$ rpki-client -vvf rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft File: PurfFFrim0gkCj-6OvvZSajxU10.mft (raw, json) Hash identifier: e/jZb3da8RadGA4QLWSzCveYHJ1q4ib2iODwTr0gQZg= Subject key identifier: D7:78:94:70:68:CA:74:E3:F5:8F:F3:7D:C4:0A:5C:89:A2:3D:80:FA Authority key identifier: 3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D Certificate issuer: /CN=A91F823E/serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Certificate serial: 0359 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft Manifest number: 0355 Signing time: Wed 05 Nov 2025 01:03:18 +0000 Manifest this update: Wed 05 Nov 2025 01:03:17 +0000 Manifest next update: Wed 12 Nov 2025 01:03:17 +0000 Files and hashes: 1: PurfFFrim0gkCj-6OvvZSajxU10.crl (hash: W26eoWi05twbyZCLcqw0Vm9ATqsvbviX0F9WNkeH55s=) 2: B3481ED4D5B611ECA61EEC28C4F9AE02.roa (hash: 7bYPkVMZrrnunuEV97KsBcLOn5jOLNiIR6VQXBJQwkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:03:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 857 (0x359) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F823E, serialNumber=3EEADF145AE29B48240A3FBA3AFBD949A8F1535D Validity Not Before: Nov 5 01:03:17 2025 GMT Not After : Nov 12 01:03:17 2025 GMT Subject: CN=690aa256-fba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:00:48:58:b6:22:bb:0f:ce:1d:fc:f7:75: 5e:53:14:d8:1a:53:7b:cf:e3:c1:e8:7b:e7:5d:01: cc:34:98:85:c8:ef:67:94:4a:03:2e:80:37:18:e5: ef:60:e1:57:28:74:ac:d1:0e:f0:62:36:c9:70:50: 5d:76:11:73:19:6f:6e:53:78:be:1e:a5:a8:3f:c3: 7d:55:13:1b:c7:48:7e:fc:19:73:ac:10:c5:8b:4d: ff:c4:44:e6:23:52:41:d9:1a:cf:b8:60:c3:ae:8f: ac:3a:4e:ba:b4:35:28:b8:31:58:dc:75:54:49:94: 79:6c:54:e3:4c:69:48:61:f0:56:e6:a4:9a:69:76: d5:e3:22:06:40:fc:00:fb:0f:c2:12:8d:fe:d6:af: 03:65:ba:1d:a1:3e:78:8a:40:ca:c3:10:99:e2:0e: 6b:60:56:15:7b:41:94:eb:06:fd:d1:31:bb:25:1c: 8a:9d:96:b1:4d:a9:c6:98:1f:1e:f9:50:6c:59:b1: 79:9d:74:fb:54:9f:42:a8:40:47:2f:16:a4:8d:7d: c5:e3:3e:12:aa:be:51:e8:6f:3b:a4:7c:cb:34:d8: e8:19:c3:26:e2:c6:99:c6:62:7d:dd:70:3f:e8:2f: 1c:fa:43:f4:97:93:38:66:73:b0:7e:cc:01:0e:1c: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:78:94:70:68:CA:74:E3:F5:8F:F3:7D:C4:0A:5C:89:A2:3D:80:FA X509v3 Authority Key Identifier: keyid:3E:EA:DF:14:5A:E2:9B:48:24:0A:3F:BA:3A:FB:D9:49:A8:F1:53:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PurfFFrim0gkCj-6OvvZSajxU10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F823E/7D69A83CD5B111EC9351E620C4F9AE02/PurfFFrim0gkCj-6OvvZSajxU10.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:0b:80:1b:df:2f:eb:be:7b:83:b2:df:21:9e:65:c4:3e:ce: cf:5c:b6:fa:53:01:e6:ef:af:b1:00:69:47:4d:8e:31:f3:53: 99:04:51:df:42:01:a2:a4:6f:24:66:e6:99:ed:1b:f7:60:ba: 74:21:02:94:cb:ca:49:1b:99:10:2e:0c:ed:ad:65:15:eb:1e: 58:1b:f2:ff:cd:f3:d2:31:0c:de:21:c1:61:5a:35:32:3b:2f: 71:f7:9f:b5:ec:c7:96:39:43:30:90:fc:4a:2c:8b:6f:29:b7: b7:69:47:e0:04:e8:9e:29:8b:96:82:66:82:ed:5c:a9:b5:d3: ae:7a:2d:ec:dd:fc:e0:19:74:98:e8:69:07:d5:01:fc:43:82: b4:dd:27:68:9a:66:8a:d1:08:5b:6a:c0:80:cd:e6:8c:c5:7f: 30:8a:3a:35:a5:1e:0a:12:a0:d9:ff:2a:e3:28:cc:6c:6f:91: 9d:d0:19:3f:86:e5:ce:48:b4:05:59:38:87:ed:09:f2:da:22: fc:e9:5d:65:13:07:60:8b:26:c3:da:9e:c8:ac:34:a9:76:68: 08:e4:9f:ee:61:b8:15:7d:a8:98:c4:a5:d0:e0:04:e7:9f:7c: ed:48:d7:ac:eb:5f:60:84:b1:97:78:0e:57:b1:a4:91:63:a7: e8:7b:56:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA1kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgyM0UxMTAvBgNVBAUTKDNFRUFERjE0NUFFMjlCNDgyNDBBM0ZCQTNBRkJEOTQ5 QThGMTUzNUQwHhcNMjUxMTA1MDEwMzE3WhcNMjUxMTEyMDEwMzE3WjAYMRYwFAYD VQQDEw02OTBhYTI1Ni1mYmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsSEASFi2IrsPzh3893VeUxTYGlN7z+PB6HvnXQHMNJiFyO9nlEoDLoA3GOXv YOFXKHSs0Q7wYjbJcFBddhFzGW9uU3i+HqWoP8N9VRMbx0h+/BlzrBDFi03/xETm I1JB2RrPuGDDro+sOk66tDUouDFY3HVUSZR5bFTjTGlIYfBW5qSaaXbV4yIGQPwA +w/CEo3+1q8DZbodoT54ikDKwxCZ4g5rYFYVe0GU6wb90TG7JRyKnZaxTanGmB8e +VBsWbF5nXT7VJ9CqEBHLxakjX3F4z4Sqr5R6G87pHzLNNjoGcMm4saZxmJ93XA/ 6C8c+kP0l5M4ZnOwfswBDhy8JQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNd4lHBo ynTj9Y/zfcQKXImiPYD6MB8GA1UdIwQYMBaAFD7q3xRa4ptIJAo/ujr72Umo8VNd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODIzRS83RDY5QTgzQ0Q1 QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0wZ2tDai02T3Z2WlNhanhV MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1B1cmZGRnJpbTBna0NqLTZPdnZaU2FqeFUxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODIzRS83RDY5QTgzQ0Q1QjExMUVDOTM1MUU2MjBDNEY5QUUwMi9QdXJmRkZyaW0w Z2tDai02T3Z2WlNhanhVMTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBAC4Ab3y/rvnuDst8hnmXEPs7PXLb6UwHm76+xAGlHTY4x81OZBFHf QgGipG8kZuaZ7Rv3YLp0IQKUy8pJG5kQLgztrWUV6x5YG/L/zfPSMQzeIcFhWjUy Oy9x95+17MeWOUMwkPxKLItvKbe3aUfgBOieKYuWgmaC7VyptdOuei3s3fzgGXSY 6GkH1QH8Q4K03SdommaK0QhbasCAzeaMxX8wijo1pR4KEqDZ/yrjKMxsb5Gd0Bk/ huXOSLQFWTiH7Qny2iL86V1lEwdgiybD2p7IrDSpdmgI5J/uYbgVfaiYxKXQ4ATn n3ztSNes619ghLGXeA5XsaSRY6foe1bh -----END CERTIFICATE-----Generated at Wed Nov 5 05:13:43 2025 by rpki-client