$ rpki-client -vvf rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft File: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft (raw, json) Hash identifier: EQglv9a8YTM0sSBelJ4PTmRalg2tulU2PSc7Sfd4DRo= Subject key identifier: 87:D9:F7:9F:E3:FE:90:99:DA:BD:C0:27:06:54:9F:80:26:2F:33:6D Authority key identifier: DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F Certificate issuer: /CN=A91D72CC/serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft Manifest number: 0EDE Signing time: Tue 04 Nov 2025 17:53:16 +0000 Manifest this update: Tue 04 Nov 2025 17:53:15 +0000 Manifest next update: Tue 11 Nov 2025 17:53:15 +0000 Files and hashes: 1: 23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl (hash: XWA46OH4JvSr4qiYQRyLV5yOzZoZKHv7cUPTQnAj4mc=) 2: DEDE6B3CC8A911EFB805FB63C4F9AE02.roa (hash: Dfnpdx7fQvQO0Rh8jNA5Tx09pBgCccW2N8IKNsboZGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D72CC, serialNumber=DB78D9F9358E567D306EE3BD1EAC748E9606BF8F Validity Not Before: Nov 4 17:53:15 2025 GMT Not After : Nov 11 17:53:15 2025 GMT Subject: CN=690a3d8b-2ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:2c:12:8f:73:1d:44:77:8f:8e:52:e8:fa:02: b2:67:19:b8:59:82:a0:57:8c:2c:9e:3c:c3:1d:27: 58:42:d4:e1:45:cb:0a:3d:27:ac:d5:6e:00:7c:bf: 90:78:4d:66:0a:62:22:e2:4a:10:9b:03:59:b2:d9: 2b:8e:9e:52:61:9a:a8:29:8c:6b:25:b6:6c:4d:1b: ac:1c:7b:ff:f3:6f:9e:ef:1a:0d:8a:22:df:fd:f6: 87:7e:49:9c:98:6e:90:63:71:53:0c:0e:b9:ab:43: e5:7b:fd:d3:33:1a:5a:80:77:5d:fc:ef:7c:9d:ee: 68:14:e2:ff:00:fc:93:e5:0a:b7:e0:be:c3:2b:ac: b3:4c:c9:7a:01:d5:72:49:1c:fa:6b:f5:93:b9:6e: d9:77:fa:6c:c0:37:0f:0b:88:f3:ed:af:9d:72:c5: f1:f8:bd:1d:bf:84:6e:72:3d:86:39:0f:31:5c:49: f8:ad:f6:2e:29:49:17:4d:a5:48:03:52:2e:bf:07: 1e:91:b8:19:1b:1c:6d:b4:00:93:10:87:d0:64:8a: 7a:f4:17:20:10:2f:3c:d4:8d:f7:53:c5:47:ad:f2: d2:4c:b5:cc:35:76:58:b7:92:8a:fa:18:0c:03:c9: e3:f8:5b:df:cd:7e:4e:ca:96:01:93:45:6e:0f:50: 30:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:D9:F7:9F:E3:FE:90:99:DA:BD:C0:27:06:54:9F:80:26:2F:33:6D X509v3 Authority Key Identifier: keyid:DB:78:D9:F9:35:8E:56:7D:30:6E:E3:BD:1E:AC:74:8E:96:06:BF:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/23jZ-TWOVn0wbuO9Hqx0jpYGv48.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D72CC/4330AC9CB36D11E98246ED0AC4F9AE02/23jZ-TWOVn0wbuO9Hqx0jpYGv48.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:81:b9:a4:4f:b6:0e:a3:5a:76:02:34:ec:ab:f8:3b:4a:ef: e1:4d:89:36:5c:f7:15:38:71:e7:b0:dd:ec:f0:58:bd:7c:61: eb:f0:3b:a5:ac:83:6f:f7:3f:2d:57:0c:85:c1:95:c0:65:a9: b5:8f:cd:5a:7b:e5:47:e8:81:10:bb:dc:15:18:9c:fc:38:37: 6c:60:38:4c:c3:9d:9e:36:9e:8b:f3:ee:40:3e:2f:f2:db:b7: 28:56:ef:2f:0c:44:46:94:ca:ff:86:db:55:82:b7:f0:72:2c: d4:23:cf:eb:da:53:1b:91:68:43:dd:83:bb:3d:3b:5d:d9:4d: 28:62:61:57:b3:2d:ae:f4:29:5e:ec:12:fa:b0:5d:39:c7:ab: 52:fa:de:67:e8:45:fa:90:bd:51:80:50:03:df:37:f5:4b:90: 0d:b7:cd:78:b6:e0:eb:5b:00:0e:0b:6f:d5:51:ab:95:c5:b0: e1:0a:2e:8c:ab:7c:8c:48:71:74:93:00:75:81:d5:a1:3a:65: 88:d1:a3:00:45:72:10:ba:1c:c3:46:d7:32:55:e7:1a:18:e7: f5:dc:67:1f:7c:ef:ef:27:f9:0e:0c:c7:65:c5:dd:8d:c9:6b: 7d:5e:78:be:d2:16:14:85:c5:55:aa:0e:af:aa:6e:53:7f:44: 7e:5d:14:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDcyQ0MxMTAvBgNVBAUTKERCNzhEOUY5MzU4RTU2N0QzMDZFRTNCRDFFQUM3NDhF OTYwNkJGOEYwHhcNMjUxMTA0MTc1MzE1WhcNMjUxMTExMTc1MzE1WjAYMRYwFAYD VQQDEw02OTBhM2Q4Yi0yY2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9iwSj3MdRHePjlLo+gKyZxm4WYKgV4wsnjzDHSdYQtThRcsKPSes1W4AfL+Q eE1mCmIi4koQmwNZstkrjp5SYZqoKYxrJbZsTRusHHv/82+e7xoNiiLf/faHfkmc mG6QY3FTDA65q0Ple/3TMxpagHdd/O98ne5oFOL/APyT5Qq34L7DK6yzTMl6AdVy SRz6a/WTuW7Zd/pswDcPC4jz7a+dcsXx+L0dv4Rucj2GOQ8xXEn4rfYuKUkXTaVI A1IuvwcekbgZGxxttACTEIfQZIp69BcgEC881I33U8VHrfLSTLXMNXZYt5KK+hgM A8nj+FvfzX5OypYBk0VuD1AwfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIfZ95/j /pCZ2r3AJwZUn4AmLzNtMB8GA1UdIwQYMBaAFNt42fk1jlZ9MG7jvR6sdI6WBr+P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzJDQy80MzMwQUM5Q0Iz NkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1ZuMHdidU85SHF4MGpwWUd2 NDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzIzalotVFdPVm4wd2J1TzlIcXgwanBZR3Y0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzJDQy80MzMwQUM5Q0IzNkQxMUU5ODI0NkVEMEFDNEY5QUUwMi8yM2paLVRXT1Zu MHdidU85SHF4MGpwWUd2NDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUgbmkT7YOo1p2AjTsq/g7Su/hTYk2XPcVOHHnsN3s8Fi9fGHr8Dul rINv9z8tVwyFwZXAZam1j81ae+VH6IEQu9wVGJz8ODdsYDhMw52eNp6L8+5APi/y 27coVu8vDERGlMr/httVgrfwcizUI8/r2lMbkWhD3YO7PTtd2U0oYmFXsy2u9Cle 7BL6sF05x6tS+t5n6EX6kL1RgFAD3zf1S5ANt814tuDrWwAOC2/VUauVxbDhCi6M q3yMSHF0kwB1gdWhOmWI0aMARXIQuhzDRtcyVecaGOf13GcffO/vJ/kODMdlxd2N yWt9Xni+0hYUhcVVqg6vqm5Tf0R+XRTN -----END CERTIFICATE-----Generated at Wed Nov 5 15:18:36 2025 by rpki-client