$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft File: -L4s6ssxJNZg8w-KJzgGZIr0PIc.mft (raw, json) Hash identifier: WGJUqqkiJ0pL+3tcOzl+9fAujb8q0Srep9vNdL9pPkk= Subject key identifier: 5C:C2:73:BB:A5:DC:81:B6:24:68:05:47:B5:17:EB:60:0C:D6:70:BC Authority key identifier: F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 Certificate issuer: /CN=A91AFAAC/serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Certificate serial: 55 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft Manifest number: 55 Signing time: Mon 03 Nov 2025 07:11:30 +0000 Manifest this update: Mon 03 Nov 2025 07:11:29 +0000 Manifest next update: Mon 10 Nov 2025 07:11:29 +0000 Files and hashes: 1: -L4s6ssxJNZg8w-KJzgGZIr0PIc.crl (hash: UXckbSrx7e97uHNtPDbmwD8RamuAnX41c8pqA2RQAxc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFAAC, serialNumber=F8BE2CEACB3124D660F30F8A273806648AF43C87 Validity Not Before: Nov 3 07:11:29 2025 GMT Not After : Nov 10 07:11:29 2025 GMT Subject: CN=690855a1-78eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2d:8b:06:a7:4f:5d:24:56:6e:35:62:7f:74: 49:ee:cc:31:ce:1c:fc:06:88:c2:a7:4c:ad:b2:89: 99:7c:8d:f2:27:dd:89:d7:f5:01:4c:3b:b2:6f:83: 3d:71:2b:4f:6f:c1:57:b0:f0:c1:be:4a:b2:8d:83: 7d:10:c4:50:49:50:34:45:75:26:98:08:ad:6f:2f: f9:50:a8:e2:bd:ca:95:b3:44:9a:cf:b4:09:8a:97: a0:bd:6f:e1:82:85:2e:68:a4:1d:4a:34:fb:ac:f0: 13:10:1a:2d:71:e0:fa:27:b7:21:cc:79:b8:60:ab: ba:75:e3:ec:00:b3:1e:5b:43:c1:a2:98:58:a3:21: 4a:bc:e1:4d:95:2b:61:4a:f3:2c:68:67:0a:7e:63: db:1f:9f:23:f2:0c:5f:45:dd:88:f9:da:74:cc:ec: 0e:09:79:19:e4:32:fd:4d:a2:f0:b6:47:79:66:66: ec:95:30:39:3d:6c:e1:7d:bc:00:bf:82:de:91:74: ab:66:86:d3:16:5e:df:e9:b0:57:58:01:ca:a0:c1: 4b:a8:ec:dd:e9:50:92:b1:13:06:cd:a0:8a:4a:39: 70:31:0a:78:7f:ec:18:3b:41:49:27:47:cf:3e:2e: 61:ae:48:b6:2a:f1:2c:ef:f6:9a:32:1f:24:73:05: 5c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C2:73:BB:A5:DC:81:B6:24:68:05:47:B5:17:EB:60:0C:D6:70:BC X509v3 Authority Key Identifier: keyid:F8:BE:2C:EA:CB:31:24:D6:60:F3:0F:8A:27:38:06:64:8A:F4:3C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L4s6ssxJNZg8w-KJzgGZIr0PIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFAAC/53D55CD6354A11F0BA766E4CC4F9AE02/-L4s6ssxJNZg8w-KJzgGZIr0PIc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:48:81:82:51:b5:b8:f7:8a:75:73:56:57:17:03:04:20:c6: 11:29:7f:c0:1c:6c:d8:e6:80:95:44:ed:79:35:22:da:52:0e: 8b:35:ad:72:c9:24:9d:47:b6:6a:1e:f2:b7:2c:2b:15:92:ac: 0f:d5:d2:ee:f6:3e:76:54:28:cf:55:98:af:98:49:ac:34:12: 23:65:e9:26:a8:d0:77:10:94:bd:dd:12:5a:54:87:49:89:bb: d1:72:db:d4:a2:f1:e1:69:71:e5:cd:fb:82:45:78:11:98:6c: f6:4f:7c:10:4b:a3:ca:13:05:05:e0:fd:6f:18:54:62:65:81: ec:97:fd:29:7b:33:db:d5:13:a1:d3:10:02:c7:29:89:96:56: fd:61:d3:4b:47:9b:27:cf:c6:a8:21:32:fb:d8:b5:11:5d:01: a7:64:77:1b:7d:10:84:43:b3:a0:26:c1:77:80:ce:5a:16:8c: 06:6f:09:9a:ea:86:b5:b7:63:4d:02:09:74:33:8c:ac:a9:30: 2d:14:93:6a:5e:88:4c:c0:88:f6:6a:bf:7b:0f:90:c0:8a:53: 0b:df:21:0d:04:7d:9e:be:f9:09:4d:fc:c4:a4:60:85:60:ae: 19:11:0e:3c:77:51:89:ca:d1:11:ca:ac:f0:00:93:f8:03:b0: 16:96:20:a0 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkFBQzExMC8GA1UEBRMoRjhCRTJDRUFDQjMxMjRENjYwRjMwRjhBMjczODA2NjQ4 QUY0M0M4NzAeFw0yNTExMDMwNzExMjlaFw0yNTExMTAwNzExMjlaMBgxFjAUBgNV BAMTDTY5MDg1NWExLTc4ZWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDELYsGp09dJFZuNWJ/dEnuzDHOHPwGiMKnTK2yiZl8jfIn3YnX9QFMO7Jvgz1x K09vwVew8MG+SrKNg30QxFBJUDRFdSaYCK1vL/lQqOK9ypWzRJrPtAmKl6C9b+GC hS5opB1KNPus8BMQGi1x4PontyHMebhgq7p14+wAsx5bQ8GimFijIUq84U2VK2FK 8yxoZwp+Y9sfnyPyDF9F3Yj52nTM7A4JeRnkMv1NovC2R3lmZuyVMDk9bOF9vAC/ gt6RdKtmhtMWXt/psFdYAcqgwUuo7N3pUJKxEwbNoIpKOXAxCnh/7Bg7QUknR88+ LmGuSLYq8Szv9poyHyRzBVyLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUXMJzu6Xc gbYkaAVHtRfrYAzWcLwwHwYDVR0jBBgwFoAU+L4s6ssxJNZg8w+KJzgGZIr0PIcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQUFDLzUzRDU1Q0Q2MzU0 QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5aZzh3LUtKemdHWklyMFBJ Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLUw0czZzc3hKTlpnOHctS0p6Z0daSXIwUEljLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFG QUFDLzUzRDU1Q0Q2MzU0QTExRjBCQTc2NkU0Q0M0RjlBRTAyLy1MNHM2c3N4Sk5a Zzh3LUtKemdHWklyMFBJYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHlIgYJRtbj3inVzVlcXAwQgxhEpf8AcbNjmgJVE7Xk1ItpSDos1rXLJ JJ1Htmoe8rcsKxWSrA/V0u72PnZUKM9VmK+YSaw0EiNl6Sao0HcQlL3dElpUh0mJ u9Fy29Si8eFpceXN+4JFeBGYbPZPfBBLo8oTBQXg/W8YVGJlgeyX/Sl7M9vVE6HT EALHKYmWVv1h00tHmyfPxqghMvvYtRFdAadkdxt9EIRDs6AmwXeAzloWjAZvCZrq hrW3Y00CCXQzjKypMC0Uk2peiEzAiPZqv3sPkMCKUwvfIQ0EfZ6++QlN/MSkYIVg rhkRDjx3UYnK0RHKrPAAk/gDsBaWIKA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:24 2025 by rpki-client