$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft File: inP7xm5uPo6rLV_CtomRCR8CHkU.mft (raw, json) Hash identifier: rWwabEJlPQWfF1Rgz6P7NoHWYNjzgqVBM1q2m/i1axs= Subject key identifier: FD:23:D2:15:E1:0E:FB:C8:5C:00:97:86:ED:23:18:4C:B3:66:FD:DD Authority key identifier: 8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 Certificate issuer: /CN=A91DD309/serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Certificate serial: 1C59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft Manifest number: 1C3B Signing time: Sun 02 Nov 2025 16:14:10 +0000 Manifest this update: Sun 02 Nov 2025 16:14:10 +0000 Manifest next update: Sun 09 Nov 2025 16:14:10 +0000 Files and hashes: 1: inP7xm5uPo6rLV_CtomRCR8CHkU.crl (hash: u02Hp5lF5hkBEygH1BUsPf6z+cffvb9qypNlZOIKh3Q=) 2: 5A927B8088BA11F0951D1687C4F9AE02.roa (hash: HlzDRvwYW6pbsuj+o87VDQGvtNc1OKZ6zMxo32jSfko=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7257 (0x1c59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD309, serialNumber=8A73FBC66E6E3E8EAB2D5FC2B68991091F021E45 Validity Not Before: Nov 2 16:14:10 2025 GMT Not After : Nov 9 16:14:10 2025 GMT Subject: CN=69078352-c4d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:af:a4:23:f5:d7:c9:8b:d3:8d:11:69:7a:41: a7:e6:c5:75:fc:32:f3:eb:c8:ae:99:0b:90:96:d1: 2d:67:89:85:f0:0a:68:a7:1e:3a:60:6a:86:5a:25: af:38:9f:1b:08:af:97:8f:fc:08:0c:1e:76:8c:1d: af:e6:f5:c2:78:06:ba:d1:71:25:af:15:25:b3:60: 55:8e:e3:d3:cb:7c:a7:e7:b5:02:10:f9:04:5b:4a: 46:3d:ce:22:28:86:2a:a9:7d:e7:58:79:22:88:20: 70:ce:20:82:9a:62:56:b1:4e:89:4c:0d:ec:45:b3: dd:69:35:04:11:4c:94:7d:2f:6a:b2:0e:db:c3:2e: 22:95:90:e6:83:05:c8:d3:1c:c5:35:4c:cf:c5:81: 80:8b:52:23:f3:8b:d0:f2:ba:ca:6a:26:3b:8e:86: 45:f3:b2:81:89:d5:44:19:11:28:23:bf:fc:0d:29: c2:c8:af:ca:3a:ad:2e:85:af:b6:c9:19:ab:87:d0: 06:d0:ef:58:65:56:e4:94:7f:d7:15:10:ca:fd:6f: 7f:2c:0a:68:dc:e0:60:61:53:95:00:1e:64:4c:29: be:07:01:45:e0:55:67:32:9d:58:93:43:c0:cd:3c: a1:9f:c1:6a:3d:45:3a:14:f3:86:a1:b9:e6:2b:ef: 69:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:23:D2:15:E1:0E:FB:C8:5C:00:97:86:ED:23:18:4C:B3:66:FD:DD X509v3 Authority Key Identifier: keyid:8A:73:FB:C6:6E:6E:3E:8E:AB:2D:5F:C2:B6:89:91:09:1F:02:1E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inP7xm5uPo6rLV_CtomRCR8CHkU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD309/1FD6A6EEFA6911E68EC12333C4F9AE02/inP7xm5uPo6rLV_CtomRCR8CHkU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:fd:0f:fe:07:b8:2e:3a:21:60:46:11:59:74:03:bb:d8:82: ff:cd:92:36:7b:e7:1e:68:e5:48:81:3f:4c:fb:db:90:06:53: 28:25:c7:55:66:14:49:91:9a:df:dc:7e:f3:ad:d7:0d:93:fa: 7f:de:86:68:d2:60:91:97:06:7f:0e:65:19:d2:2d:d6:23:c3: 7e:6f:f1:7b:e1:73:80:67:bd:79:21:02:24:67:54:7b:b4:ee: 98:33:10:c7:0d:04:b9:5f:1f:0a:f5:ff:7e:dd:07:0e:75:67: 95:eb:23:98:ce:2a:82:4c:11:85:3b:cd:c7:dd:91:0d:04:4f: c0:b0:16:49:df:ac:c5:d9:09:d2:81:44:9d:32:2e:b6:e6:39: 9f:7e:26:0e:7b:19:b1:8d:f6:c1:06:c5:a3:c4:fe:8f:06:07: b5:a6:a4:63:4e:2e:4f:df:87:bc:da:61:25:84:c7:42:1e:19: a3:64:fd:1c:9a:e4:95:36:f9:de:84:a7:22:47:6a:46:9d:22: d8:e1:dc:46:7a:03:cb:a4:be:1d:9a:27:53:fe:50:cd:ad:fd: 50:90:b8:ef:55:6d:8b:fc:bf:f6:b9:96:60:f0:d1:ca:b2:2c: ee:ed:81:de:66:49:60:f6:6f:52:24:4f:51:d3:33:ba:da:aa: 95:16:ce:21 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQzMDkxMTAvBgNVBAUTKDhBNzNGQkM2NkU2RTNFOEVBQjJENUZDMkI2ODk5MTA5 MUYwMjFFNDUwHhcNMjUxMTAyMTYxNDEwWhcNMjUxMTA5MTYxNDEwWjAYMRYwFAYD VQQDEw02OTA3ODM1Mi1jNGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAra+kI/XXyYvTjRFpekGn5sV1/DLz68iumQuQltEtZ4mF8Apopx46YGqGWiWv OJ8bCK+Xj/wIDB52jB2v5vXCeAa60XElrxUls2BVjuPTy3yn57UCEPkEW0pGPc4i KIYqqX3nWHkiiCBwziCCmmJWsU6JTA3sRbPdaTUEEUyUfS9qsg7bwy4ilZDmgwXI 0xzFNUzPxYGAi1Ij84vQ8rrKaiY7joZF87KBidVEGREoI7/8DSnCyK/KOq0uha+2 yRmrh9AG0O9YZVbklH/XFRDK/W9/LApo3OBgYVOVAB5kTCm+BwFF4FVnMp1Yk0PA zTyhn8FqPUU6FPOGobnmK+9phQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP0j0hXh DvvIXACXhu0jGEyzZv3dMB8GA1UdIwQYMBaAFIpz+8Zubj6Oqy1fwraJkQkfAh5F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDMwOS8xRkQ2QTZFRUZB NjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBvNnJMVl9DdG9tUkNSOENI a1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2luUDd4bTV1UG82ckxWX0N0b21SQ1I4Q0hrVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDMwOS8xRkQ2QTZFRUZBNjkxMUU2OEVDMTIzMzNDNEY5QUUwMi9pblA3eG01dVBv NnJMVl9DdG9tUkNSOENIa1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZ/Q/+B7guOiFgRhFZdAO72IL/zZI2e+ceaOVIgT9M+9uQBlMoJcdV ZhRJkZrf3H7zrdcNk/p/3oZo0mCRlwZ/DmUZ0i3WI8N+b/F74XOAZ715IQIkZ1R7 tO6YMxDHDQS5Xx8K9f9+3QcOdWeV6yOYziqCTBGFO83H3ZENBE/AsBZJ36zF2QnS gUSdMi625jmffiYOexmxjfbBBsWjxP6PBge1pqRjTi5P34e82mElhMdCHhmjZP0c muSVNvnehKciR2pGnSLY4dxGegPLpL4dmidT/lDNrf1QkLjvVW2L/L/2uZZg8NHK sizu7YHeZklg9m9SJE9R0zO62qqVFs4h -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:26 2025 by rpki-client