$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft File: SzudkwWID_Zrfx5MkP-YdSiGOBE.mft (raw, json) Hash identifier: 9IozsQRTbh4hsu7ffV6rgCWbf8qFDC5VzG7vpIViTDk= Subject key identifier: 06:4E:A6:E2:71:14:3D:F5:6B:1B:D2:27:6D:39:7F:1A:D7:2F:B2:A2 Authority key identifier: 4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 Certificate issuer: /CN=A91B4E2B/serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Certificate serial: 0122 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft Manifest number: 011D Signing time: Wed 05 Nov 2025 04:58:14 +0000 Manifest this update: Wed 05 Nov 2025 04:58:14 +0000 Manifest next update: Wed 12 Nov 2025 04:58:14 +0000 Files and hashes: 1: SzudkwWID_Zrfx5MkP-YdSiGOBE.crl (hash: 1u0Nad+3cod1fmbc2tuhzRLRTK1WHhGKPLRO60WDuoY=) 2: 56CBAF060CEE11EF80CB5642C4F9AE02.roa (hash: eodiFGpIfsgXUXxslrRHT6wLB6egOaD+ezHH/eHicB4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:58:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 290 (0x122) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4E2B, serialNumber=4B3B9D9305880FF66B7F1E4C90FF987528863811 Validity Not Before: Nov 5 04:58:14 2025 GMT Not After : Nov 12 04:58:14 2025 GMT Subject: CN=690ad966-3f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:67:08:b4:35:5a:81:96:9b:fe:d5:e2:e4:48: db:6a:86:84:01:b4:ce:69:f3:01:17:e7:8e:9c:f8: a6:f2:81:b2:56:e7:46:0c:72:d0:fe:f5:ac:b4:a9: 06:21:9d:b9:01:fb:df:e7:ee:c0:4c:ba:f9:c6:98: ce:74:f7:69:7d:f0:c1:96:38:00:70:69:12:c9:a0: 46:06:3d:aa:e1:c3:d9:6d:31:86:ab:a9:11:4e:24: c4:76:6d:8f:ea:90:18:75:ae:b8:64:1e:99:40:37: f9:80:64:2c:08:dd:00:e2:58:18:39:cd:a0:f7:e6: f0:06:3b:6a:4b:fa:8e:8c:d0:6a:88:f5:7d:76:73: 68:9a:0e:9a:7a:5e:1a:97:23:d3:eb:13:c3:53:af: d2:71:3a:7c:d8:83:23:9c:3f:2a:65:b5:6e:32:a0: 3c:24:23:5d:23:b1:f8:57:81:ba:5b:18:0f:e2:9a: ad:86:b4:d3:bd:c1:db:ec:f2:72:17:09:75:b8:d9: 53:f3:d8:51:78:ac:ee:3e:c9:cd:24:cc:51:14:8e: 5f:a2:44:ea:cd:8d:e9:22:14:f9:2f:fc:34:e6:f1: 78:d5:ee:aa:d4:29:90:cf:bb:62:86:9e:90:8e:31: 3f:02:a6:b4:46:ba:2c:dc:1c:29:2d:82:3f:aa:9e: e9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:4E:A6:E2:71:14:3D:F5:6B:1B:D2:27:6D:39:7F:1A:D7:2F:B2:A2 X509v3 Authority Key Identifier: keyid:4B:3B:9D:93:05:88:0F:F6:6B:7F:1E:4C:90:FF:98:75:28:86:38:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzudkwWID_Zrfx5MkP-YdSiGOBE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4E2B/F836BDEC0CEC11EF9F81F63FC4F9AE02/SzudkwWID_Zrfx5MkP-YdSiGOBE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:29:96:86:b4:45:ab:2f:20:49:21:45:5d:07:a8:f3:bc:d2: f9:9e:d1:77:02:81:34:f8:e8:e6:a8:e4:51:e6:47:b1:14:6d: f3:a0:d9:2e:73:14:e2:6d:ff:fd:3c:b8:83:bf:1e:e0:7c:19: 31:2c:64:ff:84:8a:c2:f3:84:05:4e:da:61:66:a9:44:31:cb: 48:c0:b5:cd:0d:15:54:ce:78:0c:03:89:41:98:b2:e0:12:ca: 3c:6b:d8:be:76:97:14:38:0e:2e:5e:67:18:cc:cb:40:aa:ec: 8d:fd:fc:d4:64:ac:94:44:13:0d:51:8d:28:3e:83:9e:1e:47: 21:c3:e1:0c:bc:41:38:b8:61:ea:2f:aa:5c:0f:3d:a8:c7:af: 4f:42:95:7f:74:cf:bd:e4:c0:71:da:12:16:d1:4a:98:c6:88: 25:4a:2f:05:df:90:59:21:f3:7d:0a:2f:a6:d1:e6:ba:e2:be: b3:05:c4:5b:e5:ab:93:a3:c2:cf:a9:1c:9f:11:61:78:ae:10: cf:2b:72:7d:21:a7:67:91:5b:24:04:f6:f4:1d:60:a6:b3:87: 20:73:34:5c:ef:35:62:b3:43:75:9c:ba:1b:7f:7b:3a:dc:91: d6:fa:7b:57:83:83:cd:82:f3:d2:85:19:ec:f4:e4:16:b7:59: a0:03:de:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjRFMkIxMTAvBgNVBAUTKDRCM0I5RDkzMDU4ODBGRjY2QjdGMUU0QzkwRkY5ODc1 Mjg4NjM4MTEwHhcNMjUxMTA1MDQ1ODE0WhcNMjUxMTEyMDQ1ODE0WjAYMRYwFAYD VQQDEw02OTBhZDk2Ni0zZjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsGcItDVagZab/tXi5EjbaoaEAbTOafMBF+eOnPim8oGyVudGDHLQ/vWstKkG IZ25Afvf5+7ATLr5xpjOdPdpffDBljgAcGkSyaBGBj2q4cPZbTGGq6kRTiTEdm2P 6pAYda64ZB6ZQDf5gGQsCN0A4lgYOc2g9+bwBjtqS/qOjNBqiPV9dnNomg6ael4a lyPT6xPDU6/ScTp82IMjnD8qZbVuMqA8JCNdI7H4V4G6WxgP4pqthrTTvcHb7PJy Fwl1uNlT89hReKzuPsnNJMxRFI5fokTqzY3pIhT5L/w05vF41e6q1CmQz7tihp6Q jjE/Aqa0Rros3BwpLYI/qp7pSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZOpuJx FD31axvSJ205fxrXL7KiMB8GA1UdIwQYMBaAFEs7nZMFiA/2a38eTJD/mHUohjgR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNEUyQi9GODM2QkRFQzBD RUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURfWnJmeDVNa1AtWWRTaUdP QkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6dWRrd1dJRF9acmZ4NU1rUC1ZZFNpR09CRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NEUyQi9GODM2QkRFQzBDRUMxMUVGOUY4MUY2M0ZDNEY5QUUwMi9TenVka3dXSURf WnJmeDVNa1AtWWRTaUdPQkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEKZaGtEWrLyBJIUVdB6jzvNL5ntF3AoE0+OjmqORR5kexFG3zoNku cxTibf/9PLiDvx7gfBkxLGT/hIrC84QFTtphZqlEMctIwLXNDRVUzngMA4lBmLLg Eso8a9i+dpcUOA4uXmcYzMtAquyN/fzUZKyURBMNUY0oPoOeHkchw+EMvEE4uGHq L6pcDz2ox69PQpV/dM+95MBx2hIW0UqYxoglSi8F35BZIfN9Ci+m0ea64r6zBcRb 5auTo8LPqRyfEWF4rhDPK3J9IadnkVskBPb0HWCms4cgczRc7zVis0N1nLobf3s6 3JHW+ntXg4PNgvPShRns9OQWt1mgA96Z -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:55 2025 by rpki-client