$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft File: RziIJrgc68tdWOukEDkWDSR7wX8.mft (raw, json) Hash identifier: cDFeae6ja1z6z2JTSLSLBMTJAH2K0F+W2A3j9rusvyM= Subject key identifier: 97:A4:E2:34:57:9B:D6:D8:D5:CC:8A:7D:2F:BA:09:05:5C:F0:71:A4 Authority key identifier: 47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F Certificate issuer: /CN=A91B9B37/serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Certificate serial: 04C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft Manifest number: 04BE Signing time: Sun 02 Nov 2025 23:50:49 +0000 Manifest this update: Sun 02 Nov 2025 23:50:48 +0000 Manifest next update: Sun 09 Nov 2025 23:50:48 +0000 Files and hashes: 1: RziIJrgc68tdWOukEDkWDSR7wX8.crl (hash: ed/2B287tWmWG/tYmQBgbusXfu+lqMZY3UyaoPYfnSU=) 2: 9F0BF8AE48C711ECAA1A222EC4F9AE02.roa (hash: lHZXltajMQsPVwndfMvNDpRZmhFMuS2rZHqrCavlw1s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1219 (0x4c3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9B37, serialNumber=47388826B81CEBCB5D58EBA41039160D247BC17F Validity Not Before: Nov 2 23:50:48 2025 GMT Not After : Nov 9 23:50:48 2025 GMT Subject: CN=6907ee58-caa0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5c:89:5c:67:c5:a9:70:11:73:78:31:21:ea: 4a:1e:ff:87:2f:32:d9:27:c8:b7:e7:c9:78:7a:ef: 34:6b:b1:ab:64:45:fd:3b:b3:34:a1:ac:10:d2:c9: 97:f6:0d:af:60:74:54:43:e3:d7:be:f7:6c:01:7e: 16:08:10:e2:7b:37:b0:40:67:f3:1b:b2:3d:e7:7e: 04:9c:10:04:3e:72:a0:41:d2:4e:45:d4:4f:9e:e4: 0f:ba:2a:65:d3:68:50:89:50:32:07:f4:a4:b3:5d: b6:9a:c0:55:29:c3:94:3a:ca:83:25:30:ad:3c:3b: 79:8c:06:03:5b:ff:1c:40:bb:62:22:8c:42:5c:72: 01:f4:09:d3:b1:35:05:2d:fb:ba:dd:fc:c5:eb:41: d8:4d:a6:70:6c:fd:2e:89:71:00:11:73:93:f7:7f: 40:25:e9:ac:e5:32:9a:ff:37:63:0a:2d:f5:64:db: 3a:6b:58:54:20:41:e2:8e:3f:cb:f4:14:bd:3b:23: 52:ca:e7:74:9c:d6:eb:8e:01:d4:9a:67:e1:fb:74: bc:7f:5f:bd:40:35:0b:e2:5e:9e:05:c0:20:d2:cf: 53:88:c7:46:4d:0d:ba:58:22:09:0c:55:08:47:72: d6:7f:62:c8:80:48:74:ad:c5:3b:66:f6:c3:70:3f: 6d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A4:E2:34:57:9B:D6:D8:D5:CC:8A:7D:2F:BA:09:05:5C:F0:71:A4 X509v3 Authority Key Identifier: keyid:47:38:88:26:B8:1C:EB:CB:5D:58:EB:A4:10:39:16:0D:24:7B:C1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RziIJrgc68tdWOukEDkWDSR7wX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9B37/9C39BE1648C411EC94E12D85C4F9AE02/RziIJrgc68tdWOukEDkWDSR7wX8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:c6:5b:ea:b9:06:c5:82:0c:53:80:13:f1:13:18:4a:28: 97:7a:cd:cf:e0:91:04:cf:44:a7:c8:0a:19:12:0f:cc:c2:f7: 35:14:b5:44:44:ae:82:5c:07:6e:64:a7:d8:ee:85:17:f4:77: 48:04:4e:a4:83:7c:97:35:a6:59:e1:8d:d9:93:c8:f7:91:2f: b0:b2:e4:45:9b:a1:33:e3:7a:57:34:00:83:ff:5a:37:e9:6a: d8:6b:fb:9f:8d:9c:32:7d:47:1b:9e:b8:62:b6:f7:f0:e9:89: 59:a1:b0:e1:9b:d5:9c:c4:78:be:b5:9d:ef:ca:4c:1b:75:69: 48:44:b0:a7:22:1f:d3:81:4c:6f:08:f5:96:e7:dd:56:49:19: df:7d:1b:21:1f:0b:ba:9b:66:5f:51:0a:0b:c8:af:5a:99:c9: f8:61:2c:8e:b1:43:6f:54:9b:66:6e:11:9f:6d:dc:1a:15:6b: d0:09:88:0c:9b:a7:2c:d6:93:b8:0d:0a:0f:05:29:8c:4d:d5: 58:8a:77:04:62:27:70:37:64:99:02:51:50:24:8f:66:44:3c: 4f:98:2d:a7:75:4e:ac:06:59:b5:38:77:1f:17:42:1e:f3:b7: 0b:8a:e5:c5:a8:d9:04:a4:2c:39:00:18:2a:54:0d:72:c0:f1: c0:3c:48:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlCMzcxMTAvBgNVBAUTKDQ3Mzg4ODI2QjgxQ0VCQ0I1RDU4RUJBNDEwMzkxNjBE MjQ3QkMxN0YwHhcNMjUxMTAyMjM1MDQ4WhcNMjUxMTA5MjM1MDQ4WjAYMRYwFAYD VQQDEw02OTA3ZWU1OC1jYWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01yJXGfFqXARc3gxIepKHv+HLzLZJ8i358l4eu80a7GrZEX9O7M0oawQ0smX 9g2vYHRUQ+PXvvdsAX4WCBDiezewQGfzG7I9534EnBAEPnKgQdJORdRPnuQPuipl 02hQiVAyB/Sks122msBVKcOUOsqDJTCtPDt5jAYDW/8cQLtiIoxCXHIB9AnTsTUF Lfu63fzF60HYTaZwbP0uiXEAEXOT939AJems5TKa/zdjCi31ZNs6a1hUIEHijj/L 9BS9OyNSyud0nNbrjgHUmmfh+3S8f1+9QDUL4l6eBcAg0s9TiMdGTQ26WCIJDFUI R3LWf2LIgEh0rcU7ZvbDcD9tDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJek4jRX m9bY1cyKfS+6CQVc8HGkMB8GA1UdIwQYMBaAFEc4iCa4HOvLXVjrpBA5Fg0ke8F/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUIzNy85QzM5QkUxNjQ4 QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4dGRXT3VrRURrV0RTUjd3 WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J6aUlKcmdjNjh0ZFdPdWtFRGtXRFNSN3dYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUIzNy85QzM5QkUxNjQ4QzQxMUVDOTRFMTJEODVDNEY5QUUwMi9SemlJSnJnYzY4 dGRXT3VrRURrV0RTUjd3WDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAL5sZb6rkGxYIMU4AT8RMYSiiXes3P4JEEz0SnyAoZEg/Mwvc1FLVE RK6CXAduZKfY7oUX9HdIBE6kg3yXNaZZ4Y3Zk8j3kS+wsuRFm6Ez43pXNACD/1o3 6WrYa/ufjZwyfUcbnrhitvfw6YlZobDhm9WcxHi+tZ3vykwbdWlIRLCnIh/TgUxv CPWW591WSRnffRshHwu6m2ZfUQoLyK9amcn4YSyOsUNvVJtmbhGfbdwaFWvQCYgM m6cs1pO4DQoPBSmMTdVYincEYidwN2SZAlFQJI9mRDxPmC2ndU6sBlm1OHcfF0Ie 87cLiuXFqNkEpCw5ABgqVA1ywPHAPEho -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:29 2025 by rpki-client