$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft File: pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json) Hash identifier: 3JchK9trmBzOtsKQZ+BGhHTa8PBbkbRJuwvkbmwAEbY= Subject key identifier: C4:8C:71:47:D2:4A:E5:84:88:28:2B:E4:54:22:20:6A:92:A2:D9:E0 Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 Certificate issuer: /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft Manifest number: 34D3 Signing time: Sun 02 Nov 2025 14:54:43 +0000 Manifest this update: Sun 02 Nov 2025 14:54:42 +0000 Manifest next update: Sun 09 Nov 2025 14:54:42 +0000 Files and hashes: 1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: QW+mNYMDmLf5Jburwx3/8r+evDqkjv9fvQhH6ico0K4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118 Validity Not Before: Nov 2 14:54:42 2025 GMT Not After : Nov 9 14:54:42 2025 GMT Subject: CN=690770b2-9a2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:fc:07:11:e1:70:e3:83:67:71:ce:9e:39: d9:54:48:34:a6:4b:a9:2e:d1:e0:00:24:ba:00:58: f0:e9:ad:1c:cc:b1:55:d3:14:50:c1:b5:2b:85:91: 64:4a:f7:5a:f2:63:db:d4:4b:ef:19:60:dc:2d:63: 1e:b8:89:cd:0c:c6:53:a0:fc:bf:50:06:53:2c:19: 7b:02:a2:d6:75:8a:24:ac:cd:86:0b:b0:21:62:dd: 17:f1:35:ac:02:b2:4e:7d:04:5c:db:23:b2:cf:42: 82:ef:07:59:e6:9b:72:e7:58:a1:a4:69:47:b4:83: 9a:8f:db:02:a2:a9:70:c5:4e:59:3f:bd:fd:4d:d3: 6b:d2:24:6a:02:f2:16:02:6a:45:cc:c0:9f:9a:74: 10:f2:7b:2d:c7:bc:b3:be:79:94:21:80:0b:fc:ae: 2d:28:0b:8b:56:89:ae:4a:ff:9a:c7:3a:9c:4d:37: bb:45:32:e0:81:74:58:5e:df:08:dd:05:44:a3:5f: 93:ad:9a:51:09:ae:82:9b:02:a5:64:d1:86:d8:44: 43:57:18:1b:47:04:0d:93:dc:35:bf:f0:a5:e2:b7: 45:a0:1a:e5:6d:3f:dc:bf:f9:e8:0f:65:12:84:c5: 40:eb:40:7b:1b:37:b9:d5:e6:5e:43:9d:88:3c:e2: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:8C:71:47:D2:4A:E5:84:88:28:2B:E4:54:22:20:6A:92:A2:D9:E0 X509v3 Authority Key Identifier: keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:e4:eb:e7:10:02:62:99:24:dd:d9:fb:1d:6d:fe:b5:02:2a: 48:fe:8a:9d:b4:e3:14:5d:90:2f:0d:ca:35:a6:47:76:4d:b8: 92:d3:e3:d4:ce:f3:76:e4:73:cc:bd:64:2b:5e:41:89:59:06: ed:fc:da:24:1c:b4:50:80:5c:25:5d:c1:e6:fd:66:55:da:0c: 34:57:46:7e:8d:c4:0e:85:d3:ac:98:a0:bd:16:e6:18:24:b3: 82:ef:6e:c9:fb:58:1c:ce:1c:c4:7f:37:cf:65:a0:d4:88:76: 59:dd:69:ce:5d:53:b2:d9:75:f4:f7:0d:ad:40:ea:ba:99:0a: 33:04:a5:e7:2e:05:a6:b0:f7:f1:4b:4f:10:bb:42:f8:b6:92: 23:49:7f:49:65:49:2d:85:e3:c7:bb:48:75:c3:34:69:1f:9c: e3:09:e6:f1:b8:ee:8d:b6:9e:4e:9c:7e:57:8f:f9:f9:49:48: 6e:f2:7d:6d:6e:5f:9f:ca:9a:90:6e:91:b9:ea:bd:8c:fa:22: bc:cb:ac:5a:14:4d:eb:03:3f:e2:b9:22:a5:91:b8:58:5b:14: 86:59:a0:b2:d0:ec:e9:d0:ed:ce:9f:8f:d2:c1:ef:ab:05:35: 10:58:d8:0b:58:b3:c9:3c:ad:71:87:9e:ca:b3:d3:58:54:7a: 8f:bb:a2:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1NTIxMTAvBgNVBAUTKEE1NkUwNDMzQUVCOEIwRkNDNTlFRkU5MUYwRUFGNTA2 MUI3MEQxMTgwHhcNMjUxMTAyMTQ1NDQyWhcNMjUxMTA5MTQ1NDQyWjAYMRYwFAYD VQQDEw02OTA3NzBiMi05YTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVn8BxHhcOODZ3HOnjnZVEg0pkupLtHgACS6AFjw6a0czLFV0xRQwbUrhZFk Svda8mPb1EvvGWDcLWMeuInNDMZToPy/UAZTLBl7AqLWdYokrM2GC7AhYt0X8TWs ArJOfQRc2yOyz0KC7wdZ5pty51ihpGlHtIOaj9sCoqlwxU5ZP739TdNr0iRqAvIW AmpFzMCfmnQQ8nstx7yzvnmUIYAL/K4tKAuLVomuSv+axzqcTTe7RTLggXRYXt8I 3QVEo1+TrZpRCa6CmwKlZNGG2ERDVxgbRwQNk9w1v/Cl4rdFoBrlbT/cv/noD2US hMVA60B7Gze51eZeQ52IPOL+8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMSMcUfS SuWEiCgr5FQiIGqSotngMB8GA1UdIwQYMBaAFKVuBDOuuLD8xZ7+kfDq9QYbcNEY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjU1Mi84ODdENzUxMjFE OTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQekZudjZSOE9yMUJodHcw UmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BXNEVNNjY0c1B6Rm52NlI4T3IxQmh0dzBSZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjU1Mi84ODdENzUxMjFEOTkxMUUyQkE1RjI1ODYwOEIwMkNEMi9wVzRFTTY2NHNQ ekZudjZSOE9yMUJodHcwUmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ5OvnEAJimSTd2fsdbf61AipI/oqdtOMUXZAvDco1pkd2TbiS0+PU zvN25HPMvWQrXkGJWQbt/NokHLRQgFwlXcHm/WZV2gw0V0Z+jcQOhdOsmKC9FuYY JLOC727J+1gczhzEfzfPZaDUiHZZ3WnOXVOy2XX09w2tQOq6mQozBKXnLgWmsPfx S08Qu0L4tpIjSX9JZUkthePHu0h1wzRpH5zjCebxuO6Ntp5OnH5Xj/n5SUhu8n1t bl+fypqQbpG56r2M+iK8y6xaFE3rAz/iuSKlkbhYWxSGWaCy0Ozp0O3On4/Swe+r BTUQWNgLWLPJPK1xh57Ks9NYVHqPu6Jx -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:24 2025 by rpki-client