$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft File: MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft (raw, json) Hash identifier: UYuNj2vAjaB1UuvorF6Ial7lzNrjXr4VbXBpFTbnj9Y= Subject key identifier: 94:85:23:1B:D1:13:AA:D8:A0:8B:8F:2C:B0:CA:1C:2D:44:32:1A:66 Authority key identifier: 30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D Certificate issuer: /CN=A91EF73D/serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Certificate serial: 013D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 04:23:25 +0000 Manifest this update: Mon 03 Nov 2025 04:23:24 +0000 Manifest next update: Mon 10 Nov 2025 04:23:24 +0000 Files and hashes: 1: MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl (hash: jTRtzz+zmoaiwMZeaSf0/bmWAh+xSt/lAxIxrCasNxI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:23:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=30E896E789D44360346EA4CBB4ED45914EAD027D Validity Not Before: Nov 3 04:23:24 2025 GMT Not After : Nov 10 04:23:24 2025 GMT Subject: CN=69082e3d-f4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ef:9a:5d:aa:b9:e6:e5:1b:5c:bd:8c:0e:98: 1b:cc:9b:c8:f4:9a:8a:a7:a9:d5:15:bb:12:c6:e1: e5:52:16:ce:96:df:b4:85:6a:fb:6a:89:a6:97:6d: 22:4a:2a:1b:f5:ab:3f:63:48:33:40:aa:31:60:b2: 9a:13:54:05:05:d3:41:c3:b0:e4:54:1e:e1:9a:c9: 8c:8c:d9:da:50:c5:54:3c:a3:3a:75:e8:62:58:b6: 0a:83:49:5d:32:94:5f:46:ad:a5:07:32:c7:15:5a: 9a:8c:28:ba:d8:2c:75:8b:61:6b:67:0a:70:17:e7: db:50:ad:02:36:6d:ec:18:06:51:e1:ac:c4:53:e7: 4a:8b:f5:ca:7c:4e:68:4c:0a:a2:8d:e9:b2:20:23: 4b:63:ee:54:9f:60:36:0b:6a:fb:c2:3c:0b:bf:f9: 2c:1a:ab:b7:55:f1:98:5a:09:73:08:30:d0:db:0d: 9b:a9:13:d1:ad:ba:a3:80:1b:32:e6:ca:df:32:25: b2:9e:ff:3f:9e:42:54:45:f9:21:88:a6:c8:4f:76: b9:a3:b0:ae:94:0a:12:7b:67:45:6b:31:da:61:2d: f0:82:39:da:98:4f:ca:ee:dc:ae:46:97:81:86:86: d6:30:f1:73:83:75:67:41:ee:3c:b5:4e:7d:bc:b7: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:85:23:1B:D1:13:AA:D8:A0:8B:8F:2C:B0:CA:1C:2D:44:32:1A:66 X509v3 Authority Key Identifier: keyid:30:E8:96:E7:89:D4:43:60:34:6E:A4:CB:B4:ED:45:91:4E:AD:02:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MOiW54nUQ2A0bqTLtO1FkU6tAn0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/D27230DECE1F11EEAC62617CC4F9AE02/MOiW54nUQ2A0bqTLtO1FkU6tAn0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:20:40:64:7d:67:c1:a0:0a:92:17:a3:c8:3f:37:76:24:7a: 65:00:5e:0e:73:b5:9c:30:66:16:9f:f4:40:cb:13:4c:d4:53: 26:14:12:6b:07:c2:1a:19:c0:b2:3d:1b:35:40:1a:ed:83:c1: 2b:e4:68:ac:53:d2:bd:1c:f7:4f:19:11:51:26:53:20:5a:57: c6:20:7a:d0:e4:9f:84:d1:bd:5b:09:3f:98:7f:16:90:0f:4a: f5:09:34:56:12:95:4a:25:41:96:1d:df:45:2d:8f:09:19:a1: 4a:58:8c:71:2f:43:d4:37:22:4e:b8:17:df:a0:94:03:4e:80: 86:2d:8a:79:f9:b1:92:32:7a:37:9b:d7:ff:d7:2f:98:b3:8f: aa:a4:25:c9:32:83:ee:f0:ef:e1:f6:f2:9c:80:50:bb:d9:8d: 2d:14:8f:6c:fc:95:04:fe:6e:10:31:c8:36:de:44:30:14:5e: 17:18:df:7c:93:73:8c:cb:c7:e5:60:32:9c:50:9d:c8:ae:fa: 30:98:b4:80:2d:7f:3e:ff:51:a9:19:48:16:c8:6a:15:a7:3c: 69:5c:84:2c:e6:e8:88:ea:d9:87:67:fc:e2:d4:87:24:99:dc: 18:af:48:d9:b4:6f:33:5e:e4:70:a5:a4:15:ff:1f:28:e3:d8: 88:13:b4:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDMwRTg5NkU3ODlENDQzNjAzNDZFQTRDQkI0RUQ0NTkx NEVBRDAyN0QwHhcNMjUxMTAzMDQyMzI0WhcNMjUxMTEwMDQyMzI0WjAYMRYwFAYD VQQDEw02OTA4MmUzZC1mNGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuu+aXaq55uUbXL2MDpgbzJvI9JqKp6nVFbsSxuHlUhbOlt+0hWr7aomml20i Siob9as/Y0gzQKoxYLKaE1QFBdNBw7DkVB7hmsmMjNnaUMVUPKM6dehiWLYKg0ld MpRfRq2lBzLHFVqajCi62Cx1i2FrZwpwF+fbUK0CNm3sGAZR4azEU+dKi/XKfE5o TAqijemyICNLY+5Un2A2C2r7wjwLv/ksGqu3VfGYWglzCDDQ2w2bqRPRrbqjgBsy 5srfMiWynv8/nkJURfkhiKbIT3a5o7CulAoSe2dFazHaYS3wgjnamE/K7tyuRpeB hobWMPFzg3VnQe48tU59vLdYkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJSFIxvR E6rYoIuPLLDKHC1EMhpmMB8GA1UdIwQYMBaAFDDolueJ1ENgNG6ky7TtRZFOrQJ9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9EMjcyMzBERUNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEyQTBicVRMdE8xRmtVNnRB bjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01PaVc1NG5VUTJBMGJxVEx0TzFGa1U2dEFuMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjczRC9EMjcyMzBERUNFMUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9NT2lXNTRuVVEy QTBicVRMdE8xRmtVNnRBbjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpIEBkfWfBoAqSF6PIPzd2JHplAF4Oc7WcMGYWn/RAyxNM1FMmFBJr B8IaGcCyPRs1QBrtg8Er5GisU9K9HPdPGRFRJlMgWlfGIHrQ5J+E0b1bCT+YfxaQ D0r1CTRWEpVKJUGWHd9FLY8JGaFKWIxxL0PUNyJOuBffoJQDToCGLYp5+bGSMno3 m9f/1y+Ys4+qpCXJMoPu8O/h9vKcgFC72Y0tFI9s/JUE/m4QMcg23kQwFF4XGN98 k3OMy8flYDKcUJ3IrvowmLSALX8+/1GpGUgWyGoVpzxpXIQs5uiI6tmHZ/zi1Ick mdwYr0jZtG8zXuRwpaQV/x8o49iIE7Rx -----END CERTIFICATE-----Generated at Tue Nov 4 01:08:27 2025 by rpki-client