$ rpki-client -vvf rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft File: sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft (raw, json) Hash identifier: xJPvHI3pvA0JizEk+eAC3WqqTzF4HazrbmV8TjaG+iI= Subject key identifier: D9:B0:47:8F:38:D8:F4:7B:33:3F:AA:BE:81:2C:8B:9B:90:30:7B:36 Authority key identifier: B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 Certificate issuer: /CN=A91374BB/serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Certificate serial: 0191 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft Manifest number: 018D Signing time: Wed 05 Nov 2025 03:40:52 +0000 Manifest this update: Wed 05 Nov 2025 03:40:52 +0000 Manifest next update: Wed 12 Nov 2025 03:40:52 +0000 Files and hashes: 1: sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl (hash: 9N9ouThglCdh3jmdJtCmF6Df4B8l2whkf6sQaP7/6Mg=) 2: E7DBE2945B6A11EE8C05CA59C4F9AE02.roa (hash: PHAPD39R0/+5V+WCmlH3xcXfFFqLnGp5Euy8i5sqtnc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:40:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 401 (0x191) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91374BB, serialNumber=B312C22F3D0B97BAAF3273E5C66B8F140203E2F9 Validity Not Before: Nov 5 03:40:52 2025 GMT Not After : Nov 12 03:40:52 2025 GMT Subject: CN=690ac744-7f2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:24:75:18:5f:c6:fc:60:b4:10:fa:34:20:ed: 1a:a0:e2:fd:02:4a:62:da:9b:3a:2d:40:29:84:48: 17:88:57:78:57:42:f2:10:0e:1d:03:78:77:dc:b8: 3a:2c:e5:97:d9:0b:7a:dc:f7:30:25:3c:e8:0d:6b: 60:33:d7:7d:4e:73:e0:32:63:44:82:7b:45:08:ef: 1f:74:24:af:7b:08:0a:33:69:bb:b0:c2:04:23:10: 5d:d5:1e:2a:9c:be:9e:06:a8:27:3e:19:c8:2d:3d: 0a:e0:07:23:44:dd:e9:6a:93:1e:51:c6:3c:0f:fe: 17:7f:17:70:aa:54:0f:00:5d:dc:71:01:54:a1:c0: 96:9c:e9:c9:f9:c4:4a:c2:9d:37:af:e9:3d:86:20: 8b:c5:99:7e:ff:2f:3c:8e:ba:fe:a8:03:94:f9:68: 2d:a8:e4:53:e4:87:1d:a9:9b:dd:c0:9a:fc:45:88: ff:5b:fd:e0:10:b1:a1:7f:1d:e7:5f:9d:7e:18:e0: c9:c4:71:2b:b2:92:cd:6a:03:c9:ec:54:c0:e0:50: 5a:09:09:59:45:49:9a:3b:3b:66:70:bf:34:a0:ed: 0c:f3:cb:4b:5e:00:73:c5:32:f1:76:1f:52:d4:7f: 0e:01:fd:72:59:cc:e1:c2:84:85:5b:2c:13:0e:a7: 5e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:B0:47:8F:38:D8:F4:7B:33:3F:AA:BE:81:2C:8B:9B:90:30:7B:36 X509v3 Authority Key Identifier: keyid:B3:12:C2:2F:3D:0B:97:BA:AF:32:73:E5:C6:6B:8F:14:02:03:E2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxLCLz0Ll7qvMnPlxmuPFAID4vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91374BB/648542C85B6A11EE80D36B54C4F9AE02/sxLCLz0Ll7qvMnPlxmuPFAID4vk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:bc:d6:ad:08:28:9a:96:84:78:f5:70:74:db:68:d2:01:c3: b8:4a:09:70:3a:f7:9f:cf:96:96:37:fe:a3:ac:0e:20:88:9b: 90:21:9c:0a:c2:77:9b:df:d1:88:6c:35:1f:76:ae:d4:38:47: 33:68:6f:75:6b:ca:72:75:3a:92:93:d9:bc:01:58:1a:8f:b3: a6:67:5c:00:38:2b:c2:5a:7d:14:ad:1c:b8:b9:5f:f6:a3:3f: 24:d8:c7:32:c8:53:c1:78:da:4a:06:0b:ad:1e:1a:3d:14:6f: a2:6f:57:4e:cd:71:3f:a9:de:22:da:1a:8b:1b:37:16:46:5a: f5:d1:e7:5d:9e:ba:ae:0f:5f:a7:ed:43:77:16:ae:65:c9:17: e3:6e:e5:fb:5e:ca:67:53:a0:27:b3:d4:18:d8:d0:86:6d:67: 8e:2e:d5:4f:f6:87:5a:ac:4e:44:98:06:8f:ff:28:bf:1a:ed: 2b:e7:d0:b6:9f:0b:7f:79:73:95:49:bb:00:47:f5:66:4b:fc: 3e:ab:08:dd:4e:db:47:fc:4b:6d:54:cb:0c:30:13:67:89:95: 03:3c:f3:6a:32:96:91:22:9d:30:10:93:c7:4a:46:7d:0e:88: 80:2d:bb:86:ca:dd:e2:fa:d1:ab:14:25:47:69:1c:94:01:24: fb:d8:18:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc0QkIxMTAvBgNVBAUTKEIzMTJDMjJGM0QwQjk3QkFBRjMyNzNFNUM2NkI4RjE0 MDIwM0UyRjkwHhcNMjUxMTA1MDM0MDUyWhcNMjUxMTEyMDM0MDUyWjAYMRYwFAYD VQQDEw02OTBhYzc0NC03ZjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuiR1GF/G/GC0EPo0IO0aoOL9Akpi2ps6LUAphEgXiFd4V0LyEA4dA3h33Lg6 LOWX2Qt63PcwJTzoDWtgM9d9TnPgMmNEgntFCO8fdCSvewgKM2m7sMIEIxBd1R4q nL6eBqgnPhnILT0K4AcjRN3papMeUcY8D/4XfxdwqlQPAF3ccQFUocCWnOnJ+cRK wp03r+k9hiCLxZl+/y88jrr+qAOU+WgtqORT5IcdqZvdwJr8RYj/W/3gELGhfx3n X51+GODJxHErspLNagPJ7FTA4FBaCQlZRUmaOztmcL80oO0M88tLXgBzxTLxdh9S 1H8OAf1yWczhwoSFWywTDqde+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNmwR484 2PR7Mz+qvoEsi5uQMHs2MB8GA1UdIwQYMBaAFLMSwi89C5e6rzJz5cZrjxQCA+L5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzRCQi82NDg1NDJDODVC NkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3cXZNblBseG11UEZBSUQ0 dmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4TENMejBMbDdxdk1uUGx4bXVQRkFJRDR2ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NzRCQi82NDg1NDJDODVCNkExMUVFODBEMzZCNTRDNEY5QUUwMi9zeExDTHowTGw3 cXZNblBseG11UEZBSUQ0dmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrvNatCCialoR49XB022jSAcO4SglwOvefz5aWN/6jrA4giJuQIZwK wneb39GIbDUfdq7UOEczaG91a8pydTqSk9m8AVgaj7OmZ1wAOCvCWn0UrRy4uV/2 oz8k2McyyFPBeNpKBgutHho9FG+ib1dOzXE/qd4i2hqLGzcWRlr10eddnrquD1+n 7UN3Fq5lyRfjbuX7XspnU6Ans9QY2NCGbWeOLtVP9odarE5EmAaP/yi/Gu0r59C2 nwt/eXOVSbsAR/VmS/w+qwjdTttH/EttVMsMMBNniZUDPPNqMpaRIp0wEJPHSkZ9 DoiALbuGyt3i+tGrFCVHaRyUAST72Bgu -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:39 2025 by rpki-client