$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft File: C99de_bArcNvIwEoNtjC3CQnkzw.mft (raw, json) Hash identifier: aKLELZ7d+hWvx285RBx6FnnhIKEI/ZXcbXDgxwjXzOE= Subject key identifier: BD:78:83:A5:C3:FF:CB:60:E2:66:B7:5F:20:A9:14:D6:BC:10:70:15 Authority key identifier: 0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C Certificate issuer: /CN=A91D6499/serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Certificate serial: 06E2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft Manifest number: 06D6 Signing time: Tue 04 Nov 2025 22:08:32 +0000 Manifest this update: Tue 04 Nov 2025 22:08:32 +0000 Manifest next update: Tue 11 Nov 2025 22:08:32 +0000 Files and hashes: 1: C99de_bArcNvIwEoNtjC3CQnkzw.crl (hash: GE6mdPuCiYWFsLEARUpj1Ly3t9tPgBotFg//5F3ymUk=) 2: A96F9914F1D811EFA3152963C4F9AE02.roa (hash: GbZWi9q6UX7D+oMHHFTd4plXypkHkfSoO+ds1DieM3U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:08:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1762 (0x6e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6499, serialNumber=0BDF5D7BF6C0ADC36F23012836D8C2DC2427933C Validity Not Before: Nov 4 22:08:32 2025 GMT Not After : Nov 11 22:08:32 2025 GMT Subject: CN=690a7960-a90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:75:e7:0f:f2:6a:23:72:c9:2e:dd:db:b8:20: 7e:79:77:ca:87:d2:81:af:15:8c:48:fd:94:74:06: 6c:af:42:8c:08:16:58:00:9c:b7:35:6d:49:c8:80: dd:8b:00:51:a0:f4:63:54:17:d7:eb:80:b6:31:07: 26:d4:32:f3:f8:d2:f4:98:c6:69:7a:ae:25:78:08: 2b:d1:6b:22:aa:d4:fa:8b:22:ba:c3:a8:8b:fa:29: 52:78:56:93:85:60:cc:69:37:88:2d:85:84:14:50: dd:39:32:34:24:8d:12:d1:cb:6d:9a:fc:6c:d4:28: f1:70:52:d8:1b:16:25:4d:eb:d5:11:e2:d7:69:65: 4a:e1:dc:b1:bf:e8:20:cd:b0:09:69:d9:3a:fd:7e: 47:d6:42:d1:f3:37:4c:d1:db:70:00:c5:f4:42:86: bc:ae:0b:c3:39:71:66:10:e2:5a:0f:13:d1:71:fd: 90:96:06:96:e9:31:4c:74:34:2d:ce:b0:52:ab:77: cd:00:57:14:ff:e3:2a:1f:25:c0:37:33:b1:e3:a0: 9f:8d:b7:d9:1a:fb:2b:5d:07:14:22:b0:31:b6:70: 04:8f:67:f1:ea:15:5c:60:98:07:50:18:4c:36:ae: b9:61:92:b6:ea:74:e4:47:0b:19:bc:98:b6:b1:77: 67:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:78:83:A5:C3:FF:CB:60:E2:66:B7:5F:20:A9:14:D6:BC:10:70:15 X509v3 Authority Key Identifier: keyid:0B:DF:5D:7B:F6:C0:AD:C3:6F:23:01:28:36:D8:C2:DC:24:27:93:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C99de_bArcNvIwEoNtjC3CQnkzw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6499/9F836C52780911EBA16AE156C4F9AE02/C99de_bArcNvIwEoNtjC3CQnkzw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:64:90:3f:69:2a:22:1f:5d:5d:79:ae:07:a1:bb:87:32:54: 82:d1:6a:58:c2:11:cf:7b:47:58:fa:fe:68:64:3a:8c:69:8c: 37:e0:b2:01:57:34:9d:e2:ff:02:e1:ca:bf:21:74:38:98:01: f7:89:6e:f5:0f:ea:cf:3a:87:09:f8:0f:e0:bd:71:77:f0:a7: e2:a8:b0:cf:ca:b1:65:bc:11:d2:de:54:94:d2:93:8f:05:60: 2c:b0:10:32:47:4d:5c:ad:a7:a7:1c:96:97:d3:2d:c1:06:e8: ea:ed:6b:41:14:90:08:73:c0:30:3f:c0:1e:ee:f3:99:ae:cd: 90:75:53:4b:68:1e:11:1f:d5:35:6d:7f:a1:61:2f:5c:f6:4c: 1f:c0:9e:73:5a:ea:0f:52:36:e0:9f:14:45:46:08:d1:0c:7b: 79:3f:02:8e:b0:cc:bd:c4:85:35:ba:20:5f:60:db:52:07:3a: 94:ad:36:b8:f0:46:69:e1:d8:d2:b4:07:56:92:97:c9:b4:c0: de:dc:7b:c9:af:21:a1:a3:8c:6d:ad:4e:ba:ee:55:4e:bd:b8: 4b:d3:9a:68:a9:72:6e:2c:99:44:85:f6:5d:e0:21:37:54:27: 61:64:42:d5:72:e4:41:4b:87:bf:d6:d3:81:f3:11:3e:92:a7: c7:8f:dc:c9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY0OTkxMTAvBgNVBAUTKDBCREY1RDdCRjZDMEFEQzM2RjIzMDEyODM2RDhDMkRD MjQyNzkzM0MwHhcNMjUxMTA0MjIwODMyWhcNMjUxMTExMjIwODMyWjAYMRYwFAYD VQQDEw02OTBhNzk2MC1hOTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXXnD/JqI3LJLt3buCB+eXfKh9KBrxWMSP2UdAZsr0KMCBZYAJy3NW1JyIDd iwBRoPRjVBfX64C2MQcm1DLz+NL0mMZpeq4leAgr0WsiqtT6iyK6w6iL+ilSeFaT hWDMaTeILYWEFFDdOTI0JI0S0cttmvxs1CjxcFLYGxYlTevVEeLXaWVK4dyxv+gg zbAJadk6/X5H1kLR8zdM0dtwAMX0Qoa8rgvDOXFmEOJaDxPRcf2QlgaW6TFMdDQt zrBSq3fNAFcU/+MqHyXANzOx46CfjbfZGvsrXQcUIrAxtnAEj2fx6hVcYJgHUBhM Nq65YZK26nTkRwsZvJi2sXdnuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL14g6XD /8tg4ma3XyCpFNa8EHAVMB8GA1UdIwQYMBaAFAvfXXv2wK3DbyMBKDbYwtwkJ5M8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjQ5OS85RjgzNkM1Mjc4 MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJjTnZJd0VvTnRqQzNDUW5r encuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M5OWRlX2JBcmNOdkl3RW9OdGpDM0NRbmt6dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjQ5OS85RjgzNkM1Mjc4MDkxMUVCQTE2QUUxNTZDNEY5QUUwMi9DOTlkZV9iQXJj TnZJd0VvTnRqQzNDUW5rencubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBZJA/aSoiH11dea4HobuHMlSC0WpYwhHPe0dY+v5oZDqMaYw34LIB VzSd4v8C4cq/IXQ4mAH3iW71D+rPOocJ+A/gvXF38KfiqLDPyrFlvBHS3lSU0pOP BWAssBAyR01craenHJaX0y3BBujq7WtBFJAIc8AwP8Ae7vOZrs2QdVNLaB4RH9U1 bX+hYS9c9kwfwJ5zWuoPUjbgnxRFRgjRDHt5PwKOsMy9xIU1uiBfYNtSBzqUrTa4 8EZp4djStAdWkpfJtMDe3HvJryGho4xtrU667lVOvbhL05poqXJuLJlEhfZd4CE3 VCdhZELVcuRBS4e/1tOB8xE+kqfHj9zJ -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:42 2025 by rpki-client