$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft File: redjNI0CWa0SzYi3ZNOYy4rHQMk.mft (raw, json) Hash identifier: IIOMqhbhFpgPasUYGSQ4QXjOf8OX8ncmsUdh+twgx8k= Subject key identifier: ED:88:47:96:27:2D:75:7D:3A:62:7A:A9:3E:B5:02:03:70:AD:84:EB Authority key identifier: AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 Certificate issuer: /CN=A91BBCC9/serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Certificate serial: 0638 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft Manifest number: 062F Signing time: Sun 02 Nov 2025 22:43:44 +0000 Manifest this update: Sun 02 Nov 2025 22:43:43 +0000 Manifest next update: Sun 09 Nov 2025 22:43:43 +0000 Files and hashes: 1: redjNI0CWa0SzYi3ZNOYy4rHQMk.crl (hash: 4r8E1MZwiWwiRUUtMK1UFSvON4GgsdwfiMsaDhqN7wc=) 2: B69C27DCB6D711EB9D603F7DC4F9AE02.roa (hash: ClA7TsoBf9is9kiaEyUF4SSCiNxpgXXELAtT3dKemLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:43:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1592 (0x638) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBCC9, serialNumber=ADE763348D0259AD12CD88B764D398CB8AC740C9 Validity Not Before: Nov 2 22:43:43 2025 GMT Not After : Nov 9 22:43:43 2025 GMT Subject: CN=6907de9f-7b2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:64:ee:bd:d5:1b:96:39:d6:91:89:55:8b:c5: 21:57:d2:41:27:02:77:dd:55:ab:87:64:53:18:05: 38:46:43:e4:78:b0:f9:1c:12:ad:b4:ed:c0:a6:0e: 3a:39:cc:20:77:33:b8:cc:ac:dd:86:8b:e4:66:c4: 79:7c:f3:24:8d:23:80:70:3d:1e:76:4a:bc:ea:bd: c6:41:ec:8f:65:56:4c:6f:01:af:ea:ea:72:4f:7c: 52:60:ea:94:5e:ee:a0:d5:37:94:ec:e2:62:69:4f: 1b:a3:b6:13:d9:6f:10:b2:cb:b1:82:7a:bc:29:e6: 6d:0f:d5:f7:e1:d2:42:64:13:48:35:09:5b:75:94: 0b:ba:7a:08:53:b7:cc:90:be:6c:77:12:40:d8:b4: d2:71:86:b6:c9:ee:21:43:cd:b1:3e:5d:b1:46:1c: 41:3e:91:e0:39:0d:f4:9e:f8:8c:f1:ef:ca:a7:42: 6a:f9:bd:2d:9a:93:53:ab:44:37:be:cf:3e:02:e8: e2:bb:d6:85:5d:ad:87:f2:06:9f:d5:97:8c:33:68: 11:8b:cc:1d:48:88:eb:cc:0c:6a:c5:d8:dd:ff:6a: 25:e2:62:62:5c:6e:86:04:17:6e:c6:00:82:26:90: bd:29:a3:7c:93:d5:30:09:c0:ce:3b:f7:6b:81:e7: cf:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:88:47:96:27:2D:75:7D:3A:62:7A:A9:3E:B5:02:03:70:AD:84:EB X509v3 Authority Key Identifier: keyid:AD:E7:63:34:8D:02:59:AD:12:CD:88:B7:64:D3:98:CB:8A:C7:40:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/redjNI0CWa0SzYi3ZNOYy4rHQMk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCC9/D30B15C0B6CF11EB84EB1851C4F9AE02/redjNI0CWa0SzYi3ZNOYy4rHQMk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:cb:f2:35:33:0a:fc:4e:96:ce:eb:b8:fe:c1:24:2a:e5:8d: 10:74:db:9b:a1:18:a9:e2:8e:04:84:12:0c:8e:69:40:f4:90: 38:84:3f:1a:7f:56:76:dd:42:b7:59:c1:f6:13:07:91:45:73: ff:31:73:74:ae:72:35:17:a5:94:c0:47:d5:16:f8:03:cf:bb: f6:8b:96:6f:0b:d3:36:b9:c5:74:82:28:11:06:64:f9:d2:a2: 32:31:7a:4c:86:87:9a:6c:7d:f6:af:7e:d2:a6:ce:3a:c4:33: 00:e0:df:1c:27:c8:81:14:56:dc:f2:8d:26:5a:f4:af:d0:cc: 6c:4c:5d:7c:72:35:ab:bd:ab:69:38:1d:5a:b3:74:38:d3:75: 3f:2e:4d:87:ea:d2:19:5a:d0:0f:1b:67:ae:49:b9:cf:aa:71: 5b:cf:d4:2a:f7:34:e1:2d:9f:ab:d2:76:3c:ce:54:6c:77:49: 15:0c:8b:56:7f:7d:2e:67:30:04:42:a9:b4:5e:6a:0a:bb:cf: 7c:b7:86:19:f6:67:62:79:81:76:24:99:b9:84:ec:8b:eb:79: 74:e3:48:bf:65:a2:55:6f:c4:e3:d7:da:71:7e:34:93:83:61: e3:c8:bd:9d:f0:54:00:63:66:f6:04:3f:1e:4a:f0:d3:3c:5b: 95:9c:c2:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBjgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJDQzkxMTAvBgNVBAUTKEFERTc2MzM0OEQwMjU5QUQxMkNEODhCNzY0RDM5OENC OEFDNzQwQzkwHhcNMjUxMTAyMjI0MzQzWhcNMjUxMTA5MjI0MzQzWjAYMRYwFAYD VQQDEw02OTA3ZGU5Zi03YjJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvmTuvdUbljnWkYlVi8UhV9JBJwJ33VWrh2RTGAU4RkPkeLD5HBKttO3Apg46 OcwgdzO4zKzdhovkZsR5fPMkjSOAcD0edkq86r3GQeyPZVZMbwGv6upyT3xSYOqU Xu6g1TeU7OJiaU8bo7YT2W8Qssuxgnq8KeZtD9X34dJCZBNINQlbdZQLunoIU7fM kL5sdxJA2LTScYa2ye4hQ82xPl2xRhxBPpHgOQ30nviM8e/Kp0Jq+b0tmpNTq0Q3 vs8+Aujiu9aFXa2H8gaf1ZeMM2gRi8wdSIjrzAxqxdjd/2ol4mJiXG6GBBduxgCC JpC9KaN8k9UwCcDOO/drgefPywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO2IR5Yn LXV9OmJ6qT61AgNwrYTrMB8GA1UdIwQYMBaAFK3nYzSNAlmtEs2It2TTmMuKx0DJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkNDOS9EMzBCMTVDMEI2 Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dhMFN6WWkzWk5PWXk0ckhR TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JlZGpOSTBDV2EwU3pZaTNaTk9ZeTRySFFNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkNDOS9EMzBCMTVDMEI2Q0YxMUVCODRFQjE4NTFDNEY5QUUwMi9yZWRqTkkwQ1dh MFN6WWkzWk5PWXk0ckhRTWsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOy/I1Mwr8TpbO67j+wSQq5Y0QdNuboRip4o4EhBIMjmlA9JA4hD8a f1Z23UK3WcH2EweRRXP/MXN0rnI1F6WUwEfVFvgDz7v2i5ZvC9M2ucV0gigRBmT5 0qIyMXpMhoeabH32r37Sps46xDMA4N8cJ8iBFFbc8o0mWvSv0MxsTF18cjWrvatp OB1as3Q403U/Lk2H6tIZWtAPG2euSbnPqnFbz9Qq9zThLZ+r0nY8zlRsd0kVDItW f30uZzAEQqm0XmoKu898t4YZ9mdieYF2JJm5hOyL63l040i/ZaJVb8Tj19pxfjST g2HjyL2d8FQAY2b2BD8eSvDTPFuVnMIM -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:01 2025 by rpki-client