$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft File: msuAZmP7D89uvEPAELk14FIU_J8.mft (raw, json) Hash identifier: /e/1SNkuy7O5cJ40t8tOh7c+ZlWLbMpkUP74Yd2Wat4= Subject key identifier: 7B:A7:A5:A9:A5:0B:F2:E2:CB:A5:DD:EC:1B:38:16:C2:8F:00:0F:62 Authority key identifier: 9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F Certificate issuer: /CN=A91C7B68/serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Certificate serial: 014B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft Manifest number: 0A9C Signing time: Sun 02 Nov 2025 20:12:34 +0000 Manifest this update: Sun 02 Nov 2025 20:12:33 +0000 Manifest next update: Sun 09 Nov 2025 20:12:33 +0000 Files and hashes: 1: msuAZmP7D89uvEPAELk14FIU_J8.crl (hash: swmin3nPZFhBQKEHUOzEVjG3/pyQHcbW0IoEJnvhH/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 331 (0x14b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7B68, serialNumber=9ACB806663FB0FCF6EBC43C010B935E05214FC9F Validity Not Before: Nov 2 20:12:33 2025 GMT Not After : Nov 9 20:12:33 2025 GMT Subject: CN=6907bb32-8090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:bb:ff:1b:d5:5c:d8:27:c8:68:0f:2d:3c:db: be:d7:f6:e5:b7:d8:6a:78:e8:c4:02:77:28:0a:2f: 69:1c:04:a2:0d:54:71:b5:29:d0:91:90:92:41:45: 16:84:e8:50:5d:7f:d9:65:c1:da:66:2c:db:b9:92: 20:44:7a:32:e7:81:35:8f:28:a4:18:0c:58:5a:1c: 87:b5:f6:65:3a:7f:55:a5:a8:70:e6:61:a3:48:8a: 28:ae:f8:20:52:04:75:f0:85:a8:68:af:0a:92:37: 9a:f7:ce:74:25:b3:8b:ca:f8:5f:3a:ed:f7:52:3d: 19:44:fb:ef:66:01:e9:f1:2a:4a:cd:ff:f7:35:05: c8:39:df:ab:79:dd:3e:ab:5c:f9:27:04:20:cc:4b: 95:e7:76:87:5a:39:5f:5d:e7:ce:03:a8:a5:d3:c7: 31:41:5d:41:ca:e2:eb:68:b0:4a:58:cb:15:cb:41: ca:7b:83:b2:24:73:a9:7d:fa:d3:e9:72:3a:81:54: 71:f3:59:76:d2:70:d2:d1:a3:41:c3:b8:fb:07:81: 86:d8:5e:cd:fa:41:8a:cf:93:7c:66:e4:af:66:8c: 1f:14:0b:e8:57:fc:83:d8:bc:ba:cd:6f:41:c0:20: b9:a7:e8:ff:fc:70:ff:18:8d:68:0d:27:b0:54:97: a7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A7:A5:A9:A5:0B:F2:E2:CB:A5:DD:EC:1B:38:16:C2:8F:00:0F:62 X509v3 Authority Key Identifier: keyid:9A:CB:80:66:63:FB:0F:CF:6E:BC:43:C0:10:B9:35:E0:52:14:FC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/msuAZmP7D89uvEPAELk14FIU_J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7B68/53A7B92CB0A511EA8F92ED17C4F9AE02/msuAZmP7D89uvEPAELk14FIU_J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:b6:c7:a1:0b:41:75:3b:4d:3d:c3:59:6b:ff:eb:09:f1:43: bd:8b:6b:89:60:96:ab:f6:29:fa:3d:10:64:0b:28:8b:c4:1a: 75:42:67:56:6d:4f:47:b3:65:1d:9b:b7:17:49:fb:95:4f:92: 20:14:d5:f8:de:ab:80:1d:0c:cd:43:10:5d:2d:ed:cc:15:11: 34:e7:25:fe:03:db:5c:68:34:f9:fb:50:f2:af:e3:ec:a3:18: 99:90:bc:6b:81:8a:91:41:58:66:99:ad:24:92:06:cf:7c:27: 11:fa:19:6e:9a:e1:5c:20:7d:0d:20:bd:a2:64:5f:bd:92:1d: 36:b6:8e:ce:82:7d:3f:11:66:19:c7:93:36:0d:95:cb:14:97: 8d:d6:9b:0d:43:8b:30:90:a4:3f:5c:f9:99:d7:b8:2a:98:ed: 20:f8:45:e4:7d:7a:d0:0a:fb:30:03:e3:b2:36:09:1d:7a:e2: e4:bb:69:55:65:0b:f3:71:01:e7:11:d2:48:95:67:36:87:7d: 59:57:62:a7:dd:1a:4d:65:ad:5a:57:74:22:2a:54:e8:60:1e: cb:b2:a1:fe:1a:da:d5:16:c0:94:50:56:5b:16:22:93:bf:66: 80:a8:a3:02:90:9a:fc:2e:7e:72:f0:8c:87:9f:4d:3c:37:5d: b7:b9:5a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdCNjgxMTAvBgNVBAUTKDlBQ0I4MDY2NjNGQjBGQ0Y2RUJDNDNDMDEwQjkzNUUw NTIxNEZDOUYwHhcNMjUxMTAyMjAxMjMzWhcNMjUxMTA5MjAxMjMzWjAYMRYwFAYD VQQDEw02OTA3YmIzMi04MDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7Lv/G9Vc2CfIaA8tPNu+1/blt9hqeOjEAncoCi9pHASiDVRxtSnQkZCSQUUW hOhQXX/ZZcHaZizbuZIgRHoy54E1jyikGAxYWhyHtfZlOn9Vpahw5mGjSIoorvgg UgR18IWoaK8Kkjea9850JbOLyvhfOu33Uj0ZRPvvZgHp8SpKzf/3NQXIOd+red0+ q1z5JwQgzEuV53aHWjlfXefOA6il08cxQV1ByuLraLBKWMsVy0HKe4OyJHOpffrT 6XI6gVRx81l20nDS0aNBw7j7B4GG2F7N+kGKz5N8ZuSvZowfFAvoV/yD2Ly6zW9B wCC5p+j//HD/GI1oDSewVJenvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHunpaml C/Liy6Xd7Bs4FsKPAA9iMB8GA1UdIwQYMBaAFJrLgGZj+w/PbrxDwBC5NeBSFPyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0I2OC81M0E3QjkyQ0Iw QTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4OXV2RVBBRUxrMTRGSVVf SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21zdUFabVA3RDg5dXZFUEFFTGsxNEZJVV9KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0I2OC81M0E3QjkyQ0IwQTUxMUVBOEY5MkVEMTdDNEY5QUUwMi9tc3VBWm1QN0Q4 OXV2RVBBRUxrMTRGSVVfSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/tsehC0F1O009w1lr/+sJ8UO9i2uJYJar9in6PRBkCyiLxBp1QmdW bU9Hs2Udm7cXSfuVT5IgFNX43quAHQzNQxBdLe3MFRE05yX+A9tcaDT5+1Dyr+Ps oxiZkLxrgYqRQVhmma0kkgbPfCcR+hlumuFcIH0NIL2iZF+9kh02to7Ogn0/EWYZ x5M2DZXLFJeN1psNQ4swkKQ/XPmZ17gqmO0g+EXkfXrQCvswA+OyNgkdeuLku2lV ZQvzcQHnEdJIlWc2h31ZV2Kn3RpNZa1aV3QiKlToYB7LsqH+GtrVFsCUUFZbFiKT v2aAqKMCkJr8Ln5y8IyHn008N123uVpd -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:42 2025 by rpki-client