$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft File: tZ39tQipur3Pjaqv4_PeaVn7E6o.mft (raw, json) Hash identifier: ba4smh1sDQHgUHhRdZHTT8u+M70NLThbT1KoA8rnmw8= Subject key identifier: 8C:B8:F8:F2:EA:C6:08:46:6D:9B:8B:7C:07:E5:22:38:78:58:97:35 Authority key identifier: B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA Certificate issuer: /CN=A91D1A9C/serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Certificate serial: FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft Manifest number: F8 Signing time: Mon 03 Nov 2025 05:12:23 +0000 Manifest this update: Mon 03 Nov 2025 05:12:23 +0000 Manifest next update: Mon 10 Nov 2025 05:12:23 +0000 Files and hashes: 1: tZ39tQipur3Pjaqv4_PeaVn7E6o.crl (hash: pOe4P90Pg+azGntzgoyNTmiHqc6yZE0BO+z7LOwjECE=) 2: 31A71E34407111EFAC14A640C4F9AE02.roa (hash: qvhByE3oiLELsQTu9SaN/ARZ+azzx+zT+u1j1qLqciY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1A9C, serialNumber=B59DFDB508A9BABDCF8DAAAFE3F3DE6959FB13AA Validity Not Before: Nov 3 05:12:23 2025 GMT Not After : Nov 10 05:12:23 2025 GMT Subject: CN=690839b7-79c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:44:d9:3d:96:02:ca:fd:43:f8:f4:3b:ce:61: 6c:2d:e8:0e:ff:dc:17:46:f1:7b:95:a3:74:ec:7c: c3:46:a7:44:91:4b:e7:f7:91:3a:b6:ef:28:38:74: fa:01:ae:cb:59:29:af:5c:a8:c8:3c:0f:e6:a6:59: 27:f4:16:97:64:72:1b:0c:5c:c9:e2:88:17:82:99: 93:03:40:e7:2d:af:ca:bc:9a:a8:a6:05:a9:70:ac: f2:fd:5c:13:22:1d:69:e8:17:50:7a:26:47:6e:88: 8e:18:92:61:58:50:7e:d1:a0:c6:72:e2:e5:94:a4: dc:08:c6:83:e1:3e:14:9b:14:c0:14:50:01:cc:6c: 85:cb:82:22:cb:10:4f:ca:af:0c:ed:bc:a2:cd:bb: 26:2c:76:de:71:81:44:e9:ce:68:fa:6e:7f:f6:b3: 9c:bb:6e:ee:92:ac:df:9d:ea:61:4b:83:d7:c8:43: a5:65:a6:2a:2c:80:04:03:30:02:4e:ac:d3:ca:9e: 6e:87:ed:03:f9:bf:93:04:4d:e6:b0:3e:74:72:b6: 15:89:9b:b2:67:42:82:f2:4b:e1:c0:02:fe:ef:56: f2:c5:ac:48:aa:cf:22:8a:40:0a:8d:f3:b5:e1:b5: 96:3e:d7:0e:74:d5:a0:c7:2a:64:11:f0:12:fb:4b: c9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:B8:F8:F2:EA:C6:08:46:6D:9B:8B:7C:07:E5:22:38:78:58:97:35 X509v3 Authority Key Identifier: keyid:B5:9D:FD:B5:08:A9:BA:BD:CF:8D:AA:AF:E3:F3:DE:69:59:FB:13:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tZ39tQipur3Pjaqv4_PeaVn7E6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1A9C/8E8B3E7E407011EFB4A1800AC4F9AE02/tZ39tQipur3Pjaqv4_PeaVn7E6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:aa:de:8a:d5:cf:87:f0:1d:cd:a5:34:99:b5:e6:51:a8:17: 13:1d:3e:5e:98:f0:bd:2a:f6:d8:a2:62:fe:8f:9b:54:92:92: be:2a:9b:f9:be:5e:19:22:56:52:a7:fe:35:90:f7:d4:f0:d8: d1:0f:99:a9:7b:9d:13:4d:7b:1b:14:e5:23:d1:98:f4:cf:76: 6f:ed:61:52:34:fe:5d:b6:59:2c:e0:e5:2c:00:9e:65:0f:7a: 2c:52:fc:be:bf:37:85:17:d4:73:38:30:fd:80:b1:2b:72:1a: ce:fb:60:c3:8c:e8:ac:7d:3d:81:f4:f7:26:9d:c4:49:37:47: 70:35:f6:a9:d4:02:e4:0b:0c:4c:27:d7:3b:c8:a5:d3:2b:48: b6:46:2e:c0:3b:2e:20:ab:d3:4b:4d:e1:45:9d:b3:d3:60:6d: f0:16:e3:af:9e:bc:43:3d:95:8a:6b:3b:51:66:11:e3:ed:ce: 0f:bb:8b:5b:5f:69:4a:75:b6:c2:19:db:98:69:11:eb:01:3d: 6a:a2:9f:53:dd:e6:85:a3:30:ba:d1:6e:d1:c6:96:20:aa:ba: dc:78:2e:24:83:26:d0:2e:03:3c:a8:18:28:b7:75:0a:b7:7a: 38:a3:a3:4e:23:c7:17:f1:f7:7b:11:8b:a7:20:53:2f:1c:c0: 16:14:fa:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFBOUMxMTAvBgNVBAUTKEI1OURGREI1MDhBOUJBQkRDRjhEQUFBRkUzRjNERTY5 NTlGQjEzQUEwHhcNMjUxMTAzMDUxMjIzWhcNMjUxMTEwMDUxMjIzWjAYMRYwFAYD VQQDEw02OTA4MzliNy03OWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzkTZPZYCyv1D+PQ7zmFsLegO/9wXRvF7laN07HzDRqdEkUvn95E6tu8oOHT6 Aa7LWSmvXKjIPA/mplkn9BaXZHIbDFzJ4ogXgpmTA0DnLa/KvJqopgWpcKzy/VwT Ih1p6BdQeiZHboiOGJJhWFB+0aDGcuLllKTcCMaD4T4UmxTAFFABzGyFy4IiyxBP yq8M7byizbsmLHbecYFE6c5o+m5/9rOcu27ukqzfnephS4PXyEOlZaYqLIAEAzAC TqzTyp5uh+0D+b+TBE3msD50crYViZuyZ0KC8kvhwAL+71byxaxIqs8iikAKjfO1 4bWWPtcOdNWgxypkEfAS+0vJYQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy4+PLq xghGbZuLfAflIjh4WJc1MB8GA1UdIwQYMBaAFLWd/bUIqbq9z42qr+Pz3mlZ+xOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUE5Qy84RThCM0U3RTQw NzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVyM1BqYXF2NF9QZWFWbjdF Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RaMzl0UWlwdXIzUGphcXY0X1BlYVZuN0U2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUE5Qy84RThCM0U3RTQwNzAxMUVGQjRBMTgwMEFDNEY5QUUwMi90WjM5dFFpcHVy M1BqYXF2NF9QZWFWbjdFNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRqt6K1c+H8B3NpTSZteZRqBcTHT5emPC9KvbYomL+j5tUkpK+Kpv5 vl4ZIlZSp/41kPfU8NjRD5mpe50TTXsbFOUj0Zj0z3Zv7WFSNP5dtlks4OUsAJ5l D3osUvy+vzeFF9RzODD9gLErchrO+2DDjOisfT2B9PcmncRJN0dwNfap1ALkCwxM J9c7yKXTK0i2Ri7AOy4gq9NLTeFFnbPTYG3wFuOvnrxDPZWKaztRZhHj7c4Pu4tb X2lKdbbCGduYaRHrAT1qop9T3eaFozC60W7RxpYgqrrceC4kgybQLgM8qBgot3UK t3o4o6NOI8cX8fd7EYunIFMvHMAWFPr/ -----END CERTIFICATE-----Generated at Tue Nov 4 07:23:36 2025 by rpki-client