$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: 3So0qPqdxsQNkiwHC0AZkvk1SSMP6F8O+0IjlcCVyp4= Subject key identifier: 44:E7:2C:DD:68:3A:3B:6E:8B:FC:38:31:2D:21:5F:F0:A6:26:42:C2 Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C91 Signing time: Sun 02 Nov 2025 18:21:07 +0000 Manifest this update: Sun 02 Nov 2025 18:21:06 +0000 Manifest next update: Sun 09 Nov 2025 18:21:06 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: l6fPfkVG8q8G+pQf4JC2WB01U52aNVSa10D0ZdkngTg=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3226 (0xc9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Nov 2 18:21:06 2025 GMT Not After : Nov 9 18:21:06 2025 GMT Subject: CN=6907a112-27e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:1a:ac:a0:cb:48:5b:cf:1d:c6:8d:ad:3b:59: dd:33:82:ca:62:87:bb:e8:87:d3:66:7f:5e:4d:d6: a9:5d:7e:14:f3:fd:45:64:76:87:3f:14:89:34:2b: 18:31:64:0f:ce:22:b2:d9:5d:fa:d4:b2:5a:86:35: dc:8d:60:be:60:2b:d6:89:71:27:40:bc:c3:ac:45: 5b:78:21:7d:da:65:7b:a5:b0:7e:e7:9a:03:82:c7: 6f:c3:6d:d4:b1:eb:43:c8:65:92:09:da:32:a5:57: 38:1e:4e:d6:e8:cc:10:a5:64:6f:10:5e:57:a0:0e: e0:f0:e3:ef:52:7f:be:ea:3c:53:16:c0:3f:7f:2a: 60:40:6c:52:2d:e1:ef:34:ad:4e:97:4e:22:8d:3e: 24:16:82:82:fa:ee:60:33:d0:93:0f:2d:32:62:7e: a5:c6:d9:ba:e3:f2:12:74:72:21:36:f5:5f:38:45: 80:b3:f8:17:0d:9c:2f:4f:d9:15:fa:cb:60:62:88: 65:10:da:2c:ab:67:6f:a2:09:15:ee:10:c2:a8:a4: 26:16:e0:c8:ab:cd:d6:5c:30:aa:88:15:69:28:44: 59:84:d0:e2:e2:23:a8:f2:85:5d:98:2d:f7:be:5a: 18:49:b7:63:7b:fb:52:63:f4:34:37:15:8a:fb:90: 0d:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:E7:2C:DD:68:3A:3B:6E:8B:FC:38:31:2D:21:5F:F0:A6:26:42:C2 X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:fd:44:4c:bd:a9:cf:f5:c4:7c:13:91:1e:19:c2:51:f6:c9: 82:4f:db:23:29:96:0c:28:d8:da:0d:55:f0:f6:03:b3:89:b4: 05:25:a9:d4:93:d0:e7:11:0d:68:66:c6:de:6e:66:0c:e3:86: b0:5e:65:63:07:86:1f:a7:6a:d4:2a:b8:8a:cd:66:d1:88:07: 9d:b4:02:9b:48:b4:24:b5:ca:b5:32:01:a1:ec:90:22:a4:c3: d1:05:5d:d3:60:b8:4f:74:4b:15:45:d6:a3:40:84:0f:79:a8: 27:50:05:16:c4:3f:d1:b8:1e:8b:fd:f4:9b:3a:c3:6c:e8:69: 5f:81:a6:ee:b6:c6:f5:3c:11:83:c6:5a:11:15:74:02:8a:da: 72:d3:79:d3:dc:6d:0f:24:8a:4a:1e:3a:8c:33:4d:52:13:24: 85:13:d9:bf:a9:61:5b:80:07:2e:bb:c1:3b:4a:8b:2c:21:22: 1f:86:9d:b0:39:de:7c:d2:f5:d6:5c:4a:61:d4:2b:d7:bd:2d: 9e:61:c9:92:71:93:52:5c:5c:2a:c9:10:99:43:6d:b6:c1:1a: 8c:2d:b5:8d:da:01:08:66:26:95:33:11:9b:00:27:cf:7b:89: d8:05:8b:64:95:5a:c9:8a:27:42:6c:47:89:db:94:97:13:a2: 70:d6:aa:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUxMTAyMTgyMTA2WhcNMjUxMTA5MTgyMTA2WjAYMRYwFAYD VQQDEw02OTA3YTExMi0yN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArRqsoMtIW88dxo2tO1ndM4LKYoe76IfTZn9eTdapXX4U8/1FZHaHPxSJNCsY MWQPziKy2V361LJahjXcjWC+YCvWiXEnQLzDrEVbeCF92mV7pbB+55oDgsdvw23U setDyGWSCdoypVc4Hk7W6MwQpWRvEF5XoA7g8OPvUn++6jxTFsA/fypgQGxSLeHv NK1Ol04ijT4kFoKC+u5gM9CTDy0yYn6lxtm64/ISdHIhNvVfOEWAs/gXDZwvT9kV +stgYohlENosq2dvogkV7hDCqKQmFuDIq83WXDCqiBVpKERZhNDi4iOo8oVdmC33 vloYSbdje/tSY/Q0NxWK+5AN8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETnLN1o Ojtui/w4MS0hX/CmJkLCMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBs/URMvanP9cR8E5EeGcJR9smCT9sjKZYMKNjaDVXw9gOzibQFJanU k9DnEQ1oZsbebmYM44awXmVjB4Yfp2rUKriKzWbRiAedtAKbSLQktcq1MgGh7JAi pMPRBV3TYLhPdEsVRdajQIQPeagnUAUWxD/RuB6L/fSbOsNs6Glfgabutsb1PBGD xloRFXQCitpy03nT3G0PJIpKHjqMM01SEySFE9m/qWFbgAcuu8E7SossISIfhp2w Od580vXWXEph1CvXvS2eYcmScZNSXFwqyRCZQ222wRqMLbWN2gEIZiaVMxGbACfP e4nYBYtklVrJiidCbEeJ25SXE6Jw1qoT -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:44 2025 by rpki-client