$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: bEgFiDkg2MtPhBSnknCxJSIO28WVNxo+6A1JD2BEzZo= Subject key identifier: E6:D5:EC:74:8C:DE:25:D7:8F:A3:CE:97:48:5D:30:16:1E:1C:7E:00 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 010B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 0108 Signing time: Mon 03 Nov 2025 05:00:32 +0000 Manifest this update: Mon 03 Nov 2025 05:00:32 +0000 Manifest next update: Mon 10 Nov 2025 05:00:32 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: tlGKlVAeHsfRX7B3NAnoOElXLZ9vMYuBcxqymq08ZvQ=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 267 (0x10b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Nov 3 05:00:32 2025 GMT Not After : Nov 10 05:00:32 2025 GMT Subject: CN=690836f0-f926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a4:cb:e3:25:ab:5e:91:91:4b:30:17:25:27: 01:be:48:c4:37:ac:03:66:aa:f8:42:91:39:12:b8: a2:89:7f:ba:fe:eb:e4:b6:41:9b:ca:2c:00:50:24: e1:b4:7f:d0:24:bb:bf:2a:94:a0:d6:4b:5d:3e:3e: 14:a8:9f:9e:45:65:56:c5:c8:7a:2d:04:f0:95:f5: c5:b6:39:fe:fb:1d:b9:c7:14:a5:14:f9:bf:ab:de: ef:21:77:8a:26:6a:dd:ef:cd:6f:9b:d0:8d:3a:91: 1f:30:a6:15:f3:73:ed:cc:c2:f6:fd:d0:b7:98:92: c1:56:e3:8b:4e:d0:1c:42:07:74:41:57:30:07:80: d3:4c:12:8b:02:33:bf:71:9c:fe:dd:e8:ad:27:40: 3a:b5:60:98:b1:b5:e7:88:8c:2f:3b:76:06:2a:26: e8:25:04:54:ce:be:d7:76:a4:c0:4a:70:9b:e8:11: e9:19:7d:74:55:ed:21:c0:4e:82:93:44:5b:60:e3: ce:da:ba:28:b6:fb:90:79:87:c0:92:0d:df:30:5e: 32:2c:68:63:0a:f8:aa:05:d5:3d:fd:fb:bc:69:19: 25:f4:c8:c2:19:ec:7f:d5:cc:9f:77:ff:3e:77:e7: ac:b9:28:6e:aa:ba:1c:94:b7:e6:0e:96:67:8c:31: f0:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:D5:EC:74:8C:DE:25:D7:8F:A3:CE:97:48:5D:30:16:1E:1C:7E:00 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:4c:01:f7:c5:81:bc:58:a5:e0:3b:ef:3f:6a:b4:3f:06:0b: cb:aa:92:db:69:0b:51:0e:bb:07:41:cc:fc:73:d0:2b:09:83: 38:77:8e:70:36:3d:5a:eb:4d:5f:4a:35:f5:98:42:9b:78:3d: 92:7f:6a:54:bf:0f:bc:1e:f4:18:4b:bb:6d:b6:e2:a2:51:9e: 1f:14:de:07:ad:b2:80:a5:ff:92:05:b9:47:d2:94:6a:c6:fa: cb:40:59:0d:c7:aa:a0:a7:18:b9:81:bd:52:8e:fa:71:d8:b7: a0:a8:97:a5:97:ba:11:d3:82:d2:8b:43:fa:1f:d9:a4:2b:b7: 72:6d:6f:70:c1:64:5f:e8:98:3f:e2:d2:83:65:f6:02:3e:59: 1c:1a:bc:3f:a5:e8:6f:b3:d5:7b:6d:17:a1:dd:2e:08:1e:2c: 82:61:0a:02:81:51:65:cb:ec:c5:7e:b0:a3:a9:6a:fb:02:91: 65:dc:0d:20:b8:70:d5:c2:c5:c9:a5:8d:77:ac:58:7a:26:7e: be:e3:97:b8:3b:de:94:55:0c:0a:52:0b:a9:a9:15:58:01:d0: be:47:9a:ea:8f:4a:fb:d1:c2:42:cb:e7:10:7c:ad:67:11:1c: dd:83:19:24:03:06:c6:87:62:13:04:2c:e8:1c:bf:33:59:8d: 9a:69:78:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUxMTAzMDUwMDMyWhcNMjUxMTEwMDUwMDMyWjAYMRYwFAYD VQQDEw02OTA4MzZmMC1mOTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmaTL4yWrXpGRSzAXJScBvkjEN6wDZqr4QpE5EriiiX+6/uvktkGbyiwAUCTh tH/QJLu/KpSg1ktdPj4UqJ+eRWVWxch6LQTwlfXFtjn++x25xxSlFPm/q97vIXeK Jmrd781vm9CNOpEfMKYV83PtzML2/dC3mJLBVuOLTtAcQgd0QVcwB4DTTBKLAjO/ cZz+3eitJ0A6tWCYsbXniIwvO3YGKiboJQRUzr7XdqTASnCb6BHpGX10Ve0hwE6C k0RbYOPO2rootvuQeYfAkg3fMF4yLGhjCviqBdU9/fu8aRkl9MjCGex/1cyfd/8+ d+esuShuqroclLfmDpZnjDHwxQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObV7HSM 3iXXj6POl0hdMBYeHH4AMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKTAH3xYG8WKXgO+8/arQ/BgvLqpLbaQtRDrsHQcz8c9ArCYM4d45w Nj1a601fSjX1mEKbeD2Sf2pUvw+8HvQYS7tttuKiUZ4fFN4HrbKApf+SBblH0pRq xvrLQFkNx6qgpxi5gb1Sjvpx2LegqJell7oR04LSi0P6H9mkK7dybW9wwWRf6Jg/ 4tKDZfYCPlkcGrw/pehvs9V7bReh3S4IHiyCYQoCgVFly+zFfrCjqWr7ApFl3A0g uHDVwsXJpY13rFh6Jn6+45e4O96UVQwKUgupqRVYAdC+R5rqj0r70cJCy+cQfK1n ERzdgxkkAwbGh2ITBCzoHL8zWY2aaXjS -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:32 2025 by rpki-client