$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft File: p_d_IEfTVowEOjOMeTKwojyPaHE.mft (raw, json) Hash identifier: u/AMdprDapA5W88GSPffz4+9q38CAYBX3IyLEydHK1k= Subject key identifier: D6:C3:A3:78:84:AB:B3:DE:6C:59:9B:1D:9A:C6:47:7F:D9:40:F0:03 Authority key identifier: A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 Certificate issuer: /CN=A91FD4E2/serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Certificate serial: 0E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft Manifest number: 0C Signing time: Wed 05 Nov 2025 08:13:13 +0000 Manifest this update: Wed 05 Nov 2025 08:13:12 +0000 Manifest next update: Wed 12 Nov 2025 08:13:12 +0000 Files and hashes: 1: p_d_IEfTVowEOjOMeTKwojyPaHE.crl (hash: 8R+98hS7y08IJO59cz1DV/a8Kuj0NjCwo8ZYQsaCWog=) 2: D08BF898AEDA11F09093014EC4F9AE02.roa (hash: bkWwsW8ZSkcQ9LnA3de1DycHNu5Ebnxo4aw0ZyQ67BE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14 (0xe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD4E2, serialNumber=A7F77F2047D3568C043A338C7932B0A23C8F6871 Validity Not Before: Nov 5 08:13:12 2025 GMT Not After : Nov 12 08:13:12 2025 GMT Subject: CN=690b0718-7c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:36:7f:7a:9e:8d:57:bc:b3:0e:23:d4:5c:66: 5c:db:5b:92:b0:50:40:fa:49:82:ea:4d:3c:ef:18: 34:78:df:ca:b1:68:ec:a5:1b:70:59:3e:93:c2:d3: 6c:d5:6e:13:52:7a:0c:88:f0:14:ee:b8:a2:81:cf: 24:c2:e2:be:81:04:21:a2:e0:83:17:19:46:8e:ad: cd:b7:1f:02:d9:e7:ed:99:46:f7:05:cb:0f:ea:92: 8e:b3:e1:41:3c:88:77:2a:79:0c:01:c4:ab:25:81: 61:8e:8f:d8:4b:a9:5b:da:13:15:0b:15:c2:f6:7f: d2:5b:d4:76:8e:ad:b9:32:ef:fd:da:8d:69:c8:9f: db:3b:4b:3c:f9:5d:27:ac:1b:e9:97:1d:89:86:67: c0:ba:bb:8e:2c:62:50:e1:a5:81:64:2c:63:36:93: 16:2d:a2:4f:0e:c7:91:f3:5b:e4:71:77:c1:40:7e: 74:20:c7:97:fa:f7:a9:20:87:42:5c:64:a4:fc:84: f6:87:ed:40:0b:e4:14:67:46:4a:f5:98:27:07:cf: d5:93:52:64:a0:28:65:d8:f5:6e:93:e4:7b:8c:86: 97:55:a0:4b:76:a3:f1:82:af:62:9e:36:90:65:f7: 2b:24:e9:5d:d1:82:f9:a3:28:c3:59:d9:a9:47:03: 52:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:C3:A3:78:84:AB:B3:DE:6C:59:9B:1D:9A:C6:47:7F:D9:40:F0:03 X509v3 Authority Key Identifier: keyid:A7:F7:7F:20:47:D3:56:8C:04:3A:33:8C:79:32:B0:A2:3C:8F:68:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p_d_IEfTVowEOjOMeTKwojyPaHE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD4E2/14D2E7BAAEDA11F09D43E22EC4F9AE02/p_d_IEfTVowEOjOMeTKwojyPaHE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:8f:53:e2:21:cc:b5:37:94:40:6e:37:48:1c:d7:77:94:4b: ff:2d:3c:85:bd:f1:ea:20:ac:65:dd:eb:e3:8b:a4:f6:97:47: b0:52:fc:11:b9:0d:5f:d8:dd:4a:e0:16:8c:69:ed:e1:1a:56: 95:54:2b:01:b9:f0:e4:84:33:9a:86:62:e8:8f:6d:66:02:30: 62:f3:65:07:fc:97:d3:32:d4:04:de:f3:9d:7c:11:7b:5d:3d: 17:52:9d:f3:7c:38:82:c8:9d:15:1d:e8:32:52:f3:02:9d:4e: 43:37:cf:77:f8:d2:48:6d:17:73:45:82:50:10:71:23:99:c1: 5b:b9:a5:4f:94:da:af:52:98:93:0e:b1:82:e8:04:d9:fc:0e: a4:4f:36:bc:12:2a:2c:6c:cd:a0:f1:33:70:e5:ad:26:c6:64: fc:7e:07:db:82:af:aa:e4:46:40:f3:bc:dc:9d:47:b4:98:55: fa:86:a2:fd:76:7e:ae:4a:57:82:97:12:6f:4a:45:90:c2:47: 3b:fb:16:a9:39:2d:6d:10:e0:f0:c4:5c:78:62:fe:5c:51:e6: 22:e6:95:bd:60:06:e8:8c:ad:de:75:e1:59:17:d7:e7:36:a3: 6d:16:de:ac:bf:85:81:48:fc:92:92:3a:c2:ff:fe:84:db:a2: 96:66:24:44 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RDRFMjExMC8GA1UEBRMoQTdGNzdGMjA0N0QzNTY4QzA0M0EzMzhDNzkzMkIwQTIz QzhGNjg3MTAeFw0yNTExMDUwODEzMTJaFw0yNTExMTIwODEzMTJaMBgxFjAUBgNV BAMTDTY5MGIwNzE4LTdjNzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1Nn96no1XvLMOI9RcZlzbW5KwUED6SYLqTTzvGDR438qxaOylG3BZPpPC02zV bhNSegyI8BTuuKKBzyTC4r6BBCGi4IMXGUaOrc23HwLZ5+2ZRvcFyw/qko6z4UE8 iHcqeQwBxKslgWGOj9hLqVvaExULFcL2f9Jb1HaOrbky7/3ajWnIn9s7Szz5XSes G+mXHYmGZ8C6u44sYlDhpYFkLGM2kxYtok8Ox5HzW+Rxd8FAfnQgx5f696kgh0Jc ZKT8hPaH7UAL5BRnRkr1mCcHz9WTUmSgKGXY9W6T5HuMhpdVoEt2o/GCr2KeNpBl 9ysk6V3RgvmjKMNZ2alHA1JxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1sOjeISr s95sWZsdmsZHf9lA8AMwHwYDVR0jBBgwFoAUp/d/IEfTVowEOjOMeTKwojyPaHEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZENEUyLzE0RDJFN0JBQUVE QTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93RU9qT01lVEt3b2p5UGFI RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcF9kX0lFZlRWb3dFT2pPTWVUS3dvanlQYUhFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE NEUyLzE0RDJFN0JBQUVEQTExRjA5RDQzRTIyRUM0RjlBRTAyL3BfZF9JRWZUVm93 RU9qT01lVEt3b2p5UGFIRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIePU+IhzLU3lEBuN0gc13eUS/8tPIW98eogrGXd6+OLpPaXR7BS/BG5 DV/Y3UrgFoxp7eEaVpVUKwG58OSEM5qGYuiPbWYCMGLzZQf8l9My1ATe8518EXtd PRdSnfN8OILInRUd6DJS8wKdTkM3z3f40khtF3NFglAQcSOZwVu5pU+U2q9SmJMO sYLoBNn8DqRPNrwSKixszaDxM3DlrSbGZPx+B9uCr6rkRkDzvNydR7SYVfqGov12 fq5KV4KXEm9KRZDCRzv7Fqk5LW0Q4PDEXHhi/lxR5iLmlb1gBuiMrd514VkX1+c2 o20W3qy/hYFI/JKSOsL//oTbopZmJEQ= -----END CERTIFICATE-----Generated at Wed Nov 5 21:23:21 2025 by rpki-client