$ rpki-client -vvf rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft File: SyWxRyDwREuz1mj5Y1hDVPf6whM.mft (raw, json) Hash identifier: Zxt/uSNc34VXFpgo40LlFyMaMMgernPthWl7iNWx/jg= Subject key identifier: 1A:AB:23:ED:0E:99:97:D4:9F:2A:33:6D:7A:E3:E1:7D:43:B1:35:A8 Authority key identifier: 4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 Certificate issuer: /CN=A91650EA/serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Certificate serial: 0139 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft Manifest number: 0137 Signing time: Mon 03 Nov 2025 04:28:11 +0000 Manifest this update: Mon 03 Nov 2025 04:28:11 +0000 Manifest next update: Mon 10 Nov 2025 04:28:10 +0000 Files and hashes: 1: SyWxRyDwREuz1mj5Y1hDVPf6whM.crl (hash: YQTPsnuxNJb4JrYsxVjlAf2UqxZ6Q0otcO0kFIa1xrc=) 2: D0F245E0D76711EE99C72C29C4F9AE02.roa (hash: 9VKla165NEuwDujrYh1FdBvK2ZH/U/K5NZJL+RjIV7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:28:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91650EA, serialNumber=4B25B14720F0444BB3D668F963584354F7FAC213 Validity Not Before: Nov 3 04:28:11 2025 GMT Not After : Nov 10 04:28:10 2025 GMT Subject: CN=69082f5b-c8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e6:90:d3:57:36:38:65:5c:2d:da:43:50:ec: 93:2e:db:2a:ab:2d:23:32:99:e3:f6:61:e4:56:37: e7:39:fc:6e:27:77:1c:e7:ab:43:8e:72:a4:9e:5f: 3b:cf:2b:84:f5:8a:52:ff:c2:a2:78:6d:51:8c:16: 76:99:31:b2:2f:2f:a2:4b:bb:0a:d6:e1:c7:62:21: 81:a8:b9:88:a0:10:9c:92:1b:02:64:70:36:b4:b7: 85:06:c4:ab:c9:9b:74:e0:7b:6e:e1:30:9b:76:af: cc:46:c0:1b:4f:be:8e:53:65:66:4e:52:40:ff:3f: b1:36:0e:23:35:9d:bf:44:71:ec:c2:b9:17:43:68: 5e:ef:6f:56:59:0e:e5:fb:b0:61:06:5b:0f:8a:4d: ce:ba:c7:30:82:2d:47:fd:ff:2c:54:7f:c0:4c:53: 8e:7e:e7:5b:86:7b:1a:ad:7e:6a:77:03:d9:57:9b: 6b:37:a9:04:a3:23:e2:7b:a1:3b:3f:e2:2f:ad:8f: 41:2d:96:27:bc:ad:8c:3c:30:0b:d4:76:93:73:43: a4:22:b4:12:ad:9c:bb:00:e7:f6:8b:01:93:19:8b: 9c:40:76:cb:11:fc:c2:f2:ab:2c:4d:f3:09:dd:f1: 5c:dc:52:36:d1:39:aa:8f:fe:3e:f7:fb:09:b3:ae: df:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AB:23:ED:0E:99:97:D4:9F:2A:33:6D:7A:E3:E1:7D:43:B1:35:A8 X509v3 Authority Key Identifier: keyid:4B:25:B1:47:20:F0:44:4B:B3:D6:68:F9:63:58:43:54:F7:FA:C2:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SyWxRyDwREuz1mj5Y1hDVPf6whM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91650EA/521D1AD8D76711EEAF22C066C4F9AE02/SyWxRyDwREuz1mj5Y1hDVPf6whM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:22:8d:e4:24:aa:f6:54:4a:12:5c:08:e8:6f:2e:4d:b3:04: 1f:a4:30:c1:4f:1e:45:53:29:59:19:91:ec:e6:e8:7d:db:5e: fc:c0:b6:55:e2:96:7f:82:f7:2a:df:41:bf:fc:d8:00:27:39: c0:e6:e6:b3:17:10:81:9c:74:c6:cf:e8:8f:be:b6:a2:16:bf: f4:0a:5e:8a:8f:1d:75:46:6f:05:80:6a:4a:c3:ef:8c:47:39: 1a:a8:ba:58:c6:68:59:e9:72:83:25:2d:93:c3:6a:4e:3b:e2: 88:07:6d:49:c7:72:30:d3:bd:9e:5c:fa:8d:83:c2:53:66:32: 97:fe:e0:67:a8:ad:3a:df:c7:05:64:1f:1d:ff:8e:0a:22:0b: e0:1f:4c:57:2f:86:a9:d8:50:95:88:9e:82:0e:7f:66:a0:39: 75:fe:13:96:d4:64:fe:ae:62:c2:ce:ac:76:8f:d7:39:b9:3d: 6a:59:d0:a2:0b:d6:0d:cb:23:00:0a:a0:fa:1f:e3:c5:4d:05: 92:11:78:bd:50:a1:d8:88:bd:64:d3:d1:7f:f7:fc:86:72:9f: ad:20:ac:fb:e2:3c:44:e9:32:fb:f8:b7:a4:87:85:79:06:1a: f9:d0:37:42:7d:c4:34:79:23:52:f3:0f:05:b1:89:ec:40:fb: cb:d6:7a:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjUwRUExMTAvBgNVBAUTKDRCMjVCMTQ3MjBGMDQ0NEJCM0Q2NjhGOTYzNTg0MzU0 RjdGQUMyMTMwHhcNMjUxMTAzMDQyODExWhcNMjUxMTEwMDQyODEwWjAYMRYwFAYD VQQDEw02OTA4MmY1Yi1jOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0OaQ01c2OGVcLdpDUOyTLtsqqy0jMpnj9mHkVjfnOfxuJ3cc56tDjnKknl87 zyuE9YpS/8KieG1RjBZ2mTGyLy+iS7sK1uHHYiGBqLmIoBCckhsCZHA2tLeFBsSr yZt04Htu4TCbdq/MRsAbT76OU2VmTlJA/z+xNg4jNZ2/RHHswrkXQ2he729WWQ7l +7BhBlsPik3Ouscwgi1H/f8sVH/ATFOOfudbhnsarX5qdwPZV5trN6kEoyPie6E7 P+IvrY9BLZYnvK2MPDAL1HaTc0OkIrQSrZy7AOf2iwGTGYucQHbLEfzC8qssTfMJ 3fFc3FI20Tmqj/4+9/sJs67fBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqrI+0O mZfUnyozbXrj4X1DsTWoMB8GA1UdIwQYMBaAFEslsUcg8ERLs9Zo+WNYQ1T3+sIT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTBFQS81MjFEMUFEOEQ3 NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JFdXoxbWo1WTFoRFZQZjZ3 aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N5V3hSeUR3UkV1ejFtajVZMWhEVlBmNndoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTBFQS81MjFEMUFEOEQ3NjcxMUVFQUYyMkMwNjZDNEY5QUUwMi9TeVd4UnlEd1JF dXoxbWo1WTFoRFZQZjZ3aE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtIo3kJKr2VEoSXAjoby5NswQfpDDBTx5FUylZGZHs5uh92178wLZV 4pZ/gvcq30G//NgAJznA5uazFxCBnHTGz+iPvraiFr/0Cl6Kjx11Rm8FgGpKw++M RzkaqLpYxmhZ6XKDJS2Tw2pOO+KIB21Jx3Iw072eXPqNg8JTZjKX/uBnqK0638cF ZB8d/44KIgvgH0xXL4ap2FCViJ6CDn9moDl1/hOW1GT+rmLCzqx2j9c5uT1qWdCi C9YNyyMACqD6H+PFTQWSEXi9UKHYiL1k09F/9/yGcp+tIKz74jxE6TL7+Lekh4V5 Bhr50DdCfcQ0eSNS8w8FsYnsQPvL1npU -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:51 2025 by rpki-client