$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: aG/grG0tjGqdA7KRvQoXp1GRqAtxsYXhE7PEeEGrIoI= Subject key identifier: 0B:84:D7:E9:CF:A5:E8:BD:DC:3D:92:AB:27:F1:6E:A9:F9:73:13:98 Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A09 Signing time: Tue 04 Nov 2025 20:33:30 +0000 Manifest this update: Tue 04 Nov 2025 20:33:30 +0000 Manifest next update: Tue 11 Nov 2025 20:33:30 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: X4JRD106swVs5Q0AwRfbdenF3/gvDeccvI3fdnhg09c=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:33:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Nov 4 20:33:30 2025 GMT Not After : Nov 11 20:33:30 2025 GMT Subject: CN=690a631a-3629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:a9:2b:d0:1c:ab:31:39:6b:30:c3:fa:85: 2b:87:91:0f:e6:b0:0b:d3:d6:2a:dd:fa:70:b2:94: a6:0f:7f:be:5b:56:ec:5a:8a:63:e5:3e:9d:01:d8: fa:30:5b:7f:bc:38:4b:58:e1:81:46:3a:42:d7:e5: e6:48:eb:e4:25:9e:fb:7c:a4:ec:12:92:5b:1c:1d: d5:f2:cd:88:82:af:f0:f9:44:e7:ff:bf:2c:a7:00: 7c:07:e6:a4:87:96:11:8e:87:3d:f2:19:96:44:ba: 2b:5f:19:a6:56:43:ce:7e:16:c2:a6:46:38:8a:54: e6:6b:56:7c:27:b1:ff:a6:f8:b4:9a:52:81:f3:30: 0f:6b:ab:ad:76:2e:0a:0d:3c:64:c9:72:8e:54:f3: 6e:47:79:a4:26:7d:4f:69:c4:00:a8:de:7e:2a:d7: 9d:4f:36:9b:7f:db:cf:84:c7:63:60:e1:0b:0b:2e: 5a:ab:6c:25:d6:d4:c8:57:4d:39:e3:a1:ef:f4:4b: 00:c4:a8:16:c8:11:4e:2c:f7:80:39:a9:b0:25:12: 84:73:4b:af:b8:d0:29:eb:a8:9c:d0:75:00:65:71: 6b:a6:be:9d:38:55:a7:3c:5c:87:b4:e2:3c:99:f1: 1b:ac:7e:97:20:f3:f7:3a:77:4d:28:bd:31:cd:2f: c0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:84:D7:E9:CF:A5:E8:BD:DC:3D:92:AB:27:F1:6E:A9:F9:73:13:98 X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:50:4a:f8:41:08:65:18:f8:f3:44:c4:5a:4d:3c:72:28:a6: e6:a2:99:8b:77:66:94:3f:01:a4:cc:d4:2c:b2:de:a3:ac:10: 2a:8c:d3:63:d8:1d:a6:9a:76:07:e9:9f:bc:5d:01:e0:a2:4e: e2:ce:18:7c:b6:d3:33:11:25:88:e6:fa:92:b6:cf:67:67:ee: 0b:ba:80:94:69:b4:d9:93:4a:aa:df:d0:3d:07:59:f9:f9:fb: 2c:e4:a3:6f:1f:82:1f:0a:03:79:7d:76:91:1e:6e:23:ba:3d: e3:50:b9:27:84:e4:e7:a8:46:9a:07:ab:68:25:45:35:5a:dc: 05:e8:38:16:c6:b9:ea:7e:44:63:1d:26:d2:bb:56:2e:04:56: 29:d7:cc:ea:d9:eb:2a:c4:3e:e1:b9:4d:71:10:af:f3:8d:32: c4:db:db:d7:d6:b8:3b:05:66:77:09:c5:6b:04:6e:0b:fd:4b: 32:35:3d:5d:d4:c4:ca:cf:86:7e:5f:c8:ef:4c:ae:41:74:0f: dd:e3:0d:3d:91:8f:1f:32:ed:ce:d1:70:a3:bc:65:65:5a:5f: 32:d7:a3:d2:5a:4a:9f:94:0d:64:5d:5e:e9:b2:5a:e6:1e:09: 66:8c:da:51:89:59:c2:fc:56:77:f5:f5:27:c5:01:6c:41:ce: 8e:9a:ce:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUxMTA0MjAzMzMwWhcNMjUxMTExMjAzMzMwWjAYMRYwFAYD VQQDEw02OTBhNjMxYS0zNjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4lGpK9AcqzE5azDD+oUrh5EP5rAL09Yq3fpwspSmD3++W1bsWopj5T6dAdj6 MFt/vDhLWOGBRjpC1+XmSOvkJZ77fKTsEpJbHB3V8s2Igq/w+UTn/78spwB8B+ak h5YRjoc98hmWRLorXxmmVkPOfhbCpkY4ilTma1Z8J7H/pvi0mlKB8zAPa6utdi4K DTxkyXKOVPNuR3mkJn1PacQAqN5+KtedTzabf9vPhMdjYOELCy5aq2wl1tTIV005 46Hv9EsAxKgWyBFOLPeAOamwJRKEc0uvuNAp66ic0HUAZXFrpr6dOFWnPFyHtOI8 mfEbrH6XIPP3OndNKL0xzS/AswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAuE1+nP pei93D2Sqyfxbqn5cxOYMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBoUEr4QQhlGPjzRMRaTTxyKKbmopmLd2aUPwGkzNQsst6jrBAqjNNj 2B2mmnYH6Z+8XQHgok7izhh8ttMzESWI5vqSts9nZ+4LuoCUabTZk0qq39A9B1n5 +fss5KNvH4IfCgN5fXaRHm4juj3jULknhOTnqEaaB6toJUU1WtwF6DgWxrnqfkRj HSbSu1YuBFYp18zq2esqxD7huU1xEK/zjTLE29vX1rg7BWZ3CcVrBG4L/UsyNT1d 1MTKz4Z+X8jvTK5BdA/d4w09kY8fMu3O0XCjvGVlWl8y16PSWkqflA1kXV7pslrm HglmjNpRiVnC/FZ39fUnxQFsQc6Oms7k -----END CERTIFICATE-----Generated at Wed Nov 5 16:43:15 2025 by rpki-client