$ rpki-client -vvf rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft File: asd5dN_kUIBzXNuQZqfiRpYEkrc.mft (raw, json) Hash identifier: uWdXpJ/U6mu0RQnTAhfTrZqZO+7+eUo76eOwpAa3q5g= Subject key identifier: 4F:0F:24:C3:D6:52:37:E6:73:07:58:82:E7:D9:3F:88:9B:CA:B0:3C Authority key identifier: 6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 Certificate issuer: /CN=A91F31A7/serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Certificate serial: 10A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft Manifest number: 109B Signing time: Sun 02 Nov 2025 17:21:47 +0000 Manifest this update: Sun 02 Nov 2025 17:21:46 +0000 Manifest next update: Sun 09 Nov 2025 17:21:46 +0000 Files and hashes: 1: asd5dN_kUIBzXNuQZqfiRpYEkrc.crl (hash: iJLaU203vGHFsFR7aJs+8lXn4LmMm65D0jzJ+wToUOA=) 2: DDEC8C2A39AA11E9B0166376C4F9AE02.roa (hash: P8zT0PniKGyPQKuaO/6cEK/Iz5vptBwIg6UXjylLbdY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:21:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4259 (0x10a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31A7, serialNumber=6AC77974DFE45080735CDB9066A7E246960492B7 Validity Not Before: Nov 2 17:21:46 2025 GMT Not After : Nov 9 17:21:46 2025 GMT Subject: CN=6907932a-5cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:7c:2f:b8:22:91:f4:8f:f1:f3:08:29:2f:bd: ca:5e:82:01:b6:28:d2:24:20:6f:03:f1:05:77:fb: 3f:01:ec:1f:e1:4a:db:91:e9:f8:4c:19:10:d8:07: 0f:68:52:0d:22:c5:a0:7b:21:1a:55:2d:14:eb:3f: 00:ed:50:7a:d3:60:58:7d:59:d9:19:f2:70:7f:a2: bd:58:4f:fc:9c:4e:d0:5c:e8:d1:3f:f9:16:7b:a4: 4f:fc:94:30:a9:37:83:d9:19:e8:49:c1:64:07:cd: 85:26:da:3c:5b:ef:75:38:fb:29:b9:a3:8a:08:27: ec:9f:36:b9:9e:9b:de:83:80:83:74:1d:f7:aa:69: fd:b4:e9:b6:1a:db:bb:cc:bd:0a:0e:f2:ea:f6:81: 22:88:7a:8e:97:04:4c:58:e8:f4:88:08:fb:9e:c3: 90:be:2c:d7:63:2d:0c:31:16:6d:35:82:34:ff:39: c7:82:8b:a8:53:bc:cf:41:bd:7b:bd:0d:8e:0a:0c: 20:9d:d9:11:76:0e:56:be:98:cf:6c:96:aa:d3:05: ae:8e:da:db:38:9b:7c:59:09:84:4f:7b:86:86:9c: 0f:d1:65:6f:cb:57:e4:cb:7b:e6:96:70:54:3b:80: 10:07:53:bd:49:7d:cf:86:a1:7a:65:e0:43:54:77: ed:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:0F:24:C3:D6:52:37:E6:73:07:58:82:E7:D9:3F:88:9B:CA:B0:3C X509v3 Authority Key Identifier: keyid:6A:C7:79:74:DF:E4:50:80:73:5C:DB:90:66:A7:E2:46:96:04:92:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/asd5dN_kUIBzXNuQZqfiRpYEkrc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31A7/7B0B678439AA11E98A8E5276C4F9AE02/asd5dN_kUIBzXNuQZqfiRpYEkrc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:0a:82:dc:7a:cb:8c:09:56:41:3e:96:b6:89:21:1a:4b:42: 08:24:53:06:12:42:a0:5b:0b:3e:2d:f9:bf:c4:f5:54:02:4f: 0e:ab:ae:49:e6:48:b4:61:a1:cc:ac:f0:34:ca:16:23:2f:7e: b9:35:3e:4b:ed:e0:9a:5c:c4:43:77:51:92:2e:c5:ba:7b:5b: 8e:d3:be:b9:4c:6c:97:75:a8:f1:93:ae:c5:40:75:02:00:4e: 5b:d1:69:99:3c:d1:e4:ff:e8:ac:c8:5c:90:c2:de:d6:d0:56: c9:31:dd:a6:11:be:38:54:76:ca:4c:70:e4:81:67:6a:8a:3f: 2d:42:70:ec:10:b6:2f:86:4e:7f:22:b1:20:51:3b:92:07:d3: 14:f3:12:7f:1a:1d:21:b5:93:40:88:cf:91:4a:80:33:d0:96: b1:c6:d4:51:46:93:b7:3f:7a:59:6a:e5:8e:ef:ba:03:3f:05: 2f:56:d6:c2:08:28:15:e6:40:24:ae:14:8c:99:99:54:43:e4: f7:bc:35:63:2b:84:6e:12:45:8a:3f:64:bc:95:45:1b:b5:cc: 92:67:ca:52:70:29:a1:5e:33:c3:c5:6e:5f:62:e2:26:86:97: c1:e2:8e:4f:89:98:66:48:ba:15:e5:b3:27:e5:25:7b:9a:e8: 77:f0:1d:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMxQTcxMTAvBgNVBAUTKDZBQzc3OTc0REZFNDUwODA3MzVDREI5MDY2QTdFMjQ2 OTYwNDkyQjcwHhcNMjUxMTAyMTcyMTQ2WhcNMjUxMTA5MTcyMTQ2WjAYMRYwFAYD VQQDEw02OTA3OTMyYS01Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsHwvuCKR9I/x8wgpL73KXoIBtijSJCBvA/EFd/s/Aewf4Urbken4TBkQ2AcP aFINIsWgeyEaVS0U6z8A7VB602BYfVnZGfJwf6K9WE/8nE7QXOjRP/kWe6RP/JQw qTeD2RnoScFkB82FJto8W+91OPspuaOKCCfsnza5npveg4CDdB33qmn9tOm2Gtu7 zL0KDvLq9oEiiHqOlwRMWOj0iAj7nsOQvizXYy0MMRZtNYI0/znHgouoU7zPQb17 vQ2OCgwgndkRdg5WvpjPbJaq0wWujtrbOJt8WQmET3uGhpwP0WVvy1fky3vmlnBU O4AQB1O9SX3PhqF6ZeBDVHft5wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE8PJMPW UjfmcwdYgufZP4ibyrA8MB8GA1UdIwQYMBaAFGrHeXTf5FCAc1zbkGan4kaWBJK3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzFBNy83QjBCNjc4NDM5 QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJQnpYTnVRWnFmaVJwWUVr cmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FzZDVkTl9rVUlCelhOdVFacWZpUnBZRWtyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFBNy83QjBCNjc4NDM5QUExMUU5OEE4RTUyNzZDNEY5QUUwMi9hc2Q1ZE5fa1VJ QnpYTnVRWnFmaVJwWUVrcmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKCoLcesuMCVZBPpa2iSEaS0IIJFMGEkKgWws+Lfm/xPVUAk8Oq65J 5ki0YaHMrPA0yhYjL365NT5L7eCaXMRDd1GSLsW6e1uO0765TGyXdajxk67FQHUC AE5b0WmZPNHk/+isyFyQwt7W0FbJMd2mEb44VHbKTHDkgWdqij8tQnDsELYvhk5/ IrEgUTuSB9MU8xJ/Gh0htZNAiM+RSoAz0JaxxtRRRpO3P3pZauWO77oDPwUvVtbC CCgV5kAkrhSMmZlUQ+T3vDVjK4RuEkWKP2S8lUUbtcySZ8pScCmhXjPDxW5fYuIm hpfB4o5PiZhmSLoV5bMn5SV7muh38B1U -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:42 2025 by rpki-client