$ rpki-client -vvf rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft File: a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft (raw, json) Hash identifier: uue9M8YVEH7qnL3ft25VQkjM65jzSVVhAulvRWBYjRQ= Subject key identifier: AE:F3:21:E1:35:50:0C:72:20:FE:C1:D4:CF:5B:C3:99:90:01:0F:07 Authority key identifier: 6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 Certificate issuer: /CN=A91931EA/serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Certificate serial: 08C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft Manifest number: 08BD Signing time: Sun 02 Nov 2025 20:25:14 +0000 Manifest this update: Sun 02 Nov 2025 20:25:14 +0000 Manifest next update: Sun 09 Nov 2025 20:25:14 +0000 Files and hashes: 1: a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl (hash: gADVipcsBciXQJBoYHIrJ4IRz19DYNDgEHlVK6UZAhI=) 2: D0BC8E28C4B511EA8323912BC4F9AE02.roa (hash: MIyBunftYkQco/m/ADmv4S1fyRxTgeEhYhl9wBxnLIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2244 (0x8c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91931EA, serialNumber=6BF9637C581C534B4BA638CDC879C0A7EA7A4F02 Validity Not Before: Nov 2 20:25:14 2025 GMT Not After : Nov 9 20:25:14 2025 GMT Subject: CN=6907be2a-d8c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1c:30:2f:d3:e7:ac:72:f3:3e:84:d7:0c:eb: 5c:6f:1b:e5:da:53:65:1a:eb:00:d1:8b:ce:99:42: 6b:4f:0b:f1:b7:7b:6d:0c:4d:fa:51:a0:24:50:a2: 81:24:35:cb:74:e1:67:ac:1f:da:9d:d1:e8:6f:84: 17:39:d0:d2:a4:b6:1f:47:0f:3d:22:d9:ce:9c:af: bc:a9:fe:f4:b1:4b:5d:c6:5d:6e:e2:1c:44:40:8c: 9c:b6:7c:a7:9e:b5:43:d0:aa:89:12:c3:2d:8a:30: 1a:4f:6b:09:d2:92:95:0e:74:ae:dc:13:a1:05:06: 53:f3:17:80:1b:5e:0f:d0:db:13:d7:3f:0d:c3:43: 77:1c:0a:a2:89:ab:8b:8a:1d:c4:b6:d2:34:26:8b: 4b:4d:1d:95:fd:7f:5f:0f:eb:a2:0c:58:23:24:70: 9c:13:a0:ac:21:b3:d5:7a:cc:54:a4:31:74:c1:86: 81:7b:16:c7:02:cf:c8:0a:cb:65:45:3e:f1:71:5e: ff:45:53:de:ff:c2:b1:4f:1a:9a:04:63:bc:8f:28: 20:ed:7f:d0:58:bb:da:84:12:cb:23:85:1c:de:9e: 74:b1:2f:fc:27:d6:91:bb:84:35:9c:ea:de:87:bb: 77:16:23:4b:66:33:de:a7:d9:0a:74:92:18:cf:0b: e7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:F3:21:E1:35:50:0C:72:20:FE:C1:D4:CF:5B:C3:99:90:01:0F:07 X509v3 Authority Key Identifier: keyid:6B:F9:63:7C:58:1C:53:4B:4B:A6:38:CD:C8:79:C0:A7:EA:7A:4F:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a_ljfFgcU0tLpjjNyHnAp-p6TwI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91931EA/A2398F20C4B411EAA78B422AC4F9AE02/a_ljfFgcU0tLpjjNyHnAp-p6TwI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:ab:c6:55:15:8e:e8:cf:a5:8d:76:a8:bb:09:69:fd:eb:f5: 9f:4a:c6:68:87:78:cd:1b:74:51:b4:81:c2:a6:a9:8b:e5:9e: a6:27:73:47:a2:5e:95:9f:80:13:6b:0e:5c:81:b6:d0:b3:e7: 9f:dc:04:bd:b1:18:56:84:ea:3a:01:a9:14:b7:2f:dc:04:c8: c1:59:2c:ee:27:00:ec:0e:db:26:da:81:eb:76:e4:e5:72:01: 60:98:fc:04:f4:8c:b7:1f:0e:14:f1:aa:b4:84:2c:7e:95:28: a4:2e:e3:63:5a:2b:04:1c:11:76:ec:ba:6d:d3:6f:39:a8:77: 7c:7c:ca:23:3b:23:f7:41:8d:9d:75:c1:fc:13:01:46:c6:82: 30:c5:17:89:bf:1a:1d:cb:74:27:f4:7c:d2:65:60:39:2b:c8: 28:f7:31:58:c7:9e:0f:16:6c:7f:80:f6:4f:c2:f8:45:8f:58: 83:af:3e:d3:61:0c:3f:20:0e:d5:e3:60:44:a7:c9:31:99:3b: b0:46:be:40:47:a6:17:74:89:79:e9:d9:a8:d5:e5:54:5d:bc: b9:bc:38:bb:ef:5b:3e:e6:36:79:25:32:0c:b5:59:f5:f5:ec: e9:8d:89:a8:60:ac:50:3c:bd:bf:38:62:11:32:df:2c:6a:c1: 43:2e:4b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTMxRUExMTAvBgNVBAUTKDZCRjk2MzdDNTgxQzUzNEI0QkE2MzhDREM4NzlDMEE3 RUE3QTRGMDIwHhcNMjUxMTAyMjAyNTE0WhcNMjUxMTA5MjAyNTE0WjAYMRYwFAYD VQQDEw02OTA3YmUyYS1kOGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmBwwL9PnrHLzPoTXDOtcbxvl2lNlGusA0YvOmUJrTwvxt3ttDE36UaAkUKKB JDXLdOFnrB/andHob4QXOdDSpLYfRw89ItnOnK+8qf70sUtdxl1u4hxEQIyctnyn nrVD0KqJEsMtijAaT2sJ0pKVDnSu3BOhBQZT8xeAG14P0NsT1z8Nw0N3HAqiiauL ih3EttI0JotLTR2V/X9fD+uiDFgjJHCcE6CsIbPVesxUpDF0wYaBexbHAs/ICstl RT7xcV7/RVPe/8KxTxqaBGO8jygg7X/QWLvahBLLI4Uc3p50sS/8J9aRu4Q1nOre h7t3FiNLZjPep9kKdJIYzwvnGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK7zIeE1 UAxyIP7B1M9bw5mQAQ8HMB8GA1UdIwQYMBaAFGv5Y3xYHFNLS6Y4zch5wKfqek8C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MzFFQS9BMjM5OEYyMEM0 QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1UwdExwampOeUhuQXAtcDZU d0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FfbGpmRmdjVTB0THBqak55SG5BcC1wNlR3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MzFFQS9BMjM5OEYyMEM0QjQxMUVBQTc4QjQyMkFDNEY5QUUwMi9hX2xqZkZnY1Uw dExwampOeUhuQXAtcDZUd0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhq8ZVFY7oz6WNdqi7CWn96/WfSsZoh3jNG3RRtIHCpqmL5Z6mJ3NH ol6Vn4ATaw5cgbbQs+ef3AS9sRhWhOo6AakUty/cBMjBWSzuJwDsDtsm2oHrduTl cgFgmPwE9Iy3Hw4U8aq0hCx+lSikLuNjWisEHBF27Lpt0285qHd8fMojOyP3QY2d dcH8EwFGxoIwxReJvxody3Qn9HzSZWA5K8go9zFYx54PFmx/gPZPwvhFj1iDrz7T YQw/IA7V42BEp8kxmTuwRr5AR6YXdIl56dmo1eVUXby5vDi771s+5jZ5JTIMtVn1 9ezpjYmoYKxQPL2/OGIRMt8sasFDLkuH -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:30 2025 by rpki-client