$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft File: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft (raw, json) Hash identifier: 320kCJZydmsNllLZCguejt9bFTU8LAoB2txBt9DITq0= Subject key identifier: 3E:EF:99:8C:3E:FC:5A:FA:1F:94:3E:26:45:FE:7F:40:C2:B4:9A:7F Authority key identifier: 09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC Certificate issuer: /CN=A91A5098/serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Certificate serial: 1DDA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft Manifest number: 1DC1 Signing time: Tue 04 Nov 2025 16:13:12 +0000 Manifest this update: Tue 04 Nov 2025 16:13:11 +0000 Manifest next update: Tue 11 Nov 2025 16:13:11 +0000 Files and hashes: 1: CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl (hash: txp9wIbebvq9+FJTzED5UnrGMKV2mjfEaf7qr4Jgx0w=) 2: 945DB376E34711EE87868164C4F9AE02.roa (hash: jKYWlk4C7kYul3yO/WtiSzFFPrzY/sFxwRTKtBHcm64=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:13:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7642 (0x1dda) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5098, serialNumber=099714A70E6F401289108209D6A7F4859F9800CC Validity Not Before: Nov 4 16:13:11 2025 GMT Not After : Nov 11 16:13:11 2025 GMT Subject: CN=690a2617-890f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:a5:a3:30:bb:73:0d:4e:88:b6:f7:df:92: 91:20:df:32:98:8f:60:84:32:da:26:63:53:3a:53: 20:58:98:28:ed:f8:c3:c8:8b:68:6f:50:61:a5:e4: 3a:07:8d:2f:45:ea:cd:8e:b2:26:bd:c2:5e:19:f8: e0:8a:13:a5:95:e3:2d:94:ce:0e:f9:9b:03:0e:b9: b7:af:1c:81:ca:f4:b3:fb:d3:c7:d3:d7:af:0e:4d: 80:a2:e4:46:2e:22:76:4d:91:91:74:61:a8:c9:a4: 9d:46:f3:f3:90:34:be:3b:4d:c5:84:07:a2:1e:c4: 1c:0a:09:70:87:ec:d5:a1:94:7a:81:8d:11:c1:c6: 46:e3:bb:7a:14:c6:d3:ac:9b:16:58:69:56:6b:e7: 6f:7c:65:b1:fe:53:0b:9d:b5:e4:6b:cc:95:7b:16: 9c:15:cf:88:6e:64:81:94:05:70:8f:cd:22:05:05: 0e:64:de:79:d0:1c:1d:3a:d2:fe:fb:b1:69:2f:2e: 5d:fb:61:d8:f4:ab:71:e1:07:9f:3a:f1:5a:5d:ba: b9:f0:99:af:bd:21:59:ee:c8:9d:40:d2:db:f5:1a: eb:4a:ce:3b:10:c3:da:2a:21:b0:59:8a:ea:2c:6a: f5:01:75:07:4a:91:95:8d:05:00:44:8c:1c:50:4a: 1c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:EF:99:8C:3E:FC:5A:FA:1F:94:3E:26:45:FE:7F:40:C2:B4:9A:7F X509v3 Authority Key Identifier: keyid:09:97:14:A7:0E:6F:40:12:89:10:82:09:D6:A7:F4:85:9F:98:00:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5098/C6809196AC9711E6A491DC17C4F9AE02/CZcUpw5vQBKJEIIJ1qf0hZ-YAMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:ab:4f:54:f3:03:6e:f6:95:0b:ed:e5:bf:3a:79:53:8c:43: 95:70:d6:44:6b:a5:8b:95:87:2e:37:33:e0:58:dd:b8:35:20: 11:62:9e:37:f7:11:44:d9:b8:15:f6:9c:8a:86:11:bb:55:81: 29:f6:08:ff:5f:a3:08:0d:48:ab:25:a0:e2:50:b9:af:33:70: a1:82:8d:2c:de:36:7e:7c:51:18:03:0f:cd:41:62:28:ef:4f: a2:08:af:02:36:5a:b6:52:52:15:5d:e7:67:cb:4f:72:41:b6: 8e:f2:4b:40:b4:b2:3b:b2:c8:28:46:ca:c3:12:3d:83:06:1b: eb:5f:23:7b:bc:3c:01:4c:18:d3:ee:dd:ea:84:b1:c9:c6:6a: 30:a1:eb:b9:09:f1:27:4f:af:7f:ae:6c:00:a3:f0:d4:1b:aa: 17:59:bd:28:3b:3c:b2:b3:1e:b7:19:f5:3c:b6:66:23:b5:ee: df:e7:f2:f7:34:2d:59:c3:c6:4c:16:10:e7:c2:d8:bf:cb:e1: 17:a1:5e:32:5a:91:e8:32:37:11:8b:0b:95:96:6f:88:77:79: f4:9e:b7:22:99:cd:eb:05:e3:03:f6:68:82:a8:e6:4a:6a:1d: 45:31:df:30:b6:df:1f:fc:e6:b8:e5:3b:85:95:52:0d:ac:a7: 19:58:b3:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUwOTgxMTAvBgNVBAUTKDA5OTcxNEE3MEU2RjQwMTI4OTEwODIwOUQ2QTdGNDg1 OUY5ODAwQ0MwHhcNMjUxMTA0MTYxMzExWhcNMjUxMTExMTYxMzExWjAYMRYwFAYD VQQDEw02OTBhMjYxNy04OTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc2lozC7cw1OiLb335KRIN8ymI9ghDLaJmNTOlMgWJgo7fjDyItob1BhpeQ6 B40vRerNjrImvcJeGfjgihOlleMtlM4O+ZsDDrm3rxyByvSz+9PH09evDk2AouRG LiJ2TZGRdGGoyaSdRvPzkDS+O03FhAeiHsQcCglwh+zVoZR6gY0RwcZG47t6FMbT rJsWWGlWa+dvfGWx/lMLnbXka8yVexacFc+IbmSBlAVwj80iBQUOZN550BwdOtL+ +7FpLy5d+2HY9Ktx4QefOvFaXbq58JmvvSFZ7sidQNLb9RrrSs47EMPaKiGwWYrq LGr1AXUHSpGVjQUARIwcUEocSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD7vmYw+ /Fr6H5Q+JkX+f0DCtJp/MB8GA1UdIwQYMBaAFAmXFKcOb0ASiRCCCdan9IWfmADM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTA5OC9DNjgwOTE5NkFD OTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFCS0pFSUlKMXFmMGhaLVlB TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NaY1VwdzV2UUJLSkVJSUoxcWYwaFotWUFNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTA5OC9DNjgwOTE5NkFDOTcxMUU2QTQ5MURDMTdDNEY5QUUwMi9DWmNVcHc1dlFC S0pFSUlKMXFmMGhaLVlBTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJq09U8wNu9pUL7eW/OnlTjEOVcNZEa6WLlYcuNzPgWN24NSARYp43 9xFE2bgV9pyKhhG7VYEp9gj/X6MIDUirJaDiULmvM3Chgo0s3jZ+fFEYAw/NQWIo 70+iCK8CNlq2UlIVXedny09yQbaO8ktAtLI7ssgoRsrDEj2DBhvrXyN7vDwBTBjT 7t3qhLHJxmowoeu5CfEnT69/rmwAo/DUG6oXWb0oOzyysx63GfU8tmYjte7f5/L3 NC1Zw8ZMFhDnwti/y+EXoV4yWpHoMjcRiwuVlm+Id3n0nrcimc3rBeMD9miCqOZK ah1FMd8wtt8f/Oa45TuFlVINrKcZWLPP -----END CERTIFICATE-----Generated at Wed Nov 5 05:26:24 2025 by rpki-client