$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft File: _g28w89QoeDrA9MSluOfuogMGQU.mft (raw, json) Hash identifier: UYhjf1ZUCaxw8a6tsLkUbeOUNv/fsK3H2d9w22FNkO0= Subject key identifier: A4:9C:68:D7:58:8C:04:00:2E:2D:86:C1:AF:5E:38:80:61:EE:B2:3C Authority key identifier: FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 Certificate issuer: /CN=A91F7FEA/serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Certificate serial: 0ADF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft Manifest number: 0AD1 Signing time: Tue 04 Nov 2025 19:34:07 +0000 Manifest this update: Tue 04 Nov 2025 19:34:07 +0000 Manifest next update: Tue 11 Nov 2025 19:34:07 +0000 Files and hashes: 1: _g28w89QoeDrA9MSluOfuogMGQU.crl (hash: BJOcyb4OY14ofkbxlv0nwt7l8WcsI1DvgtfFxvdznDc=) 2: AF5AC6B69E3F11EEA6B6CB0DC4F9AE02.roa (hash: aO7ZzsxjyqFcAzfGikfamjQffULd11X020Rl4PUmMgc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2783 (0xadf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7FEA, serialNumber=FE0DBCC3CF50A1E0EB03D31296E39FBA880C1905 Validity Not Before: Nov 4 19:34:07 2025 GMT Not After : Nov 11 19:34:07 2025 GMT Subject: CN=690a552f-2990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e6:5e:a1:e4:3f:4b:1e:0b:24:9d:5c:eb:bb: a4:00:14:ec:b7:af:d6:fe:b8:25:d4:7f:02:25:c9: b0:8d:90:f8:4f:e5:61:66:f4:e4:b8:f6:33:df:e2: 0f:3c:6f:db:b7:48:cb:7a:82:5f:53:05:0d:b0:63: f4:ff:e2:d0:7f:4e:c6:65:62:3c:ab:46:ac:46:d1: e1:1a:41:1b:69:1d:a2:a9:84:b9:e0:07:0a:bf:0c: eb:7f:47:10:97:a2:b5:b7:c8:d8:14:32:96:37:db: 97:fa:ff:dd:86:a6:9d:28:2d:e6:42:11:ba:62:c8: 6f:b1:ca:13:79:da:4f:dd:77:f7:3d:6a:f2:84:18: c1:64:0d:8e:b3:d7:2d:32:71:4f:89:1c:7c:8f:79: be:dc:7e:08:84:da:99:44:65:dc:b9:72:c8:3c:9e: 78:4e:41:22:10:ae:23:37:3b:49:28:49:98:15:17: a4:65:ca:c8:c0:3b:fd:fe:94:1b:af:9e:96:21:8e: aa:0b:d6:8d:17:14:f7:0a:70:09:b6:45:37:5b:1d: ee:09:d0:c1:2e:d5:6e:51:a8:f5:ac:02:a5:50:d3: a0:fd:11:29:55:16:34:9e:5d:cd:84:07:ac:c0:2d: 65:a2:76:d9:fa:3d:18:bf:86:83:8a:87:a5:81:8c: 28:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:68:D7:58:8C:04:00:2E:2D:86:C1:AF:5E:38:80:61:EE:B2:3C X509v3 Authority Key Identifier: keyid:FE:0D:BC:C3:CF:50:A1:E0:EB:03:D3:12:96:E3:9F:BA:88:0C:19:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_g28w89QoeDrA9MSluOfuogMGQU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7FEA/1EE3AEEC604811EA8C690B38C4F9AE02/_g28w89QoeDrA9MSluOfuogMGQU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:f7:0f:48:14:66:7e:2f:3f:4e:95:fa:f9:62:33:00:fc:06: f6:93:10:35:c0:34:ba:3f:66:71:f4:c7:25:6a:9a:59:d6:1a: 5e:1d:75:89:ce:81:5a:ed:9b:2d:21:e0:a4:25:af:0e:8d:fe: 1c:6c:c4:27:0a:19:35:2e:03:4c:3b:5c:c4:d5:dd:ee:94:be: ce:38:fa:b4:ce:35:2a:7c:7f:4f:05:69:bb:e4:79:25:d2:d7: d9:24:55:9c:a8:32:07:ed:6e:e5:b1:70:b0:e6:1e:9f:39:18: 76:46:c6:e6:23:ee:21:ea:3e:45:d6:c0:39:98:9b:72:db:cf: d2:8c:40:f4:70:ac:ab:1e:f4:9e:ed:4c:11:51:e0:8c:de:7a: 7b:5c:3a:b9:cb:f1:76:c7:d8:a5:65:e1:8f:8f:98:54:95:bc: 0b:d9:62:ee:4e:ea:99:fa:2a:da:0f:1f:7d:80:17:36:83:27: a7:4a:e5:b1:a4:ad:41:82:28:bb:72:af:e7:a9:67:0c:74:be: 1d:b1:67:29:17:0b:f7:90:a9:b8:25:bd:82:d0:a0:72:80:4b: 6f:e8:af:04:20:d5:c3:c3:1d:67:59:33:89:30:e0:4a:88:3d: d9:28:24:e8:21:e5:47:02:4b:f2:0e:21:c6:39:df:e5:4b:dc: 37:71:76:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdGRUExMTAvBgNVBAUTKEZFMERCQ0MzQ0Y1MEExRTBFQjAzRDMxMjk2RTM5RkJB ODgwQzE5MDUwHhcNMjUxMTA0MTkzNDA3WhcNMjUxMTExMTkzNDA3WjAYMRYwFAYD VQQDEw02OTBhNTUyZi0yOTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAruZeoeQ/Sx4LJJ1c67ukABTst6/W/rgl1H8CJcmwjZD4T+VhZvTkuPYz3+IP PG/bt0jLeoJfUwUNsGP0/+LQf07GZWI8q0asRtHhGkEbaR2iqYS54AcKvwzrf0cQ l6K1t8jYFDKWN9uX+v/dhqadKC3mQhG6YshvscoTedpP3Xf3PWryhBjBZA2Os9ct MnFPiRx8j3m+3H4IhNqZRGXcuXLIPJ54TkEiEK4jNztJKEmYFRekZcrIwDv9/pQb r56WIY6qC9aNFxT3CnAJtkU3Wx3uCdDBLtVuUaj1rAKlUNOg/REpVRY0nl3NhAes wC1lonbZ+j0Yv4aDioelgYwodwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKScaNdY jAQALi2Gwa9eOIBh7rI8MB8GA1UdIwQYMBaAFP4NvMPPUKHg6wPTEpbjn7qIDBkF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0ZFQS8xRUUzQUVFQzYw NDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9lRHJBOU1TbHVPZnVvZ01H UVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19nMjh3ODlRb2VEckE5TVNsdU9mdW9nTUdRVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG N0ZFQS8xRUUzQUVFQzYwNDgxMUVBOEM2OTBCMzhDNEY5QUUwMi9fZzI4dzg5UW9l RHJBOU1TbHVPZnVvZ01HUVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDW9w9IFGZ+Lz9Olfr5YjMA/Ab2kxA1wDS6P2Zx9MclappZ1hpeHXWJ zoFa7ZstIeCkJa8Ojf4cbMQnChk1LgNMO1zE1d3ulL7OOPq0zjUqfH9PBWm75Hkl 0tfZJFWcqDIH7W7lsXCw5h6fORh2RsbmI+4h6j5F1sA5mJty28/SjED0cKyrHvSe 7UwRUeCM3np7XDq5y/F2x9ilZeGPj5hUlbwL2WLuTuqZ+iraDx99gBc2gyenSuWx pK1Bgii7cq/nqWcMdL4dsWcpFwv3kKm4Jb2C0KBygEtv6K8EINXDwx1nWTOJMOBK iD3ZKCToIeVHAkvyDiHGOd/lS9w3cXYe -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:25 2025 by rpki-client