$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft File: 1383l1I1q95fSYn78_6TjVJ8GUg.mft (raw, json) Hash identifier: SXjSKNIpRygVbN9X7cmVvyoKb3rQrEcpwbGVL726Gws= Subject key identifier: 29:2B:83:6D:C5:CC:E3:F2:F0:E6:D8:1F:26:E3:D9:B0:E3:11:01:70 Authority key identifier: D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 Certificate issuer: /CN=A91F8336/serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Certificate serial: 1205 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft Manifest number: 11EB Signing time: Sun 02 Nov 2025 17:11:43 +0000 Manifest this update: Sun 02 Nov 2025 17:11:43 +0000 Manifest next update: Sun 09 Nov 2025 17:11:43 +0000 Files and hashes: 1: 1383l1I1q95fSYn78_6TjVJ8GUg.crl (hash: 9MbE+L1Jt+yuQx4NlWRU/lfEihvN9Kd6Pjdd/G+Vh90=) 2: 4AE6CFF8B25211EBA977EE09C4F9AE02.roa (hash: ZdFF8YkXhtC1AoahmW58AQqkSN0T37GBdkW2/eDce6s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:11:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4613 (0x1205) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8336, serialNumber=D77F37975235ABDE5F4989FBF3FE938D527C1948 Validity Not Before: Nov 2 17:11:43 2025 GMT Not After : Nov 9 17:11:43 2025 GMT Subject: CN=690790cf-70eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8a:ac:03:8a:7f:ae:0e:67:92:4e:25:9b:7c: b8:61:cf:fc:2f:18:06:c6:d0:b4:33:db:7d:6a:7c: 8c:b6:69:d6:19:0d:87:f0:1b:64:09:85:e0:43:fb: c9:c0:4f:62:c6:90:48:c8:48:c1:36:c2:e7:27:09: e8:15:c5:01:af:a5:24:47:fe:80:ca:69:95:3d:fc: e7:68:37:4f:58:21:b3:af:ac:4b:ad:69:94:2a:7e: b9:12:d5:25:5c:c1:2f:c7:d1:ed:29:18:78:62:9e: b5:d9:e8:ed:88:2d:51:bc:e9:16:c3:6e:e9:5d:96: fd:e8:f6:9e:b7:0d:e5:7f:3d:2c:14:2e:4a:10:32: f6:8b:12:ee:09:e8:9c:19:80:37:10:ca:36:8e:64: df:ca:ad:bc:0c:59:9b:20:61:1b:04:86:2d:b0:0c: db:ab:4a:85:12:98:66:f5:6b:c4:be:31:9a:51:a9: 98:9b:cf:94:9b:20:e4:fe:7a:89:af:a3:4e:32:dc: ad:ad:92:1c:4b:20:58:c2:4a:2f:3c:88:20:d0:60: 7a:fb:f4:a7:22:14:e7:c2:83:97:fc:a8:fb:0d:d3: 2e:9c:bb:ed:aa:19:58:a6:6e:0f:5f:db:5d:64:11: 50:01:88:68:0c:a9:95:c2:8a:4f:97:33:b8:98:82: 6c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:2B:83:6D:C5:CC:E3:F2:F0:E6:D8:1F:26:E3:D9:B0:E3:11:01:70 X509v3 Authority Key Identifier: keyid:D7:7F:37:97:52:35:AB:DE:5F:49:89:FB:F3:FE:93:8D:52:7C:19:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1383l1I1q95fSYn78_6TjVJ8GUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8336/37E1673EFD1D11E8B3E36E57C4F9AE02/1383l1I1q95fSYn78_6TjVJ8GUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:ae:63:05:97:68:e7:7e:15:8a:63:89:c4:1f:67:42:10:04: b2:e0:41:fd:18:cf:fd:b0:95:88:c3:56:f0:61:b1:f8:5c:15: 33:2d:c0:5f:9e:5f:be:2f:42:bd:7d:f4:54:c5:3d:49:93:0d: 41:86:72:c6:a3:3f:8d:7b:25:e9:16:cb:9f:ac:66:3c:e8:a9: 05:37:d5:19:a6:b1:0b:dc:60:8d:24:cc:9d:5e:91:a2:a1:d9: 42:0c:8d:e7:0e:d9:b5:d0:36:da:e3:47:2f:0a:7a:6b:7a:ce: 39:5e:71:df:d7:79:36:5c:90:bd:52:79:a3:2b:d7:13:16:33: 65:7e:b9:cd:85:73:a0:e5:74:a7:9f:49:e5:60:76:d6:59:3d: ab:30:23:4b:a9:64:47:37:3c:de:d3:a8:4f:ca:b2:fd:f3:3e: 68:b3:f3:34:c7:53:78:ff:f1:47:93:51:96:e8:66:71:12:9e: ce:c3:fe:c2:1d:a4:80:ce:8c:dd:92:f6:5e:ba:34:3b:52:4f: bf:ad:30:54:3e:9e:3c:a5:b4:2f:f0:3b:ce:26:31:6c:ab:67: fa:93:56:b1:97:79:e2:cf:97:aa:6f:95:36:73:67:d5:7c:a7: a9:a2:82:af:7b:3a:80:28:72:de:33:c8:7d:9d:cb:a2:34:ad: 3b:e3:1d:07 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzMzYxMTAvBgNVBAUTKEQ3N0YzNzk3NTIzNUFCREU1RjQ5ODlGQkYzRkU5MzhE NTI3QzE5NDgwHhcNMjUxMTAyMTcxMTQzWhcNMjUxMTA5MTcxMTQzWjAYMRYwFAYD VQQDEw02OTA3OTBjZi03MGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5IqsA4p/rg5nkk4lm3y4Yc/8LxgGxtC0M9t9anyMtmnWGQ2H8BtkCYXgQ/vJ wE9ixpBIyEjBNsLnJwnoFcUBr6UkR/6AymmVPfznaDdPWCGzr6xLrWmUKn65EtUl XMEvx9HtKRh4Yp612ejtiC1RvOkWw27pXZb96Paetw3lfz0sFC5KEDL2ixLuCeic GYA3EMo2jmTfyq28DFmbIGEbBIYtsAzbq0qFEphm9WvEvjGaUamYm8+UmyDk/nqJ r6NOMtytrZIcSyBYwkovPIgg0GB6+/SnIhTnwoOX/Kj7DdMunLvtqhlYpm4PX9td ZBFQAYhoDKmVwopPlzO4mIJsyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCkrg23F zOPy8ObYHybj2bDjEQFwMB8GA1UdIwQYMBaAFNd/N5dSNaveX0mJ+/P+k41SfBlI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODMzNi8zN0UxNjczRUZE MUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5NWZTWW43OF82VGpWSjhH VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzEzODNsMUkxcTk1ZlNZbjc4XzZUalZKOEdVZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODMzNi8zN0UxNjczRUZEMUQxMUU4QjNFMzZFNTdDNEY5QUUwMi8xMzgzbDFJMXE5 NWZTWW43OF82VGpWSjhHVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkrmMFl2jnfhWKY4nEH2dCEASy4EH9GM/9sJWIw1bwYbH4XBUzLcBf nl++L0K9ffRUxT1Jkw1BhnLGoz+NeyXpFsufrGY86KkFN9UZprEL3GCNJMydXpGi odlCDI3nDtm10Dba40cvCnpres45XnHf13k2XJC9UnmjK9cTFjNlfrnNhXOg5XSn n0nlYHbWWT2rMCNLqWRHNzze06hPyrL98z5os/M0x1N4//FHk1GW6GZxEp7Ow/7C HaSAzozdkvZeujQ7Uk+/rTBUPp48pbQv8DvOJjFsq2f6k1axl3niz5eqb5U2c2fV fKepooKvezqAKHLeM8h9ncuiNK074x0H -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:28 2025 by rpki-client