$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft File: REDuIbNImmUKYWsSDY5b5Xku4Es.mft (raw, json) Hash identifier: U3hrPy+799Gj/xkmQHpd5nKBQEXPUHK/YEM8YOPTcvQ= Subject key identifier: 9A:F8:A7:D8:72:D3:3B:37:4E:13:C1:20:DF:47:D1:2E:05:CE:6B:1A Authority key identifier: 44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B Certificate issuer: /CN=A91CE3A3/serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft Manifest number: 0C94 Signing time: Tue 04 Nov 2025 18:24:39 +0000 Manifest this update: Tue 04 Nov 2025 18:24:38 +0000 Manifest next update: Tue 11 Nov 2025 18:24:38 +0000 Files and hashes: 1: REDuIbNImmUKYWsSDY5b5Xku4Es.crl (hash: elMKqkeEpCBMBSZDmTDrwa1BMhR/sxiYEYfSddW20zU=) 2: 7155C8563E5E11EAB043A522C4F9AE02.roa (hash: kzRNRyDp5yy+6xuR6mT9mG0c89/n8LtjaHr1+0MkgX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE3A3, serialNumber=4440EE21B3489A650A616B120D8E5BE5792EE04B Validity Not Before: Nov 4 18:24:38 2025 GMT Not After : Nov 11 18:24:38 2025 GMT Subject: CN=690a44e6-6034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:c4:16:17:0f:bd:2c:fc:4b:49:3c:0c:dd: f9:99:a7:0f:d4:e6:bf:ff:48:a6:c6:33:e2:b3:9c: fa:4a:c9:6e:a3:86:df:ff:78:2a:08:63:eb:fb:05: d7:e7:4f:47:85:63:48:17:0d:f8:d1:bd:94:f5:a7: d1:91:3a:10:97:e1:d2:dd:46:c7:7c:35:4d:79:84: 0d:7c:46:fc:c2:ef:82:16:26:17:a6:bb:08:1b:19: f4:e1:29:7c:d9:f8:1e:ce:e9:57:2f:67:74:93:54: 9e:0a:a2:17:60:31:da:c2:42:4d:df:f9:5c:00:2a: 9b:ff:da:b3:29:9c:0e:51:39:e9:57:e0:ac:10:2a: cf:8c:e6:0b:7c:11:e8:62:41:24:26:18:75:3d:06: 8d:98:db:e8:ed:ee:48:d0:a3:3d:6c:01:c3:bb:cf: 8e:c4:cc:78:19:55:d5:26:d0:8d:cb:12:ae:24:0a: 33:20:41:1a:4c:26:4d:8f:8c:8c:35:98:13:a5:cd: a3:9e:8e:74:de:9d:0c:70:e4:35:2c:58:7f:c9:a1: 15:61:1c:75:97:64:93:4f:02:53:06:bd:a8:6c:f6: 63:dc:bc:45:eb:fd:6d:39:9f:5d:2f:6e:70:f3:28: ee:bd:39:9f:2e:09:04:52:b4:ca:1b:29:70:ff:d1: 56:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:F8:A7:D8:72:D3:3B:37:4E:13:C1:20:DF:47:D1:2E:05:CE:6B:1A X509v3 Authority Key Identifier: keyid:44:40:EE:21:B3:48:9A:65:0A:61:6B:12:0D:8E:5B:E5:79:2E:E0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/REDuIbNImmUKYWsSDY5b5Xku4Es.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE3A3/18823C8C050111EABD9B202CC4F9AE02/REDuIbNImmUKYWsSDY5b5Xku4Es.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d1:3d:09:da:7b:cc:15:8a:55:ca:bc:56:1d:04:d9:db:46: 31:81:38:d6:38:2d:ed:cb:38:1d:df:f0:c2:28:9f:a5:96:12: 22:b6:8d:33:60:ed:13:4d:96:a2:e4:4a:50:30:26:67:d0:5c: fe:17:41:75:5e:08:f6:14:33:c4:c9:69:03:79:a9:fc:7d:8e: 98:7a:ef:d7:cb:b1:b2:9e:ad:67:45:35:02:ba:e7:cd:96:c1: db:c6:71:f3:0e:6d:21:a8:8a:82:4c:38:d5:0a:7e:ff:7a:29: 03:6b:d7:db:1a:40:a9:03:6f:dd:ea:ec:85:91:70:ea:d0:3b: 16:97:55:25:60:6f:af:1a:27:c1:dc:7e:28:2a:f6:2c:db:14: 57:f3:c0:b2:59:93:80:33:ed:cd:a2:6f:07:84:75:46:cf:d6: 09:cc:0b:39:d1:f1:98:ab:03:c4:cb:b4:84:63:10:c6:7b:72: e2:91:0b:f6:ab:f1:34:ec:9f:c4:68:cf:a0:66:04:f0:a6:da: aa:34:10:d1:69:df:36:8b:6b:62:b5:b6:0c:b5:32:d9:78:73: 44:39:fe:34:aa:71:a7:62:c6:53:8c:3b:02:6b:ec:71:3e:e4: 98:27:39:ee:8b:c5:57:02:4d:ac:c3:35:c6:cc:92:13:91:de: 8d:ea:3c:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UzQTMxMTAvBgNVBAUTKDQ0NDBFRTIxQjM0ODlBNjUwQTYxNkIxMjBEOEU1QkU1 NzkyRUUwNEIwHhcNMjUxMTA0MTgyNDM4WhcNMjUxMTExMTgyNDM4WjAYMRYwFAYD VQQDEw02OTBhNDRlNi02MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApWTEFhcPvSz8S0k8DN35macP1Oa//0imxjPis5z6Ssluo4bf/3gqCGPr+wXX 509HhWNIFw340b2U9afRkToQl+HS3UbHfDVNeYQNfEb8wu+CFiYXprsIGxn04Sl8 2fgezulXL2d0k1SeCqIXYDHawkJN3/lcACqb/9qzKZwOUTnpV+CsECrPjOYLfBHo YkEkJhh1PQaNmNvo7e5I0KM9bAHDu8+OxMx4GVXVJtCNyxKuJAozIEEaTCZNj4yM NZgTpc2jno503p0McOQ1LFh/yaEVYRx1l2STTwJTBr2obPZj3LxF6/1tOZ9dL25w 8yjuvTmfLgkEUrTKGylw/9FWgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJr4p9hy 0zs3ThPBIN9H0S4FzmsaMB8GA1UdIwQYMBaAFERA7iGzSJplCmFrEg2OW+V5LuBL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTNBMy8xODgyM0M4QzA1 MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1tVUtZV3NTRFk1YjVYa3U0 RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1JFRHVJYk5JbW1VS1lXc1NEWTViNVhrdTRFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTNBMy8xODgyM0M4QzA1MDExMUVBQkQ5QjIwMkNDNEY5QUUwMi9SRUR1SWJOSW1t VUtZV3NTRFk1YjVYa3U0RXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+0T0J2nvMFYpVyrxWHQTZ20YxgTjWOC3tyzgd3/DCKJ+llhIito0z YO0TTZai5EpQMCZn0Fz+F0F1Xgj2FDPEyWkDean8fY6Yeu/Xy7Gynq1nRTUCuufN lsHbxnHzDm0hqIqCTDjVCn7/eikDa9fbGkCpA2/d6uyFkXDq0DsWl1UlYG+vGifB 3H4oKvYs2xRX88CyWZOAM+3Nom8HhHVGz9YJzAs50fGYqwPEy7SEYxDGe3LikQv2 q/E07J/EaM+gZgTwptqqNBDRad82i2titbYMtTLZeHNEOf40qnGnYsZTjDsCa+xx PuSYJznui8VXAk2swzXGzJITkd6N6jwR -----END CERTIFICATE-----Generated at Wed Nov 5 00:26:12 2025 by rpki-client