$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft File: RGuswfLoFnPqtvFskIC154B2lkc.mft (raw, json) Hash identifier: tFFbgqdabqazszOuRM0qFb+rsm1RGrzUMdA2r/3dEfo= Subject key identifier: D6:28:FF:17:D6:A4:17:83:31:C4:52:5B:BC:3D:F7:E6:D3:09:26:C6 Authority key identifier: 44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47 Certificate issuer: /CN=A91EF175/serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 04:42:42 +0000 Manifest this update: Mon 03 Nov 2025 04:42:42 +0000 Manifest next update: Mon 10 Nov 2025 04:42:41 +0000 Files and hashes: 1: RGuswfLoFnPqtvFskIC154B2lkc.crl (hash: t1W9HZe1ACxRGgSuAryA8iw8TPtdhLSF5lakPfxlGME=) 2: 9F2B6B24974E11F0AA132215C4F9AE02.roa (hash: AiAMrw2pdLG30U/7RXN/uchB0LPco2mYVZa/A2/l49E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF175, serialNumber=446BACC1F2E81673EAB6F16C9080B5E780769647 Validity Not Before: Nov 3 04:42:42 2025 GMT Not After : Nov 10 04:42:41 2025 GMT Subject: CN=690832c2-adec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:82:34:a5:b6:72:c1:5e:ac:36:73:22:f7:e1: 09:e1:42:69:de:65:9b:e7:08:44:81:43:88:f3:8f: 12:3c:59:d6:be:b5:59:0e:aa:28:fd:49:ed:a0:d2: 93:a9:17:c6:21:f3:72:65:38:dd:21:d4:62:d0:5b: e5:78:c0:b6:72:66:44:b1:f1:82:96:a6:cd:ed:a3: d5:c7:6b:5c:73:e2:d5:0b:18:03:e9:65:bf:20:bf: 55:cc:d1:41:cc:4a:7b:96:d6:28:d0:db:40:b4:c4: d0:38:fc:11:1d:d5:85:70:a5:4d:e1:1f:47:1c:2c: 85:12:1d:d5:9e:4d:87:d1:87:cc:96:9f:73:0d:fa: c0:fe:eb:33:25:ec:a7:03:34:6c:22:92:86:0f:59: e0:a6:31:00:49:eb:db:28:91:69:ac:93:52:5c:63: 8d:4b:25:76:be:e3:d2:7d:cf:b1:a6:c5:51:f6:6d: cf:6c:90:dc:75:f3:71:6f:f6:d1:95:bd:2b:41:64: 27:c8:fd:b9:cf:33:92:03:6f:28:b5:a5:f7:aa:2e: 31:be:d1:d7:14:37:b7:d7:3e:a8:bb:f8:32:80:c8: 64:b0:fc:14:1d:1d:81:20:04:e2:a9:d4:3a:55:48: d3:97:20:ea:b7:d7:e7:8f:58:dc:7d:2a:d2:c4:55: 3c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:28:FF:17:D6:A4:17:83:31:C4:52:5B:BC:3D:F7:E6:D3:09:26:C6 X509v3 Authority Key Identifier: keyid:44:6B:AC:C1:F2:E8:16:73:EA:B6:F1:6C:90:80:B5:E7:80:76:96:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RGuswfLoFnPqtvFskIC154B2lkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF175/0460AA18FBFB11EEA1EEAF1FC4F9AE02/RGuswfLoFnPqtvFskIC154B2lkc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:47:91:c7:c9:c8:84:99:6e:32:1c:e4:0a:cb:16:c4:2d:d8: 84:5a:33:44:a9:a6:8a:cc:0e:24:75:06:14:4d:63:8a:1d:07: 17:e1:fd:f4:73:83:10:63:26:f1:e4:f1:d4:19:f8:0d:a2:56: 69:8a:8e:ef:b1:31:6a:9a:14:59:cd:60:35:f2:aa:b9:e4:02: de:c6:7c:46:3f:f9:e7:3d:5b:2f:1c:84:4e:f1:b4:9e:1b:96: 9b:13:bb:f0:21:4e:49:de:e3:7c:57:c3:26:bb:55:d9:d2:f3: d7:34:28:55:4f:61:86:bc:75:e2:34:7b:38:dd:09:77:9c:2b: 95:3b:bc:21:2c:c0:97:39:a0:49:ec:27:52:cc:e1:9b:05:de: 5b:f6:42:bb:f1:64:0d:32:eb:54:2a:32:3d:8e:d0:ae:e9:a3: 7d:0f:3a:13:68:3f:cd:b2:fd:b8:cf:c1:56:5e:03:61:65:0e: fc:88:f2:34:75:e5:49:7d:83:5d:1b:df:d2:3a:8f:df:9d:13: ec:61:41:3a:84:8d:cb:67:ed:b3:d9:35:84:9f:cd:39:3c:88: 17:e5:38:b2:e1:1d:e7:de:75:ee:02:4e:e5:39:85:8c:25:b5: bd:f7:c4:df:33:51:8e:4d:85:c7:fa:0c:55:40:f2:b2:a6:ce: c6:af:85:bc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RjE3NTExMC8GA1UEBRMoNDQ2QkFDQzFGMkU4MTY3M0VBQjZGMTZDOTA4MEI1RTc4 MDc2OTY0NzAeFw0yNTExMDMwNDQyNDJaFw0yNTExMTAwNDQyNDFaMBgxFjAUBgNV BAMTDTY5MDgzMmMyLWFkZWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIgjSltnLBXqw2cyL34QnhQmneZZvnCESBQ4jzjxI8Wda+tVkOqij9Se2g0pOp F8Yh83JlON0h1GLQW+V4wLZyZkSx8YKWps3to9XHa1xz4tULGAPpZb8gv1XM0UHM SnuW1ijQ20C0xNA4/BEd1YVwpU3hH0ccLIUSHdWeTYfRh8yWn3MN+sD+6zMl7KcD NGwikoYPWeCmMQBJ69sokWmsk1JcY41LJXa+49J9z7GmxVH2bc9skNx183Fv9tGV vStBZCfI/bnPM5IDbyi1pfeqLjG+0dcUN7fXPqi7+DKAyGSw/BQdHYEgBOKp1DpV SNOXIOq31+ePWNx9KtLEVTx7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1ij/F9ak F4MxxFJbvD335tMJJsYwHwYDVR0jBBgwFoAURGuswfLoFnPqtvFskIC154B2lkcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVGMTc1LzA0NjBBQTE4RkJG QjExRUVBMUVFQUYxRkM0RjlBRTAyL1JHdXN3ZkxvRm5QcXR2RnNrSUMxNTRCMmxr Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUkd1c3dmTG9GblBxdHZGc2tJQzE1NEIybGtjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVG MTc1LzA0NjBBQTE4RkJGQjExRUVBMUVFQUYxRkM0RjlBRTAyL1JHdXN3ZkxvRm5Q cXR2RnNrSUMxNTRCMmxrYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFNHkcfJyISZbjIc5ArLFsQt2IRaM0SpporMDiR1BhRNY4odBxfh/fRz gxBjJvHk8dQZ+A2iVmmKju+xMWqaFFnNYDXyqrnkAt7GfEY/+ec9Wy8chE7xtJ4b lpsTu/AhTkne43xXwya7VdnS89c0KFVPYYa8deI0ezjdCXecK5U7vCEswJc5oEns J1LM4ZsF3lv2QrvxZA0y61QqMj2O0K7po30POhNoP82y/bjPwVZeA2FlDvyI8jR1 5Ul9g10b39I6j9+dE+xhQTqEjctn7bPZNYSfzTk8iBflOLLhHefede4CTuU5hYwl tb33xN8zUY5Nhcf6DFVA8rKmzsavhbw= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:52 2025 by rpki-client