$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: S75J0cmlyNzPqyrvZP2x2l0rtoNuwlFTj7sHZi0GORk= Subject key identifier: 52:0D:4F:B1:BB:A3:74:31:2E:01:32:54:30:C9:38:64:4E:D8:6C:E3 Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 12 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 11 Signing time: Wed 05 Nov 2025 08:07:33 +0000 Manifest this update: Wed 05 Nov 2025 08:07:32 +0000 Manifest next update: Wed 12 Nov 2025 08:07:32 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: ayWZf4DZfXsTnLWekh/bzAUF1CY82CfPs6Fv6IpK+yE=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Nov 5 08:07:32 2025 GMT Not After : Nov 12 08:07:32 2025 GMT Subject: CN=690b05c5-776c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a4:5e:84:34:32:7a:30:f1:bc:98:8e:c2:f3: f0:09:4f:24:41:69:da:35:17:9e:05:3c:aa:6f:0a: 02:6b:f2:9a:01:56:4a:55:a8:3e:3f:bb:7f:a4:1f: bf:33:ca:ce:30:9c:81:c1:99:b7:de:cf:51:ba:94: cb:dd:ad:bf:52:eb:d6:06:2a:4a:b6:fa:55:83:c8: 1e:e1:eb:f9:65:05:81:2c:ec:b0:f2:e0:12:d9:8e: 6a:47:7f:a8:71:4b:9e:d3:7a:c8:19:f0:e4:30:5c: 88:e9:d4:5a:fc:5e:68:d2:6d:65:e3:2e:5c:02:a1: 1a:3c:f9:75:51:7c:d8:fd:8f:a2:88:3a:b6:75:b1: a1:e6:c3:47:3f:88:69:19:48:ea:07:f5:d2:bb:e3: 5c:7b:b7:f1:34:49:e8:a6:c2:52:49:65:49:eb:b7: d1:19:cf:0b:8a:44:9e:48:b7:08:be:71:b5:52:80: 4d:47:8b:25:a1:b5:97:69:ca:e1:47:e6:8e:e4:54: d0:2e:4c:25:03:fe:61:d5:f8:db:3a:4d:36:e6:5f: ee:33:34:05:a4:af:d7:4d:cb:fb:59:d7:eb:aa:c1: c4:2b:61:3a:b8:ee:e4:3f:f7:c6:91:f2:03:fe:5c: 65:97:e7:5b:7d:e0:af:42:e2:73:47:da:6b:16:a8: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:0D:4F:B1:BB:A3:74:31:2E:01:32:54:30:C9:38:64:4E:D8:6C:E3 X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:a9:f4:de:5b:64:18:da:58:4b:40:e3:89:00:5b:2a:ad:d6: a5:9d:81:ff:d2:57:8a:70:22:b0:c1:18:d7:67:e0:01:0d:bd: e5:2c:d9:a4:8d:3d:c7:8d:03:a8:88:65:5f:a1:ef:84:da:8b: 9f:e5:cc:d7:c2:d6:3f:9c:a7:cf:70:69:83:61:27:a9:06:d8: 8c:04:fa:4b:6a:4b:14:4c:13:7c:9c:86:ad:f7:a0:59:de:6e: b1:e0:b0:8b:0e:1e:30:2f:88:c9:78:a5:4e:1a:40:28:aa:f0: 6d:97:fe:ab:60:74:68:83:3a:87:15:ef:47:93:ef:ba:18:7f: 03:0c:d3:cc:b5:e9:96:96:c2:74:48:ae:6f:67:c5:7d:19:79: 07:2f:02:c0:95:8e:0e:bb:ab:55:10:c4:df:53:3d:d9:8f:a0: c7:6d:65:ff:b6:8f:63:6e:23:f3:30:13:bb:c5:5a:f6:e0:7f: 47:90:fc:94:41:f2:5f:92:07:f9:db:c5:d6:c0:78:12:25:d6: 31:68:ae:45:7a:14:d0:da:d6:49:37:6e:ee:00:13:7a:59:fc: 2c:23:0b:fc:7c:8a:f5:7a:0b:e2:63:84:3f:c9:5e:c2:82:fe: 50:15:35:ea:ee:09:d6:06:e3:03:36:a7:c8:28:55:2c:13:ee: e8:95:78:df -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNTExMDUwODA3MzJaFw0yNTExMTIwODA3MzJaMBgxFjAUBgNV BAMTDTY5MGIwNWM1LTc3NmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+pF6ENDJ6MPG8mI7C8/AJTyRBado1F54FPKpvCgJr8poBVkpVqD4/u3+kH78z ys4wnIHBmbfez1G6lMvdrb9S69YGKkq2+lWDyB7h6/llBYEs7LDy4BLZjmpHf6hx S57TesgZ8OQwXIjp1Fr8XmjSbWXjLlwCoRo8+XVRfNj9j6KIOrZ1saHmw0c/iGkZ SOoH9dK741x7t/E0SeimwlJJZUnrt9EZzwuKRJ5Itwi+cbVSgE1HiyWhtZdpyuFH 5o7kVNAuTCUD/mHV+Ns6TTbmX+4zNAWkr9dNy/tZ1+uqwcQrYTq47uQ/98aR8gP+ XGWX51t94K9C4nNH2msWqHfJAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUUg1Psbuj dDEuATJUMMk4ZE7YbOMwHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJ2p9N5bZBjaWEtA44kAWyqt1qWdgf/SV4pwIrDBGNdn4AENveUs2aSN PceNA6iIZV+h74Tai5/lzNfC1j+cp89waYNhJ6kG2IwE+ktqSxRME3ychq33oFne brHgsIsOHjAviMl4pU4aQCiq8G2X/qtgdGiDOocV70eT77oYfwMM08y16ZaWwnRI rm9nxX0ZeQcvAsCVjg67q1UQxN9TPdmPoMdtZf+2j2NuI/MwE7vFWvbgf0eQ/JRB 8l+SB/nbxdbAeBIl1jForkV6FNDa1kk3bu4AE3pZ/CwjC/x8ivV6C+JjhD/JXsKC /lAVNeruCdYG4wM2p8goVSwT7uiVeN8= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:25 2025 by rpki-client