$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft File: deIxCEEFtBXk1XmhraSOU5dW17M.mft (raw, json) Hash identifier: h0J3MY3dvjXcgXYssUCiyuMiRqMmr8UOFlqYWaqE8eA= Subject key identifier: FF:D0:E5:8D:D5:CF:32:44:96:C5:07:28:40:56:F3:B7:E5:95:E7:F0 Authority key identifier: 75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 Certificate issuer: /CN=A91AD9EF/serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Certificate serial: 018D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft Manifest number: 018A Signing time: Mon 03 Nov 2025 03:32:14 +0000 Manifest this update: Mon 03 Nov 2025 03:32:13 +0000 Manifest next update: Mon 10 Nov 2025 03:32:13 +0000 Files and hashes: 1: deIxCEEFtBXk1XmhraSOU5dW17M.crl (hash: a9iXvnuEHU7tUy6lIrB2gkHKwxlebCpflQx6iQZ5zEA=) 2: 39F3DEAC5BE711EE8D63E752C4F9AE02.roa (hash: pctkgexV/ZjAKQ/5hSUGRrK2ra68t0+RFtHDIPSkzW0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:32:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 397 (0x18d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD9EF, serialNumber=75E231084105B415E4D579A1ADA48E539756D7B3 Validity Not Before: Nov 3 03:32:13 2025 GMT Not After : Nov 10 03:32:13 2025 GMT Subject: CN=6908223e-5a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:57:86:d2:25:ec:7f:d6:7d:84:5b:52:be:ac: 45:57:d4:e2:cb:03:0c:2e:27:68:78:31:14:31:f3: 82:e3:ac:e9:63:41:9a:3f:bd:c5:41:93:d9:b2:3a: 42:9c:fd:93:76:d5:d7:37:2e:54:d3:57:d3:1c:1b: 7f:d2:85:8e:ed:e5:d8:76:80:a7:d9:8f:c1:73:9b: f6:0e:6f:99:8f:ba:21:d5:3c:42:a2:9c:c2:31:ff: ab:40:7d:a0:36:ca:45:83:0e:58:20:74:4f:49:21: 0c:4e:48:00:e5:44:9b:20:68:c4:3d:b5:1b:76:f3: 3f:80:77:34:78:c2:7d:19:87:34:b4:5b:2d:c7:0e: 71:7a:c0:b3:fc:18:32:f8:62:50:c4:24:37:40:5e: f9:8e:94:89:69:a9:1b:a8:c0:fc:90:fe:10:1b:fd: 1b:4c:cd:9f:e4:83:00:0c:04:a3:25:0b:3d:28:76: 18:43:9c:54:2d:b3:44:f7:49:68:29:4e:9f:41:cc: e9:cb:dc:99:26:b8:36:94:f0:25:f8:88:bc:01:cd: 73:38:9c:a8:84:0f:16:35:db:e3:ef:31:21:1d:c6: 72:83:fe:36:41:97:fe:24:e7:05:d7:88:73:e8:9d: b1:d9:d9:86:6a:03:04:13:7d:29:8e:80:16:85:ca: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D0:E5:8D:D5:CF:32:44:96:C5:07:28:40:56:F3:B7:E5:95:E7:F0 X509v3 Authority Key Identifier: keyid:75:E2:31:08:41:05:B4:15:E4:D5:79:A1:AD:A4:8E:53:97:56:D7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/deIxCEEFtBXk1XmhraSOU5dW17M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD9EF/8EB3EECE5BE611EEA705A765C4F9AE02/deIxCEEFtBXk1XmhraSOU5dW17M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:f1:bd:c3:37:9a:cc:79:ca:35:17:b6:53:b6:b2:96:b6:5e: e2:b4:b7:e2:fb:a6:25:d7:55:47:57:40:10:4e:b0:8f:9a:85: 5f:38:97:88:10:28:7a:7c:d1:dd:ed:2e:88:56:3c:05:b0:82: 58:db:67:9d:ef:c2:97:9d:53:3d:27:f8:1d:79:ee:44:38:ea: 31:cc:0f:21:25:30:9a:aa:3a:0f:80:1c:23:65:f9:c8:b3:3e: 00:72:4e:63:ea:7a:64:55:98:d4:e1:25:e6:dc:61:90:f4:d9: 16:79:94:8a:c6:55:3c:03:89:8b:9b:7c:fe:52:8b:bb:4f:64: 94:f6:1e:ca:b9:c0:b9:48:a8:84:49:ef:cd:ec:6f:b8:95:91: 22:35:7c:00:d1:ff:e3:88:26:df:6b:19:e2:7b:20:5a:a8:2d: 87:ca:e6:89:c4:ca:cc:2f:68:42:e0:d4:1f:1f:9d:50:52:2e: c1:d4:cb:e2:2e:dc:62:dc:b1:fa:8c:77:85:8e:6f:d9:13:82: 16:ea:d7:f4:c1:48:1e:49:fe:df:8f:58:fb:5d:cf:04:e3:15: cc:f8:7b:74:cb:9b:04:c3:19:ea:bc:08:1e:85:4c:e5:c5:a4: 08:69:48:9e:b9:38:3a:e9:00:71:9d:e4:74:c0:8b:b2:60:f0: 86:6e:68:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ5RUYxMTAvBgNVBAUTKDc1RTIzMTA4NDEwNUI0MTVFNEQ1NzlBMUFEQTQ4RTUz OTc1NkQ3QjMwHhcNMjUxMTAzMDMzMjEzWhcNMjUxMTEwMDMzMjEzWjAYMRYwFAYD VQQDEw02OTA4MjIzZS01YTcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVeG0iXsf9Z9hFtSvqxFV9TiywMMLidoeDEUMfOC46zpY0GaP73FQZPZsjpC nP2TdtXXNy5U01fTHBt/0oWO7eXYdoCn2Y/Bc5v2Dm+Zj7oh1TxCopzCMf+rQH2g NspFgw5YIHRPSSEMTkgA5USbIGjEPbUbdvM/gHc0eMJ9GYc0tFstxw5xesCz/Bgy +GJQxCQ3QF75jpSJaakbqMD8kP4QG/0bTM2f5IMADASjJQs9KHYYQ5xULbNE90lo KU6fQczpy9yZJrg2lPAl+Ii8Ac1zOJyohA8WNdvj7zEhHcZyg/42QZf+JOcF14hz 6J2x2dmGagMEE30pjoAWhcoyTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP/Q5Y3V zzJElsUHKEBW87fllefwMB8GA1UdIwQYMBaAFHXiMQhBBbQV5NV5oa2kjlOXVtez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDlFRi84RUIzRUVDRTVC RTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRCWGsxWG1ocmFTT1U1ZFcx N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RlSXhDRUVGdEJYazFYbWhyYVNPVTVkVzE3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDlFRi84RUIzRUVDRTVCRTYxMUVFQTcwNUE3NjVDNEY5QUUwMi9kZUl4Q0VFRnRC WGsxWG1ocmFTT1U1ZFcxN00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp8b3DN5rMeco1F7ZTtrKWtl7itLfi+6Yl11VHV0AQTrCPmoVfOJeI ECh6fNHd7S6IVjwFsIJY22ed78KXnVM9J/gdee5EOOoxzA8hJTCaqjoPgBwjZfnI sz4Ack5j6npkVZjU4SXm3GGQ9NkWeZSKxlU8A4mLm3z+Uou7T2SU9h7KucC5SKiE Se/N7G+4lZEiNXwA0f/jiCbfaxnieyBaqC2HyuaJxMrML2hC4NQfH51QUi7B1Mvi Ltxi3LH6jHeFjm/ZE4IW6tf0wUgeSf7fj1j7Xc8E4xXM+Ht0y5sEwxnqvAgehUzl xaQIaUieuTg66QBxneR0wIuyYPCGbmge -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:13 2025 by rpki-client