$ rpki-client -vvf rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft File: sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft (raw, json) Hash identifier: 6vjF8VOdSxpKqIpnok4PWrFajVe0oNO0GhUC29+fymo= Subject key identifier: 61:AB:A6:D0:D9:4D:7E:8B:B3:E7:D1:BD:38:40:1F:5E:7F:77:4D:CA Authority key identifier: B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 Certificate issuer: /CN=A91C90F3/serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Certificate serial: 08C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft Manifest number: 08B9 Signing time: Tue 04 Nov 2025 20:34:06 +0000 Manifest this update: Tue 04 Nov 2025 20:34:05 +0000 Manifest next update: Tue 11 Nov 2025 20:34:05 +0000 Files and hashes: 1: sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl (hash: iUapR6jO3yGVCpohOWDi+MAOvVocf6asiwYRthbtI/w=) 2: E67EF1B25F0311ECBB273637C4F9AE02.roa (hash: nVx5Y0jzC9bHhMI0JsTAXXHXSiIymADxDx7MlszHZYI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:34:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2241 (0x8c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C90F3, serialNumber=B0B4007652FB3D14328813B3E57EEFF17759CFF2 Validity Not Before: Nov 4 20:34:05 2025 GMT Not After : Nov 11 20:34:05 2025 GMT Subject: CN=690a633e-392b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bf:b8:5b:70:de:9f:b0:a5:ba:c3:2c:a9:e1: 9b:ae:50:41:a4:1b:6a:82:97:bd:06:a3:20:59:4c: db:b2:ef:56:70:79:0d:59:ee:00:5f:6b:68:7f:47: 87:91:e0:7a:28:6c:9a:a2:f2:bc:8c:b8:d0:65:82: 1e:17:ae:70:78:50:5d:6a:6d:00:76:65:5f:f2:f7: 7b:bc:b4:54:6c:10:7e:25:69:46:86:25:06:d2:f0: 87:06:15:d5:2b:c0:0c:d2:5e:8f:e1:82:6e:9e:d7: b8:8c:2e:a2:29:73:38:11:90:39:51:44:b2:63:12: 48:d4:9a:75:29:32:18:18:1b:a0:30:d3:51:43:18: 5d:46:cb:09:5e:7b:4b:5b:23:bc:4a:9b:bb:6a:2b: 65:6e:a1:21:54:bf:88:d8:5d:5f:c0:86:d5:9c:72: 5f:26:88:69:74:9a:f3:04:9b:58:55:ea:73:ac:f4: ec:19:87:c8:52:cd:21:26:7d:a0:91:a6:95:05:35: 52:4a:45:ed:2e:9f:d4:c5:d2:e4:c2:ea:48:5e:f4: 1e:b4:45:99:a0:17:ec:49:89:a5:86:42:d6:b2:07: 5d:34:6b:0f:74:fc:5a:49:c5:4a:f9:11:1e:15:f7: 7d:fd:ac:18:5f:ff:9c:22:a7:1b:45:6a:98:68:1d: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AB:A6:D0:D9:4D:7E:8B:B3:E7:D1:BD:38:40:1F:5E:7F:77:4D:CA X509v3 Authority Key Identifier: keyid:B0:B4:00:76:52:FB:3D:14:32:88:13:B3:E5:7E:EF:F1:77:59:CF:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLQAdlL7PRQyiBOz5X7v8XdZz_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C90F3/8E1C1E76C55A11EAA9231F67C4F9AE02/sLQAdlL7PRQyiBOz5X7v8XdZz_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:25:93:5e:bc:a6:11:fc:31:75:ea:67:a0:e7:5c:62:80:8d: 46:6b:a6:c7:c9:b4:0a:b9:bd:3b:a3:b7:b9:fe:77:e4:a3:b3: 76:b7:bc:c1:d9:e4:c5:1f:5c:33:bc:69:01:96:16:5f:2f:d1: 3d:21:b5:fd:25:b8:a6:b4:8a:16:5b:eb:40:99:1e:e6:8a:09: 27:94:16:10:94:36:fb:40:42:78:54:64:c9:1a:3b:ec:2c:d5: 87:8a:b9:61:dd:14:2d:98:2d:2b:01:87:74:f1:2b:e1:7f:26: f8:92:fc:21:3f:e7:11:00:5a:4e:eb:ba:63:21:fb:df:f6:f9: ad:92:97:40:fb:d8:19:e9:9d:fb:c3:23:e5:90:14:71:aa:a9: df:f3:d1:0b:62:44:5e:16:7e:bf:07:93:ac:ad:00:de:43:45: 38:d3:59:1c:94:c6:0a:6d:22:40:1c:6f:96:1d:f5:c9:c6:ff: 2c:42:4e:7f:49:2e:2d:af:b6:f5:14:5d:87:0e:09:2f:e3:48: e1:52:55:01:5d:c5:65:7b:1f:f6:55:80:b3:c1:d5:7a:93:58: 0b:0d:4f:43:46:e6:eb:b0:f0:53:59:0c:60:93:2e:cd:e1:f1: 29:ad:66:5b:8b:09:10:30:ca:b3:a4:fc:ba:e2:e5:26:4a:f1: 2e:d0:9d:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkwRjMxMTAvBgNVBAUTKEIwQjQwMDc2NTJGQjNEMTQzMjg4MTNCM0U1N0VFRkYx Nzc1OUNGRjIwHhcNMjUxMTA0MjAzNDA1WhcNMjUxMTExMjAzNDA1WjAYMRYwFAYD VQQDEw02OTBhNjMzZS0zOTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1b+4W3Den7ClusMsqeGbrlBBpBtqgpe9BqMgWUzbsu9WcHkNWe4AX2tof0eH keB6KGyaovK8jLjQZYIeF65weFBdam0AdmVf8vd7vLRUbBB+JWlGhiUG0vCHBhXV K8AM0l6P4YJunte4jC6iKXM4EZA5UUSyYxJI1Jp1KTIYGBugMNNRQxhdRssJXntL WyO8Spu7aitlbqEhVL+I2F1fwIbVnHJfJohpdJrzBJtYVepzrPTsGYfIUs0hJn2g kaaVBTVSSkXtLp/UxdLkwupIXvQetEWZoBfsSYmlhkLWsgddNGsPdPxaScVK+REe Ffd9/awYX/+cIqcbRWqYaB3CFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGGrptDZ TX6Ls+fRvThAH15/d03KMB8GA1UdIwQYMBaAFLC0AHZS+z0UMogTs+V+7/F3Wc/y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTBGMy84RTFDMUU3NkM1 NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BSUXlpQk96NVg3djhYZFp6 X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NMUUFkbEw3UFJReWlCT3o1WDd2OFhkWnpfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OTBGMy84RTFDMUU3NkM1NUExMUVBQTkyMzFGNjdDNEY5QUUwMi9zTFFBZGxMN1BS UXlpQk96NVg3djhYZFp6X0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/JZNevKYR/DF16meg51xigI1Ga6bHybQKub07o7e5/nfko7N2t7zB 2eTFH1wzvGkBlhZfL9E9IbX9JbimtIoWW+tAmR7migknlBYQlDb7QEJ4VGTJGjvs LNWHirlh3RQtmC0rAYd08Svhfyb4kvwhP+cRAFpO67pjIfvf9vmtkpdA+9gZ6Z37 wyPlkBRxqqnf89ELYkReFn6/B5OsrQDeQ0U401kclMYKbSJAHG+WHfXJxv8sQk5/ SS4tr7b1FF2HDgkv40jhUlUBXcVlex/2VYCzwdV6k1gLDU9DRubrsPBTWQxgky7N 4fEprWZbiwkQMMqzpPy64uUmSvEu0J38 -----END CERTIFICATE-----Generated at Wed Nov 5 16:40:42 2025 by rpki-client