$ rpki-client -vvf rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft File: grTScd4hLgYzXAtF5mUXtQi4NRY.mft (raw, json) Hash identifier: 8YTEAWJa4AfTWdwBHTD+mJ0/kYtahM3RRJyW3LEQ9yA= Subject key identifier: 35:5C:D7:8E:46:C7:62:3B:CC:72:B7:54:30:93:5F:26:97:70:74:E8 Authority key identifier: 82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 Certificate issuer: /CN=A91E379F/serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft Manifest number: FD Signing time: Wed 05 Nov 2025 05:20:42 +0000 Manifest this update: Wed 05 Nov 2025 05:20:41 +0000 Manifest next update: Wed 12 Nov 2025 05:20:41 +0000 Files and hashes: 1: grTScd4hLgYzXAtF5mUXtQi4NRY.crl (hash: A7It9srjsEqVCHcLWbRfVDSnsZkCcFN2hmqTlSrVPIE=) 2: 621428CE3CFB11EFB0BF040BC4F9AE02.roa (hash: CcMzmbCEE24xcvNE3zqONcKn9u4xDYDRcCqHcVACgAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:20:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E379F, serialNumber=82B4D271DE212E06335C0B45E66517B508B83516 Validity Not Before: Nov 5 05:20:41 2025 GMT Not After : Nov 12 05:20:41 2025 GMT Subject: CN=690adea9-b42f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5e:f4:08:fc:56:40:e0:16:5c:de:8e:4b:7f: df:c9:50:c6:a2:9f:8a:3b:a6:e6:d2:55:da:6b:ac: c1:12:8d:ee:a2:b8:91:3d:01:00:96:88:22:13:f7: 2e:b5:dd:63:a7:11:bf:22:76:3d:3c:1e:8d:62:df: 66:35:b2:b4:43:5d:65:02:72:d8:5e:ec:ce:ee:ec: 5f:7b:79:ec:dc:74:e0:da:ee:09:58:23:35:5d:f4: 14:9c:ae:33:b3:0e:af:84:08:00:82:16:91:33:df: 17:31:1d:10:85:1a:ab:c1:47:19:44:59:8a:da:6d: 2b:ab:33:74:2f:96:f5:a8:e5:59:24:ae:e7:61:7e: aa:21:4c:9d:df:46:8d:e0:ea:3b:df:f5:16:d2:fc: ed:6b:8e:9a:78:ec:23:24:0e:4e:e5:c6:e1:82:c0: a4:e4:db:74:74:cb:31:af:75:50:e8:d5:cb:71:e7: 8c:1b:04:51:07:dc:b5:98:9c:67:09:3e:1f:39:4e: 7e:9f:95:b2:23:39:2a:a0:6c:8a:21:b2:dd:82:93: 88:29:8e:0b:1c:84:1a:29:82:a9:17:c4:b2:98:60: 05:1d:4f:61:44:7c:02:a1:37:65:88:19:ce:9c:4c: 62:81:17:8d:91:ae:d0:19:32:24:17:40:a5:6f:a6: e3:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:5C:D7:8E:46:C7:62:3B:CC:72:B7:54:30:93:5F:26:97:70:74:E8 X509v3 Authority Key Identifier: keyid:82:B4:D2:71:DE:21:2E:06:33:5C:0B:45:E6:65:17:B5:08:B8:35:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grTScd4hLgYzXAtF5mUXtQi4NRY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E379F/6F99D4F03CF911EFA0A06F86C4F9AE02/grTScd4hLgYzXAtF5mUXtQi4NRY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:47:12:38:cd:6d:36:ac:74:c6:41:79:cb:f5:f8:a9:3b:56: a3:95:91:e4:4f:0c:31:b5:0d:61:ad:7a:1a:b0:1b:4e:b3:b6: d5:af:eb:5b:73:10:f2:51:89:69:64:f0:ef:c8:06:d4:8c:1a: f1:4f:fc:85:8f:d4:c1:56:d0:1a:38:cd:c6:43:5a:59:2c:99: ec:8e:79:bb:d9:c8:7c:cb:89:d0:eb:a7:d4:9b:2a:65:5f:10: be:c5:dc:61:8c:f7:02:92:3b:07:ab:4e:7b:d7:af:9e:18:e4: a3:da:ac:c4:15:78:06:02:35:93:73:c9:9f:e3:cd:00:40:24: 82:e3:9c:1e:da:b5:24:51:e8:02:80:d7:0f:ba:56:38:bd:81: 5d:0b:e3:55:e7:1a:ef:b0:c6:8a:43:dc:18:32:5c:f3:30:3f: 01:24:5d:8c:ff:2a:52:6a:aa:24:5e:ff:77:7f:4a:4c:c8:ac: 16:13:17:28:2e:a8:22:d2:8c:09:33:fd:eb:a3:2c:08:95:60: e0:a3:01:4c:d5:e4:67:0b:42:02:b9:6f:31:f8:0a:63:db:32: 49:fd:33:c1:7a:a5:a4:8a:09:74:b7:b5:79:11:65:cc:48:9b: 95:89:4a:2e:ae:f6:ae:62:f2:28:17:37:56:74:16:0d:a9:00: e6:ec:8c:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTM3OUYxMTAvBgNVBAUTKDgyQjREMjcxREUyMTJFMDYzMzVDMEI0NUU2NjUxN0I1 MDhCODM1MTYwHhcNMjUxMTA1MDUyMDQxWhcNMjUxMTEyMDUyMDQxWjAYMRYwFAYD VQQDEw02OTBhZGVhOS1iNDJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5V70CPxWQOAWXN6OS3/fyVDGop+KO6bm0lXaa6zBEo3uoriRPQEAlogiE/cu td1jpxG/InY9PB6NYt9mNbK0Q11lAnLYXuzO7uxfe3ns3HTg2u4JWCM1XfQUnK4z sw6vhAgAghaRM98XMR0QhRqrwUcZRFmK2m0rqzN0L5b1qOVZJK7nYX6qIUyd30aN 4Oo73/UW0vzta46aeOwjJA5O5cbhgsCk5Nt0dMsxr3VQ6NXLceeMGwRRB9y1mJxn CT4fOU5+n5WyIzkqoGyKIbLdgpOIKY4LHIQaKYKpF8SymGAFHU9hRHwCoTdliBnO nExigReNka7QGTIkF0Clb6bjjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDVc145G x2I7zHK3VDCTXyaXcHToMB8GA1UdIwQYMBaAFIK00nHeIS4GM1wLReZlF7UIuDUW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMzc5Ri82Rjk5RDRGMDND RjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExnWXpYQXRGNW1VWHRRaTRO UlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dyVFNjZDRoTGdZelhBdEY1bVVYdFFpNE5SWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF Mzc5Ri82Rjk5RDRGMDNDRjkxMUVGQTBBMDZGODZDNEY5QUUwMi9nclRTY2Q0aExn WXpYQXRGNW1VWHRRaTROUlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnRxI4zW02rHTGQXnL9fipO1ajlZHkTwwxtQ1hrXoasBtOs7bVr+tb cxDyUYlpZPDvyAbUjBrxT/yFj9TBVtAaOM3GQ1pZLJnsjnm72ch8y4nQ66fUmypl XxC+xdxhjPcCkjsHq05716+eGOSj2qzEFXgGAjWTc8mf480AQCSC45we2rUkUegC gNcPulY4vYFdC+NV5xrvsMaKQ9wYMlzzMD8BJF2M/ypSaqokXv93f0pMyKwWExco Lqgi0owJM/3roywIlWDgowFM1eRnC0ICuW8x+Apj2zJJ/TPBeqWkigl0t7V5EWXM SJuViUourvauYvIoFzdWdBYNqQDm7IzN -----END CERTIFICATE-----Generated at Wed Nov 5 11:14:06 2025 by rpki-client