$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft File: 75XL1Zg1JkDUKwqsYABBBltNxEI.mft (raw, json) Hash identifier: sTLKjU4esCTdpuOH7Z/PM4zQkjVqTWw/0u/mDFGqYkg= Subject key identifier: 63:BF:8A:04:BD:2D:DB:A8:5D:99:B8:F7:A4:64:1A:59:12:54:1B:92 Authority key identifier: EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 Certificate issuer: /CN=A91DE8C5/serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Certificate serial: 0CB3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft Manifest number: 0CA4 Signing time: Sun 26 Oct 2025 18:38:32 +0000 Manifest this update: Sun 26 Oct 2025 18:38:31 +0000 Manifest next update: Sun 02 Nov 2025 18:38:31 +0000 Files and hashes: 1: 75XL1Zg1JkDUKwqsYABBBltNxEI.crl (hash: PNKPOH2ZBBsCoHVTn6KVicnwVvzAMHhyixFw0WomzFg=) 2: 44B3B572011611EA972FFC57C4F9AE02.roa (hash: 9COC4JU57eLtq+93AZXJxKxezKMRUvq8Ungs1T3DP7c=) 3: 452DDFB4011611EA972FFC57C4F9AE02.roa (hash: EAQL7hv/BTjKApjc3ZIYKNpClj0rUyMUA1WrPrbN2NU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:38:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3251 (0xcb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE8C5, serialNumber=EF95CBD598352640D42B0AAC600041065B4DC442 Validity Not Before: Oct 26 18:38:31 2025 GMT Not After : Nov 2 18:38:31 2025 GMT Subject: CN=68fe6aa8-3c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ef:36:ce:e9:cb:6a:cb:03:a3:54:69:21:1d: 28:d2:c0:fc:08:c9:90:64:79:ac:7a:9c:37:f6:4e: a6:b7:51:73:bd:3d:00:5e:81:92:30:a0:22:e1:1a: 39:41:e9:ac:2d:f7:0f:03:bd:15:05:56:15:a7:a4: 7a:d8:51:a1:20:1e:21:b9:83:6b:4e:96:9e:e3:8a: 17:90:7a:3f:c3:72:76:81:61:45:9c:75:c9:12:0d: d0:58:f7:d5:7a:bf:5d:11:f3:64:08:d9:30:c3:55: f7:04:ae:38:ff:d3:eb:af:4b:e1:2a:65:06:a6:2b: 0e:c6:9c:8d:07:76:80:2f:96:bd:6f:93:25:52:3e: 8c:bc:95:ce:e6:1d:c9:75:5e:16:59:6b:96:ca:4d: da:de:b1:18:62:a5:f1:6b:ca:6a:05:59:ce:92:a4: dc:00:79:f9:fe:a9:94:96:8a:ce:fd:50:14:23:cb: 80:00:15:55:70:99:b1:75:08:87:f3:ce:ec:72:7f: 85:99:54:1f:fe:27:8c:5b:a8:36:6a:27:8c:3d:ed: f7:d3:6b:5e:84:80:a3:b7:31:c8:f5:bf:e7:cf:fa: d6:a0:49:86:17:f9:90:59:05:4f:a4:df:b6:51:e5: f0:2b:5e:07:6a:fb:4f:c5:72:24:95:ac:3b:ec:19: 2c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:BF:8A:04:BD:2D:DB:A8:5D:99:B8:F7:A4:64:1A:59:12:54:1B:92 X509v3 Authority Key Identifier: keyid:EF:95:CB:D5:98:35:26:40:D4:2B:0A:AC:60:00:41:06:5B:4D:C4:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/75XL1Zg1JkDUKwqsYABBBltNxEI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE8C5/052C84FC011511EAA98A6255C4F9AE02/75XL1Zg1JkDUKwqsYABBBltNxEI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:8c:36:52:9d:59:69:82:6a:69:a5:ce:d2:07:e7:ea:a3:17: 5f:c9:98:8c:8b:41:9e:b5:72:23:c8:38:bf:06:8b:81:f7:23: c8:de:2a:50:ea:0d:ae:8d:20:eb:01:dd:a7:a9:67:bf:2e:31: d3:43:59:d4:00:d6:44:35:f0:c2:f2:9b:4c:c7:68:de:63:cd: 6a:8d:a4:42:56:4a:63:22:44:36:0b:9f:b8:2e:ff:3d:7d:a0: 7c:37:31:dc:4a:10:ed:1c:50:23:5e:7f:12:f7:82:61:52:a7: 74:6b:53:00:5b:83:33:e0:61:3e:f0:63:6b:f3:cd:ef:ab:8d: 4a:8f:f0:c4:9a:1d:e2:b2:48:87:0d:79:0c:37:5c:27:a4:c3: 90:37:a8:74:07:bb:d7:88:a8:35:44:5d:81:85:82:75:d5:ba: 0a:51:a2:50:b1:d1:4c:28:4d:57:01:3a:cc:30:19:b0:26:f3: 8a:d3:ab:47:61:a8:52:55:19:5a:98:ec:53:de:a7:28:de:ed: 4a:6e:3b:d7:49:6b:97:ee:46:2d:9b:ad:b1:0f:f0:0a:77:75: de:8b:ba:e5:e6:12:bf:98:95:1c:9e:24:ea:5c:89:fd:3f:9b: 06:71:e8:5c:85:08:82:cf:b0:80:00:36:d6:a3:27:ec:13:79: 4c:77:a4:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU4QzUxMTAvBgNVBAUTKEVGOTVDQkQ1OTgzNTI2NDBENDJCMEFBQzYwMDA0MTA2 NUI0REM0NDIwHhcNMjUxMDI2MTgzODMxWhcNMjUxMTAyMTgzODMxWjAYMRYwFAYD VQQDEw02OGZlNmFhOC0zYzVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwu82zunLassDo1RpIR0o0sD8CMmQZHmsepw39k6mt1FzvT0AXoGSMKAi4Ro5 QemsLfcPA70VBVYVp6R62FGhIB4huYNrTpae44oXkHo/w3J2gWFFnHXJEg3QWPfV er9dEfNkCNkww1X3BK44/9Prr0vhKmUGpisOxpyNB3aAL5a9b5MlUj6MvJXO5h3J dV4WWWuWyk3a3rEYYqXxa8pqBVnOkqTcAHn5/qmUlorO/VAUI8uAABVVcJmxdQiH 887scn+FmVQf/ieMW6g2aieMPe3302tehICjtzHI9b/nz/rWoEmGF/mQWQVPpN+2 UeXwK14HavtPxXIklaw77Bks7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGO/igS9 LduoXZm496RkGlkSVBuSMB8GA1UdIwQYMBaAFO+Vy9WYNSZA1CsKrGAAQQZbTcRC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERThDNS8wNTJDODRGQzAx MTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUprRFVLd3FzWUFCQkJsdE54 RUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1WEwxWmcxSmtEVUt3cXNZQUJCQmx0TnhFSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RThDNS8wNTJDODRGQzAxMTUxMUVBQTk4QTYyNTVDNEY5QUUwMi83NVhMMVpnMUpr RFVLd3FzWUFCQkJsdE54RUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmjDZSnVlpgmpppc7SB+fqoxdfyZiMi0GetXIjyDi/BouB9yPI3ipQ 6g2ujSDrAd2nqWe/LjHTQ1nUANZENfDC8ptMx2jeY81qjaRCVkpjIkQ2C5+4Lv89 faB8NzHcShDtHFAjXn8S94JhUqd0a1MAW4Mz4GE+8GNr883vq41Kj/DEmh3iskiH DXkMN1wnpMOQN6h0B7vXiKg1RF2BhYJ11boKUaJQsdFMKE1XATrMMBmwJvOK06tH YahSVRlamOxT3qco3u1KbjvXSWuX7kYtm62xD/AKd3Xei7rl5hK/mJUcniTqXIn9 P5sGcehchQiCz7CAADbWoyfsE3lMd6R1 -----END CERTIFICATE-----Generated at Tue Oct 28 13:44:12 2025 by rpki-client