:a1:6d:a9:29:bb:c1:a0:c4:9a:16: 89:00:60:2c:f2:94:99:61:3c:4d:a2:df:c0:5d:38: da:5a:b0:61:b0:6b:4d:28:11:1f:c2:e6:f4:5d:31: a5:81:4c:3b:4a:1c:e0:84:51:09:be:cd:87:0c:89: 22:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:49:87:68:B3:79:A6:31:19:2C:5C:D1:A4:13:89:C6:A7:99:A4:3A X509v3 Authority Key Identifier: keyid:AD:E6:B5:77:D5:4B:5A:B0:90:05:CE:61:3B:B1:36:48:65:2E:6A:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rea1d9VLWrCQBc5hO7E2SGUuams.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4553/4D23BB0EEB7411EBAFB47631C4F9AE02/rea1d9VLWrCQBc5hO7E2SGUuams.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:1a:bf:91:ca:57:53:6c:f5:af:b3:6f:2f:2a:28:06:34:37: 0d:ea:84:ec:9b:00:28:ae:e5:00:98:4c:50:fc:35:e0:60:04: 20:97:b6:7a:d0:91:48:25:ea:7a:2b:47:50:1d:42:84:1b:40: a1:0b:fc:cd:d5:0c:64:da:bd:6b:d5:d6:ef:ca:bf:79:a8:b0: fe:00:bc:7d:1c:0e:bc:cb:7b:34:60:f1:b4:c2:87:82:8f:e6: 95:78:8d:76:79:2a:4f:1d:c2:63:4c:0a:11:06:f9:da:84:14: 86:f1:36:3e:5f:15:51:50:26:78:5e:8e:8a:b4:0d:c0:da:75: 7f:fd:ad:23:16:d4:3c:18:ed:04:a8:26:d7:99:9b:c4:8f:ae: 72:c1:6c:81:c7:b1:e1:98:97:7b:32:bd:b3:14:78:2f:fc:55: b3:82:a9:bd:fb:51:36:7f:1d:9f:d8:cf:d9:b0:48:e9:d4:3c: 13:92:1f:9c:92:56:10:5e:35:7b:09:02:4f:e6:1f:d3:02:7e: c4:b9:ee:db:d0:ad:55:23:80:62:b1:9a:e9:e1:a0:f9:d4:2a: f8:ab:b2:40:a8:58:f1:8a:63:c3:16:30:44:9f:5d:ef:71:61: ae:dc:64:f9:82:2c:ec:57:7e:58:f3:b9:6f:d4:d1:78:2a:7d: 66:5e:fb:70 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQ1NTMxMTAvBgNVBAUTKEFERTZCNTc3RDU0QjVBQjA5MDA1Q0U2MTNCQjEzNjQ4 NjUyRTZBNkIwHhcNMjUxMTAyMjMwODM1WhcNMjUxMTA5MjMwODM1WjAYMRYwFAYD VQQDEw02OTA3ZTQ3My00MWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoC/4ZyI02aAWOHkWSHHzSiz3kMRzOGeKrNdmHR0sXMXawvir/oFjmjlVaAws 3PVEZAorl9ntjiRcE3iOLGNzWxxgAGT0Rcj3bqH8kU3QNXi8a4eVnyCFmbSBk+v9 h8OzX7bVQ1BzpjZ4LQeljpNqtRNAmbRudlCA0sF2a5aerB8oAX5j/evqfUwqP0NJ v1FXS+N9LgQwIUrPhq6tDjwPvp7ZkkZWfxUxAtEGZdHD68gway4GTEeLT03AbjGC tzlfA9o1xsaPj6FtqSm7waDEmhaJAGAs8pSZYTxNot/AXTjaWrBhsGtNKBEfwub0 XTGlgUw7ShzghFEJvs2HDIkiVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHNJh2iz eaYxGSxc0aQTicanmaQ6MB8GA1UdIwQYMBaAFK3mtXfVS1qwkAXOYTuxNkhlLmpr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDU1My80RDIzQkIwRUVC NzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdyQ1FCYzVoTzdFMlNHVXVh bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlYTFkOVZMV3JDUUJjNWhPN0UyU0dVdWFtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDU1My80RDIzQkIwRUVCNzQxMUVCQUZCNDc2MzFDNEY5QUUwMi9yZWExZDlWTFdy Q1FCYzVoTzdFMlNHVXVhbXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5Gr+RyldTbPWvs28vKigGNDcN6oTsmwAoruUAmExQ/DXgYAQgl7Z6 0JFIJep6K0dQHUKEG0ChC/zN1Qxk2r1r1dbvyr95qLD+ALx9HA68y3s0YPG0woeC j+aVeI12eSpPHcJjTAoRBvnahBSG8TY+XxVRUCZ4Xo6KtA3A2nV//a0jFtQ8GO0E qCbXmZvEj65ywWyBx7HhmJd7Mr2zFHgv/FWzgqm9+1E2fx2f2M/ZsEjp1DwTkh+c klYQXjV7CQJP5h/TAn7Eue7b0K1VI4BisZrp4aD51Cr4q7JAqFjximPDFjBEn13v cWGu3GT5gizsV35Y87lv1NF4Kn1mXvtw -----END CERTIFICATE-----Generated at Tue Nov 4 15:55:46 2025 by rpki-client