$ rpki-client -vvf rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft File: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft (raw, json) Hash identifier: p5BpzjWPWpnNcI3cYl99iI9fQcPVL7kbLvfFFnCP4dg= Subject key identifier: 1F:7E:AF:CF:71:91:16:8B:FE:6F:4A:79:1D:FF:DA:30:44:12:CC:42 Authority key identifier: 00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB Certificate issuer: /CN=A91735C9/serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Certificate serial: 0BA4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft Manifest number: 0B9A Signing time: Sun 02 Nov 2025 18:57:39 +0000 Manifest this update: Sun 02 Nov 2025 18:57:39 +0000 Manifest next update: Sun 09 Nov 2025 18:57:39 +0000 Files and hashes: 1: AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl (hash: eDPtD+Q3pUQZzAmWJNyzkmCpeSPTTDjHkQJHYsOqjTA=) 2: 32DDB7DA368B11EA9713E971C4F9AE02.roa (hash: sug/yLBQ+OjqkHil53A1fXubXeb6H+1TbTT+YvNP/YQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2980 (0xba4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91735C9, serialNumber=006323A8DD01DEA95BD1AE44C9FFC453404425CB Validity Not Before: Nov 2 18:57:39 2025 GMT Not After : Nov 9 18:57:39 2025 GMT Subject: CN=6907a9a3-1093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:17:e4:3a:1b:d9:72:3d:c3:74:b6:7e:62:0e: cb:90:ef:8b:c7:e9:cb:dd:93:d5:42:ec:d4:60:c5: db:27:d6:40:93:a9:66:90:f0:54:34:c8:ca:af:cf: 76:8a:0f:c4:45:e5:3c:75:2f:fa:4e:19:f6:8a:68: f7:42:a2:e2:5a:cd:1e:93:3d:2f:e3:dc:dc:8c:02: 15:f7:9d:3a:95:d2:55:35:fc:a3:b5:89:4e:b8:21: 61:ab:4d:f4:54:7a:e0:98:04:75:5c:60:da:25:18: 5c:c4:1f:df:2f:af:8e:80:e2:16:c6:f9:6e:7a:e9: 0a:59:38:3d:e9:13:fa:78:68:f2:2b:aa:3b:d9:da: 97:f4:11:f4:94:0a:71:75:44:8a:6e:22:e7:82:30: 5c:d6:95:48:e2:d6:27:5d:64:15:08:7b:05:c7:6b: a0:9c:03:4f:e6:72:b3:fb:c4:d0:2a:27:d1:aa:7d: e0:44:84:97:10:fb:56:85:a8:dd:6e:a0:92:e5:55: 14:16:91:5e:f2:b7:76:e8:3a:00:db:6c:9a:83:11: c3:7c:d8:76:e3:49:c2:b9:f2:6e:95:1e:25:48:5d: b1:ce:15:30:6d:0b:1e:ec:4b:61:1a:ad:3d:ca:70: ed:2c:d1:e4:4c:ac:bc:1e:e9:3b:97:cb:97:43:87: 7a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7E:AF:CF:71:91:16:8B:FE:6F:4A:79:1D:FF:DA:30:44:12:CC:42 X509v3 Authority Key Identifier: keyid:00:63:23:A8:DD:01:DE:A9:5B:D1:AE:44:C9:FF:C4:53:40:44:25:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91735C9/EA96E6D435C911EA8E5A2F16C4F9AE02/AGMjqN0B3qlb0a5Eyf_EU0BEJcs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:47:a3:62:cb:47:9f:54:2e:56:3e:2e:36:69:90:03:ce:c7: 08:00:28:91:f7:13:4e:9b:74:b3:6b:89:bf:f5:ae:f9:6d:23: f8:18:f7:0c:1d:1f:a3:33:0c:70:68:73:b3:ce:23:ff:db:2f: 26:5e:d6:1d:08:22:5b:c3:2c:a6:6b:9f:9a:44:4d:3b:9c:d1: 2f:0c:8b:ab:0e:c1:12:06:dd:57:16:c7:4e:78:35:f0:09:b5: 8b:80:e8:f5:d4:5f:bd:7d:58:e9:d9:51:26:0f:fd:7f:b0:90: c1:1d:a8:01:4f:aa:ad:a8:a0:79:41:ba:5b:eb:7a:a7:bb:ca: 6b:70:6e:3f:f8:88:09:ef:36:45:f6:97:fc:15:80:86:17:17: 62:51:a5:2c:ac:78:5e:52:e9:fb:99:24:0c:d4:0f:ac:11:23: 83:95:a3:b6:87:02:72:93:f4:a7:0b:2b:ab:ec:cc:d8:e3:2e: 29:7d:d3:dd:02:cf:a8:8a:d4:e0:9c:4b:8c:01:58:07:15:1f: 20:13:95:32:e3:79:df:b8:82:b6:94:11:b3:2b:3d:b3:7e:07: cd:7f:4f:81:fc:7e:8c:5d:bb:ce:9d:13:43:15:65:4d:55:44: 05:27:68:12:5b:af:67:e6:46:ca:41:95:ed:e2:32:d9:8f:06: 2a:f7:53:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC6QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzM1QzkxMTAvBgNVBAUTKDAwNjMyM0E4REQwMURFQTk1QkQxQUU0NEM5RkZDNDUz NDA0NDI1Q0IwHhcNMjUxMTAyMTg1NzM5WhcNMjUxMTA5MTg1NzM5WjAYMRYwFAYD VQQDEw02OTA3YTlhMy0xMDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BfkOhvZcj3DdLZ+Yg7LkO+Lx+nL3ZPVQuzUYMXbJ9ZAk6lmkPBUNMjKr892 ig/EReU8dS/6Thn2imj3QqLiWs0ekz0v49zcjAIV9506ldJVNfyjtYlOuCFhq030 VHrgmAR1XGDaJRhcxB/fL6+OgOIWxvlueukKWTg96RP6eGjyK6o72dqX9BH0lApx dUSKbiLngjBc1pVI4tYnXWQVCHsFx2ugnANP5nKz+8TQKifRqn3gRISXEPtWhajd bqCS5VUUFpFe8rd26DoA22yagxHDfNh240nCufJulR4lSF2xzhUwbQse7EthGq09 ynDtLNHkTKy8Huk7l8uXQ4d6WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB9+r89x kRaL/m9KeR3/2jBEEsxCMB8GA1UdIwQYMBaAFABjI6jdAd6pW9GuRMn/xFNARCXL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MzVDOS9FQTk2RTZENDM1 QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNxbGIwYTVFeWZfRVUwQkVK Y3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FHTWpxTjBCM3FsYjBhNUV5Zl9FVTBCRUpjcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzVDOS9FQTk2RTZENDM1QzkxMUVBOEU1QTJGMTZDNEY5QUUwMi9BR01qcU4wQjNx bGIwYTVFeWZfRVUwQkVKY3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAR6Niy0efVC5WPi42aZADzscIACiR9xNOm3Sza4m/9a75bSP4GPcM HR+jMwxwaHOzziP/2y8mXtYdCCJbwyyma5+aRE07nNEvDIurDsESBt1XFsdOeDXw CbWLgOj11F+9fVjp2VEmD/1/sJDBHagBT6qtqKB5Qbpb63qnu8prcG4/+IgJ7zZF 9pf8FYCGFxdiUaUsrHheUun7mSQM1A+sESODlaO2hwJyk/SnCyur7MzY4y4pfdPd As+oitTgnEuMAVgHFR8gE5Uy43nfuIK2lBGzKz2zfgfNf0+B/H6MXbvOnRNDFWVN VUQFJ2gSW69n5kbKQZXt4jLZjwYq91Mj -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:12 2025 by rpki-client