$ rpki-client -vvf rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft File: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft (raw, json) Hash identifier: ZEnb4Edo1ij8vATAZScPdjojfGWPccOTlNiStoMw0xE= Subject key identifier: 3D:E1:44:7E:61:2A:95:4A:EE:C3:27:63:F6:20:6B:98:2B:25:63:4D Authority key identifier: 0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 Certificate issuer: /CN=A91D890E/serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Certificate serial: 097B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft Manifest number: 0974 Signing time: Tue 04 Nov 2025 20:11:53 +0000 Manifest this update: Tue 04 Nov 2025 20:11:53 +0000 Manifest next update: Tue 11 Nov 2025 20:11:53 +0000 Files and hashes: 1: CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl (hash: xJ2p9XH1gGmYojWBZmm8jwyecZmu4zM7mW/djiruITQ=) 2: FDAEEFB0A12A11EAB063A548C4F9AE02.roa (hash: 0cYkjMp/gtYpvp6HxvXFQpX0b09jvpiPKpMRszh/Xsc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2427 (0x97b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D890E, serialNumber=0B022B1EA34C037C51F657FC3E0D84A3C6186822 Validity Not Before: Nov 4 20:11:53 2025 GMT Not After : Nov 11 20:11:53 2025 GMT Subject: CN=690a5e09-d64e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2b:0e:19:05:5c:33:0a:11:f7:ed:f9:95:23: 27:51:85:24:ef:1f:0e:05:1f:7b:41:32:21:50:87: 2f:aa:40:b5:44:6b:4b:78:25:c2:0b:f8:06:c8:3a: e2:33:3a:fa:42:b7:3a:e5:dd:3e:5a:78:64:4d:50: a3:9a:c8:2f:47:31:a2:b5:a2:3f:f0:8a:58:03:b6: ff:a6:94:95:9a:2a:bf:76:0f:a4:22:5f:5a:13:28: 57:e5:89:f8:e5:c4:68:48:b6:35:86:ad:2e:48:ce: 18:f3:19:88:5f:37:d9:bc:e8:1a:14:a7:8d:ee:6f: b6:70:0c:96:1f:bb:ed:c2:9f:84:3b:3b:ea:7c:22: b4:d9:87:4d:b7:28:cd:25:df:fb:75:e0:74:b0:73: 19:6b:db:74:0b:d9:0a:95:31:9c:9b:fa:48:3c:d5: 44:e2:f0:94:91:57:c2:bd:2c:ed:b6:e5:9a:c1:7e: 99:8d:da:d6:6f:45:5a:59:34:4c:06:df:98:e9:fc: 74:14:75:fc:17:37:36:e1:dd:41:66:ed:0d:b2:a2: 02:6b:5a:bd:d6:78:ce:50:63:02:73:ac:a0:84:58: c5:5b:5a:7e:a0:c1:7b:5b:63:44:22:4b:ae:67:6f: f7:98:4a:f5:94:e5:06:13:ab:1b:04:d4:22:cb:d7: 40:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E1:44:7E:61:2A:95:4A:EE:C3:27:63:F6:20:6B:98:2B:25:63:4D X509v3 Authority Key Identifier: keyid:0B:02:2B:1E:A3:4C:03:7C:51:F6:57:FC:3E:0D:84:A3:C6:18:68:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D890E/8D4135FEA12911EAA0227746C4F9AE02/CwIrHqNMA3xR9lf8Pg2Eo8YYaCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:ff:de:35:5a:08:83:30:7f:f1:89:47:ee:a1:89:f2:25:30: 9a:76:34:a2:94:11:b0:99:65:42:47:8d:89:8c:d1:be:f0:bf: 3d:77:9d:17:49:77:03:eb:da:79:c1:af:cc:3a:6e:89:a0:67: d1:4e:52:69:56:20:90:2c:cc:ed:23:91:4c:b8:6f:c2:89:b8: 19:c0:e9:d6:a5:e5:6f:86:d2:0c:36:95:ab:a3:27:ff:20:a2: 9f:33:db:f5:f0:9f:5c:77:89:5f:12:ac:c0:cb:4c:04:d2:c6: 28:a9:84:cd:1b:e9:92:f8:52:24:85:4f:fb:98:00:ee:8c:68: 4a:31:25:26:d9:ec:40:1e:68:a9:6a:60:58:1b:4e:f8:ac:ec: 59:e5:27:04:78:d8:5b:15:7d:8e:ff:d5:ca:07:9d:60:25:51: 04:4b:e3:71:35:a3:72:a5:f3:dc:91:45:09:ed:a2:7a:a4:e8: de:07:44:e5:89:20:b1:17:96:a9:65:b1:40:c4:db:fb:ac:06: af:36:7a:20:7b:32:cd:de:40:f6:ba:c2:65:ac:52:00:1d:86: e0:8d:eb:74:80:5e:f0:0a:92:3d:c8:e3:dd:25:11:b9:c1:e0: 20:d7:8b:56:f2:19:64:34:f1:de:61:43:ce:42:88:8c:26:dc: 55:5f:41:a5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg5MEUxMTAvBgNVBAUTKDBCMDIyQjFFQTM0QzAzN0M1MUY2NTdGQzNFMEQ4NEEz QzYxODY4MjIwHhcNMjUxMTA0MjAxMTUzWhcNMjUxMTExMjAxMTUzWjAYMRYwFAYD VQQDEw02OTBhNWUwOS1kNjRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwysOGQVcMwoR9+35lSMnUYUk7x8OBR97QTIhUIcvqkC1RGtLeCXCC/gGyDri Mzr6Qrc65d0+WnhkTVCjmsgvRzGitaI/8IpYA7b/ppSVmiq/dg+kIl9aEyhX5Yn4 5cRoSLY1hq0uSM4Y8xmIXzfZvOgaFKeN7m+2cAyWH7vtwp+EOzvqfCK02YdNtyjN Jd/7deB0sHMZa9t0C9kKlTGcm/pIPNVE4vCUkVfCvSzttuWawX6ZjdrWb0VaWTRM Bt+Y6fx0FHX8Fzc24d1BZu0NsqICa1q91njOUGMCc6yghFjFW1p+oMF7W2NEIkuu Z2/3mEr1lOUGE6sbBNQiy9dA4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD3hRH5h KpVK7sMnY/Yga5grJWNNMB8GA1UdIwQYMBaAFAsCKx6jTAN8UfZX/D4NhKPGGGgi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODkwRS84RDQxMzVGRUEx MjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEzeFI5bGY4UGcyRW84WVlh Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N3SXJIcU5NQTN4UjlsZjhQZzJFbzhZWWFDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE ODkwRS84RDQxMzVGRUExMjkxMUVBQTAyMjc3NDZDNEY5QUUwMi9Dd0lySHFOTUEz eFI5bGY4UGcyRW84WVlhQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCt/941WgiDMH/xiUfuoYnyJTCadjSilBGwmWVCR42JjNG+8L89d50X SXcD69p5wa/MOm6JoGfRTlJpViCQLMztI5FMuG/CibgZwOnWpeVvhtIMNpWroyf/ IKKfM9v18J9cd4lfEqzAy0wE0sYoqYTNG+mS+FIkhU/7mADujGhKMSUm2exAHmip amBYG074rOxZ5ScEeNhbFX2O/9XKB51gJVEES+NxNaNypfPckUUJ7aJ6pOjeB0Tl iSCxF5apZbFAxNv7rAavNnogezLN3kD2usJlrFIAHYbgjet0gF7wCpI9yOPdJRG5 weAg14tW8hlkNPHeYUPOQoiMJtxVX0Gl -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:32 2025 by rpki-client