$ rpki-client -vvf rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft File: a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft (raw, json) Hash identifier: b5wWIVfRuwnJ+uTzDmmx18uqvMAGKeoIFLaLa3xxtjg= Subject key identifier: 3C:55:1A:8C:1E:CE:DC:69:60:86:57:04:F7:C3:63:0C:57:B0:3C:E2 Authority key identifier: 6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 Certificate issuer: /CN=A91D2F93/serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Certificate serial: 0733 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft Manifest number: 072D Signing time: Tue 04 Nov 2025 21:51:23 +0000 Manifest this update: Tue 04 Nov 2025 21:51:22 +0000 Manifest next update: Tue 11 Nov 2025 21:51:22 +0000 Files and hashes: 1: a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl (hash: TJrTYVgr6mgnF6z5zwi5Pyegd7pBlok3SFlORE37c4c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:51:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1843 (0x733) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2F93, serialNumber=6BC263B51A56B51740777459796227ED00DF4D70 Validity Not Before: Nov 4 21:51:22 2025 GMT Not After : Nov 11 21:51:22 2025 GMT Subject: CN=690a755b-de17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:79:5f:d5:b5:93:fa:ed:a3:59:46:83:03:70: ee:c3:68:0c:21:6b:11:e5:18:c1:30:e3:2f:3c:2a: bd:f4:94:d0:2c:20:50:86:6d:4f:dd:51:f0:ea:c6: 7d:e5:ee:57:ec:fa:98:22:9d:f2:30:df:23:df:b4: c2:c2:0e:65:73:58:ef:9b:1b:7e:67:41:34:e3:47: 7a:e0:58:38:a2:97:21:14:76:ee:62:b7:51:8e:56: 53:f0:01:70:98:21:de:7d:65:a7:15:77:95:53:7e: 5d:f0:38:08:28:12:ac:71:62:10:cf:d0:0e:05:31: 8c:6b:93:5a:ee:62:b9:fd:56:24:aa:bf:69:35:e8: 8b:fd:a9:2c:90:e0:5b:3a:35:ae:bf:c0:d7:45:5c: 75:a7:ca:bd:d2:51:70:4f:f6:c0:5e:0c:7c:d1:fc: b0:06:aa:af:0c:34:a0:03:6a:6d:66:bc:a9:38:84: e5:a8:c0:ee:86:18:94:75:0c:65:e5:87:85:2c:2f: 18:b6:14:b3:bb:7b:5d:37:7b:3c:f1:b7:2b:16:82: eb:4a:cc:6f:9a:f9:68:bb:9d:43:2d:2e:4d:37:04: d0:83:f1:07:01:3b:f9:15:91:58:a8:e1:48:90:79: 36:0c:a2:67:31:df:37:e6:60:27:45:d6:ea:e1:48: 6b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:55:1A:8C:1E:CE:DC:69:60:86:57:04:F7:C3:63:0C:57:B0:3C:E2 X509v3 Authority Key Identifier: keyid:6B:C2:63:B5:1A:56:B5:17:40:77:74:59:79:62:27:ED:00:DF:4D:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a8JjtRpWtRdAd3RZeWIn7QDfTXA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2F93/6999F78E524111EBB3C4A41EC4F9AE02/a8JjtRpWtRdAd3RZeWIn7QDfTXA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:83:da:6e:cc:bb:b6:31:8c:ef:54:3a:ea:13:cf:e3:bf:36: 37:04:7c:73:e6:0c:43:85:d8:c9:67:f2:4a:df:54:1e:9f:32: 21:9c:f6:37:89:09:97:4a:da:88:bf:75:64:07:a3:7b:28:0d: d3:c4:df:05:dc:ab:c1:be:1c:8f:65:71:ad:3b:0a:77:79:3d: 5d:c0:f8:94:7e:33:04:cf:8c:79:21:74:c6:2e:52:b0:73:de: ec:5c:bb:84:22:a8:d6:82:7b:31:5f:69:18:03:63:85:d3:91: c8:82:2d:00:d2:ec:64:67:4c:7e:a7:03:83:31:6b:a1:80:6b: ac:03:b0:51:56:d8:87:17:6e:9a:a2:7d:71:4c:c5:70:b4:21: d2:9e:9a:63:6d:24:e9:6c:1c:27:35:35:ee:94:fb:1e:05:03: 6a:6c:11:c8:44:f8:13:fd:95:65:ca:6b:53:8c:53:ae:c4:9d: 63:b2:5a:65:67:f7:c2:55:cb:f1:e6:75:e1:f6:82:30:d3:5c: d3:d5:fc:a8:51:57:0b:56:29:c4:ab:7c:46:97:a5:8d:a8:2f: 8d:0f:ac:80:cc:14:6b:84:98:bc:2d:cc:a9:31:d9:f7:0b:38: 72:94:8a:f3:92:5a:af:85:a3:b4:67:4a:11:54:8c:67:2d:93: 78:73:d2:55 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDJGOTMxMTAvBgNVBAUTKDZCQzI2M0I1MUE1NkI1MTc0MDc3NzQ1OTc5NjIyN0VE MDBERjRENzAwHhcNMjUxMTA0MjE1MTIyWhcNMjUxMTExMjE1MTIyWjAYMRYwFAYD VQQDEw02OTBhNzU1Yi1kZTE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXlf1bWT+u2jWUaDA3Duw2gMIWsR5RjBMOMvPCq99JTQLCBQhm1P3VHw6sZ9 5e5X7PqYIp3yMN8j37TCwg5lc1jvmxt+Z0E040d64Fg4opchFHbuYrdRjlZT8AFw mCHefWWnFXeVU35d8DgIKBKscWIQz9AOBTGMa5Na7mK5/VYkqr9pNeiL/akskOBb OjWuv8DXRVx1p8q90lFwT/bAXgx80fywBqqvDDSgA2ptZrypOITlqMDuhhiUdQxl 5YeFLC8YthSzu3tdN3s88bcrFoLrSsxvmvlou51DLS5NNwTQg/EHATv5FZFYqOFI kHk2DKJnMd835mAnRdbq4Uhr2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxVGowe ztxpYIZXBPfDYwxXsDziMB8GA1UdIwQYMBaAFGvCY7UaVrUXQHd0WXliJ+0A301w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMkY5My82OTk5Rjc4RTUy NDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RSZEFkM1JaZVdJbjdRRGZU WEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E4Smp0UnBXdFJkQWQzUlplV0luN1FEZlRYQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkY5My82OTk5Rjc4RTUyNDExMUVCQjNDNEE0MUVDNEY5QUUwMi9hOEpqdFJwV3RS ZEFkM1JaZVdJbjdRRGZUWEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwg9puzLu2MYzvVDrqE8/jvzY3BHxz5gxDhdjJZ/JK31QenzIhnPY3 iQmXStqIv3VkB6N7KA3TxN8F3KvBvhyPZXGtOwp3eT1dwPiUfjMEz4x5IXTGLlKw c97sXLuEIqjWgnsxX2kYA2OF05HIgi0A0uxkZ0x+pwODMWuhgGusA7BRVtiHF26a on1xTMVwtCHSnppjbSTpbBwnNTXulPseBQNqbBHIRPgT/ZVlymtTjFOuxJ1jslpl Z/fCVcvx5nXh9oIw01zT1fyoUVcLVinEq3xGl6WNqC+ND6yAzBRrhJi8LcypMdn3 CzhylIrzklqvhaO0Z0oRVIxnLZN4c9JV -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:32 2025 by rpki-client