$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft File: iS3iAjP9DGSOLnuflZUPOpaBfL8.mft (raw, json) Hash identifier: C1JB4/D2/nF3TXC4JVaE1UrQKvFW0/iRagzepHDn4UA= Subject key identifier: 92:CD:DB:51:6E:75:60:69:89:E2:C5:5B:70:4A:52:F8:75:21:1B:86 Authority key identifier: 89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF Certificate issuer: /CN=A91C7175/serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Certificate serial: DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft Manifest number: DE Signing time: Mon 03 Nov 2025 05:32:17 +0000 Manifest this update: Mon 03 Nov 2025 05:32:16 +0000 Manifest next update: Mon 10 Nov 2025 05:32:16 +0000 Files and hashes: 1: iS3iAjP9DGSOLnuflZUPOpaBfL8.crl (hash: EYDRFSs0Q/gdevsRuVrTcWW6GflVaBcf9zeipFSxyA8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 222 (0xde) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7175, serialNumber=892DE20233FD0C648E2E7B9F95950F3A96817CBF Validity Not Before: Nov 3 05:32:16 2025 GMT Not After : Nov 10 05:32:16 2025 GMT Subject: CN=69083e61-a23f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:b9:49:c2:f2:79:1d:7f:9e:84:03:60:47: 74:48:45:9c:1e:f5:2c:c7:c6:3d:0d:89:e8:88:1b: c4:5a:da:fe:a8:2c:c8:95:aa:29:fa:19:cf:e0:f4: f7:2c:72:11:6b:77:10:95:f9:04:44:12:6c:0b:dd: 03:2d:b9:ae:64:5f:61:ce:f1:10:fb:29:e1:bc:f1: 88:0c:37:e5:8d:43:a2:0b:ab:48:e8:ee:0a:79:bc: 4d:5c:07:fe:25:6f:56:15:f7:c2:90:84:14:4a:53: 9b:4e:d9:13:7a:7c:fd:f8:c9:ca:86:c7:87:31:d9: af:aa:fa:9c:f3:d3:0d:af:01:5f:4a:73:d6:fd:de: 4f:43:a3:e8:4c:be:77:60:4f:d7:2b:1c:77:41:fe: 3a:76:23:bf:0f:38:f0:c0:74:5f:d9:1e:a1:7d:b6: f5:43:a0:db:eb:17:d4:0b:55:83:58:4e:df:a2:2e: ef:a5:ea:37:b7:e3:7e:73:34:1f:85:a3:55:f8:25: ef:03:dc:be:d5:60:b6:65:c2:87:65:ca:ef:c3:b8: a9:2a:b9:ec:20:f8:9f:93:57:01:f3:1a:29:da:93: 6f:53:72:4d:73:45:bc:92:e7:ac:05:b8:e5:99:c6: e1:01:84:05:b5:d9:9a:e8:69:cf:27:39:25:af:37: c5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:CD:DB:51:6E:75:60:69:89:E2:C5:5B:70:4A:52:F8:75:21:1B:86 X509v3 Authority Key Identifier: keyid:89:2D:E2:02:33:FD:0C:64:8E:2E:7B:9F:95:95:0F:3A:96:81:7C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iS3iAjP9DGSOLnuflZUPOpaBfL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7175/F22B9CCA68FD11EFA9500187C4F9AE02/iS3iAjP9DGSOLnuflZUPOpaBfL8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:1b:ad:0f:3b:22:81:94:9a:c9:5f:be:95:19:f6:9f:76:99: 17:ac:a3:47:0e:fa:84:f6:f4:72:95:5a:ab:92:d2:ad:33:c4: bb:c3:a5:72:cd:d9:7a:bc:d3:aa:73:46:d0:61:3f:ce:32:c4: 15:3d:e7:38:4e:ac:d8:de:f6:1d:a3:86:43:81:cd:0d:de:d7: 0b:66:3c:da:2c:a8:fd:e6:3f:2f:6a:d8:ed:73:fe:ae:20:4f: 8e:e7:12:c5:18:29:9b:2f:f9:79:e8:d1:d8:be:c4:90:30:94: e0:95:e1:4f:14:7a:bd:f6:5a:ea:82:dd:95:c8:d6:fd:3d:63: 38:34:d2:5c:56:d8:79:03:db:76:aa:90:1d:38:10:e7:50:93: 98:c4:11:4f:32:a9:6d:e8:72:22:3e:22:e9:3b:35:ff:51:4c: 8e:ed:7a:50:e7:f9:5d:63:1d:50:e7:43:8a:d8:13:52:45:5d: 41:6f:bc:b4:6f:77:76:33:93:1e:63:58:47:70:60:c9:be:ee: 91:4d:b3:5b:89:8e:8e:08:2d:0a:5f:24:5b:c7:81:a6:14:7d: 7a:b9:7f:eb:48:96:54:81:af:03:ed:8c:e4:f1:56:33:33:6f: 05:ec:0e:da:f2:1a:82:32:46:6e:0f:52:f8:b4:de:fe:b0:14: b0:80:e3:12 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcxNzUxMTAvBgNVBAUTKDg5MkRFMjAyMzNGRDBDNjQ4RTJFN0I5Rjk1OTUwRjNB OTY4MTdDQkYwHhcNMjUxMTAzMDUzMjE2WhcNMjUxMTEwMDUzMjE2WjAYMRYwFAYD VQQDEw02OTA4M2U2MS1hMjNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+G5ScLyeR1/noQDYEd0SEWcHvUsx8Y9DYnoiBvEWtr+qCzIlaop+hnP4PT3 LHIRa3cQlfkERBJsC90DLbmuZF9hzvEQ+ynhvPGIDDfljUOiC6tI6O4KebxNXAf+ JW9WFffCkIQUSlObTtkTenz9+MnKhseHMdmvqvqc89MNrwFfSnPW/d5PQ6PoTL53 YE/XKxx3Qf46diO/DzjwwHRf2R6hfbb1Q6Db6xfUC1WDWE7foi7vpeo3t+N+czQf haNV+CXvA9y+1WC2ZcKHZcrvw7ipKrnsIPifk1cB8xop2pNvU3JNc0W8kuesBbjl mcbhAYQFtdma6GnPJzklrzfFGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJLN21Fu dWBpieLFW3BKUvh1IRuGMB8GA1UdIwQYMBaAFIkt4gIz/Qxkji57n5WVDzqWgXy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE3NS9GMjJCOUNDQTY4 RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURHU09MbnVmbFpVUE9wYUJm TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lTM2lBalA5REdTT0xudWZsWlVQT3BhQmZMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzE3NS9GMjJCOUNDQTY4RkQxMUVGQTk1MDAxODdDNEY5QUUwMi9pUzNpQWpQOURH U09MbnVmbFpVUE9wYUJmTDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnG60POyKBlJrJX76VGfafdpkXrKNHDvqE9vRylVqrktKtM8S7w6Vy zdl6vNOqc0bQYT/OMsQVPec4TqzY3vYdo4ZDgc0N3tcLZjzaLKj95j8vatjtc/6u IE+O5xLFGCmbL/l56NHYvsSQMJTgleFPFHq99lrqgt2VyNb9PWM4NNJcVth5A9t2 qpAdOBDnUJOYxBFPMqlt6HIiPiLpOzX/UUyO7XpQ5/ldYx1Q50OK2BNSRV1Bb7y0 b3d2M5MeY1hHcGDJvu6RTbNbiY6OCC0KXyRbx4GmFH16uX/rSJZUga8D7Yzk8VYz M28F7A7a8hqCMkZuD1L4tN7+sBSwgOMS -----END CERTIFICATE-----Generated at Tue Nov 4 08:29:03 2025 by rpki-client