$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft File: tCmPyy2EnY1NcSomJyvLHJbb_l4.mft (raw, json) Hash identifier: LaIC9eQnYHJOw/cWZ0WjwrQhrR1lYVpOZrvsOV71CP8= Subject key identifier: B3:1D:13:B0:2F:73:60:9E:BD:EC:BE:50:0F:A5:88:85:30:B0:9A:19 Authority key identifier: B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E Certificate issuer: /CN=A91EC93E/serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Certificate serial: 03E3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft Manifest number: 03DF Signing time: Mon 03 Nov 2025 00:31:22 +0000 Manifest this update: Mon 03 Nov 2025 00:31:21 +0000 Manifest next update: Mon 10 Nov 2025 00:31:21 +0000 Files and hashes: 1: tCmPyy2EnY1NcSomJyvLHJbb_l4.crl (hash: arkARWBcgjIIQiwg4X9Wzqq37WN1dU4UtQ1/qnErJoM=) 2: 113047A69F2A11ECACE41C82C4F9AE02.roa (hash: lmHWjHWGoDos3ZD/zmSAwKznf6OVOtQspTUkVEJy1Jw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:31:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 995 (0x3e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC93E, serialNumber=B4298FCB2D849D8D4D712A26272BCB1C96DBFE5E Validity Not Before: Nov 3 00:31:21 2025 GMT Not After : Nov 10 00:31:21 2025 GMT Subject: CN=6907f7da-b3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:4a:58:76:2b:79:13:c5:f5:ee:66:f8:75: 35:77:e0:90:b8:d2:3f:c4:97:77:ae:2b:c9:ab:f6: 49:1c:cf:0b:4a:1f:62:db:ef:86:04:9f:5a:3b:81: 76:8c:db:9d:54:8e:6c:d3:fb:68:5a:6e:ec:84:89: f7:47:4b:a1:0e:b9:61:52:78:4d:c0:6b:1d:6f:94: cd:fd:0e:82:5b:17:57:f8:4e:4c:dd:33:89:0d:dd: 6a:c6:10:03:17:55:0d:bf:5c:18:a6:ec:65:14:8e: d5:92:a0:8e:e3:82:f3:5d:bb:03:4d:35:27:33:13: d0:58:1f:b6:bc:68:09:ec:26:6d:5d:30:7b:dd:dc: 07:ef:ba:17:0c:14:d1:6a:7c:e4:c8:5d:b0:b6:78: 94:c3:26:85:86:28:bb:de:46:08:ea:ac:de:fa:58: 9c:9b:4e:36:71:0d:f2:1b:99:8b:e8:62:23:82:27: 45:8f:9e:73:46:b5:b4:7e:95:7c:2b:8d:b9:db:bf: 0c:e0:85:b9:a6:4e:7c:65:5b:ac:56:30:00:73:39: 60:9e:81:06:cf:19:8e:88:87:fe:a0:3f:19:38:30: 96:ae:0d:00:41:a3:e0:4d:85:5a:da:0e:cc:8f:21: cd:47:bc:68:9b:1f:75:59:87:7a:84:2e:1d:4e:e7: b6:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:1D:13:B0:2F:73:60:9E:BD:EC:BE:50:0F:A5:88:85:30:B0:9A:19 X509v3 Authority Key Identifier: keyid:B4:29:8F:CB:2D:84:9D:8D:4D:71:2A:26:27:2B:CB:1C:96:DB:FE:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tCmPyy2EnY1NcSomJyvLHJbb_l4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC93E/5AE7852E9F2711ECBF60D27FC4F9AE02/tCmPyy2EnY1NcSomJyvLHJbb_l4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:86:1f:ec:24:56:7e:bd:1a:dd:6e:5e:89:34:c6:1c:b8:e1: e7:49:60:05:20:ca:e4:1d:e4:ce:9f:52:2e:7c:90:63:3c:57: 2a:f5:b5:7c:76:c4:e5:1e:02:71:3f:ec:8a:60:5e:08:c5:d8: 38:65:59:01:9c:81:9d:c2:08:90:5d:40:68:e2:58:2a:59:8b: 8a:35:8c:4d:a8:28:05:8d:3f:ca:1e:83:b6:ce:b6:e8:41:a9: 31:f5:fc:61:a2:d1:69:01:0c:2c:b4:fe:4e:79:ba:74:8c:81: 71:1f:f6:5d:b6:17:2b:3a:9a:04:9b:cf:fd:3b:3b:10:d6:06: c0:ac:75:5f:99:93:d8:4c:d7:b2:8f:dc:fd:29:3a:83:3a:c7: c5:73:70:41:59:86:a1:c2:5c:e9:e8:6c:d6:b2:02:1c:07:9a: ea:57:46:10:96:d1:13:50:be:f0:3c:7e:fa:93:92:af:38:97: 7c:56:ea:5d:db:7c:aa:26:06:c8:c2:f0:c8:f4:23:e9:d9:a9: a5:67:e4:4e:b6:5c:25:e1:01:25:e8:45:f8:9a:87:9b:6a:97: 77:f1:1b:80:55:7e:bd:9d:0b:59:05:40:aa:53:f7:d5:16:47: 7f:95:8c:25:b2:c6:ee:32:e5:fc:81:1e:5f:7f:b7:0c:bc:d0: b1:6d:8d:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5M0UxMTAvBgNVBAUTKEI0Mjk4RkNCMkQ4NDlEOEQ0RDcxMkEyNjI3MkJDQjFD OTZEQkZFNUUwHhcNMjUxMTAzMDAzMTIxWhcNMjUxMTEwMDAzMTIxWjAYMRYwFAYD VQQDEw02OTA3ZjdkYS1iM2QyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YtKWHYreRPF9e5m+HU1d+CQuNI/xJd3rivJq/ZJHM8LSh9i2++GBJ9aO4F2 jNudVI5s0/toWm7shIn3R0uhDrlhUnhNwGsdb5TN/Q6CWxdX+E5M3TOJDd1qxhAD F1UNv1wYpuxlFI7VkqCO44LzXbsDTTUnMxPQWB+2vGgJ7CZtXTB73dwH77oXDBTR anzkyF2wtniUwyaFhii73kYI6qze+licm042cQ3yG5mL6GIjgidFj55zRrW0fpV8 K425278M4IW5pk58ZVusVjAAczlgnoEGzxmOiIf+oD8ZODCWrg0AQaPgTYVa2g7M jyHNR7xomx91WYd6hC4dTue2+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLMdE7Av c2Cevey+UA+liIUwsJoZMB8GA1UdIwQYMBaAFLQpj8sthJ2NTXEqJicryxyW2/5e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzkzRS81QUU3ODUyRTlG MjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5ZMU5jU29tSnl2TEhKYmJf bDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RDbVB5eTJFblkxTmNTb21KeXZMSEpiYl9sNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzkzRS81QUU3ODUyRTlGMjcxMUVDQkY2MEQyN0ZDNEY5QUUwMi90Q21QeXkyRW5Z MU5jU29tSnl2TEhKYmJfbDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBhh/sJFZ+vRrdbl6JNMYcuOHnSWAFIMrkHeTOn1IufJBjPFcq9bV8 dsTlHgJxP+yKYF4Ixdg4ZVkBnIGdwgiQXUBo4lgqWYuKNYxNqCgFjT/KHoO2zrbo Qakx9fxhotFpAQwstP5Oebp0jIFxH/ZdthcrOpoEm8/9OzsQ1gbArHVfmZPYTNey j9z9KTqDOsfFc3BBWYahwlzp6GzWsgIcB5rqV0YQltETUL7wPH76k5KvOJd8Vupd 23yqJgbIwvDI9CPp2amlZ+ROtlwl4QEl6EX4moebapd38RuAVX69nQtZBUCqU/fV Fkd/lYwlssbuMuX8gR5ff7cMvNCxbY1M -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:25 2025 by rpki-client