$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft File: aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json) Hash identifier: +OOYKXmm2ar8U0Sch3ECpLtHDdTKgIXfvBIJvn+Md6U= Subject key identifier: BA:A5:87:8C:B9:9A:53:0D:A8:6B:25:79:EC:0B:A2:5D:73:7F:7B:BD Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 Certificate issuer: /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Certificate serial: 0CF7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft Manifest number: 0CEE Signing time: Tue 04 Nov 2025 18:11:43 +0000 Manifest this update: Tue 04 Nov 2025 18:11:42 +0000 Manifest next update: Tue 11 Nov 2025 18:11:42 +0000 Files and hashes: 1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: NFOfC4tnmmzhXQOslW3seRg5wYRgT5E8aWfU13bAFeU=) 2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: ubWolQt+8+l24CDrG/8jAKrnFMju79IVwrQ7ghSshi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3319 (0xcf7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449 Validity Not Before: Nov 4 18:11:42 2025 GMT Not After : Nov 11 18:11:42 2025 GMT Subject: CN=690a41df-bbfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:9d:e2:48:d8:03:00:b7:5a:d2:2c:8f:c0:f3: ce:d4:51:d3:a5:b1:69:39:c0:a3:7d:3a:fa:04:23: a9:b6:be:a2:7f:37:0d:db:92:27:6b:f4:eb:b6:f1: 3a:7a:9a:58:89:80:6f:7c:86:5e:55:9f:55:b0:6c: 26:3b:35:4d:f6:22:e9:a7:66:22:e8:a3:7f:bc:cf: 9a:4f:74:8c:ba:e0:c1:d4:42:95:30:a6:8f:ce:78: c2:ee:f6:aa:8d:b2:ac:2f:8b:d0:01:37:0e:0e:8e: c1:51:21:4c:a8:2a:b2:6f:d9:d7:be:74:5a:76:e2: f5:f9:45:8e:64:a0:be:47:fa:51:09:8c:15:ee:17: 2e:10:03:03:47:8c:5e:09:96:cc:f7:5c:47:7c:ea: 5f:e9:dd:0d:1b:bd:58:2e:f2:49:ed:32:3d:ab:59: 17:56:d7:f6:92:e3:53:f5:25:e4:fa:5a:17:6f:ae: 7f:d0:c8:53:62:c6:40:0f:f5:dc:e4:a2:12:94:16: b5:da:03:54:d0:ba:3b:d0:38:58:74:0a:82:f9:54: 9f:8f:e4:8e:0b:ba:6d:4d:dc:78:5f:4a:58:e9:b1: f7:b5:c5:9b:2b:8c:db:ea:bb:e0:dc:81:cb:ea:3a: eb:2c:62:a1:1e:a0:a1:63:0f:0e:c1:94:0c:40:4c: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:A5:87:8C:B9:9A:53:0D:A8:6B:25:79:EC:0B:A2:5D:73:7F:7B:BD X509v3 Authority Key Identifier: keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d8:85:5f:20:2c:9e:20:1f:0e:cf:48:91:9e:67:51:0e:f5: 08:d9:ca:58:b4:e3:53:ad:76:d6:d7:7e:f6:ae:1c:77:75:4e: 9b:35:23:f8:12:34:b7:f5:2b:56:39:ea:ec:e5:96:4f:90:1f: 60:d7:bf:be:1d:bc:bf:a8:99:39:29:45:d8:39:00:db:6e:24: 7e:3b:11:a4:e8:28:89:fe:97:13:42:52:01:40:38:52:8f:39: 46:9a:19:96:af:94:c1:de:4d:f6:d2:a2:4c:9a:0e:dc:81:03: ef:18:70:bd:8b:7c:9e:d9:b7:01:2e:ae:e7:7d:8b:d9:5e:1b: b3:24:03:b5:00:2a:75:db:1a:d6:00:d4:e8:1b:af:21:2a:eb: c5:8c:3f:32:7e:2c:20:69:1a:73:9c:22:57:9a:e2:ae:f9:83: 26:e0:65:e9:0e:19:33:9e:ac:53:bb:18:5b:47:24:d9:3a:10: 83:8b:04:fa:01:fd:bb:4a:bc:fe:2b:5d:6a:31:11:41:c1:ce: 94:55:37:25:b8:92:37:6a:d4:c8:29:c5:c6:07:52:fc:b1:00: 74:a9:1e:21:8a:ad:b5:16:3b:32:df:fa:41:2f:c2:9a:42:c9: 74:60:63:fa:4b:05:fd:e3:c5:b8:7f:d6:0b:6b:10:b9:8e:55: 4c:91:35:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTgwRjkxMTAvBgNVBAUTKDY5NkFGNEZFMDM2NjEzRDY1MUI1RTI5QTA5RDRGRTcx QjU1NUE0NDkwHhcNMjUxMTA0MTgxMTQyWhcNMjUxMTExMTgxMTQyWjAYMRYwFAYD VQQDEw02OTBhNDFkZi1iYmZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1p3iSNgDALda0iyPwPPO1FHTpbFpOcCjfTr6BCOptr6ifzcN25Ina/TrtvE6 eppYiYBvfIZeVZ9VsGwmOzVN9iLpp2Yi6KN/vM+aT3SMuuDB1EKVMKaPznjC7vaq jbKsL4vQATcODo7BUSFMqCqyb9nXvnRaduL1+UWOZKC+R/pRCYwV7hcuEAMDR4xe CZbM91xHfOpf6d0NG71YLvJJ7TI9q1kXVtf2kuNT9SXk+loXb65/0MhTYsZAD/Xc 5KISlBa12gNU0Lo70DhYdAqC+VSfj+SOC7ptTdx4X0pY6bH3tcWbK4zb6rvg3IHL 6jrrLGKhHqChYw8OwZQMQEwiHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLqlh4y5 mlMNqGsleewLol1zf3u9MB8GA1UdIwQYMBaAFGlq9P4DZhPWUbXimgnU/nG1VaRJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODBGOS80OTc3M0FEMEY0 QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5WlJ0ZUthQ2RULWNiVlZw RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXcjBfZ05tRTlaUnRlS2FDZFQtY2JWVnBFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB ODBGOS80OTc3M0FEMEY0QTQxMUU5OENDNzVFMzdDNEY5QUUwMi9hV3IwX2dObUU5 WlJ0ZUthQ2RULWNiVlZwRWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCP2IVfICyeIB8Oz0iRnmdRDvUI2cpYtONTrXbW1372rhx3dU6bNSP4 EjS39StWOers5ZZPkB9g17++Hby/qJk5KUXYOQDbbiR+OxGk6CiJ/pcTQlIBQDhS jzlGmhmWr5TB3k320qJMmg7cgQPvGHC9i3ye2bcBLq7nfYvZXhuzJAO1ACp12xrW ANToG68hKuvFjD8yfiwgaRpznCJXmuKu+YMm4GXpDhkznqxTuxhbRyTZOhCDiwT6 Af27Srz+K11qMRFBwc6UVTcluJI3atTIKcXGB1L8sQB0qR4hiq21Fjsy3/pBL8Ka Qsl0YGP6SwX948W4f9YLaxC5jlVMkTUG -----END CERTIFICATE-----Generated at Wed Nov 5 19:32:32 2025 by rpki-client