$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft File: 0VLfcuXWwcb-QrZCN3w7CIEobec.mft (raw, json) Hash identifier: Q1pAxbv0AJS4JXHMYJKnoz1f1xPwbyFFZGMyVhRFtS8= Subject key identifier: FA:06:5B:AF:BD:D4:82:B4:F9:AB:9D:E4:5B:ED:51:BE:4A:D6:80:68 Authority key identifier: D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 Certificate issuer: /CN=A91C0FAC/serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Certificate serial: 056C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft Manifest number: 0567 Signing time: Sun 02 Nov 2025 23:20:21 +0000 Manifest this update: Sun 02 Nov 2025 23:20:21 +0000 Manifest next update: Sun 09 Nov 2025 23:20:21 +0000 Files and hashes: 1: 0VLfcuXWwcb-QrZCN3w7CIEobec.crl (hash: 5qjYpBf1pfT4xFDEgdwX73PRS9yKRSXtfQgTsCnJocE=) 2: 4C2E7A3C049B11ECAC7E5D0DC4F9AE02.roa (hash: JNxs4L4e1ceFr4b8NRWrFPbylob6Fmj/cL16X1jkyEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1388 (0x56c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FAC, serialNumber=D152DF72E5D6C1C6FE42B642377C3B0881286DE7 Validity Not Before: Nov 2 23:20:21 2025 GMT Not After : Nov 9 23:20:21 2025 GMT Subject: CN=6907e735-1178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a9:42:8a:ee:c2:61:f8:38:fe:71:ca:13:4e: 60:7a:1b:78:67:67:38:15:12:b5:3e:d3:5d:96:5c: 8a:48:58:49:69:34:cc:4a:5f:8c:b7:17:4b:d9:5d: d5:7e:c1:c7:f0:f9:cd:6f:ec:9f:0c:01:ee:e5:d6: b6:a8:ef:1e:a3:23:36:68:dd:ea:a9:fd:b7:af:ea: ce:fc:af:34:62:16:b6:49:d5:69:63:42:d3:aa:ae: 95:dd:48:c2:30:55:11:56:d7:ae:d0:d7:d2:39:1c: e7:e6:56:c3:fd:8c:b2:38:bd:4f:46:27:c7:3a:e9: 1e:59:e8:f8:c3:cf:cd:a3:f5:db:46:ef:e3:98:be: 84:4a:f1:fb:d0:92:30:5d:0b:a9:dc:5f:a0:39:1f: 31:94:4b:8c:0a:6c:09:8c:be:f9:ab:6b:56:32:2f: 2e:b1:60:90:88:9c:28:72:fd:0c:5a:7a:39:fb:25: 68:60:f4:07:cc:86:87:6a:c0:a2:8a:b3:5d:37:9b: 59:1a:ee:03:78:81:dc:44:b6:c6:82:51:db:bf:af: cd:6b:cd:9d:52:7e:57:64:b8:45:f9:b7:fb:39:d0: 8e:73:06:03:ed:09:66:d5:5c:dc:9c:d4:6a:c3:cd: 1b:c8:24:a4:a1:be:13:66:68:15:8f:6d:39:cc:9f: 59:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:5B:AF:BD:D4:82:B4:F9:AB:9D:E4:5B:ED:51:BE:4A:D6:80:68 X509v3 Authority Key Identifier: keyid:D1:52:DF:72:E5:D6:C1:C6:FE:42:B6:42:37:7C:3B:08:81:28:6D:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0VLfcuXWwcb-QrZCN3w7CIEobec.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FAC/3CF798E0049711ECA53D4B3CC4F9AE02/0VLfcuXWwcb-QrZCN3w7CIEobec.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:7a:77:b2:36:89:e0:5a:71:7d:e7:48:68:9a:c3:84:00:32: a6:cb:3e:58:c1:b2:eb:95:31:56:61:0d:f0:ec:a7:d1:f4:23: 80:79:ab:8b:3d:0f:34:d1:e3:43:af:fa:d1:6a:c8:1f:2a:78: b8:2b:22:bc:f8:23:91:3b:03:40:a1:2f:44:ba:f6:af:61:6b: 9b:55:39:2c:d5:5c:da:0e:a5:66:1b:f9:08:f2:74:47:91:4d: 9d:ca:88:fa:1c:42:18:d7:e1:33:0a:17:70:6e:cc:19:bb:c1: 20:f4:4a:3c:b3:55:9d:59:84:2a:df:39:f3:6b:7f:00:32:3b: 16:b1:ae:97:a4:44:b0:81:15:7e:16:95:61:bb:cf:98:25:39: 18:d7:7e:7a:57:ea:aa:de:37:4d:1f:2c:e0:77:e6:59:c9:17: 4f:55:66:2d:33:5f:0a:c4:1c:85:5b:a7:d2:1a:55:70:5f:67: fa:4b:52:1d:84:65:d6:46:ba:cc:2d:3e:84:4e:eb:f7:0c:5f: 57:f2:04:fa:7b:3e:ed:6d:af:31:9e:ee:88:d2:7c:75:05:53: db:2f:e3:0b:b2:c6:80:20:ac:c0:14:d0:75:42:9c:53:cc:22: b5:63:f0:87:ba:8a:41:0e:a3:34:a2:21:48:71:71:18:8a:aa: 9f:cb:4b:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQUMxMTAvBgNVBAUTKEQxNTJERjcyRTVENkMxQzZGRTQyQjY0MjM3N0MzQjA4 ODEyODZERTcwHhcNMjUxMTAyMjMyMDIxWhcNMjUxMTA5MjMyMDIxWjAYMRYwFAYD VQQDEw02OTA3ZTczNS0xMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApKlCiu7CYfg4/nHKE05geht4Z2c4FRK1PtNdllyKSFhJaTTMSl+MtxdL2V3V fsHH8PnNb+yfDAHu5da2qO8eoyM2aN3qqf23r+rO/K80Yha2SdVpY0LTqq6V3UjC MFURVteu0NfSORzn5lbD/YyyOL1PRifHOukeWej4w8/No/XbRu/jmL6ESvH70JIw XQup3F+gOR8xlEuMCmwJjL75q2tWMi8usWCQiJwocv0MWno5+yVoYPQHzIaHasCi irNdN5tZGu4DeIHcRLbGglHbv6/Na82dUn5XZLhF+bf7OdCOcwYD7Qlm1VzcnNRq w80byCSkob4TZmgVj205zJ9ZewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPoGW6+9 1IK0+aud5FvtUb5K1oBoMB8GA1UdIwQYMBaAFNFS33Ll1sHG/kK2Qjd8OwiBKG3n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZBQy8zQ0Y3OThFMDA0 OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3djYi1RclpDTjN3N0NJRW9i ZWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBWTGZjdVhXd2NiLVFyWkNOM3c3Q0lFb2JlYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZBQy8zQ0Y3OThFMDA0OTcxMUVDQTUzRDRCM0NDNEY5QUUwMi8wVkxmY3VYV3dj Yi1RclpDTjN3N0NJRW9iZWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJeneyNongWnF950homsOEADKmyz5YwbLrlTFWYQ3w7KfR9COAeauL PQ800eNDr/rRasgfKni4KyK8+COROwNAoS9EuvavYWubVTks1VzaDqVmG/kI8nRH kU2dyoj6HEIY1+EzChdwbswZu8Eg9Eo8s1WdWYQq3znza38AMjsWsa6XpESwgRV+ FpVhu8+YJTkY1356V+qq3jdNHyzgd+ZZyRdPVWYtM18KxByFW6fSGlVwX2f6S1Id hGXWRrrMLT6ETuv3DF9X8gT6ez7tba8xnu6I0nx1BVPbL+MLssaAIKzAFNB1QpxT zCK1Y/CHuopBDqM0oiFIcXEYiqqfy0v4 -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:28 2025 by rpki-client