$ rpki-client -vvf rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft File: 91FDq1voML6TvNd20zKw_Vt4fjs.mft (raw, json) Hash identifier: QNUk0BF4BeHGZRULDKoPhJuKWbfKRjGsyrTdVdlypSs= Subject key identifier: FF:2E:B6:6E:0A:87:B9:BD:0B:75:43:7C:0E:B3:30:ED:FD:96:56:1D Authority key identifier: F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B Certificate issuer: /CN=A91717C0/serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Certificate serial: 0828 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft Manifest number: 0821 Signing time: Tue 04 Nov 2025 20:56:56 +0000 Manifest this update: Tue 04 Nov 2025 20:56:55 +0000 Manifest next update: Tue 11 Nov 2025 20:56:55 +0000 Files and hashes: 1: 91FDq1voML6TvNd20zKw_Vt4fjs.crl (hash: KapMK3ozCYXdH40esDEiEOhKRuPgByKB/VmznEliexQ=) 2: 94BF06A8F31D11EA8D62F57EC4F9AE02.roa (hash: QmpltAdf0nLFZT8gwBfGo76407/WjBUywxAPLq9iwsw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:56:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91717C0, serialNumber=F75143AB5BE830BE93BCD776D332B0FD5B787E3B Validity Not Before: Nov 4 20:56:55 2025 GMT Not After : Nov 11 20:56:55 2025 GMT Subject: CN=690a6897-c28c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:05:02:a9:bc:c7:71:00:8c:5a:ab:62:4e:bd: c6:59:c7:a4:36:10:8f:09:73:3a:26:93:2b:a5:d1: fb:ed:c7:39:bb:f4:23:96:77:64:ae:44:3e:ab:36: 8d:42:fb:27:29:e1:39:64:69:0a:99:3a:13:cc:18: d7:67:6d:4f:39:63:83:e7:80:4b:f4:98:1d:bb:98: ed:9f:bc:05:04:0b:90:23:59:35:45:10:03:0c:df: 22:55:77:fb:9a:cc:73:70:dc:fb:50:6c:25:da:24: ca:11:3d:46:78:71:55:f8:c5:f4:c1:11:02:36:18: cc:1e:9f:73:bf:02:2b:e2:77:33:55:c7:61:f7:f9: 40:ad:62:6d:b9:18:c7:6a:71:56:08:ba:1f:0e:87: 90:19:13:fe:72:55:56:c2:c8:be:95:0b:9c:14:8d: 46:c9:aa:fc:bd:ad:c6:05:90:5c:3d:5c:35:a8:3d: 79:84:6a:0c:b8:c0:a2:f9:49:c1:5a:50:ce:23:b5: 22:db:2b:c1:c7:f9:0c:c6:34:2c:2b:7d:00:f9:19: 6f:68:b1:f5:35:d2:37:a3:a0:0d:52:04:dd:b6:76: 8d:3f:1c:c6:06:c6:5f:4e:65:68:a0:90:fb:ec:c5: 11:e8:1d:74:8b:12:d1:f1:be:7c:1e:28:12:60:08: 29:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2E:B6:6E:0A:87:B9:BD:0B:75:43:7C:0E:B3:30:ED:FD:96:56:1D X509v3 Authority Key Identifier: keyid:F7:51:43:AB:5B:E8:30:BE:93:BC:D7:76:D3:32:B0:FD:5B:78:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/91FDq1voML6TvNd20zKw_Vt4fjs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91717C0/018EBE58F31A11EABC00CC5CC4F9AE02/91FDq1voML6TvNd20zKw_Vt4fjs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d1:e5:a8:cf:d4:2c:ef:c0:79:a2:f1:95:b6:b9:61:f2:e9:cb: c7:7b:53:f8:5e:c5:0a:e3:92:2a:5d:37:fa:fa:c4:94:08:53: 2c:be:d1:a1:0f:5a:bc:94:68:f5:51:ae:56:24:5c:33:e0:5c: ea:e6:51:81:d0:c6:91:f6:9c:8e:67:76:60:64:0e:4c:54:dd: 90:1f:2b:4d:fa:07:e5:8f:9d:58:37:ec:e4:85:50:47:1e:f8: 26:e8:b4:06:cd:00:f4:c0:ac:1b:40:66:31:86:8d:68:4c:94: 70:eb:da:17:9f:03:cb:ee:20:d9:de:54:d7:81:0c:9d:db:d7: cb:0c:73:92:b5:30:8f:38:e4:5d:d4:c7:82:2b:fb:2b:48:e3: 04:28:76:23:31:ea:21:04:9a:7c:49:4f:00:05:05:b0:7a:84: 0a:72:7a:e0:15:5a:2d:73:c6:90:71:ba:3b:e4:30:99:00:be: 56:e6:e1:c6:c0:51:ee:8a:5b:d5:aa:1a:1c:9a:8f:ef:81:ff: 00:08:f7:68:e4:87:b0:ea:23:62:c2:2d:ab:0a:a0:6e:0c:e0: 9f:73:ff:f4:bc:49:2e:a5:70:52:86:35:2d:d4:b9:19:cc:2e: 72:7b:34:be:3d:7d:1f:3b:8d:08:de:bd:3a:ed:bf:af:a8:7f: 45:1d:ac:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE3QzAxMTAvBgNVBAUTKEY3NTE0M0FCNUJFODMwQkU5M0JDRDc3NkQzMzJCMEZE NUI3ODdFM0IwHhcNMjUxMTA0MjA1NjU1WhcNMjUxMTExMjA1NjU1WjAYMRYwFAYD VQQDEw02OTBhNjg5Ny1jMjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0QUCqbzHcQCMWqtiTr3GWcekNhCPCXM6JpMrpdH77cc5u/QjlndkrkQ+qzaN QvsnKeE5ZGkKmToTzBjXZ21POWOD54BL9Jgdu5jtn7wFBAuQI1k1RRADDN8iVXf7 msxzcNz7UGwl2iTKET1GeHFV+MX0wRECNhjMHp9zvwIr4nczVcdh9/lArWJtuRjH anFWCLofDoeQGRP+clVWwsi+lQucFI1Gyar8va3GBZBcPVw1qD15hGoMuMCi+UnB WlDOI7Ui2yvBx/kMxjQsK30A+RlvaLH1NdI3o6ANUgTdtnaNPxzGBsZfTmVooJD7 7MUR6B10ixLR8b58HigSYAgprQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP8utm4K h7m9C3VDfA6zMO39llYdMB8GA1UdIwQYMBaAFPdRQ6tb6DC+k7zXdtMysP1beH47 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTdDMC8wMThFQkU1OEYz MUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01MNlR2TmQyMHpLd19WdDRm anMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzkxRkRxMXZvTUw2VHZOZDIwekt3X1Z0NGZqcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTdDMC8wMThFQkU1OEYzMUExMUVBQkMwMENDNUNDNEY5QUUwMi85MUZEcTF2b01M NlR2TmQyMHpLd19WdDRmanMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDR5ajP1CzvwHmi8ZW2uWHy6cvHe1P4XsUK45IqXTf6+sSUCFMsvtGh D1q8lGj1Ua5WJFwz4Fzq5lGB0MaR9pyOZ3ZgZA5MVN2QHytN+gflj51YN+zkhVBH Hvgm6LQGzQD0wKwbQGYxho1oTJRw69oXnwPL7iDZ3lTXgQyd29fLDHOStTCPOORd 1MeCK/srSOMEKHYjMeohBJp8SU8ABQWweoQKcnrgFVotc8aQcbo75DCZAL5W5uHG wFHuilvVqhocmo/vgf8ACPdo5Iew6iNiwi2rCqBuDOCfc//0vEkupXBShjUt1LkZ zC5yezS+PX0fO40I3r067b+vqH9FHaym -----END CERTIFICATE-----Generated at Wed Nov 5 00:09:07 2025 by rpki-client