$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft File: RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft (raw, json) Hash identifier: jWeI2Uc/PXC/rqoAIj2yh2wpu8rBu609Or1oKBHjvno= Subject key identifier: 36:4D:3B:3B:02:6E:E5:22:BB:B6:7D:9A:A2:F9:AF:DE:8B:65:3C:9E Authority key identifier: 45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A Certificate issuer: /CN=A91A1938/serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Certificate serial: 01D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft Manifest number: 01D3 Signing time: Mon 03 Nov 2025 02:45:56 +0000 Manifest this update: Mon 03 Nov 2025 02:45:56 +0000 Manifest next update: Mon 10 Nov 2025 02:45:56 +0000 Files and hashes: 1: RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl (hash: EGlyyPVla5YtU2TztExfSxxyhWDYnp/K73QRIYL16nQ=) 2: 68ECF3BAEE1911ED9C7CDC63C4F9AE02.roa (hash: BCIBhB1yRhPPINtU+Jvj6+AcCagEYHcs0oGO7PLSo3Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 471 (0x1d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1938, serialNumber=45C9DE254E2E0305D650A50A6BF19268807EF10A Validity Not Before: Nov 3 02:45:56 2025 GMT Not After : Nov 10 02:45:56 2025 GMT Subject: CN=69081764-df40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c1:2f:6e:40:5e:4a:4c:9e:a7:68:bc:57:75: 37:41:a9:f1:e7:e5:74:6c:e3:0a:e0:0c:67:db:80: de:02:68:ce:2d:00:72:ac:18:48:70:19:5d:31:e2: aa:a0:8c:fd:b6:d5:c8:ab:bc:2c:ba:7d:79:7d:51: 37:a2:40:32:b9:30:50:72:b8:95:e6:48:ba:e5:c0: 46:fb:91:05:a0:ca:d3:3b:46:c6:c3:33:58:4d:14: 21:78:09:6d:55:5e:3f:f2:b2:da:3f:bc:65:5b:16: ee:79:15:4f:25:39:35:82:84:a9:e7:00:9b:8a:14: d2:77:60:fe:bb:6d:5d:92:3a:fc:ec:4b:a0:b3:62: e9:a7:ad:58:df:f6:79:95:67:a7:50:c9:c4:a5:b7: ea:20:96:d4:eb:01:3a:4f:59:7a:e0:9e:fc:4a:f1: 8e:2f:68:ca:45:9c:4a:31:91:82:59:75:5a:4b:49: 01:14:69:4e:8e:a1:e3:80:5f:f2:a4:24:cb:b4:2c: cd:ee:2c:bf:4a:31:da:89:25:a4:ca:5c:03:fc:66: 8d:ca:af:b0:e3:73:43:ca:81:31:96:82:d5:63:a9: c8:6f:9a:d3:72:26:a3:7f:6d:7e:49:73:6a:4c:4c: 27:be:b6:89:3b:d4:80:91:14:a6:54:0d:ce:df:7a: d9:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:4D:3B:3B:02:6E:E5:22:BB:B6:7D:9A:A2:F9:AF:DE:8B:65:3C:9E X509v3 Authority Key Identifier: keyid:45:C9:DE:25:4E:2E:03:05:D6:50:A5:0A:6B:F1:92:68:80:7E:F1:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RcneJU4uAwXWUKUKa_GSaIB-8Qo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1938/52684972EE1011ED90657436C4F9AE02/RcneJU4uAwXWUKUKa_GSaIB-8Qo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:c8:62:64:33:4d:38:e2:a5:31:4d:0b:cc:f2:4a:98:08:c7: e3:cc:28:e1:2f:03:e3:7a:2f:b0:42:a5:e6:cb:77:3e:12:22: 64:a5:77:cf:fd:3e:c5:0c:ef:17:39:20:ca:95:1d:d4:e7:84: e7:0a:fc:1e:31:be:e6:e0:76:f1:18:b6:3b:3d:ee:94:a0:b0: 9c:2f:46:ca:85:7c:29:b3:0c:4c:e5:34:d2:d3:ff:be:0b:b7: 0e:aa:6e:ee:09:04:89:fb:c4:36:06:6f:62:db:04:83:be:1e: 69:d4:35:28:78:6d:91:fd:d7:92:d7:25:af:06:3e:ec:52:50: 2c:b6:f3:73:4b:9f:1f:bb:cc:a2:60:2b:20:6b:f6:40:25:11: 7a:c2:95:10:b9:ee:c8:43:c0:a7:18:ab:bd:a6:4b:85:65:57: eb:dc:30:72:89:6a:f8:a4:d5:78:8f:85:4e:93:83:f9:c3:e4: e1:d6:d1:85:27:37:f4:8e:00:fd:4f:61:0c:5f:bd:fc:51:7f: cd:6c:cf:89:c6:fe:25:5b:ba:8d:a4:4b:6b:f1:1f:f8:b8:f4: 64:ed:64:3f:c9:33:cc:2e:49:d3:80:bc:f1:30:5f:6a:c9:49: b9:dc:b4:ab:61:13:65:16:b4:a6:39:2e:a7:68:35:f5:02:19: 94:78:80:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE5MzgxMTAvBgNVBAUTKDQ1QzlERTI1NEUyRTAzMDVENjUwQTUwQTZCRjE5MjY4 ODA3RUYxMEEwHhcNMjUxMTAzMDI0NTU2WhcNMjUxMTEwMDI0NTU2WjAYMRYwFAYD VQQDEw02OTA4MTc2NC1kZjQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAusEvbkBeSkyep2i8V3U3Qanx5+V0bOMK4Axn24DeAmjOLQByrBhIcBldMeKq oIz9ttXIq7wsun15fVE3okAyuTBQcriV5ki65cBG+5EFoMrTO0bGwzNYTRQheAlt VV4/8rLaP7xlWxbueRVPJTk1goSp5wCbihTSd2D+u21dkjr87Eugs2Lpp61Y3/Z5 lWenUMnEpbfqIJbU6wE6T1l64J78SvGOL2jKRZxKMZGCWXVaS0kBFGlOjqHjgF/y pCTLtCzN7iy/SjHaiSWkylwD/GaNyq+w43NDyoExloLVY6nIb5rTciajf21+SXNq TEwnvraJO9SAkRSmVA3O33rZkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDZNOzsC buUiu7Z9mqL5r96LZTyeMB8GA1UdIwQYMBaAFEXJ3iVOLgMF1lClCmvxkmiAfvEK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTkzOC81MjY4NDk3MkVF MTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3WFdVS1VLYV9HU2FJQi04 UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JjbmVKVTR1QXdYV1VLVUthX0dTYUlCLThRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTkzOC81MjY4NDk3MkVFMTAxMUVEOTA2NTc0MzZDNEY5QUUwMi9SY25lSlU0dUF3 WFdVS1VLYV9HU2FJQi04UW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCQyGJkM0044qUxTQvM8kqYCMfjzCjhLwPjei+wQqXmy3c+EiJkpXfP /T7FDO8XOSDKlR3U54TnCvweMb7m4HbxGLY7Pe6UoLCcL0bKhXwpswxM5TTS0/++ C7cOqm7uCQSJ+8Q2Bm9i2wSDvh5p1DUoeG2R/deS1yWvBj7sUlAstvNzS58fu8yi YCsga/ZAJRF6wpUQue7IQ8CnGKu9pkuFZVfr3DByiWr4pNV4j4VOk4P5w+Th1tGF Jzf0jgD9T2EMX738UX/NbM+Jxv4lW7qNpEtr8R/4uPRk7WQ/yTPMLknTgLzxMF9q yUm53LSrYRNlFrSmOS6naDX1AhmUeIDp -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:11 2025 by rpki-client