$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft File: R0p7MwbAohZ8ys_PgzaUALWjduE.mft (raw, json) Hash identifier: VA1DJvIK0mkLY7oE51wC4d4MxD9jAwWsdFTugkEjcgk= Subject key identifier: 26:69:75:A4:F3:14:7A:91:EB:E8:4F:E9:C2:AC:90:C4:B7:C6:81:5B Authority key identifier: 47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 Certificate issuer: /CN=A91BBA31/serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Certificate serial: 20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft Manifest number: 20 Signing time: Wed 05 Nov 2025 07:57:36 +0000 Manifest this update: Wed 05 Nov 2025 07:57:36 +0000 Manifest next update: Wed 12 Nov 2025 07:57:36 +0000 Files and hashes: 1: R0p7MwbAohZ8ys_PgzaUALWjduE.crl (hash: IXWNak0OCVSVI2JbDGGVI99yMiwHk7QD+BnL//zOWcE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA31, serialNumber=474A7B3306C0A2167CCACFCF83369400B5A376E1 Validity Not Before: Nov 5 07:57:36 2025 GMT Not After : Nov 12 07:57:36 2025 GMT Subject: CN=690b0370-0772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:40:82:24:56:24:10:2e:c1:ee:d4:39:22:b9: 4a:e2:38:66:a9:d9:01:e7:a7:a0:c1:86:5c:a9:8e: 68:69:d3:be:fa:67:6d:40:75:12:ae:0f:96:f5:81: a2:92:00:e8:de:44:f4:47:20:8a:f0:be:50:0a:6b: 98:20:1c:79:79:41:82:a9:84:92:93:90:f9:03:c8: 48:52:a1:b9:18:a8:d9:25:14:60:dc:e8:13:0d:f0: 8c:10:45:53:a4:5f:64:e6:3d:e0:1b:1f:74:38:b9: dc:21:ec:54:98:32:29:02:e0:04:ad:14:97:db:01: f7:3e:f4:9e:bf:80:59:3d:3a:10:2c:22:37:98:8b: 9a:44:5c:6c:27:39:18:15:4a:22:e4:27:10:92:dc: 8c:f7:57:c5:d7:ad:d8:0f:1b:03:c0:d8:b2:88:dd: 21:30:bb:d5:23:1c:18:df:b9:e2:75:ec:fd:e6:ba: b7:4f:fa:0e:fc:bc:dc:19:ad:69:79:bc:30:1f:33: 14:3a:96:c5:71:cd:a8:29:2c:83:7a:6e:44:5e:a9: 7b:48:2b:d0:19:87:2c:36:04:2f:64:17:f0:83:ee: 25:ae:21:c5:60:16:a8:ae:f7:2c:cf:09:04:03:b7: b9:38:f0:70:22:a8:88:98:e6:cb:a2:53:55:3e:42: 72:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:69:75:A4:F3:14:7A:91:EB:E8:4F:E9:C2:AC:90:C4:B7:C6:81:5B X509v3 Authority Key Identifier: keyid:47:4A:7B:33:06:C0:A2:16:7C:CA:CF:CF:83:36:94:00:B5:A3:76:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R0p7MwbAohZ8ys_PgzaUALWjduE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA31/822FDF7E893D11F0BCE7A720C4F9AE02/R0p7MwbAohZ8ys_PgzaUALWjduE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c3:b4:6c:35:b1:b3:34:8a:b6:8b:b1:bd:d0:bd:00:d3:b2: 6d:f7:a7:6a:4f:2c:9a:fd:4e:e5:d7:a0:24:ee:a4:ef:c4:31: 0d:1a:fc:86:f4:3e:db:cb:9c:ef:e7:8d:7c:e9:91:0b:76:e1: fa:e7:18:de:02:df:d8:f6:6a:70:dc:86:67:79:17:5d:97:8c: 91:d7:cf:3c:a0:3d:d8:44:9c:98:37:d9:21:39:ec:9b:a4:53: 9e:41:c3:fb:bb:b0:95:57:2e:a6:ef:c7:ca:a1:d9:8c:45:b5: 7f:82:6f:70:6d:c4:e2:a9:50:8c:81:cb:13:ef:32:a7:90:af: 68:13:00:ad:4d:8e:5c:a9:14:dc:2f:0a:27:a4:1f:e0:ed:62: 97:29:cd:26:0f:13:87:8e:a0:91:8e:f3:16:46:4a:de:9d:37: 9d:fe:b0:e2:05:a5:25:5e:bd:5e:34:1e:e1:58:3f:a6:5e:a7: f3:3a:7f:a2:c5:ac:61:78:de:30:d3:60:1a:ac:d8:73:f5:72: 8e:a5:e7:03:61:6a:d6:82:5d:30:56:a1:fb:6c:b6:52:56:39: 0e:8d:3b:8f:ea:16:7c:ce:e3:f5:8f:5c:3a:06:21:b5:b5:e3: 86:1a:2b:58:0d:8a:8f:0a:b2:83:49:62:2e:ce:96:34:b4:81: f2:71:1f:c5 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QkEzMTExMC8GA1UEBRMoNDc0QTdCMzMwNkMwQTIxNjdDQ0FDRkNGODMzNjk0MDBC NUEzNzZFMTAeFw0yNTExMDUwNzU3MzZaFw0yNTExMTIwNzU3MzZaMBgxFjAUBgNV BAMTDTY5MGIwMzcwLTA3NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/QIIkViQQLsHu1DkiuUriOGap2QHnp6DBhlypjmhp0776Z21AdRKuD5b1gaKS AOjeRPRHIIrwvlAKa5ggHHl5QYKphJKTkPkDyEhSobkYqNklFGDc6BMN8IwQRVOk X2TmPeAbH3Q4udwh7FSYMikC4AStFJfbAfc+9J6/gFk9OhAsIjeYi5pEXGwnORgV SiLkJxCS3Iz3V8XXrdgPGwPA2LKI3SEwu9UjHBjfueJ17P3murdP+g78vNwZrWl5 vDAfMxQ6lsVxzagpLIN6bkReqXtIK9AZhyw2BC9kF/CD7iWuIcVgFqiu9yzPCQQD t7k48HAiqIiY5suiU1U+QnKZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUJml1pPMU epHr6E/pwqyQxLfGgVswHwYDVR0jBBgwFoAUR0p7MwbAohZ8ys/PgzaUALWjduEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCQTMxLzgyMkZERjdFODkz RDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2haOHlzX1BnemFVQUxXamR1 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjBwN013YkFvaFo4eXNfUGd6YVVBTFdqZHVFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJC QTMxLzgyMkZERjdFODkzRDExRjBCQ0U3QTcyMEM0RjlBRTAyL1IwcDdNd2JBb2ha OHlzX1BnemFVQUxXamR1RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHPDtGw1sbM0iraLsb3QvQDTsm33p2pPLJr9TuXXoCTupO/EMQ0a/Ib0 PtvLnO/njXzpkQt24frnGN4C39j2anDchmd5F12XjJHXzzygPdhEnJg32SE57Juk U55Bw/u7sJVXLqbvx8qh2YxFtX+Cb3BtxOKpUIyByxPvMqeQr2gTAK1NjlypFNwv CiekH+DtYpcpzSYPE4eOoJGO8xZGSt6dN53+sOIFpSVevV40HuFYP6Zep/M6f6LF rGF43jDTYBqs2HP1co6l5wNhataCXTBWoftstlJWOQ6NO4/qFnzO4/WPXDoGIbW1 44YaK1gNio8KsoNJYi7OljS0gfJxH8U= -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:28 2025 by rpki-client