$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft File: K99csyKL7Ic-zuddZ1g1RlOCNJI.mft (raw, json) Hash identifier: OUGkbEOFk49GAM//K9EO9Lh3xm4q3cAoDG96dfz3wOM= Subject key identifier: B4:82:84:30:3D:2B:34:5B:37:3C:19:15:F1:D7:9F:3C:B5:01:F6:99 Authority key identifier: 2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 Certificate issuer: /CN=A91D8100/serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Certificate serial: 081C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft Manifest number: 080F Signing time: Sun 02 Nov 2025 20:55:26 +0000 Manifest this update: Sun 02 Nov 2025 20:55:25 +0000 Manifest next update: Sun 09 Nov 2025 20:55:25 +0000 Files and hashes: 1: K99csyKL7Ic-zuddZ1g1RlOCNJI.crl (hash: wHCL7dsAk4FC2iddP376n0hUVY4Ccbp0I0z7fEWtDjg=) 2: DFB4AB2C9FD911F0B75B1848C4F9AE02.roa (hash: RLRjH/J0+me+Vx3yyTHl66wKq7FxNXMRxmdR2kAu53U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2076 (0x81c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8100, serialNumber=2BDF5CB3228BEC873ECEE75D6758354653823492 Validity Not Before: Nov 2 20:55:25 2025 GMT Not After : Nov 9 20:55:25 2025 GMT Subject: CN=6907c53e-6652 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:60:1d:e7:7b:01:36:34:ee:ff:4c:ec:e8: 40:83:3f:b8:bb:78:38:01:cd:ca:72:0a:1e:4f:6a: 9d:43:85:88:75:2b:8d:c6:94:7b:2c:b1:69:ea:7c: 80:0a:f1:dd:d2:38:d9:d9:0e:19:8a:c4:cd:e2:79: 6f:0b:60:45:67:c2:be:18:b1:5e:09:9b:c6:71:4c: 81:0c:33:1c:85:66:00:dc:ba:49:63:f3:8e:09:00: 0b:04:1c:ae:5f:02:f1:e3:9f:68:6c:7d:22:9d:f6: c7:5b:3f:eb:75:09:1a:05:d1:60:f8:fc:79:cc:39: e8:ab:55:a5:a6:71:af:f9:0f:0e:93:a9:39:96:9c: 10:20:d3:3f:2d:29:46:e5:80:0d:95:08:18:28:ad: 0b:ee:1c:4c:5e:d7:94:6e:72:8a:12:06:2a:0b:9d: 1c:60:16:3d:6c:3c:be:d3:86:16:6e:07:4a:eb:0c: b9:a6:56:8b:f5:6d:08:60:07:2a:28:2a:4a:3f:00: 26:70:1c:f3:22:26:29:e6:50:d8:69:2b:9b:0b:59: 78:d9:72:74:fe:93:fb:b9:64:ed:20:c0:a7:55:55: 63:69:29:23:ef:3d:05:5a:0b:22:57:c6:8b:f3:da: 19:88:20:95:36:6d:7d:82:0d:28:a2:48:c0:33:b3: d9:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:82:84:30:3D:2B:34:5B:37:3C:19:15:F1:D7:9F:3C:B5:01:F6:99 X509v3 Authority Key Identifier: keyid:2B:DF:5C:B3:22:8B:EC:87:3E:CE:E7:5D:67:58:35:46:53:82:34:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K99csyKL7Ic-zuddZ1g1RlOCNJI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8100/AAC72E0CFCCE11EA8C19D87FC4F9AE02/K99csyKL7Ic-zuddZ1g1RlOCNJI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:ec:51:91:44:9e:9b:4e:79:77:21:85:0b:4f:9e:fc:20:9e: cf:f7:7b:af:c1:8f:3b:ac:a9:4a:af:8b:40:c3:07:8d:e3:d1: 63:2b:69:c6:3a:0a:e9:a3:37:45:a7:93:ad:0c:4c:74:76:94: b1:6c:25:ca:ef:00:d3:67:ba:96:dc:35:ea:d2:4d:eb:e3:08: 5c:4c:17:e9:f7:7b:cd:d6:09:77:fe:5a:1d:78:51:cd:c4:ce: fb:f6:5e:bd:9b:23:1f:9b:34:51:70:dc:67:0c:94:f3:b6:d6: b7:35:a2:72:73:00:5a:27:74:19:29:9f:6a:28:fd:bc:03:5b: 4a:ff:cf:4d:2e:d4:45:22:7c:db:c7:4b:4d:90:54:3c:5a:7c: d4:77:4b:ac:70:c5:e8:47:f7:82:e9:e2:a8:8a:2d:5f:74:cc: de:91:1c:65:d4:7d:6a:a7:0a:4f:1d:02:05:c9:12:30:88:d8: 2f:31:ac:e9:6e:f2:dd:9e:b3:5a:93:09:7b:8f:7c:c8:2f:d7: 60:75:53:98:85:c2:bf:4e:ed:37:79:ae:fe:09:8f:d4:5e:50: c0:bf:e8:99:aa:df:e8:3f:34:48:1c:f3:90:74:51:ac:38:31: 10:9c:03:9f:d4:d2:52:6b:65:0f:00:48:fa:ab:4e:22:d2:c4: 71:90:04:69 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgxMDAxMTAvBgNVBAUTKDJCREY1Q0IzMjI4QkVDODczRUNFRTc1RDY3NTgzNTQ2 NTM4MjM0OTIwHhcNMjUxMTAyMjA1NTI1WhcNMjUxMTA5MjA1NTI1WjAYMRYwFAYD VQQDEw02OTA3YzUzZS02NjUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YNgHed7ATY07v9M7OhAgz+4u3g4Ac3KcgoeT2qdQ4WIdSuNxpR7LLFp6nyA CvHd0jjZ2Q4ZisTN4nlvC2BFZ8K+GLFeCZvGcUyBDDMchWYA3LpJY/OOCQALBByu XwLx459obH0infbHWz/rdQkaBdFg+Px5zDnoq1WlpnGv+Q8Ok6k5lpwQINM/LSlG 5YANlQgYKK0L7hxMXteUbnKKEgYqC50cYBY9bDy+04YWbgdK6wy5plaL9W0IYAcq KCpKPwAmcBzzIiYp5lDYaSubC1l42XJ0/pP7uWTtIMCnVVVjaSkj7z0FWgsiV8aL 89oZiCCVNm19gg0ookjAM7PZNQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSChDA9 KzRbNzwZFfHXnzy1AfaZMB8GA1UdIwQYMBaAFCvfXLMii+yHPs7nXWdYNUZTgjSS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODEwMC9BQUM3MkUwQ0ZD Q0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJYy16dWRkWjFnMVJsT0NO SkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s5OWNzeUtMN0ljLXp1ZGRaMWcxUmxPQ05KSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODEwMC9BQUM3MkUwQ0ZDQ0UxMUVBOEMxOUQ4N0ZDNEY5QUUwMi9LOTljc3lLTDdJ Yy16dWRkWjFnMVJsT0NOSkkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv7FGRRJ6bTnl3IYULT578IJ7P93uvwY87rKlKr4tAwweN49FjK2nG OgrpozdFp5OtDEx0dpSxbCXK7wDTZ7qW3DXq0k3r4whcTBfp93vN1gl3/lodeFHN xM779l69myMfmzRRcNxnDJTztta3NaJycwBaJ3QZKZ9qKP28A1tK/89NLtRFInzb x0tNkFQ8WnzUd0uscMXoR/eC6eKoii1fdMzekRxl1H1qpwpPHQIFyRIwiNgvMazp bvLdnrNakwl7j3zIL9dgdVOYhcK/Tu03ea7+CY/UXlDAv+iZqt/oPzRIHPOQdFGs ODEQnAOf1NJSa2UPAEj6q04i0sRxkARp -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:30 2025 by rpki-client