$ rpki-client -vvf rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft File: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft (raw, json) Hash identifier: dtssmh3DbL41XLTq+vKLYR7Y1Z8Os0kg6+DXFxIy6qE= Subject key identifier: 8C:0D:5E:11:BB:4B:A9:2E:A4:0B:BB:78:B9:08:23:34:CB:DC:D2:AE Authority key identifier: BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 Certificate issuer: /CN=A91324D4/serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Certificate serial: 0685 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft Manifest number: 0669 Signing time: Sun 02 Nov 2025 22:37:57 +0000 Manifest this update: Sun 02 Nov 2025 22:37:57 +0000 Manifest next update: Sun 09 Nov 2025 22:37:57 +0000 Files and hashes: 1: v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl (hash: 3QkA07uO0RORHBC3XVPRNra3qgUdMjnDQbVXiNVLXaQ=) 2: DD643EBCE00C11ED8C71C709C4F9AE02.roa (hash: tNDEmIxy5H25Y3zlO9rXFUC8hfA45BbpRsPK4rM8u7s=) 3: 8A88CCDC667911EE9D7DA167C4F9AE02.roa (hash: 9S57tdyd45wHLsInsTnI/GZly1K4hEDfcQJTNYuSOFQ=) 4: 236C6906A73F11EBA1751E33C4F9AE02.roa (hash: JyPetDHabfuANEcar/HU38MZvBtPYhC6A1gULHuakq8=) 5: 78345D00E01211ED8766DC5CC4F9AE02.roa (hash: CGANdjpj39CJWyCZVGb4EKEpCCBaXu9btf2XqDDOLY4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1669 (0x685) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91324D4, serialNumber=BF74E7E614D4B22E4B7FE40B6BECEFD1705ACFC1 Validity Not Before: Nov 2 22:37:57 2025 GMT Not After : Nov 9 22:37:57 2025 GMT Subject: CN=6907dd45-a7c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:43:6a:f9:89:36:1a:ad:87:89:22:01:d4:c2: 87:06:b3:57:71:8d:fc:6e:be:1d:eb:ed:a5:86:55: 01:c3:12:5a:a8:85:c5:e9:8f:1c:5d:58:15:09:64: 1a:f9:90:35:a4:36:bc:0f:9a:3f:74:ae:6e:47:f9: e8:28:7b:fd:9b:02:20:0a:22:1c:58:79:b3:71:d8: c1:c8:ab:a4:31:86:25:8f:a7:62:e1:29:a0:9d:9a: c5:2a:4f:37:a5:fe:b0:89:b3:4a:7b:a4:12:e4:09: f4:19:27:8d:54:b4:c6:41:34:17:ce:ad:34:cc:7c: 3d:95:2b:12:e5:0c:71:6a:7f:8f:22:42:48:60:41: fd:f6:de:fb:05:f6:62:19:a9:26:77:79:39:fe:c4: de:c3:87:e1:ca:17:ca:87:f4:dd:54:a5:8c:cf:88: 96:b7:9f:ff:d3:7e:df:f4:fb:80:20:5e:04:9f:e7: 50:d2:5e:e2:89:bd:20:60:da:38:26:4c:d3:9e:d5: c2:7f:52:1d:09:97:59:9f:92:4e:51:a1:32:c0:b1: 5c:e6:a9:80:9e:a8:a6:73:3e:6e:c2:56:b2:bf:be: 14:60:90:7a:1f:0a:49:e6:25:06:44:0c:4d:28:12: 2b:ac:55:e2:a6:54:ba:ce:5d:6f:32:47:a2:76:35: 7f:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0D:5E:11:BB:4B:A9:2E:A4:0B:BB:78:B9:08:23:34:CB:DC:D2:AE X509v3 Authority Key Identifier: keyid:BF:74:E7:E6:14:D4:B2:2E:4B:7F:E4:0B:6B:EC:EF:D1:70:5A:CF:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91324D4/1A6E751CA71F11EB848AF030C4F9AE02/v3Tn5hTUsi5Lf-QLa-zv0XBaz8E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:68:34:7d:a2:13:4c:07:da:6d:14:6e:73:c2:73:cc:bd:17: 01:db:08:91:a7:26:ce:eb:ba:96:7d:25:d8:5a:6b:fa:e2:34: be:fe:b4:7b:8f:62:27:cf:38:ec:1a:44:1b:4e:15:f7:1d:bc: 35:16:35:49:85:b4:c2:7a:8a:74:b7:c5:09:8e:2e:e1:8e:18: 61:18:8f:78:fa:27:38:83:cd:89:b5:6b:2e:f0:37:c0:35:11: 17:46:de:61:d8:59:83:6f:e4:73:83:74:fe:51:72:f3:cc:18: f1:b5:d1:42:56:8d:e3:9c:ad:d6:2c:19:3f:b4:16:8c:16:ae: d5:51:78:7e:55:ef:17:6b:b9:8f:f5:b8:09:ee:6a:7d:b8:21: 87:98:88:fd:5d:cf:1a:1d:41:bb:71:9c:93:01:ac:5e:b9:a7: b9:30:db:57:e4:92:8e:00:98:81:4c:52:f5:b1:b2:06:c6:36: e8:fe:95:79:2a:97:f3:5e:a2:1e:44:2a:d7:f3:ec:ad:ee:76: 2b:20:13:bb:9c:d8:a5:30:c4:80:7d:b0:02:27:69:3c:11:c6: 25:3e:2c:1c:fa:6c:9f:30:9a:19:48:a6:b5:31:1d:a9:ec:90: 8f:16:c6:5c:be:68:82:7f:2c:ec:4e:9d:ca:21:83:12:9f:c1: 34:63:3a:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI0RDQxMTAvBgNVBAUTKEJGNzRFN0U2MTRENEIyMkU0QjdGRTQwQjZCRUNFRkQx NzA1QUNGQzEwHhcNMjUxMTAyMjIzNzU3WhcNMjUxMTA5MjIzNzU3WjAYMRYwFAYD VQQDEw02OTA3ZGQ0NS1hN2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAl0Nq+Yk2Gq2HiSIB1MKHBrNXcY38br4d6+2lhlUBwxJaqIXF6Y8cXVgVCWQa +ZA1pDa8D5o/dK5uR/noKHv9mwIgCiIcWHmzcdjByKukMYYlj6di4SmgnZrFKk83 pf6wibNKe6QS5An0GSeNVLTGQTQXzq00zHw9lSsS5Qxxan+PIkJIYEH99t77BfZi Gakmd3k5/sTew4fhyhfKh/TdVKWMz4iWt5//037f9PuAIF4En+dQ0l7iib0gYNo4 JkzTntXCf1IdCZdZn5JOUaEywLFc5qmAnqimcz5uwlayv74UYJB6HwpJ5iUGRAxN KBIrrFXiplS6zl1vMkeidjV/VQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIwNXhG7 S6kupAu7eLkIIzTL3NKuMB8GA1UdIwQYMBaAFL905+YU1LIuS3/kC2vs79FwWs/B MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjRENC8xQTZFNzUxQ0E3 MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNpNUxmLVFMYS16djBYQmF6 OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YzVG41aFRVc2k1TGYtUUxhLXp2MFhCYXo4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjRENC8xQTZFNzUxQ0E3MUYxMUVCODQ4QUYwMzBDNEY5QUUwMi92M1RuNWhUVXNp NUxmLVFMYS16djBYQmF6OEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgaDR9ohNMB9ptFG5zwnPMvRcB2wiRpybO67qWfSXYWmv64jS+/rR7 j2InzzjsGkQbThX3Hbw1FjVJhbTCeop0t8UJji7hjhhhGI94+ic4g82JtWsu8DfA NREXRt5h2FmDb+Rzg3T+UXLzzBjxtdFCVo3jnK3WLBk/tBaMFq7VUXh+Ve8Xa7mP 9bgJ7mp9uCGHmIj9Xc8aHUG7cZyTAaxeuae5MNtX5JKOAJiBTFL1sbIGxjbo/pV5 KpfzXqIeRCrX8+yt7nYrIBO7nNilMMSAfbACJ2k8EcYlPiwc+myfMJoZSKa1MR2p 7JCPFsZcvmiCfyzsTp3KIYMSn8E0Yzqu -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:07 2025 by rpki-client