$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft File: 96B_epkcIaJc05qyCt5Po7XgXRU.mft (raw, json) Hash identifier: izMr+hwVD0jRWnCJtZjMWWy1Bxz+N/1SVkGh3IrgRP8= Subject key identifier: 15:23:04:5D:32:F7:3C:F8:0C:2F:55:4D:62:24:7E:FB:F3:D6:08:5C Authority key identifier: F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 Certificate issuer: /CN=A91BEC2F/serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Certificate serial: 0421 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft Manifest number: 0414 Signing time: Mon 03 Nov 2025 00:26:30 +0000 Manifest this update: Mon 03 Nov 2025 00:26:29 +0000 Manifest next update: Mon 10 Nov 2025 00:26:29 +0000 Files and hashes: 1: 96B_epkcIaJc05qyCt5Po7XgXRU.crl (hash: zJS2HlPTaX6gjv+bhCO9cJssw3d6upPErJ5YlK0fjUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:26:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1057 (0x421) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEC2F, serialNumber=F7A07F7A991C21A25CD39AB20ADE4FA3B5E05D15 Validity Not Before: Nov 3 00:26:29 2025 GMT Not After : Nov 10 00:26:29 2025 GMT Subject: CN=6907f6b6-1c2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:97:d1:e8:e9:27:7f:67:69:33:1d:42:f6: 30:f4:dd:2f:28:3a:d1:43:18:2b:39:a8:b5:72:19: bf:58:41:73:f8:e4:5e:df:14:3c:76:03:91:cd:f8: 19:b3:57:17:88:3d:31:8e:b9:c7:b6:a1:f6:eb:85: 6f:98:a1:bd:0c:03:7a:2e:42:ab:8d:12:b2:d7:84: 4d:a9:40:5f:47:36:91:78:44:b9:9f:48:15:db:08: c1:89:2b:87:49:42:c2:8c:9c:72:77:dc:29:25:43: c3:51:74:7a:72:a8:51:39:a2:aa:75:ef:e5:99:27: 69:a3:0a:01:02:b0:f0:ca:7c:75:0e:1a:55:fe:3c: da:b6:39:c9:58:1d:76:ed:f0:0c:b9:0f:8a:96:d6: b7:33:08:ff:6b:f9:b3:0c:77:1a:3d:e0:3e:b3:c2: f8:4d:13:a7:49:00:66:6f:6e:6e:03:45:54:de:e9: 44:1d:6c:f9:e2:23:8b:9d:05:29:00:68:7c:11:21: 3a:e3:2d:e2:2e:ea:90:d8:37:df:7c:35:16:5d:cf: ce:ef:71:c7:f0:c7:37:fc:fc:3d:37:f0:f2:6f:0f: 89:8c:2b:16:2e:e1:a1:0f:bd:8f:40:98:ed:e6:a5: 20:2a:39:64:38:d2:e0:9d:88:7c:86:f9:2c:ab:c2: 1c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:23:04:5D:32:F7:3C:F8:0C:2F:55:4D:62:24:7E:FB:F3:D6:08:5C X509v3 Authority Key Identifier: keyid:F7:A0:7F:7A:99:1C:21:A2:5C:D3:9A:B2:0A:DE:4F:A3:B5:E0:5D:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/96B_epkcIaJc05qyCt5Po7XgXRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEC2F/721B31D4963811ECB83C1682C4F9AE02/96B_epkcIaJc05qyCt5Po7XgXRU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:3c:28:82:71:b6:3b:18:86:2d:7d:55:1b:ce:61:fe:a6:0e: c8:cc:7a:65:1c:38:89:35:f3:d8:a2:8f:e4:20:1a:cd:16:da: 66:e2:56:98:33:42:0f:17:d9:f2:31:c7:59:88:e5:80:4a:57: 98:fc:1d:37:f0:33:ed:98:65:99:7e:ef:11:b3:06:02:32:50: 46:e1:96:8e:e7:8e:dd:a0:28:87:dc:9b:db:a6:2e:2f:72:6d: 13:a2:7a:cc:b2:ab:eb:f0:8e:e3:32:56:4e:c2:09:21:b3:98: ad:55:3d:09:1c:53:f0:0c:20:25:aa:12:a8:a5:a9:c5:2e:41: 3f:d3:77:a5:13:f9:e7:d8:e9:12:04:e4:30:96:b9:ba:81:5c: ee:b4:fe:37:63:5d:5e:87:1b:85:5a:12:e9:43:3d:d0:04:9c: 78:ee:19:f4:34:38:14:26:22:17:93:59:31:14:ec:b2:c8:85: 6c:36:8b:e2:b4:c7:75:0a:0c:8c:06:ea:29:d3:93:b6:a0:3d: 36:ad:69:00:33:6e:d4:2b:6f:fd:94:2b:30:2c:ae:41:c0:3a: f0:46:54:d4:84:b8:d2:bc:71:f1:90:2a:4a:82:96:b8:de:ed: 48:b7:a6:13:73:5d:50:a5:82:81:6d:fe:81:7e:c1:8a:87:58: 80:93:6c:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVDMkYxMTAvBgNVBAUTKEY3QTA3RjdBOTkxQzIxQTI1Q0QzOUFCMjBBREU0RkEz QjVFMDVEMTUwHhcNMjUxMTAzMDAyNjI5WhcNMjUxMTEwMDAyNjI5WjAYMRYwFAYD VQQDEw02OTA3ZjZiNi0xYzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVmX0ejpJ39naTMdQvYw9N0vKDrRQxgrOai1chm/WEFz+ORe3xQ8dgORzfgZ s1cXiD0xjrnHtqH264VvmKG9DAN6LkKrjRKy14RNqUBfRzaReES5n0gV2wjBiSuH SULCjJxyd9wpJUPDUXR6cqhROaKqde/lmSdpowoBArDwynx1DhpV/jzatjnJWB12 7fAMuQ+Klta3Mwj/a/mzDHcaPeA+s8L4TROnSQBmb25uA0VU3ulEHWz54iOLnQUp AGh8ESE64y3iLuqQ2DfffDUWXc/O73HH8Mc3/Pw9N/Dybw+JjCsWLuGhD72PQJjt 5qUgKjlkONLgnYh8hvksq8IcHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBUjBF0y 9zz4DC9VTWIkfvvz1ghcMB8GA1UdIwQYMBaAFPegf3qZHCGiXNOasgreT6O14F0V MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUMyRi83MjFCMzFENDk2 MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lhSmMwNXF5Q3Q1UG83WGdY UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzk2Ql9lcGtjSWFKYzA1cXlDdDVQbzdYZ1hSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUMyRi83MjFCMzFENDk2MzgxMUVDQjgzQzE2ODJDNEY5QUUwMi85NkJfZXBrY0lh SmMwNXF5Q3Q1UG83WGdYUlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVPCiCcbY7GIYtfVUbzmH+pg7IzHplHDiJNfPYoo/kIBrNFtpm4laY M0IPF9nyMcdZiOWASleY/B038DPtmGWZfu8RswYCMlBG4ZaO547doCiH3Jvbpi4v cm0TonrMsqvr8I7jMlZOwgkhs5itVT0JHFPwDCAlqhKopanFLkE/03elE/nn2OkS BOQwlrm6gVzutP43Y11ehxuFWhLpQz3QBJx47hn0NDgUJiIXk1kxFOyyyIVsNovi tMd1CgyMBuop05O2oD02rWkAM27UK2/9lCswLK5BwDrwRlTUhLjSvHHxkCpKgpa4 3u1It6YTc11QpYKBbf6BfsGKh1iAk2xE -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:00 2025 by rpki-client