$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: CGHzvXzjOJsYyX155d65fJKXzPbwGAdt1JGT6O6JBQY= Subject key identifier: 49:11:0E:5F:2E:B3:07:A4:85:71:3A:DD:04:A7:42:A7:DA:0F:47:08 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 1206 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11EC Signing time: Tue 04 Nov 2025 17:15:54 +0000 Manifest this update: Tue 04 Nov 2025 17:15:53 +0000 Manifest next update: Tue 11 Nov 2025 17:15:53 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: grWYukmq3eIfTIugjJEQ2tif3KZr5dAgRDDEB6dvt5c=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:15:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4614 (0x1206) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Nov 4 17:15:53 2025 GMT Not After : Nov 11 17:15:53 2025 GMT Subject: CN=690a34ca-95aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:a4:bc:83:a7:b2:7a:f9:aa:9c:67:c8:f8: ba:2e:4f:3d:b8:f9:fd:c2:e6:b9:5e:93:14:0e:62: cf:3b:37:b6:85:2c:3d:aa:be:6f:d6:70:23:e5:eb: d3:cd:ba:87:5c:e7:ec:60:fe:f7:56:54:3f:cd:0e: f0:cb:a3:81:03:c8:9f:f4:f4:85:31:3f:cd:9d:02: 6e:4f:75:67:fe:39:b9:73:e8:e0:42:3b:21:68:5c: df:d7:64:86:ad:70:22:a1:38:e4:65:1a:42:8c:8c: 47:a5:64:03:11:07:be:dc:09:b8:de:4e:46:ee:01: 91:e1:a7:3d:fc:ea:fe:96:87:36:f3:d1:34:38:c4: 07:ed:0f:17:22:bc:1a:62:18:fe:f3:db:e7:5d:e1: f0:98:de:3a:24:21:35:29:9a:88:f5:12:5c:d0:89: fb:fc:0d:61:a4:bf:be:cb:76:d1:de:2a:d5:43:a2: 9b:37:6f:91:b2:5c:22:75:01:08:63:51:18:10:59: 0f:32:fe:19:e2:de:ea:ae:54:f5:a5:92:aa:8b:35: ed:87:0a:66:c1:2f:4f:1c:7c:56:e5:f8:62:27:3f: 68:29:81:c8:2f:85:88:70:da:be:45:3c:ea:6d:df: a9:b7:5f:5b:73:ed:b6:ae:89:e1:47:00:b3:20:9a: fa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:11:0E:5F:2E:B3:07:A4:85:71:3A:DD:04:A7:42:A7:DA:0F:47:08 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ce:f4:dd:63:53:f4:55:c3:d5:1a:a8:ee:b6:8f:27:63:82: 01:e8:28:f9:71:f8:f8:b0:35:3a:5d:63:40:04:f0:1a:30:80: 3d:59:e6:94:57:d1:f3:e0:d7:b2:b2:72:70:21:c0:a1:3f:33: db:b0:cb:c2:a1:fb:2f:bd:da:a4:fb:cd:25:85:ae:f1:46:b1: 14:be:e3:3e:7a:93:02:56:a5:97:d3:ad:14:ec:1d:90:b9:bf: 93:dc:0f:5b:17:2a:b5:d7:be:57:71:81:c2:79:18:da:30:fb: b5:e6:6e:0e:6a:6d:1f:60:fc:b2:d2:08:df:5a:8e:5a:f6:58: fa:d1:f0:81:d5:bd:e7:5a:6f:c5:fb:46:b2:bc:65:37:d4:3c: 74:62:14:e1:39:77:51:e1:c1:22:d0:e0:4b:cf:df:25:66:6d: ce:74:30:bc:ec:2b:8a:97:9b:88:68:47:6d:19:32:f7:af:55: fe:d3:cd:b9:a2:9e:b8:a1:f7:3a:59:1e:7e:8a:f4:45:ae:93: 18:b0:40:d0:2b:5e:26:5e:29:d4:77:71:da:d1:ac:44:63:b9: 8c:4e:40:93:94:9d:3a:e3:9a:5f:4e:68:a3:b3:37:40:1b:c2: 09:5e:4b:4e:e0:b4:e9:1a:3c:e2:73:14:80:88:c8:ce:64:2d: 28:19:5f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUxMTA0MTcxNTUzWhcNMjUxMTExMTcxNTUzWjAYMRYwFAYD VQQDEw02OTBhMzRjYS05NWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7ykvIOnsnr5qpxnyPi6Lk89uPn9wua5XpMUDmLPOze2hSw9qr5v1nAj5evT zbqHXOfsYP73VlQ/zQ7wy6OBA8if9PSFMT/NnQJuT3Vn/jm5c+jgQjshaFzf12SG rXAioTjkZRpCjIxHpWQDEQe+3Am43k5G7gGR4ac9/Or+loc289E0OMQH7Q8XIrwa Yhj+89vnXeHwmN46JCE1KZqI9RJc0In7/A1hpL++y3bR3irVQ6KbN2+RslwidQEI Y1EYEFkPMv4Z4t7qrlT1pZKqizXthwpmwS9PHHxW5fhiJz9oKYHIL4WIcNq+RTzq bd+pt19bc+22ronhRwCzIJr6LwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEkRDl8u swekhXE63QSnQqfaD0cIMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7zvTdY1P0VcPVGqjuto8nY4IB6Cj5cfj4sDU6XWNABPAaMIA9WeaU V9Hz4NeysnJwIcChPzPbsMvCofsvvdqk+80lha7xRrEUvuM+epMCVqWX060U7B2Q ub+T3A9bFyq1175XcYHCeRjaMPu15m4Oam0fYPyy0gjfWo5a9lj60fCB1b3nWm/F +0ayvGU31Dx0YhThOXdR4cEi0OBLz98lZm3OdDC87CuKl5uIaEdtGTL3r1X+0825 op64ofc6WR5+ivRFrpMYsEDQK14mXinUd3Ha0axEY7mMTkCTlJ0645pfTmijszdA G8IJXktO4LTpGjzicxSAiMjOZC0oGV9U -----END CERTIFICATE-----Generated at Wed Nov 5 19:49:16 2025 by rpki-client