$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft File: CHspwfvXREICrgAqSXEn_WbyStk.mft (raw, json) Hash identifier: PfMcN38elHC/qqcK3zJwX5UwJZq3FedDVF/rdZ9Qp5s= Subject key identifier: EF:4B:F8:CC:9B:D4:FD:CF:51:D9:75:22:84:9B:32:45:59:F4:20:E7 Authority key identifier: 08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 Certificate issuer: /CN=A91FAED9/serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Certificate serial: 04CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft Manifest number: 04C5 Signing time: Tue 04 Nov 2025 23:56:17 +0000 Manifest this update: Tue 04 Nov 2025 23:56:16 +0000 Manifest next update: Tue 11 Nov 2025 23:56:16 +0000 Files and hashes: 1: CHspwfvXREICrgAqSXEn_WbyStk.crl (hash: iC/tz4wMIO9ahCg8sNGDmlUtb/BgfIy6xKUWULSsJ+k=) 2: D3C965FA45F611EC9FB3BB49C4F9AE02.roa (hash: TOciMmg+YXh13dYfOrB14chWnhLKZ+JRHOQLiS8Jf5Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1226 (0x4ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAED9, serialNumber=087B29C1FBD7444202AE002A497127FD66F24AD9 Validity Not Before: Nov 4 23:56:16 2025 GMT Not After : Nov 11 23:56:16 2025 GMT Subject: CN=690a92a1-b119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:de:ac:5a:e7:37:e2:5e:72:10:7e:ed:ae:d8: 7a:78:18:97:99:89:89:20:94:5b:71:08:b3:57:bd: f5:53:93:ce:99:e6:6f:f1:82:37:60:ba:b6:a5:68: 32:d5:73:81:00:78:f3:dc:e4:85:42:6e:63:b9:81: 12:7b:29:24:7c:82:05:62:87:a0:be:07:2b:ba:1b: b9:15:b4:88:84:94:f4:15:5b:0d:20:e2:00:86:50: ea:fb:eb:2a:d2:23:56:a6:c1:a2:f6:a0:37:35:5b: 17:0e:bf:ce:ec:5d:a9:57:83:b5:ef:71:1c:18:33: 7c:7e:67:10:82:8d:01:aa:ad:85:62:0b:06:86:64: 16:71:09:16:a1:ee:8e:79:35:85:34:a0:1e:4f:32: 9b:1f:a2:aa:8a:b4:66:16:21:97:7e:76:db:e0:98: 84:7d:8e:14:77:55:54:e2:9a:57:2d:bd:ed:81:fc: 32:d1:dd:82:9f:51:e0:83:91:f6:3c:e9:94:17:e7: b6:fb:25:85:61:fc:58:54:60:d7:29:e1:5e:a7:e6: 7f:a2:5b:7c:75:08:af:53:77:2a:c9:50:43:75:0d: 9f:ac:ba:4e:41:a7:42:44:4f:e8:89:3f:c0:85:7a: 90:d3:c8:c4:15:20:a6:87:b3:64:cd:86:89:e8:4f: a9:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4B:F8:CC:9B:D4:FD:CF:51:D9:75:22:84:9B:32:45:59:F4:20:E7 X509v3 Authority Key Identifier: keyid:08:7B:29:C1:FB:D7:44:42:02:AE:00:2A:49:71:27:FD:66:F2:4A:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CHspwfvXREICrgAqSXEn_WbyStk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAED9/6A765AAA45DC11ECA8A3146DC4F9AE02/CHspwfvXREICrgAqSXEn_WbyStk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:3b:90:7e:af:b7:19:d6:27:6a:f9:47:78:fa:de:d1:b7:0c: 42:89:a5:ea:f4:02:12:14:67:db:6b:f2:c4:0c:21:7d:43:7b: a6:92:48:16:9a:ce:af:2c:7e:9b:d9:c5:c8:01:82:47:d2:11: 4f:31:7f:a7:0a:f5:7c:0a:81:77:e9:17:b1:39:bd:e1:46:05: bb:92:b4:96:45:8a:bc:7b:af:a9:48:74:df:a0:62:27:f9:bd: 02:82:1d:8a:ef:8a:f9:a0:0b:98:c2:1e:ce:75:f8:7c:1b:12: 9b:b1:15:8f:21:a7:ef:29:9b:c3:f8:fa:53:71:da:bc:22:80: c8:0b:e0:c5:d3:a9:15:19:4b:68:9a:2a:62:3f:7f:0b:aa:f7: 2c:88:9e:46:49:28:bd:50:4d:10:b8:66:7d:1d:ef:19:f4:bd: 34:1b:4c:08:3b:26:94:fc:b9:c4:20:14:c1:fd:51:ee:9f:27: c8:ed:8c:1e:ac:28:6c:9a:94:6f:1a:6b:71:60:1f:72:b7:f1: d1:df:d9:a3:af:15:86:6d:52:e5:d3:25:84:b6:68:7b:03:84: aa:c0:8e:a1:51:6c:62:23:f1:c4:8d:2a:6c:f9:fd:88:4f:4a: 12:53:7c:15:b9:ff:70:9f:dc:f6:fa:7b:8f:9b:b1:e3:f4:7c: 0d:ad:d6:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFFRDkxMTAvBgNVBAUTKDA4N0IyOUMxRkJENzQ0NDIwMkFFMDAyQTQ5NzEyN0ZE NjZGMjRBRDkwHhcNMjUxMTA0MjM1NjE2WhcNMjUxMTExMjM1NjE2WjAYMRYwFAYD VQQDEw02OTBhOTJhMS1iMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkd6sWuc34l5yEH7trth6eBiXmYmJIJRbcQizV731U5POmeZv8YI3YLq2pWgy 1XOBAHjz3OSFQm5juYESeykkfIIFYoegvgcruhu5FbSIhJT0FVsNIOIAhlDq++sq 0iNWpsGi9qA3NVsXDr/O7F2pV4O173EcGDN8fmcQgo0Bqq2FYgsGhmQWcQkWoe6O eTWFNKAeTzKbH6KqirRmFiGXfnbb4JiEfY4Ud1VU4ppXLb3tgfwy0d2Cn1Hgg5H2 POmUF+e2+yWFYfxYVGDXKeFep+Z/olt8dQivU3cqyVBDdQ2frLpOQadCRE/oiT/A hXqQ08jEFSCmh7NkzYaJ6E+p0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO9L+Myb 1P3PUdl1IoSbMkVZ9CDnMB8GA1UdIwQYMBaAFAh7KcH710RCAq4AKklxJ/1m8krZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUVEOS82QTc2NUFBQTQ1 REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJFSUNyZ0FxU1hFbl9XYnlT dGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NIc3B3ZnZYUkVJQ3JnQXFTWEVuX1dieVN0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUVEOS82QTc2NUFBQTQ1REMxMUVDQThBMzE0NkRDNEY5QUUwMi9DSHNwd2Z2WFJF SUNyZ0FxU1hFbl9XYnlTdGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALO5B+r7cZ1idq+Ud4+t7RtwxCiaXq9AISFGfba/LEDCF9Q3umkkgW ms6vLH6b2cXIAYJH0hFPMX+nCvV8CoF36RexOb3hRgW7krSWRYq8e6+pSHTfoGIn +b0Cgh2K74r5oAuYwh7Odfh8GxKbsRWPIafvKZvD+PpTcdq8IoDIC+DF06kVGUto mipiP38LqvcsiJ5GSSi9UE0QuGZ9He8Z9L00G0wIOyaU/LnEIBTB/VHunyfI7Ywe rChsmpRvGmtxYB9yt/HR39mjrxWGbVLl0yWEtmh7A4SqwI6hUWxiI/HEjSps+f2I T0oSU3wVuf9wn9z2+nuPm7Hj9HwNrdZz -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:11 2025 by rpki-client