$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft File: 379fgwtQs7_B5TULnGBbt1YSLhE.mft (raw, json) Hash identifier: snNdFzEtP+Byvnoq28DEQmih/s1Lwwhcsil6zxuGcdE= Subject key identifier: AD:48:7F:E5:B5:E0:08:DB:16:87:45:86:CE:90:F7:BF:D1:2A:DA:1C Authority key identifier: DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 Certificate issuer: /CN=A91DBB7D/serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Certificate serial: 051A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft Manifest number: 0512 Signing time: Tue 04 Nov 2025 23:41:32 +0000 Manifest this update: Tue 04 Nov 2025 23:41:31 +0000 Manifest next update: Tue 11 Nov 2025 23:41:31 +0000 Files and hashes: 1: 379fgwtQs7_B5TULnGBbt1YSLhE.crl (hash: TU89Rj3PhtSRjKUKsxbEasOCzJa+iyoLIY9PGI3ysCc=) 2: D5C4A54A617B11EC82058668C4F9AE02.roa (hash: cTO7dHRgQ10X2+wIM0WDWEXY+Ht/milaq+pShcIOrgo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:41:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1306 (0x51a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBB7D, serialNumber=DFBF5F830B50B3BFC1E5350B9C605BB756122E11 Validity Not Before: Nov 4 23:41:31 2025 GMT Not After : Nov 11 23:41:31 2025 GMT Subject: CN=690a8f2c-4ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:0c:64:b0:66:c7:7a:b4:36:ff:dc:bf:e5: a1:2d:7f:d3:95:cf:76:34:3a:15:3d:66:ae:f1:a0: a3:6c:bb:df:24:15:89:ee:82:dd:f0:04:7f:b6:c9: 7a:0a:a0:41:58:aa:98:5f:42:a5:64:ea:7e:ca:6f: d8:7b:1c:d4:a8:3b:fd:91:bd:57:db:64:98:d6:a0: 5f:22:f5:1d:e6:01:34:bc:29:83:b5:bf:e2:34:a7: ad:d0:10:8f:1e:18:7a:e3:c4:6f:55:82:d0:46:81: 2e:f3:a7:ac:38:da:f2:4d:d7:94:7f:cc:a0:45:61: 17:dc:9d:87:0c:03:c9:dd:06:dd:c3:39:b0:8a:98: ea:d8:65:97:4b:5c:77:ac:bb:d7:51:c4:d8:db:4d: 60:55:6a:f9:f9:2a:d9:11:db:1e:d2:ff:ee:8d:cb: 3b:49:5c:1b:2f:15:58:3e:fe:76:91:67:e9:16:06: de:74:da:41:ee:ee:67:03:3a:3d:6b:46:01:d2:e5: 0f:eb:cd:e5:69:d0:cd:79:1d:bf:13:14:c9:4f:38: 33:6d:89:e5:5f:aa:e4:9f:72:b2:78:30:5a:3d:a2: 8f:7d:91:1f:4f:19:65:7f:12:41:6b:c5:ba:22:15: 18:08:1d:6d:dd:c3:c0:e4:f3:c0:91:7a:8b:93:0d: 60:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:48:7F:E5:B5:E0:08:DB:16:87:45:86:CE:90:F7:BF:D1:2A:DA:1C X509v3 Authority Key Identifier: keyid:DF:BF:5F:83:0B:50:B3:BF:C1:E5:35:0B:9C:60:5B:B7:56:12:2E:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/379fgwtQs7_B5TULnGBbt1YSLhE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBB7D/3017096E2BB911ECB2B3674FC4F9AE02/379fgwtQs7_B5TULnGBbt1YSLhE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:95:8a:48:d0:47:60:77:4c:c9:cb:79:9f:89:db:72:4f:d2: 1d:8a:4b:12:e3:0f:49:77:64:27:37:73:73:3c:03:10:95:bd: 8b:4f:19:1f:9d:f1:21:6b:09:29:68:25:82:43:90:31:b1:c3: 58:ec:30:54:c1:ff:bb:b3:5a:3d:81:3c:a6:c5:1b:df:0a:c2: 65:69:e1:d2:c7:cf:ed:4b:4d:21:7a:c4:3b:82:1d:fe:41:ba: a1:39:b7:cc:8a:ef:d9:36:a5:1f:c1:42:30:39:81:c6:55:30: 5f:86:19:b6:06:dc:68:40:2d:12:4a:56:82:78:51:80:04:a8: 70:11:ae:07:ef:6f:c4:1f:1e:77:72:b6:3c:4e:54:81:5c:b7: 13:87:aa:5b:0f:63:26:00:d9:4f:71:f0:ee:ef:84:3f:e3:08: e5:d5:68:68:3f:c2:d5:9a:67:0c:dc:bd:db:16:b4:57:05:f9: 53:be:ae:8d:c1:bb:53:06:26:ea:4d:77:f9:8d:01:bb:82:61: 2c:cb:4a:e0:64:d2:d6:35:80:3f:e1:36:8b:90:00:09:b8:70: 94:a8:7c:74:c7:16:97:09:e6:d4:aa:a9:32:ed:85:c2:9f:a2: 8a:98:b5:d5:c1:f6:88:73:03:5b:7f:d1:e9:73:ca:98:55:c2: 2b:bc:e8:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJCN0QxMTAvBgNVBAUTKERGQkY1RjgzMEI1MEIzQkZDMUU1MzUwQjlDNjA1QkI3 NTYxMjJFMTEwHhcNMjUxMTA0MjM0MTMxWhcNMjUxMTExMjM0MTMxWjAYMRYwFAYD VQQDEw02OTBhOGYyYy00Y2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W8MZLBmx3q0Nv/cv+WhLX/Tlc92NDoVPWau8aCjbLvfJBWJ7oLd8AR/tsl6 CqBBWKqYX0KlZOp+ym/YexzUqDv9kb1X22SY1qBfIvUd5gE0vCmDtb/iNKet0BCP Hhh648RvVYLQRoEu86esONryTdeUf8ygRWEX3J2HDAPJ3Qbdwzmwipjq2GWXS1x3 rLvXUcTY201gVWr5+SrZEdse0v/ujcs7SVwbLxVYPv52kWfpFgbedNpB7u5nAzo9 a0YB0uUP683ladDNeR2/ExTJTzgzbYnlX6rkn3KyeDBaPaKPfZEfTxllfxJBa8W6 IhUYCB1t3cPA5PPAkXqLkw1gCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK1If+W1 4AjbFodFhs6Q97/RKtocMB8GA1UdIwQYMBaAFN+/X4MLULO/weU1C5xgW7dWEi4R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkI3RC8zMDE3MDk2RTJC QjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3X0I1VFVMbkdCYnQxWVNM aEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM3OWZnd3RRczdfQjVUVUxuR0JidDFZU0xoRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QkI3RC8zMDE3MDk2RTJCQjkxMUVDQjJCMzY3NEZDNEY5QUUwMi8zNzlmZ3d0UXM3 X0I1VFVMbkdCYnQxWVNMaEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAslYpI0Edgd0zJy3mfidtyT9IdiksS4w9Jd2QnN3NzPAMQlb2LTxkf nfEhawkpaCWCQ5AxscNY7DBUwf+7s1o9gTymxRvfCsJlaeHSx8/tS00hesQ7gh3+ QbqhObfMiu/ZNqUfwUIwOYHGVTBfhhm2BtxoQC0SSlaCeFGABKhwEa4H72/EHx53 crY8TlSBXLcTh6pbD2MmANlPcfDu74Q/4wjl1WhoP8LVmmcM3L3bFrRXBflTvq6N wbtTBibqTXf5jQG7gmEsy0rgZNLWNYA/4TaLkAAJuHCUqHx0xxaXCebUqqky7YXC n6KKmLXVwfaIcwNbf9Hpc8qYVcIrvOj5 -----END CERTIFICATE-----Generated at Wed Nov 5 10:07:33 2025 by rpki-client