$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft File: grPUpZa7l4hVoVXKr6iyYlMw3o0.mft (raw, json) Hash identifier: BvzaMcHEdaU1cfuDFH7/PVGEvOGkoZmNtJPiBOlezdc= Subject key identifier: 41:41:62:96:BC:FE:E5:B9:6D:8E:DE:B0:C5:CD:D9:FB:55:D6:81:96 Authority key identifier: 82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D Certificate issuer: /CN=A91FC42A/serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Certificate serial: 0DCD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft Manifest number: 0DC6 Signing time: Tue 04 Nov 2025 17:57:42 +0000 Manifest this update: Tue 04 Nov 2025 17:57:41 +0000 Manifest next update: Tue 11 Nov 2025 17:57:41 +0000 Files and hashes: 1: grPUpZa7l4hVoVXKr6iyYlMw3o0.crl (hash: SqHw12e8ISBrFjfWCXayOB4Knc5CFEY7MMo2c1KMbSM=) 2: E4653316C87211E9ADADA185C4F9AE02.roa (hash: Kl+qHWqwPNXr+jNBmlZ54bsne4TIDTa38/cYe+iBa+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:57:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3533 (0xdcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC42A, serialNumber=82B3D4A596BB978855A155CAAFA8B2625330DE8D Validity Not Before: Nov 4 17:57:41 2025 GMT Not After : Nov 11 17:57:41 2025 GMT Subject: CN=690a3e96-da79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ca:6b:a4:78:09:93:6b:2b:e0:bd:c7:4d:67: d3:ba:09:47:96:78:4f:18:ab:22:ba:e0:ff:99:d4: bd:90:2e:cc:28:4a:bc:77:86:a3:3b:bb:5b:67:66: a8:f7:79:03:c2:a0:3f:c9:0a:c3:04:7d:d6:a8:91: 01:ca:96:7e:fe:d4:73:8a:a5:8c:f4:50:77:3d:f0: 30:5d:88:63:c0:d0:0c:62:8f:64:19:f8:2b:1a:98: d1:c4:35:71:2f:5a:a6:9a:38:12:00:bc:49:4b:6d: c7:ae:7e:c5:ea:6d:2d:48:11:27:2d:67:fe:21:98: 68:bc:ad:78:82:27:42:02:af:b3:38:e2:51:d5:f8: 58:5d:da:d9:16:4c:be:22:87:05:97:56:01:f8:4d: 3f:c8:ae:49:18:f1:3a:2d:bf:f0:24:7c:1b:89:5d: 42:ec:27:15:db:80:df:b6:41:a1:56:f4:3a:62:ef: 09:e7:e4:20:85:5f:4f:6e:43:56:53:78:4e:72:41: c2:02:19:a7:6f:89:28:d9:18:b8:e5:e9:bb:ed:b1: 1c:69:18:ff:9d:13:a3:ff:d7:56:9f:fe:30:bb:59: 0d:b9:5a:38:97:62:e1:8c:e7:bf:89:48:9c:e5:33: df:d4:a0:ce:7c:d6:d6:e4:cd:0d:0f:4e:d7:00:ba: 1b:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:41:62:96:BC:FE:E5:B9:6D:8E:DE:B0:C5:CD:D9:FB:55:D6:81:96 X509v3 Authority Key Identifier: keyid:82:B3:D4:A5:96:BB:97:88:55:A1:55:CA:AF:A8:B2:62:53:30:DE:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grPUpZa7l4hVoVXKr6iyYlMw3o0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC42A/F3B52E72C87011E98DECA581C4F9AE02/grPUpZa7l4hVoVXKr6iyYlMw3o0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c5:38:94:f3:1e:56:af:79:9a:3c:82:f3:98:de:d9:5e:bb:a8: 61:00:0f:ef:92:a3:9b:bf:60:65:5c:4c:ec:23:d4:d1:11:57: 93:c2:ba:6f:ab:5d:95:22:cf:56:9f:bb:a7:0f:43:98:c7:16: 6b:6e:a9:94:a3:3e:36:2c:63:c8:f1:0f:31:dc:b0:2f:f5:bc: a5:d7:cd:27:77:78:d7:7c:e4:57:a4:8b:9a:5d:24:63:cd:3a: 20:32:7b:49:3f:12:99:86:0f:c1:64:66:c0:b8:86:35:ea:e3: e3:a1:26:ff:e6:99:8a:2d:10:25:c1:31:aa:9b:15:38:70:75: 9c:4e:b5:00:79:9b:c0:e0:13:f6:d4:72:18:73:4d:a6:8f:fc: 65:e0:6f:99:2b:35:ba:aa:dd:85:74:68:13:08:58:47:64:a5: 6e:96:c7:1c:a5:71:9e:f7:8a:fe:4a:8e:25:7b:34:09:0b:d0: 11:fd:6e:1e:03:38:26:f8:f1:5c:c6:8c:ce:29:76:24:ee:59: 19:cd:61:9c:54:2a:a8:6d:c3:85:d9:f0:95:e2:6a:9b:e7:f4: 45:41:32:04:ab:8f:ef:b6:ae:63:32:06:87:f9:3e:db:55:99: 32:5a:e1:dc:cf:df:6b:aa:4d:b4:66:fe:98:b8:0d:c9:98:5f: 00:d8:8f:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDc0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM0MkExMTAvBgNVBAUTKDgyQjNENEE1OTZCQjk3ODg1NUExNTVDQUFGQThCMjYy NTMzMERFOEQwHhcNMjUxMTA0MTc1NzQxWhcNMjUxMTExMTc1NzQxWjAYMRYwFAYD VQQDEw02OTBhM2U5Ni1kYTc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMprpHgJk2sr4L3HTWfTuglHlnhPGKsiuuD/mdS9kC7MKEq8d4ajO7tbZ2ao 93kDwqA/yQrDBH3WqJEBypZ+/tRziqWM9FB3PfAwXYhjwNAMYo9kGfgrGpjRxDVx L1qmmjgSALxJS23Hrn7F6m0tSBEnLWf+IZhovK14gidCAq+zOOJR1fhYXdrZFky+ IocFl1YB+E0/yK5JGPE6Lb/wJHwbiV1C7CcV24DftkGhVvQ6Yu8J5+QghV9PbkNW U3hOckHCAhmnb4ko2Ri45em77bEcaRj/nROj/9dWn/4wu1kNuVo4l2LhjOe/iUic 5TPf1KDOfNbW5M0ND07XALobtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEFBYpa8 /uW5bY7esMXN2ftV1oGWMB8GA1UdIwQYMBaAFIKz1KWWu5eIVaFVyq+osmJTMN6N MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzQyQS9GM0I1MkU3MkM4 NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0aFZvVlhLcjZpeVlsTXcz bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyUFVwWmE3bDRoVm9WWEtyNml5WWxNdzNvMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzQyQS9GM0I1MkU3MkM4NzAxMUU5OERFQ0E1ODFDNEY5QUUwMi9nclBVcFphN2w0 aFZvVlhLcjZpeVlsTXczbzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDFOJTzHlaveZo8gvOY3tleu6hhAA/vkqObv2BlXEzsI9TREVeTwrpv q12VIs9Wn7unD0OYxxZrbqmUoz42LGPI8Q8x3LAv9byl180nd3jXfORXpIuaXSRj zTogMntJPxKZhg/BZGbAuIY16uPjoSb/5pmKLRAlwTGqmxU4cHWcTrUAeZvA4BP2 1HIYc02mj/xl4G+ZKzW6qt2FdGgTCFhHZKVulsccpXGe94r+So4lezQJC9AR/W4e Azgm+PFcxozOKXYk7lkZzWGcVCqobcOF2fCV4mqb5/RFQTIEq4/vtq5jMgaH+T7b VZkyWuHcz99rqk20Zv6YuA3JmF8A2I+O -----END CERTIFICATE-----Generated at Wed Nov 5 01:42:55 2025 by rpki-client