$ rpki-client -vvf rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft File: MfrsXjAsGCKfmftHpyPypHmHF6w.mft (raw, json) Hash identifier: s1YjqeTwRYF/mQiy1e/3hr634f8mFknto++77vgwuNw= Subject key identifier: DC:0B:D9:89:3B:C8:A8:C5:38:48:DD:CE:E5:22:C6:F9:F3:E9:99:21 Authority key identifier: 31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC Certificate issuer: /CN=A91417B0/serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft Manifest number: 93 Signing time: Wed 05 Nov 2025 06:40:57 +0000 Manifest this update: Wed 05 Nov 2025 06:40:57 +0000 Manifest next update: Wed 12 Nov 2025 06:40:57 +0000 Files and hashes: 1: MfrsXjAsGCKfmftHpyPypHmHF6w.crl (hash: GFLHQ5Fr+qNm9jNGOVXKlYxqh2gVYnwbdx5v/1vvGcM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91417B0, serialNumber=31FAEC5E302C18229F99FB47A723F2A4798717AC Validity Not Before: Nov 5 06:40:57 2025 GMT Not After : Nov 12 06:40:57 2025 GMT Subject: CN=690af179-540f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:85:26:42:fc:0c:5d:6f:a1:68:10:bd:62:c9: 10:44:ab:6b:32:64:1d:9e:a7:fa:27:fa:63:5b:15: 99:50:b4:69:6b:84:0e:52:9c:cc:7d:e4:fd:b0:3a: 21:fe:9b:f8:38:24:24:1f:99:c3:b2:10:74:49:60: 58:b2:df:fb:77:41:b0:c2:c0:83:04:b3:17:85:4c: ba:ea:b2:aa:ba:37:14:77:8e:48:05:68:e1:47:47: 6f:82:09:26:0e:ef:b6:3e:8c:84:6d:15:42:9d:ee: 44:d7:41:80:7e:40:3b:9a:68:71:b7:f2:0f:34:5d: f0:95:8b:fb:66:7e:77:57:68:59:7a:1c:d0:2b:ba: 96:4f:af:7c:68:39:0b:35:b5:a8:51:e0:43:9e:2a: 7f:e5:29:1e:58:b8:be:af:90:69:55:a1:d9:56:2e: 9d:58:5b:e2:e4:25:b1:ed:93:85:dd:fc:14:4c:60: b6:d0:e9:39:62:63:c4:f9:74:64:cd:c1:af:5f:05: 3e:8f:6f:c0:01:d9:4c:9b:ac:e7:51:e7:7d:ff:d6: 53:3a:a8:91:45:2b:ea:4a:ce:a0:8e:26:29:33:c2: 91:41:76:ba:a6:5e:fb:77:60:26:a7:b4:10:e4:7d: b7:dd:32:cc:f5:2a:79:bb:79:74:c8:9c:67:25:f2: 09:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0B:D9:89:3B:C8:A8:C5:38:48:DD:CE:E5:22:C6:F9:F3:E9:99:21 X509v3 Authority Key Identifier: keyid:31:FA:EC:5E:30:2C:18:22:9F:99:FB:47:A7:23:F2:A4:79:87:17:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfrsXjAsGCKfmftHpyPypHmHF6w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91417B0/EB082472D88311EF954A3D70C4F9AE02/MfrsXjAsGCKfmftHpyPypHmHF6w.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 94:95:ec:8f:75:47:c6:43:f3:6b:ee:00:79:39:41:ed:ae:2f: 8a:cf:9b:7b:36:6f:7f:03:56:23:0b:26:18:65:2e:66:27:d4: 5e:b1:4e:72:b3:93:ba:b7:a4:bc:58:c5:ad:96:07:f5:35:f3: 54:ab:cb:ec:13:0e:65:a3:d6:62:bf:20:d5:3f:86:b8:3f:14: 3d:47:dd:27:ef:b0:88:58:48:59:0b:75:d1:3f:51:1d:67:81: 5c:5c:47:de:c5:dc:ca:2b:b3:ec:0d:c8:a4:d1:1a:47:f6:49: c3:95:b1:72:5c:3a:81:da:26:5c:3b:fc:af:b7:5f:a9:88:f2: 5c:41:58:3d:a8:38:76:24:08:f8:1e:1a:21:e0:36:31:e2:f7: aa:37:51:71:65:5d:44:66:34:9a:f4:ea:3f:18:e7:7b:f4:42: 52:16:d4:e4:98:c0:a8:48:99:1f:c3:07:b7:1d:b2:63:c2:83: e6:d7:e8:50:ac:aa:f0:d5:f2:72:d9:2f:4e:08:73:54:bd:31: 88:9b:12:5a:ba:d9:e2:7b:d8:19:7e:71:c4:60:17:32:b6:e3: ea:ea:62:77:8b:c8:c2:4b:7f:34:6b:08:6d:d2:fe:14:1a:8e: 73:a3:6e:83:0c:62:ea:ab:c3:96:2d:7b:2e:4e:a8:f5:5c:a3: 0f:b3:55:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE3QjAxMTAvBgNVBAUTKDMxRkFFQzVFMzAyQzE4MjI5Rjk5RkI0N0E3MjNGMkE0 Nzk4NzE3QUMwHhcNMjUxMTA1MDY0MDU3WhcNMjUxMTEyMDY0MDU3WjAYMRYwFAYD VQQDEw02OTBhZjE3OS01NDBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IUmQvwMXW+haBC9YskQRKtrMmQdnqf6J/pjWxWZULRpa4QOUpzMfeT9sDoh /pv4OCQkH5nDshB0SWBYst/7d0GwwsCDBLMXhUy66rKqujcUd45IBWjhR0dvggkm Du+2PoyEbRVCne5E10GAfkA7mmhxt/IPNF3wlYv7Zn53V2hZehzQK7qWT698aDkL NbWoUeBDnip/5SkeWLi+r5BpVaHZVi6dWFvi5CWx7ZOF3fwUTGC20Ok5YmPE+XRk zcGvXwU+j2/AAdlMm6znUed9/9ZTOqiRRSvqSs6gjiYpM8KRQXa6pl77d2Amp7QQ 5H233TLM9Sp5u3l0yJxnJfIJOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNwL2Yk7 yKjFOEjdzuUixvnz6ZkhMB8GA1UdIwQYMBaAFDH67F4wLBgin5n7R6cj8qR5hxes MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTdCMC9FQjA4MjQ3MkQ4 ODMxMUVGOTU0QTNENzBDNEY5QUUwMi9NZnJzWGpBc0dDS2ZtZnRIcHlQeXBIbUhG NncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01mcnNYakFzR0NLZm1mdEhweVB5cEhtSEY2dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MTdCMC9FQjA4MjQ3MkQ4ODMxMUVGOTU0QTNENzBDNEY5QUUwMi9NZnJzWGpBc0dD S2ZtZnRIcHlQeXBIbUhGNncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCUleyPdUfGQ/Nr7gB5OUHtri+Kz5t7Nm9/A1YjCyYYZS5mJ9ResU5y s5O6t6S8WMWtlgf1NfNUq8vsEw5lo9ZivyDVP4a4PxQ9R90n77CIWEhZC3XRP1Ed Z4FcXEfexdzKK7PsDcik0RpH9knDlbFyXDqB2iZcO/yvt1+piPJcQVg9qDh2JAj4 Hhoh4DYx4veqN1FxZV1EZjSa9Oo/GOd79EJSFtTkmMCoSJkfwwe3HbJjwoPm1+hQ rKrw1fJy2S9OCHNUvTGImxJautnie9gZfnHEYBcytuPq6mJ3i8jCS380awht0v4U Go5zo26DDGLqq8OWLXsuTqj1XKMPs1V2 -----END CERTIFICATE-----Generated at Wed Nov 5 21:00:46 2025 by rpki-client