$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft File: 29rQCQF9kd-0ONcNG41NNIYvBo4.mft (raw, json) Hash identifier: DvWY03q/sRdJOJUE8j5IYKxEPgarr+bW5KMMjT2hKiQ= Subject key identifier: 4F:F6:19:90:17:54:AE:FA:92:D0:8B:30:D7:87:8A:46:CF:5A:7A:8D Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 0171 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft Manifest number: 016D Signing time: Mon 03 Nov 2025 03:54:18 +0000 Manifest this update: Mon 03 Nov 2025 03:54:18 +0000 Manifest next update: Mon 10 Nov 2025 03:54:18 +0000 Files and hashes: 1: 29rQCQF9kd-0ONcNG41NNIYvBo4.crl (hash: l6zVMlqqlc61AhGdFMuhminF3kWElcW2Yu58vynOJDc=) 2: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (hash: FS0NZn6HmMNUVE243zK4MTv8yDH9emQLgpWFOPvCnxU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Nov 3 03:54:18 2025 GMT Not After : Nov 10 03:54:18 2025 GMT Subject: CN=6908276a-3e35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d3:22:8b:b8:14:95:bc:2b:4f:24:54:40:ec: af:f4:90:4f:13:95:84:e5:4d:dc:ba:16:8c:e7:c9: ee:c4:c7:bd:3b:37:93:ff:76:e2:45:af:fa:f6:9a: cc:70:1f:af:73:29:d9:4e:86:28:3a:b0:f3:88:11: ec:39:15:2a:d7:5c:3e:d3:c0:b3:14:c1:6b:63:2d: 00:bb:d7:e3:1a:22:1e:a6:ea:3c:53:13:59:9b:c4: 1e:d0:00:63:18:19:db:89:fd:78:b1:99:ec:0c:5c: 5b:06:fa:1d:22:a9:65:44:6d:b6:93:57:e3:18:94: f5:26:9b:49:53:72:cc:df:0c:0e:1b:d7:a4:ee:84: b1:3c:33:f3:05:1c:9e:27:e0:31:04:f2:03:c6:95: fe:6a:0c:b8:13:12:b0:42:9c:0e:e0:52:9d:0b:18: ca:17:c7:db:76:9c:a3:3a:68:93:c6:c7:6d:23:82: 37:2d:db:14:42:c4:5b:87:e9:c3:8c:71:2e:23:29: 68:d4:f1:2a:e0:bf:41:ba:9b:fa:e6:2c:dd:c1:8f: b0:ff:f6:57:39:18:47:b9:86:17:1f:fc:95:0f:1a: c8:6f:b2:45:0f:bf:72:60:80:d5:d9:ad:8f:a6:3f: e4:09:72:7b:00:d6:57:f4:00:b8:c6:f6:80:d6:8c: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F6:19:90:17:54:AE:FA:92:D0:8B:30:D7:87:8A:46:CF:5A:7A:8D X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:9e:d7:e4:34:82:7f:d1:cc:c7:72:93:fd:93:74:e2:57:af: 65:df:ad:b6:81:34:31:55:f9:c9:b4:42:e7:7e:b8:18:4d:a0: 62:3f:57:6d:70:e8:35:13:dc:5d:63:aa:c3:9b:25:35:bf:c0: 86:97:69:c8:34:c3:5d:ca:52:a1:7c:7c:57:6e:64:1f:cb:5d: da:aa:06:0a:b2:05:00:ec:cb:88:20:4d:43:2e:b0:25:8f:8b: 9e:c3:9e:cf:10:55:d3:f3:ee:c2:33:b8:01:5e:22:15:a2:d1: a4:8e:bf:9f:89:b0:fd:db:b8:bd:d2:0b:8c:f7:1c:88:4f:6f: 15:87:ec:ed:62:11:7f:dd:27:5f:98:ab:94:81:e6:97:c5:a2: 14:39:c7:83:d9:69:c6:08:1c:98:2a:b5:33:85:61:02:bd:44: bf:b3:16:b1:03:96:8e:8a:44:dc:1b:ae:0f:a9:96:a3:e8:22: 92:2d:1f:62:cc:ed:38:3a:70:4a:5b:4f:2a:6f:f6:1d:d2:75: eb:9d:95:47:de:d3:fc:2f:bc:75:ea:bd:a6:0c:cc:dc:a1:45: f7:9a:82:03:5b:53:b5:c2:55:a5:2d:e7:f0:b4:71:b1:ca:4e: a3:7a:6f:80:51:58:7b:c2:c5:20:c1:61:37:35:e6:f4:a7:05: ff:13:56:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUxMTAzMDM1NDE4WhcNMjUxMTEwMDM1NDE4WjAYMRYwFAYD VQQDEw02OTA4Mjc2YS0zZTM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2NMii7gUlbwrTyRUQOyv9JBPE5WE5U3cuhaM58nuxMe9OzeT/3biRa/69prM cB+vcynZToYoOrDziBHsORUq11w+08CzFMFrYy0Au9fjGiIepuo8UxNZm8Qe0ABj GBnbif14sZnsDFxbBvodIqllRG22k1fjGJT1JptJU3LM3wwOG9ek7oSxPDPzBRye J+AxBPIDxpX+agy4ExKwQpwO4FKdCxjKF8fbdpyjOmiTxsdtI4I3LdsUQsRbh+nD jHEuIylo1PEq4L9Bupv65izdwY+w//ZXORhHuYYXH/yVDxrIb7JFD79yYIDV2a2P pj/kCXJ7ANZX9AC4xvaA1ow1owIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE/2GZAX VK76ktCLMNeHikbPWnqNMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MjIzRi8wOTY5MTI3QzhDQUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtk LTBPTmNORzQxTk5JWXZCbzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7ntfkNIJ/0czHcpP9k3TiV69l3622gTQxVfnJtELnfrgYTaBiP1dt cOg1E9xdY6rDmyU1v8CGl2nINMNdylKhfHxXbmQfy13aqgYKsgUA7MuIIE1DLrAl j4uew57PEFXT8+7CM7gBXiIVotGkjr+fibD927i90guM9xyIT28Vh+ztYhF/3Sdf mKuUgeaXxaIUOceD2WnGCByYKrUzhWECvUS/sxaxA5aOikTcG64PqZaj6CKSLR9i zO04OnBKW08qb/Yd0nXrnZVH3tP8L7x16r2mDMzcoUX3moIDW1O1wlWlLefwtHGx yk6jem+AUVh7wsUgwWE3Neb0pwX/E1av -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:44 2025 by rpki-client