$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: yRVIB3i63zuQyTx/jh/RBPNI2hH5CoK6rY6fBqJvXb4= Subject key identifier: EE:DC:12:1E:83:09:DF:0C:D6:F0:8D:2D:BC:EB:80:D0:94:7F:64:F9 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 3C Signing time: Mon 27 Oct 2025 09:59:11 +0000 Manifest this update: Mon 27 Oct 2025 09:59:11 +0000 Manifest next update: Mon 03 Nov 2025 09:59:11 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: 7HTgCasAkJzFrwVEeZXaVc9Pej0fa17XYcqjqq7lqa4=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 09:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Oct 27 09:59:11 2025 GMT Not After : Nov 3 09:59:11 2025 GMT Subject: CN=68ff426f-2710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:c7:4c:c2:5d:49:0b:b4:b3:08:c8:ad:a0: c2:b1:32:d4:1f:88:4b:7e:bd:61:a9:aa:8f:4a:53: 2d:57:62:ba:15:8b:1f:8a:55:aa:0f:32:98:ee:20: fc:98:91:19:fd:84:51:44:e2:fd:52:35:74:61:09: 05:c3:7e:d0:92:f2:dd:f1:37:e7:e6:42:b4:fb:90: 49:c5:f3:1f:98:9f:42:04:88:d5:3d:a5:f4:46:36: a6:59:e9:7e:d7:c9:b9:dd:4f:5f:9d:1d:58:f8:19: e0:97:13:3a:6d:c6:0d:e8:45:98:45:27:e0:da:29: e5:56:60:7a:31:67:13:0a:30:27:5d:0e:ab:9d:c4: 11:2c:92:77:fd:88:59:2b:bb:ee:37:fe:b1:1f:de: f8:94:b1:91:06:fb:00:6f:60:6e:c5:d6:e6:60:45: 91:f8:eb:74:af:3f:8f:35:9d:a4:33:bc:97:d1:32: b9:0f:ce:e3:bc:7f:73:26:69:65:e0:1c:85:94:29: 8c:bd:54:b9:0e:02:21:d0:38:9d:e6:60:1b:9d:df: 4b:39:54:4f:cb:c5:3a:d5:da:d2:27:1e:d1:ad:5f: ef:80:8c:78:e8:8c:93:0d:e4:af:47:6e:73:8e:2d: 95:5b:76:69:8a:07:51:b7:9e:86:68:1d:86:31:dd: 4d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DC:12:1E:83:09:DF:0C:D6:F0:8D:2D:BC:EB:80:D0:94:7F:64:F9 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:28:ab:f2:77:79:8d:41:1f:d6:9d:03:7a:ef:6f:14:f8:56: d7:6a:de:3b:03:28:c5:6e:52:f4:b5:1b:f0:5e:23:b7:fe:ac: 54:95:a3:c7:2f:c9:d4:73:7a:34:5d:f4:05:f8:55:87:3e:c9: 99:ef:3e:09:0b:ed:41:aa:68:dc:70:40:6e:5d:0b:f7:41:f8: ac:16:50:1f:a6:b6:fb:d1:e9:f0:f8:f8:30:b3:0e:0a:77:9e: 8c:32:df:c4:d1:64:bf:fc:79:c5:71:22:b6:7a:28:d9:18:d6: 5d:c8:c6:03:3b:64:1d:de:76:86:b3:94:2e:a2:06:22:b8:c8: 95:1b:a7:49:f5:2a:d8:4a:20:cd:59:15:9b:61:cf:23:d7:c7: cf:f5:8a:a9:c9:8f:cf:a5:a4:db:58:a9:60:ad:e2:75:38:7e: d7:a2:42:43:21:82:ae:99:87:d0:bc:ba:78:76:48:20:43:25: 2e:20:d3:8b:21:46:3f:bc:60:d7:92:2d:b0:5d:f7:ea:20:a1: f5:20:89:9b:d4:88:c3:e6:10:85:b7:8e:d8:82:4f:6c:e0:f1: 70:39:df:62:e1:2c:5c:32:c9:17:bb:32:03:97:ef:9b:79:9e: 9a:a2:68:9f:5d:c7:c3:d5:c4:67:97:97:e9:90:42:07:15:2a: dc:6d:ae:71 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTEwMjcwOTU5MTFaFw0yNTExMDMwOTU5MTFaMBgxFjAUBgNV BAMTDTY4ZmY0MjZmLTI3MTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeWcdMwl1JC7SzCMitoMKxMtQfiEt+vWGpqo9KUy1XYroVix+KVaoPMpjuIPyY kRn9hFFE4v1SNXRhCQXDftCS8t3xN+fmQrT7kEnF8x+Yn0IEiNU9pfRGNqZZ6X7X ybndT1+dHVj4GeCXEzptxg3oRZhFJ+DaKeVWYHoxZxMKMCddDqudxBEsknf9iFkr u+43/rEf3viUsZEG+wBvYG7F1uZgRZH463SvP481naQzvJfRMrkPzuO8f3MmaWXg HIWUKYy9VLkOAiHQOJ3mYBud30s5VE/LxTrV2tInHtGtX++AjHjojJMN5K9HbnOO LZVbdmmKB1G3noZoHYYx3U3fAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU7twSHoMJ 3wzW8I0tvOuA0JR/ZPkwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAQoq/J3eY1BH9adA3rvbxT4Vtdq3jsDKMVuUvS1G/BeI7f+rFSVo8cv ydRzejRd9AX4VYc+yZnvPgkL7UGqaNxwQG5dC/dB+KwWUB+mtvvR6fD4+DCzDgp3 nowy38TRZL/8ecVxIrZ6KNkY1l3IxgM7ZB3edoazlC6iBiK4yJUbp0n1KthKIM1Z FZthzyPXx8/1iqnJj8+lpNtYqWCt4nU4fteiQkMhgq6Zh9C8unh2SCBDJS4g04sh Rj+8YNeSLbBd9+ogofUgiZvUiMPmEIW3jtiCT2zg8XA532LhLFwyyRe7MgOX75t5 npqiaJ9dx8PVxGeXl+mQQgcVKtxtrnE= -----END CERTIFICATE-----Generated at Tue Oct 28 00:15:54 2025 by rpki-client