$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft File: CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft (raw, json) Hash identifier: Ke+rBI0kzVrHI9274BbtBUZW6BnQB0C3JytuPHctoSw= Subject key identifier: 8A:2E:03:08:B2:D5:A0:34:75:EB:68:33:98:F2:C4:E8:69:54:D1:AF Authority key identifier: 09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E Certificate issuer: /CN=A91CE533/serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Certificate serial: 199D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft Manifest number: 1991 Signing time: Tue 04 Nov 2025 16:29:13 +0000 Manifest this update: Tue 04 Nov 2025 16:29:13 +0000 Manifest next update: Tue 11 Nov 2025 16:29:13 +0000 Files and hashes: 1: CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl (hash: Pwg6B2/6XjSjhh0ODRSpkiLCbg5IC7wyBkTOR0gdr2k=) 2: 290732FC79A211E79F34D81FC4F9AE02.roa (hash: SR7eVnerj/ud7fW+5gtERIt5ClN7aXRbGYLPuzi6Nlc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6557 (0x199d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE533, serialNumber=09A3ECC49F83A798AE139F1DCBC536EE6F67CE7E Validity Not Before: Nov 4 16:29:13 2025 GMT Not After : Nov 11 16:29:13 2025 GMT Subject: CN=690a29d9-dde0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a7:1b:92:13:64:3e:78:ea:69:29:4d:64:12: 9a:eb:04:33:b8:74:56:fc:78:d7:cd:6c:75:82:f4: 68:f5:81:46:a0:e2:da:d2:e5:95:7f:51:cb:3e:30: 89:b2:48:ee:0b:84:24:5a:e3:4d:a1:bc:14:f0:32: fe:fb:1e:f3:0c:a5:b5:fa:6b:ff:7a:40:23:21:80: 0c:99:29:8e:b9:d6:bb:e2:42:63:41:99:e3:d0:72: ff:da:09:c5:d6:48:2b:5f:c0:6b:68:b2:3c:10:2f: b1:3b:31:a9:60:26:9e:13:2e:f6:57:e0:6c:d5:41: 03:4f:9c:a6:37:b3:42:cd:43:9c:db:05:85:92:95: 7b:52:81:6d:a5:35:cb:43:4c:97:77:f1:c7:0a:5b: f9:b7:9a:b0:ff:69:14:63:51:96:59:45:c9:50:95: 61:2c:ad:52:2a:7a:48:63:0e:fb:27:f7:b5:4a:ec: 8d:8c:9b:f7:b5:9d:87:cc:ac:01:10:06:04:f9:34: 84:12:14:a7:1e:6a:8a:01:cb:3c:14:21:91:fd:4a: c1:05:39:69:64:5d:72:ba:34:fe:e1:3b:0b:00:98: 4f:8d:f3:44:e5:18:16:af:1c:05:d7:ad:50:58:70: 4b:58:50:8a:ea:5a:59:fc:27:5d:b6:b3:41:c1:3d: b0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2E:03:08:B2:D5:A0:34:75:EB:68:33:98:F2:C4:E8:69:54:D1:AF X509v3 Authority Key Identifier: keyid:09:A3:EC:C4:9F:83:A7:98:AE:13:9F:1D:CB:C5:36:EE:6F:67:CE:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CaPsxJ-Dp5iuE58dy8U27m9nzn4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE533/E8FD4FA4799F11E7B879101DC4F9AE02/CaPsxJ-Dp5iuE58dy8U27m9nzn4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:6c:d7:8e:da:7a:4f:e6:d3:14:04:48:10:37:e2:1e:30: 0d:d6:1c:49:e9:b9:29:40:3e:64:fd:69:1d:55:2b:2f:de:e2: 8f:24:fb:10:de:b9:80:a5:b4:c0:56:91:41:7a:cc:4c:27:99: 9d:54:1b:64:e7:e3:fe:8a:b1:d1:92:95:2a:a6:32:9e:7d:84: b7:1c:75:d3:29:94:5e:32:e4:1b:81:35:29:ef:1a:d2:89:db: bf:7e:7b:a9:cf:e2:6d:26:f0:11:32:16:9f:e1:76:cc:3b:f4: 1f:da:ff:24:da:85:80:d2:16:30:c3:bf:ca:56:2e:5e:d4:66: 52:c4:25:db:aa:e7:b2:3a:32:41:8d:b2:f4:f0:41:97:e5:97: 61:ad:96:d3:4c:3f:35:d5:87:2a:05:9c:c7:7e:4b:61:b2:09: cd:70:f7:6a:b0:c7:a4:c7:f5:f2:6b:3a:1c:c9:1c:f5:ca:1a: 49:76:64:a5:c5:70:67:e9:e2:2d:b2:6e:ac:82:8d:34:2b:77: fe:89:bc:80:1d:c8:58:7f:5b:ad:dd:72:a0:57:22:a1:4e:b2: 25:af:21:5a:c2:76:a5:46:c4:04:ff:3c:6d:0d:06:26:a2:a2: df:5a:8e:27:fc:9f:e3:18:cf:0b:4a:e6:8b:f4:4d:c1:8f:09: 68:1b:7f:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MzMxMTAvBgNVBAUTKDA5QTNFQ0M0OUY4M0E3OThBRTEzOUYxRENCQzUzNkVF NkY2N0NFN0UwHhcNMjUxMTA0MTYyOTEzWhcNMjUxMTExMTYyOTEzWjAYMRYwFAYD VQQDEw02OTBhMjlkOS1kZGUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4KcbkhNkPnjqaSlNZBKa6wQzuHRW/HjXzWx1gvRo9YFGoOLa0uWVf1HLPjCJ skjuC4QkWuNNobwU8DL++x7zDKW1+mv/ekAjIYAMmSmOuda74kJjQZnj0HL/2gnF 1kgrX8BraLI8EC+xOzGpYCaeEy72V+Bs1UEDT5ymN7NCzUOc2wWFkpV7UoFtpTXL Q0yXd/HHClv5t5qw/2kUY1GWWUXJUJVhLK1SKnpIYw77J/e1SuyNjJv3tZ2HzKwB EAYE+TSEEhSnHmqKAcs8FCGR/UrBBTlpZF1yujT+4TsLAJhPjfNE5RgWrxwF161Q WHBLWFCK6lpZ/CddtrNBwT2wzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIouAwiy 1aA0detoM5jyxOhpVNGvMB8GA1UdIwQYMBaAFAmj7MSfg6eYrhOfHcvFNu5vZ85+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUzMy9FOEZENEZBNDc5 OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1aXVFNThkeThVMjdtOW56 bjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NhUHN4Si1EcDVpdUU1OGR5OFUyN205bnpuNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTUzMy9FOEZENEZBNDc5OUYxMUU3Qjg3OTEwMURDNEY5QUUwMi9DYVBzeEotRHA1 aXVFNThkeThVMjdtOW56bjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwaGzXjtp6T+bTFARIEDfiHjAN1hxJ6bkpQD5k/WkdVSsv3uKPJPsQ 3rmApbTAVpFBesxMJ5mdVBtk5+P+irHRkpUqpjKefYS3HHXTKZReMuQbgTUp7xrS idu/fnupz+JtJvARMhaf4XbMO/Qf2v8k2oWA0hYww7/KVi5e1GZSxCXbqueyOjJB jbL08EGX5ZdhrZbTTD811YcqBZzHfkthsgnNcPdqsMekx/XyazocyRz1yhpJdmSl xXBn6eItsm6sgo00K3f+ibyAHchYf1ut3XKgVyKhTrIlryFawnalRsQE/zxtDQYm oqLfWo4n/J/jGM8LSuaL9E3BjwloG3// -----END CERTIFICATE-----Generated at Wed Nov 5 05:20:32 2025 by rpki-client