$ rpki-client -vvf rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft File: 091LwNHr_QIHqqZvYIuOBdPNRuM.mft (raw, json) Hash identifier: GbYfxSZrJttiHgVdFKCEDh3HheJcOl6/FgFhxdBJ4b0= Subject key identifier: D2:59:FA:7F:B5:A7:38:C0:54:E2:DD:33:45:2C:37:04:9E:6F:C9:2A Authority key identifier: D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 Certificate issuer: /CN=A9112956/serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft Manifest number: 0BEA Signing time: Tue 04 Nov 2025 18:57:43 +0000 Manifest this update: Tue 04 Nov 2025 18:57:42 +0000 Manifest next update: Tue 11 Nov 2025 18:57:42 +0000 Files and hashes: 1: 091LwNHr_QIHqqZvYIuOBdPNRuM.crl (hash: 94DBBUC25aM+Qs+G8MRL47g6t+Wykh4uIvSdXiOeiuY=) 2: 04346EDA262111EAB705442FC4F9AE02.roa (hash: iz8rOu7sc7+N3/1kzdgDjJg5F86O0Z4mGrtUPPC8sj4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112956, serialNumber=D3DD4BC0D1EBFD0207AAA66F608B8E05D3CD46E3 Validity Not Before: Nov 4 18:57:42 2025 GMT Not After : Nov 11 18:57:42 2025 GMT Subject: CN=690a4ca7-6094 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:18:a7:75:dd:e3:86:dc:1a:c9:e5:9f:2e:61: 2b:2d:76:e0:c6:cf:f1:48:33:fa:c7:72:0a:4a:f1: 7a:1f:5d:ad:6e:fe:2c:26:0d:35:b6:e6:76:01:29: 5e:61:94:92:59:d9:2b:ed:83:16:5f:d5:87:e3:5e: e8:b5:6c:da:6a:47:f2:13:1a:ee:3f:60:bc:6d:d5: 82:bc:b3:9d:09:bf:fc:ea:43:ae:ce:4a:6b:29:9e: ae:2d:9e:00:84:c4:b5:ae:4d:f6:82:e6:dd:9a:cf: 76:a9:cc:e3:43:6d:72:81:17:bf:80:7e:65:cf:17: 39:33:ab:31:1a:ac:39:18:23:d0:67:c2:08:ed:46: 74:ba:59:18:43:b6:51:63:78:22:83:93:68:e4:48: 87:1c:c5:47:21:f4:dc:67:0b:5b:28:cf:88:7a:b0: c9:2e:67:65:24:f7:9b:ef:41:e9:08:ad:64:a3:42: 3a:f3:bb:94:b3:91:2d:4d:2b:bf:b4:55:c8:4c:10: fd:29:72:7a:e0:20:24:aa:38:63:7e:43:40:12:07: fc:20:4f:cb:73:55:0d:aa:f5:09:f8:15:e2:e8:5a: 66:d5:09:e3:97:33:0b:da:36:a7:0e:73:b4:ed:96: 18:40:72:f1:87:cb:d6:cf:d4:eb:27:11:27:5f:e4: 75:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:59:FA:7F:B5:A7:38:C0:54:E2:DD:33:45:2C:37:04:9E:6F:C9:2A X509v3 Authority Key Identifier: keyid:D3:DD:4B:C0:D1:EB:FD:02:07:AA:A6:6F:60:8B:8E:05:D3:CD:46:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/091LwNHr_QIHqqZvYIuOBdPNRuM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112956/EFBFBBF0261E11EA9C881C28C4F9AE02/091LwNHr_QIHqqZvYIuOBdPNRuM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:ab:e5:07:a5:e6:93:c8:59:22:4b:13:ad:d1:e3:e9:5b:bc: 21:9f:1f:e2:08:df:ff:65:dd:5e:1c:28:e9:79:8d:c9:59:62: 12:c9:19:3e:da:47:f3:89:3c:ee:eb:dc:8a:d2:c2:ab:97:9e: 1a:95:b8:5c:ed:d3:10:a2:15:14:e3:52:13:b9:50:21:a8:4d: ac:a7:83:04:73:4c:db:f5:08:c9:a9:65:41:72:8e:a6:07:11: 3b:16:7f:11:a6:c8:a3:df:f4:bf:b4:b1:e1:dd:e0:bd:c8:c8: b7:de:da:e5:4f:53:ec:e9:c3:8f:c8:a2:59:9d:2e:ba:14:0d: a7:18:f5:36:04:8c:c7:41:b1:bf:dd:35:5f:8e:91:4b:9b:97: 2c:4d:ad:da:26:c8:27:7e:30:e6:98:a7:c4:33:b9:01:7b:e9: a1:34:21:39:66:f1:64:d1:27:11:89:3b:3a:a9:04:b3:d2:7f: 5e:4a:84:cd:c9:c1:37:0f:0d:53:e9:b3:6e:d1:25:4d:3a:b1: 75:76:41:0e:8a:34:50:47:a3:66:58:63:fd:11:a5:ca:29:71: 69:bd:38:54:20:3b:9a:44:fb:1c:9d:f0:5a:51:1c:f5:eb:2f: 18:33:59:f2:5c:00:54:42:7c:b0:4e:0d:76:94:47:ad:1d:37: 09:ec:43:42 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI5NTYxMTAvBgNVBAUTKEQzREQ0QkMwRDFFQkZEMDIwN0FBQTY2RjYwOEI4RTA1 RDNDRDQ2RTMwHhcNMjUxMTA0MTg1NzQyWhcNMjUxMTExMTg1NzQyWjAYMRYwFAYD VQQDEw02OTBhNGNhNy02MDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqxindd3jhtwayeWfLmErLXbgxs/xSDP6x3IKSvF6H12tbv4sJg01tuZ2ASle YZSSWdkr7YMWX9WH417otWzaakfyExruP2C8bdWCvLOdCb/86kOuzkprKZ6uLZ4A hMS1rk32gubdms92qczjQ21ygRe/gH5lzxc5M6sxGqw5GCPQZ8II7UZ0ulkYQ7ZR Y3gig5No5EiHHMVHIfTcZwtbKM+IerDJLmdlJPeb70HpCK1ko0I687uUs5EtTSu/ tFXITBD9KXJ64CAkqjhjfkNAEgf8IE/Lc1UNqvUJ+BXi6Fpm1QnjlzML2janDnO0 7ZYYQHLxh8vWz9TrJxEnX+R14QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNJZ+n+1 pzjAVOLdM0UsNwSeb8kqMB8GA1UdIwQYMBaAFNPdS8DR6/0CB6qmb2CLjgXTzUbj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjk1Ni9FRkJGQkJGMDI2 MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9RSUhxcVp2WUl1T0JkUE5S dU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5MUx3TkhyX1FJSHFxWnZZSXVPQmRQTlJ1TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx Mjk1Ni9FRkJGQkJGMDI2MUUxMUVBOUM4ODFDMjhDNEY5QUUwMi8wOTFMd05Icl9R SUhxcVp2WUl1T0JkUE5SdU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgq+UHpeaTyFkiSxOt0ePpW7whnx/iCN//Zd1eHCjpeY3JWWISyRk+ 2kfziTzu69yK0sKrl54albhc7dMQohUU41ITuVAhqE2sp4MEc0zb9QjJqWVBco6m BxE7Fn8Rpsij3/S/tLHh3eC9yMi33trlT1Ps6cOPyKJZnS66FA2nGPU2BIzHQbG/ 3TVfjpFLm5csTa3aJsgnfjDmmKfEM7kBe+mhNCE5ZvFk0ScRiTs6qQSz0n9eSoTN ycE3Dw1T6bNu0SVNOrF1dkEOijRQR6NmWGP9EaXKKXFpvThUIDuaRPscnfBaURz1 6y8YM1nyXABUQnywTg12lEetHTcJ7ENC -----END CERTIFICATE-----Generated at Wed Nov 5 05:22:47 2025 by rpki-client