$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft File: cxFBrwp5OqMW733dLxsF-JHFZrI.mft (raw, json) Hash identifier: GxTzEKHTZH14bL/chC7mchRMS4gK8o4YXcFSbecSXr0= Subject key identifier: 73:24:9B:00:20:71:1A:C8:B7:90:FA:4B:9B:66:D4:5A:D7:A4:C9:F4 Authority key identifier: 73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 Certificate issuer: /CN=A91CDE0E/serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Certificate serial: 16D5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft Manifest number: 16C9 Signing time: Tue 04 Nov 2025 16:45:35 +0000 Manifest this update: Tue 04 Nov 2025 16:45:35 +0000 Manifest next update: Tue 11 Nov 2025 16:45:35 +0000 Files and hashes: 1: cxFBrwp5OqMW733dLxsF-JHFZrI.crl (hash: Pn+ZHpGRTMcKUrZB0QdjwpIYQOBNKNXPO0b7ziaztLE=) 2: E940EF3464B611EA9B743415C4F9AE02.roa (hash: ASMLpEvsvu5fZiBYK5kv36WlKk7sSJJC1YfYG/Sqc/8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:45:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5845 (0x16d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDE0E, serialNumber=731141AF0A793AA316EF7DDD2F1B05F891C566B2 Validity Not Before: Nov 4 16:45:35 2025 GMT Not After : Nov 11 16:45:35 2025 GMT Subject: CN=690a2daf-fbc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e2:34:86:66:dc:4f:2e:7b:f3:34:d9:7f:bc: dd:12:e4:0f:36:c1:a4:6e:38:cd:d2:43:f8:24:c1: 5e:a1:68:6a:9f:f7:23:3b:81:d9:dd:a7:35:6c:1a: c9:4d:a8:05:0d:74:fa:10:50:c0:2e:73:d2:a5:73: 73:cc:25:29:9e:78:75:0b:4b:c7:b9:0f:ea:bd:ba: e6:24:55:68:69:2c:a6:e3:3b:e2:d4:35:e7:10:33: 3e:86:76:65:ad:a4:e4:58:ad:74:23:8e:3e:b2:7b: b9:2c:06:e8:5f:64:74:90:62:36:38:da:96:d3:2f: 45:c1:58:57:4b:3d:f3:59:b9:74:a7:df:72:61:c2: 94:04:70:4f:6a:f3:0d:1c:81:58:98:5b:ab:8c:20: 0d:1e:65:82:3a:49:06:00:9b:32:95:42:28:d1:97: 5f:7f:95:36:e4:b9:1c:b7:80:1a:b5:f1:3d:71:7e: fe:82:4f:60:1d:98:60:4b:4b:17:b8:29:be:89:46: 01:da:54:64:39:b9:c7:a8:03:3b:3a:61:14:12:75: 01:20:a0:cb:41:a2:19:3f:a9:31:f2:5b:5a:cd:84: 0c:b8:85:7b:35:7a:d8:f8:52:79:26:de:0c:25:ce: 04:db:9f:4f:37:35:4d:0b:61:62:ab:78:15:a3:1c: 14:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:24:9B:00:20:71:1A:C8:B7:90:FA:4B:9B:66:D4:5A:D7:A4:C9:F4 X509v3 Authority Key Identifier: keyid:73:11:41:AF:0A:79:3A:A3:16:EF:7D:DD:2F:1B:05:F8:91:C5:66:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cxFBrwp5OqMW733dLxsF-JHFZrI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDE0E/6E1E7DE4057C11E882FE8E28C4F9AE02/cxFBrwp5OqMW733dLxsF-JHFZrI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:30:6f:ec:c4:0f:41:8f:66:79:fb:b0:bd:d5:b6:a6:cb:02: be:75:58:f8:b5:cc:51:95:02:20:b1:aa:24:f3:68:2f:eb:e8: b1:33:54:f0:77:5c:a1:1f:9b:29:2f:a7:5e:15:43:0e:35:40: 7c:af:b6:59:51:a9:f1:17:ae:2e:7d:6c:1c:02:56:d0:5b:49: 64:0e:7c:f6:a9:bf:4c:15:6e:e1:99:2a:6d:04:e0:99:75:ec: 5b:2b:20:a6:d8:37:ba:b4:9a:c6:7c:93:f1:b3:5d:fa:9e:7e: 4c:37:55:ad:b5:2f:ef:23:a8:6e:94:b6:93:40:26:90:0c:5d: e8:ae:1f:f4:89:04:a8:56:66:fd:5e:86:be:17:0b:4b:7b:7f: 85:73:35:88:42:67:1e:ac:44:7a:2b:96:af:25:48:9b:8a:24: 49:94:ab:e2:b6:1e:93:fd:ca:34:4f:98:1f:2f:f9:fd:d7:63: 0b:fb:e5:b7:1e:fb:93:f9:64:8b:55:25:3d:6a:dc:0d:b2:83: 77:ad:b7:79:f3:14:90:eb:24:3f:ac:d1:64:ab:c7:a2:05:ae: 27:19:3d:85:ef:c5:60:54:11:d2:58:b7:ae:65:2f:f2:7f:be: 70:26:40:9e:fe:c7:68:8f:05:91:ec:db:cb:3e:f2:b8:e5:6f: 00:10:1d:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFMEUxMTAvBgNVBAUTKDczMTE0MUFGMEE3OTNBQTMxNkVGN0RERDJGMUIwNUY4 OTFDNTY2QjIwHhcNMjUxMTA0MTY0NTM1WhcNMjUxMTExMTY0NTM1WjAYMRYwFAYD VQQDEw02OTBhMmRhZi1mYmMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnuI0hmbcTy578zTZf7zdEuQPNsGkbjjN0kP4JMFeoWhqn/cjO4HZ3ac1bBrJ TagFDXT6EFDALnPSpXNzzCUpnnh1C0vHuQ/qvbrmJFVoaSym4zvi1DXnEDM+hnZl raTkWK10I44+snu5LAboX2R0kGI2ONqW0y9FwVhXSz3zWbl0p99yYcKUBHBPavMN HIFYmFurjCANHmWCOkkGAJsylUIo0Zdff5U25Lkct4AatfE9cX7+gk9gHZhgS0sX uCm+iUYB2lRkObnHqAM7OmEUEnUBIKDLQaIZP6kx8ltazYQMuIV7NXrY+FJ5Jt4M Jc4E259PNzVNC2Fiq3gVoxwU+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHMkmwAg cRrIt5D6S5tm1FrXpMn0MB8GA1UdIwQYMBaAFHMRQa8KeTqjFu993S8bBfiRxWay MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREUwRS82RTFFN0RFNDA1 N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9xTVc3MzNkTHhzRi1KSEZa ckkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4RkJyd3A1T3FNVzczM2RMeHNGLUpIRlpySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REUwRS82RTFFN0RFNDA1N0MxMUU4ODJGRThFMjhDNEY5QUUwMi9jeEZCcndwNU9x TVc3MzNkTHhzRi1KSEZackkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwMG/sxA9Bj2Z5+7C91bamywK+dVj4tcxRlQIgsaok82gv6+ixM1Tw d1yhH5spL6deFUMONUB8r7ZZUanxF64ufWwcAlbQW0lkDnz2qb9MFW7hmSptBOCZ dexbKyCm2De6tJrGfJPxs136nn5MN1WttS/vI6hulLaTQCaQDF3orh/0iQSoVmb9 Xoa+FwtLe3+FczWIQmcerER6K5avJUibiiRJlKvith6T/co0T5gfL/n912ML++W3 HvuT+WSLVSU9atwNsoN3rbd58xSQ6yQ/rNFkq8eiBa4nGT2F78VgVBHSWLeuZS/y f75wJkCe/sdojwWR7NvLPvK45W8AEB3n -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:46 2025 by rpki-client