$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft File: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json) Hash identifier: ntNTgTRuPT6NhHl+zehWouzfQ6iOlOD5wMEgBq71oGU= Subject key identifier: E3:B5:0E:6D:C5:59:97:0C:62:8E:AC:FF:87:C6:FC:9D:B2:DB:21:BA Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D Certificate issuer: /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D Certificate serial: 0864 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft Manifest number: 0B9A Signing time: Sun 02 Nov 2025 20:35:54 +0000 Manifest this update: Sun 02 Nov 2025 20:35:54 +0000 Manifest next update: Sun 09 Nov 2025 20:35:54 +0000 Files and hashes: 1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: UNmp4gt0uJ4I9+R3Y3j6BBvRgRdP54VaqQtSH0gkI0A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2148 (0x864) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D Validity Not Before: Nov 2 20:35:54 2025 GMT Not After : Nov 9 20:35:54 2025 GMT Subject: CN=6907c0aa-7dfc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:c1:a7:50:a7:96:f3:83:bf:36:67:76:7f:d4: 37:81:79:3f:a0:87:f3:d3:d7:01:02:f2:c7:ce:52: a9:da:46:cc:20:4c:9e:e0:9b:86:be:07:de:16:01: 6b:eb:5d:cc:94:6e:ce:10:e9:b9:12:a8:06:c8:3f: 46:68:82:e3:97:44:07:be:aa:f6:b4:56:00:c1:20: 52:ee:59:9b:45:d8:bc:16:92:a7:d3:a6:e7:5c:f5: 37:b4:23:4b:d2:4c:7a:e8:b5:b3:95:e5:2c:43:b0: 05:ba:c5:c9:9f:b6:c8:6a:96:5a:d5:ef:b5:bb:e7: a7:24:b3:da:30:67:d5:6d:cc:a9:08:5e:7f:da:a6: 08:eb:04:df:ee:5d:c7:e1:5b:69:53:dc:ea:7a:0d: f4:57:e7:3e:10:a5:cf:6c:b8:95:86:f3:06:dd:d0: a7:b4:a5:0e:40:8c:fc:4f:b7:61:e4:37:75:3c:c6: 3f:61:d2:cb:6b:c7:58:92:76:b4:09:7e:02:95:a3: df:d4:19:75:4f:a5:3f:68:08:95:6b:40:b7:3a:b4: 26:c9:80:98:27:73:6a:8e:60:d5:b8:66:97:3f:1f: 6e:82:b1:de:6d:57:02:80:60:01:02:df:91:89:9f: cf:6e:ca:16:97:cc:16:ec:ac:a9:98:d9:00:d3:fa: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B5:0E:6D:C5:59:97:0C:62:8E:AC:FF:87:C6:FC:9D:B2:DB:21:BA X509v3 Authority Key Identifier: keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:f2:28:f6:db:af:87:1c:d4:f2:69:28:76:67:1c:45:f8:ee: 11:e3:8e:95:0c:6c:ff:bb:ec:1c:fe:2e:31:2d:24:dc:0d:f8: ee:97:81:fe:c0:50:fc:ba:dc:5f:0c:4a:04:08:c9:e4:c6:f5: 22:a0:0d:9b:70:41:56:65:20:66:08:5a:c2:7b:5d:62:50:57: 99:9b:db:7d:0d:21:b6:b1:a5:ce:03:7a:d4:d4:53:85:5c:dd: 76:64:0b:e1:95:47:f6:ba:52:5e:d6:9f:7e:88:54:45:9f:00: 44:c6:22:81:4b:0d:4d:2f:c0:d5:ee:e1:6f:56:12:27:73:21: cc:92:81:af:33:e0:ff:6f:6d:50:d7:74:de:3d:b2:eb:3b:1f: 50:8c:43:1e:0f:4a:b6:27:50:70:72:54:6f:53:c7:1c:b3:77: b1:32:45:ec:75:ea:8a:b9:be:f4:51:65:13:49:0c:e9:68:10: fd:fa:7f:1e:67:af:96:ba:10:2d:b9:a9:cc:18:75:0a:84:2e: 83:8d:69:0e:46:e1:4d:b6:04:e6:3c:00:99:01:78:d3:db:98: 6d:86:f0:3d:77:20:b5:f8:d3:0c:61:40:95:ae:7d:62:37:72: 57:05:c3:ff:60:7c:dd:2f:2b:7e:ea:8e:ee:87:26:8a:67:6f: ec:57:47:c4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFFNEMxMTAvBgNVBAUTKEE1OUQ4MzZFMUMzMTYyM0NDNTg2NDQ4QUE3NTJCNzQ2 ODUzQjg0MUQwHhcNMjUxMTAyMjAzNTU0WhcNMjUxMTA5MjAzNTU0WjAYMRYwFAYD VQQDEw02OTA3YzBhYS03ZGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6sGnUKeW84O/Nmd2f9Q3gXk/oIfz09cBAvLHzlKp2kbMIEye4JuGvgfeFgFr 613MlG7OEOm5EqgGyD9GaILjl0QHvqr2tFYAwSBS7lmbRdi8FpKn06bnXPU3tCNL 0kx66LWzleUsQ7AFusXJn7bIapZa1e+1u+enJLPaMGfVbcypCF5/2qYI6wTf7l3H 4VtpU9zqeg30V+c+EKXPbLiVhvMG3dCntKUOQIz8T7dh5Dd1PMY/YdLLa8dYkna0 CX4ClaPf1Bl1T6U/aAiVa0C3OrQmyYCYJ3NqjmDVuGaXPx9ugrHebVcCgGABAt+R iZ/PbsoWl8wW7KypmNkA0/pl1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOO1Dm3F WZcMYo6s/4fG/J2y2yG6MB8GA1UdIwQYMBaAFKWdg24cMWI8xYZEiqdSt0aFO4Qd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUU0Qy83REFEQTU2Q0Q5 NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlqekZoa1NLcDFLM1JvVTdo QjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BaMkRiaHd4WWp6RmhrU0twMUszUm9VN2hCMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUU0Qy83REFEQTU2Q0Q5NEQxMUVBQTYwNEFDNTNDNEY5QUUwMi9wWjJEYmh3eFlq ekZoa1NLcDFLM1JvVTdoQjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBH8ij226+HHNTyaSh2ZxxF+O4R446VDGz/u+wc/i4xLSTcDfjul4H+ wFD8utxfDEoECMnkxvUioA2bcEFWZSBmCFrCe11iUFeZm9t9DSG2saXOA3rU1FOF XN12ZAvhlUf2ulJe1p9+iFRFnwBExiKBSw1NL8DV7uFvVhIncyHMkoGvM+D/b21Q 13TePbLrOx9QjEMeD0q2J1BwclRvU8ccs3exMkXsdeqKub70UWUTSQzpaBD9+n8e Z6+WuhAtuanMGHUKhC6DjWkORuFNtgTmPACZAXjT25hthvA9dyC1+NMMYUCVrn1i N3JXBcP/YHzdLyt+6o7uhyaKZ2/sV0fE -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:58 2025 by rpki-client