$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft File: RtfjskJlD3X4XEWBNYWNzYyZwgM.mft (raw, json) Hash identifier: rlrCq85s8iaKFf2HeXySKbUct4KpHdFDsT9aK++b738= Subject key identifier: 91:7D:8F:E7:10:24:10:5D:88:1A:CF:FD:E3:3B:6E:B6:6D:F5:26:78 Authority key identifier: 46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 Certificate issuer: /CN=A91F3989/serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Certificate serial: 012B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft Manifest number: 012B Signing time: Wed 05 Nov 2025 04:45:51 +0000 Manifest this update: Wed 05 Nov 2025 04:45:51 +0000 Manifest next update: Wed 12 Nov 2025 04:45:51 +0000 Files and hashes: 1: RtfjskJlD3X4XEWBNYWNzYyZwgM.crl (hash: 2tub9EGrB+9vIgHMiNyTccq3oLPYZVNNUIIJXbB8b6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:45:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 299 (0x12b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3989, serialNumber=46D7E3B242650F75F85C458135858DCD8C99C203 Validity Not Before: Nov 5 04:45:51 2025 GMT Not After : Nov 12 04:45:51 2025 GMT Subject: CN=690ad67f-8dc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2a:6a:41:d4:a2:0d:e7:37:73:f3:4b:e1:31: 56:86:5f:a1:69:07:fd:92:18:da:d5:ff:27:76:be: e3:83:49:20:3c:40:fe:97:36:64:36:2d:88:6f:3c: 33:c8:83:1a:c2:11:67:6e:19:8c:e3:2b:aa:34:7e: 31:b1:36:29:b8:78:84:77:3f:73:70:1e:fe:96:a0: 2a:8a:b9:2b:39:05:a8:60:57:5d:d6:6d:1a:fd:8a: f3:ab:09:53:6d:c5:9f:b4:0a:2d:b3:45:75:b4:7f: 1f:e3:9a:db:bf:fe:2f:ce:33:42:ef:fa:d6:3e:06: ba:90:7c:cc:24:6a:22:3d:84:a8:28:d2:b7:57:0e: d6:5d:76:f5:87:31:49:85:ad:7a:91:6d:22:59:81: 2a:47:49:95:e4:fb:d2:a6:25:fb:0b:6f:e9:6c:1c: ee:3a:64:95:8d:78:66:73:d1:2f:14:a0:23:39:41: ec:8c:c2:45:7a:07:7d:3c:53:67:c9:8d:52:f6:14: a5:05:6b:49:d2:25:2b:d9:b9:ff:1d:65:04:9a:a2: ac:e2:13:45:e8:e2:3d:48:a7:fc:d7:d9:21:dd:c6: 83:eb:f3:9b:b9:5a:d2:88:ec:be:18:56:7d:2e:6e: 44:e8:c1:97:30:8f:89:c1:cc:2a:da:84:88:09:8f: 50:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:7D:8F:E7:10:24:10:5D:88:1A:CF:FD:E3:3B:6E:B6:6D:F5:26:78 X509v3 Authority Key Identifier: keyid:46:D7:E3:B2:42:65:0F:75:F8:5C:45:81:35:85:8D:CD:8C:99:C2:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RtfjskJlD3X4XEWBNYWNzYyZwgM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3989/3AAC0E58ECD011EE8A224D49C4F9AE02/RtfjskJlD3X4XEWBNYWNzYyZwgM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:9c:bc:aa:3c:93:75:2c:aa:68:4b:71:20:42:c9:e9:e4:bb: fb:f2:10:7a:08:26:ba:d3:df:3b:42:72:cd:88:34:a2:ca:5e: c9:03:8f:22:78:fe:b2:f9:9b:a5:dd:60:3a:bf:c4:a9:0b:c6: 9e:4e:1a:9d:45:93:a0:08:50:58:12:50:7c:d9:8a:47:28:f7: af:a7:51:74:7d:7e:16:f9:39:10:7d:95:d9:07:11:6c:16:9b: 3d:f6:e7:2a:58:ce:f7:d2:59:47:79:7b:be:f6:4d:4a:b4:d9: 8b:a7:59:f5:db:a5:fa:0a:7e:2d:a3:67:41:dc:24:ab:54:24: 6e:78:a1:2c:e8:76:0f:48:bf:d3:24:c1:52:9e:a1:aa:8a:d3: 63:0b:e4:03:ad:37:37:10:66:d5:54:38:c3:08:2a:7f:38:e4: cc:66:2b:1e:12:92:f3:7e:13:db:16:bb:54:2e:b5:21:69:19: 91:d5:29:29:e5:ef:1f:e5:84:06:ef:82:9e:a9:b7:2f:1e:b5: 78:a7:fa:c7:c2:29:9a:99:a9:74:63:37:1e:f9:00:5a:1e:43: 83:e0:f2:79:ba:52:42:15:3a:01:ca:0d:64:f8:f9:e8:2c:f1: cd:ea:59:65:fa:1c:b1:d0:25:dd:eb:04:ae:a2:5a:11:15:12: 72:f5:b9:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM5ODkxMTAvBgNVBAUTKDQ2RDdFM0IyNDI2NTBGNzVGODVDNDU4MTM1ODU4RENE OEM5OUMyMDMwHhcNMjUxMTA1MDQ0NTUxWhcNMjUxMTEyMDQ0NTUxWjAYMRYwFAYD VQQDEw02OTBhZDY3Zi04ZGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAySpqQdSiDec3c/NL4TFWhl+haQf9khja1f8ndr7jg0kgPED+lzZkNi2Ibzwz yIMawhFnbhmM4yuqNH4xsTYpuHiEdz9zcB7+lqAqirkrOQWoYFdd1m0a/YrzqwlT bcWftAots0V1tH8f45rbv/4vzjNC7/rWPga6kHzMJGoiPYSoKNK3Vw7WXXb1hzFJ ha16kW0iWYEqR0mV5PvSpiX7C2/pbBzuOmSVjXhmc9EvFKAjOUHsjMJFegd9PFNn yY1S9hSlBWtJ0iUr2bn/HWUEmqKs4hNF6OI9SKf819kh3caD6/ObuVrSiOy+GFZ9 Lm5E6MGXMI+Jwcwq2oSICY9Q3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJF9j+cQ JBBdiBrP/eM7brZt9SZ4MB8GA1UdIwQYMBaAFEbX47JCZQ91+FxFgTWFjc2MmcID MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzk4OS8zQUFDMEU1OEVD RDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQzWDRYRVdCTllXTnpZeVp3 Z00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J0Zmpza0psRDNYNFhFV0JOWVdOell5WndnTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mzk4OS8zQUFDMEU1OEVDRDAxMUVFOEEyMjRENDlDNEY5QUUwMi9SdGZqc2tKbEQz WDRYRVdCTllXTnpZeVp3Z00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTnLyqPJN1LKpoS3EgQsnp5Lv78hB6CCa60987QnLNiDSiyl7JA48i eP6y+Zul3WA6v8SpC8aeThqdRZOgCFBYElB82YpHKPevp1F0fX4W+TkQfZXZBxFs Fps99ucqWM730llHeXu+9k1KtNmLp1n126X6Cn4to2dB3CSrVCRueKEs6HYPSL/T JMFSnqGqitNjC+QDrTc3EGbVVDjDCCp/OOTMZiseEpLzfhPbFrtULrUhaRmR1Skp 5e8f5YQG74KeqbcvHrV4p/rHwimamal0Yzce+QBaHkOD4PJ5ulJCFToByg1k+Pno LPHN6lll+hyx0CXd6wSuoloRFRJy9bkX -----END CERTIFICATE-----Generated at Wed Nov 5 20:01:20 2025 by rpki-client