$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft File: 30PPMfEc2OafGltFHUP2ixRHa0c.mft (raw, json) Hash identifier: P3XE44T+DHN9C0izxwD56nXSZMe9Zl5+cArHyOT1YlA= Subject key identifier: FD:71:FB:B0:27:63:9C:25:C9:7C:87:93:89:28:AF:63:DC:18:22:4B Authority key identifier: DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 Certificate issuer: /CN=A91E3D4D/serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Certificate serial: 06A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft Manifest number: 068C Signing time: Sun 02 Nov 2025 22:31:16 +0000 Manifest this update: Sun 02 Nov 2025 22:31:16 +0000 Manifest next update: Sun 09 Nov 2025 22:31:16 +0000 Files and hashes: 1: 30PPMfEc2OafGltFHUP2ixRHa0c.crl (hash: E6j7ddnxINzxQqOPsH0SpqSVkT6wfv12oTixajmboWg=) 2: 8B5C69BACD5211EBBF89483BC4F9AE02.roa (hash: 71fJuckCoKbzUc34v7gFsGAjPnIuO7itiiyZ85r0nVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:31:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1696 (0x6a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3D4D, serialNumber=DF43CF31F11CD8E69F1A5B451D43F68B14476B47 Validity Not Before: Nov 2 22:31:16 2025 GMT Not After : Nov 9 22:31:16 2025 GMT Subject: CN=6907dbb4-70a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:b5:63:2e:25:99:5f:43:78:d5:b6:33:e2: 3c:5c:7c:25:41:7e:11:23:5b:09:39:82:21:92:f5: 30:92:b3:19:ee:94:70:f8:f7:1b:0b:24:4f:ca:bb: a8:4a:79:e2:6b:d9:02:9e:af:cf:58:f4:65:5f:fa: 7a:06:4d:04:91:eb:bf:aa:eb:2d:ba:43:45:44:bb: 68:43:89:44:fb:0a:74:09:75:a3:c3:ac:4d:49:66: 75:66:6a:fa:11:28:62:b4:d8:56:35:56:57:2c:e7: fe:26:c6:81:a1:76:76:6c:0d:fb:e8:f7:b9:98:83: e7:2b:2a:81:69:c0:63:52:6d:60:eb:0d:0f:de:1c: 05:43:31:e9:33:b7:40:ba:c0:d7:be:b9:9b:ac:f2: 44:03:b6:90:90:01:fe:be:a0:12:c0:51:c2:b4:a2: 94:47:3b:56:90:36:8c:ab:5c:11:cb:da:51:6b:05: ea:2c:af:db:ef:33:d5:a8:be:be:5c:ac:28:bd:f0: 3e:9b:99:dc:61:0d:d1:10:05:ca:ed:ce:be:ca:33: 0d:66:80:97:9e:79:78:3d:5a:ac:ec:d7:9b:2e:33: 82:ff:2f:8c:f0:8e:d7:61:68:77:6e:e3:a8:0b:3e: ff:88:df:0c:ea:51:17:87:6d:d1:78:17:17:3d:fa: b8:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:71:FB:B0:27:63:9C:25:C9:7C:87:93:89:28:AF:63:DC:18:22:4B X509v3 Authority Key Identifier: keyid:DF:43:CF:31:F1:1C:D8:E6:9F:1A:5B:45:1D:43:F6:8B:14:47:6B:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30PPMfEc2OafGltFHUP2ixRHa0c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3D4D/ED6A19929AE711EB8A045626C4F9AE02/30PPMfEc2OafGltFHUP2ixRHa0c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:93:43:41:3e:0d:0c:24:bd:76:a9:da:74:9c:50:e5:a2:79: b6:36:ef:d2:e6:4a:27:49:75:59:86:d9:a0:32:67:99:ff:dd: 9f:fe:ac:3b:30:4e:2f:8e:26:2b:8a:8e:82:53:0c:61:05:24: d6:4b:4f:75:5c:90:29:9e:cf:4f:3a:33:fc:a8:10:45:d1:9b: 78:4b:0a:93:88:60:d2:10:d1:89:54:92:a6:7d:c9:2f:8e:61: ea:c7:62:b1:cd:2a:bc:b0:10:7f:11:38:de:0e:22:60:8e:58: a3:c1:f6:78:89:2a:7e:21:9d:4f:c0:6d:c5:43:72:61:81:a2: c2:2f:77:c6:19:fb:a3:b9:8b:28:32:c0:12:b4:18:5f:8f:be: ab:79:7b:a8:09:ac:7e:c3:19:9c:76:3a:29:7e:a3:f5:de:3b: 73:87:f0:5e:b5:fc:c0:64:6c:76:e4:00:7d:1c:88:91:38:e5: 30:7d:98:19:d7:e1:89:0a:90:7a:63:d2:58:4d:72:6c:8c:a5: c7:2a:74:e3:b0:7b:fc:2e:3d:43:c9:b1:26:96:c6:d2:16:9a: 90:74:58:d5:f7:d5:28:0b:41:55:76:59:0d:18:c7:fe:7d:8b: 11:c1:06:0c:15:bd:03:5a:3c:e2:55:a4:26:d6:e0:52:65:c6: 53:c3:28:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNENEQxMTAvBgNVBAUTKERGNDNDRjMxRjExQ0Q4RTY5RjFBNUI0NTFENDNGNjhC MTQ0NzZCNDcwHhcNMjUxMTAyMjIzMTE2WhcNMjUxMTA5MjIzMTE2WjAYMRYwFAYD VQQDEw02OTA3ZGJiNC03MGE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArhW1Yy4lmV9DeNW2M+I8XHwlQX4RI1sJOYIhkvUwkrMZ7pRw+PcbCyRPyruo Snnia9kCnq/PWPRlX/p6Bk0Ekeu/qustukNFRLtoQ4lE+wp0CXWjw6xNSWZ1Zmr6 EShitNhWNVZXLOf+JsaBoXZ2bA376Pe5mIPnKyqBacBjUm1g6w0P3hwFQzHpM7dA usDXvrmbrPJEA7aQkAH+vqASwFHCtKKURztWkDaMq1wRy9pRawXqLK/b7zPVqL6+ XKwovfA+m5ncYQ3REAXK7c6+yjMNZoCXnnl4PVqs7NebLjOC/y+M8I7XYWh3buOo Cz7/iN8M6lEXh23ReBcXPfq4zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP1x+7An Y5wlyXyHk4kor2PcGCJLMB8GA1UdIwQYMBaAFN9DzzHxHNjmnxpbRR1D9osUR2tH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0Q0RC9FRDZBMTk5MjlB RTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJPYWZHbHRGSFVQMml4Ukhh MGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzMwUFBNZkVjMk9hZkdsdEZIVVAyaXhSSGEwYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0Q0RC9FRDZBMTk5MjlBRTcxMUVCOEEwNDU2MjZDNEY5QUUwMi8zMFBQTWZFYzJP YWZHbHRGSFVQMml4UkhhMGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARk0NBPg0MJL12qdp0nFDlonm2Nu/S5konSXVZhtmgMmeZ/92f/qw7 ME4vjiYrio6CUwxhBSTWS091XJApns9POjP8qBBF0Zt4SwqTiGDSENGJVJKmfckv jmHqx2KxzSq8sBB/ETjeDiJgjlijwfZ4iSp+IZ1PwG3FQ3JhgaLCL3fGGfujuYso MsAStBhfj76reXuoCax+wxmcdjopfqP13jtzh/BetfzAZGx25AB9HIiROOUwfZgZ 1+GJCpB6Y9JYTXJsjKXHKnTjsHv8Lj1DybEmlsbSFpqQdFjV99UoC0FVdlkNGMf+ fYsRwQYMFb0DWjziVaQm1uBSZcZTwyjq -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:22 2025 by rpki-client