$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft File: fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json) Hash identifier: ATd7rCL9tdvcogpry/w3GUXBg/UbYHLh9VrLycDBu/o= Subject key identifier: 19:42:62:4F:9B:2C:D8:AA:7E:B7:7F:82:3C:DD:01:52:69:57:67:67 Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 Certificate issuer: /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft Manifest number: 34D3 Signing time: Tue 04 Nov 2025 15:11:13 +0000 Manifest this update: Tue 04 Nov 2025 15:11:12 +0000 Manifest next update: Tue 11 Nov 2025 15:11:12 +0000 Files and hashes: 1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: LcYV4dSXfh2oiIK6jkTAzYi8ZBP9bk1R/IrOpWL6XFc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:11:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70 Validity Not Before: Nov 4 15:11:12 2025 GMT Not After : Nov 11 15:11:12 2025 GMT Subject: CN=690a1790-16f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f6:de:60:be:79:f8:f9:30:5a:51:aa:d8:d1: 01:13:80:82:34:8c:7c:32:c0:d2:cc:f6:38:08:24: f1:30:13:9f:10:d6:06:89:0a:10:33:9c:91:50:6a: 66:22:d7:34:b1:a1:4d:35:b1:66:39:9a:9c:19:81: 88:37:1c:03:bf:26:2a:61:ca:9f:69:94:ad:be:c1: 5d:e6:30:82:16:2e:c3:5e:89:f6:ab:cc:51:5c:fe: 32:d0:91:f8:0d:be:37:4b:e2:cc:a2:9f:f0:fa:18: f0:30:3f:0a:b4:48:4d:96:87:2c:da:6f:6a:4f:0e: ae:ca:bb:12:01:d8:c4:a8:b3:c8:17:e3:e3:bf:f6: 2e:10:3c:08:5c:58:cf:f2:29:71:3d:4d:ea:df:59: b1:3d:1a:8c:fa:a0:a3:d2:76:31:63:44:df:c3:bb: d8:7d:dc:0a:e2:a6:0f:c7:78:31:04:e7:b3:8f:05: 1e:0e:0f:8c:69:e1:9e:66:ee:70:de:26:a5:46:bd: cf:97:d7:1b:ba:04:75:c7:9f:32:d3:22:34:c6:5e: 04:a6:2f:38:73:c4:54:93:84:45:7b:cb:21:d6:a0: ef:77:1a:0d:19:a3:30:0e:78:be:49:d7:ef:a8:89: ff:e8:e6:37:f9:fc:39:4e:52:36:91:07:8b:ce:1f: f5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:62:4F:9B:2C:D8:AA:7E:B7:7F:82:3C:DD:01:52:69:57:67:67 X509v3 Authority Key Identifier: keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:cc:33:2b:7a:07:c2:c6:f4:20:bb:3d:ef:e5:c2:76:1a:28: b7:ad:31:b2:4a:1d:51:3e:84:58:d5:00:92:94:c4:e4:00:96: af:e6:9c:51:f6:14:90:0f:3d:d1:65:62:fa:6e:4a:64:e3:01: fc:76:d2:bf:2a:c9:be:93:41:f5:3c:08:23:bf:aa:6e:5c:7f: 9c:7b:ca:f0:68:b5:e5:ba:02:35:65:af:40:32:c9:de:68:d8: da:0e:7d:b4:cc:ba:f8:36:16:19:ba:3f:a0:88:bf:93:84:38: 41:c7:6d:27:32:76:6b:34:e5:af:33:01:72:a1:7b:c2:8f:49: e9:47:5f:be:37:ba:b6:1b:ae:ff:bb:d6:ec:dc:15:c5:f9:cd: 5e:3f:14:45:92:dd:d8:dd:a3:25:e3:66:ab:09:6e:ac:4d:d0: a1:26:10:f2:70:96:a7:17:48:9c:c9:86:35:be:be:80:cb:96: 73:9b:8d:32:3c:76:e4:b9:ef:78:48:e4:77:3e:08:8c:a2:f0: 73:22:53:0e:b3:61:1a:d5:65:4c:80:3e:91:dd:b6:05:5a:82: ea:ab:e7:d0:93:f2:66:f3:90:f2:a4:9c:1a:9c:14:11:4f:23: be:20:83:aa:5a:fe:28:47:85:02:c4:ae:de:f5:69:1e:72:fb: df:d7:1b:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjhDNkMxMTAvBgNVBAUTKDdEMUVENkI2NTE0OTBEQUJEQUE4NEJEOTJGQ0Q0MkU1 NTNFRTZDNzAwHhcNMjUxMTA0MTUxMTEyWhcNMjUxMTExMTUxMTEyWjAYMRYwFAYD VQQDEw02OTBhMTc5MC0xNmYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAofbeYL55+PkwWlGq2NEBE4CCNIx8MsDSzPY4CCTxMBOfENYGiQoQM5yRUGpm Itc0saFNNbFmOZqcGYGINxwDvyYqYcqfaZStvsFd5jCCFi7DXon2q8xRXP4y0JH4 Db43S+LMop/w+hjwMD8KtEhNlocs2m9qTw6uyrsSAdjEqLPIF+Pjv/YuEDwIXFjP 8ilxPU3q31mxPRqM+qCj0nYxY0Tfw7vYfdwK4qYPx3gxBOezjwUeDg+MaeGeZu5w 3ialRr3Pl9cbugR1x58y0yI0xl4Epi84c8RUk4RFe8sh1qDvdxoNGaMwDni+Sdfv qIn/6OY3+fw5TlI2kQeLzh/1CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBlCYk+b LNiqfrd/gjzdAVJpV2dnMB8GA1UdIwQYMBaAFH0e1rZRSQ2r2qhL2S/NQuVT7mxw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOEM2Qy9DMTQ4RDFDQTFE QTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRhdmFxRXZaTDgxQzVWUHVi SEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZSN1d0bEZKRGF2YXFFdlpMODFDNVZQdWJIQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEM2Qy9DMTQ4RDFDQTFEQTMxMUUyOEUxQTNFOTkwOEIwMkNEMi9mUjdXdGxGSkRh dmFxRXZaTDgxQzVWUHViSEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwzDMregfCxvQguz3v5cJ2Gii3rTGySh1RPoRY1QCSlMTkAJav5pxR 9hSQDz3RZWL6bkpk4wH8dtK/Ksm+k0H1PAgjv6puXH+ce8rwaLXlugI1Za9AMsne aNjaDn20zLr4NhYZuj+giL+ThDhBx20nMnZrNOWvMwFyoXvCj0npR1++N7q2G67/ u9bs3BXF+c1ePxRFkt3Y3aMl42arCW6sTdChJhDycJanF0icyYY1vr6Ay5Zzm40y PHbkue94SOR3PgiMovBzIlMOs2Ea1WVMgD6R3bYFWoLqq+fQk/Jm85DypJwanBQR TyO+IIOqWv4oR4UCxK7e9Wkecvvf1xu4 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:42 2025 by rpki-client