$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft File: CcNrxl3nKgQUf51yIL26jVJdFWQ.mft (raw, json) Hash identifier: bqjCc5mqiirPkilb5uTeJWTpxfEgooovCwKQ2y3lYkg= Subject key identifier: 68:E5:70:74:70:AE:F8:50:6C:D9:C6:F7:5D:CA:DE:97:9C:4E:7F:D6 Authority key identifier: 09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 Certificate issuer: /CN=A91F83DC/serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft Manifest number: 0109 Signing time: Wed 05 Nov 2025 05:09:19 +0000 Manifest this update: Wed 05 Nov 2025 05:09:19 +0000 Manifest next update: Wed 12 Nov 2025 05:09:19 +0000 Files and hashes: 1: CcNrxl3nKgQUf51yIL26jVJdFWQ.crl (hash: XsDtOxJ/LtNzMsHqwgJ0wcnn8zKJcOKDymR1BBVD/IM=) 2: 24AB7D08271F11EF81086430C4F9AE02.roa (hash: 2wSZlJkEVODTCB+anJmD5JlJEQTA220xHKcLvDnH+18=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=09C36BC65DE72A04147F9D7220BDBA8D525D1564 Validity Not Before: Nov 5 05:09:19 2025 GMT Not After : Nov 12 05:09:19 2025 GMT Subject: CN=690adbff-96fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:7c:34:27:ed:ea:2e:02:50:db:a8:ed:8e:a3: 07:b2:03:74:d7:27:a1:cc:42:9e:ef:0f:67:c1:44: e3:59:0b:9b:67:9f:ee:93:f2:b0:f8:2d:ee:d0:76: b9:b8:8c:23:ec:23:04:d8:59:bc:28:b6:41:31:d6: 13:37:f2:4a:3c:ef:2c:67:0c:e3:6a:c6:c9:8e:3f: 9b:41:68:bf:4e:09:7f:f1:7c:61:8a:af:cb:7f:87: c2:17:d8:86:c1:ed:aa:78:bf:fb:af:44:f2:ec:1f: 18:28:b7:03:a9:02:13:85:d4:12:b5:66:9c:da:ad: ea:2e:01:5f:c8:37:8b:0b:de:ab:6d:b7:4c:4b:03: d5:81:e7:ba:9e:46:05:7d:18:5d:fc:b7:d4:26:d2: b9:d3:ab:00:14:ae:c3:25:91:42:ea:6b:6f:f0:15: 52:e0:19:c1:04:db:78:86:9a:8b:91:bb:46:a0:a3: cd:83:00:70:e2:2d:d9:54:f6:f1:d4:7e:1f:e4:ab: 5f:e1:f3:ef:f5:fe:91:28:55:bb:8d:0a:8a:22:ba: 2b:e1:fd:53:ec:61:73:52:b1:80:95:50:fd:cb:1d: e7:ac:bb:af:a6:1a:fe:cc:c9:d5:e1:98:5e:5f:36: 55:54:8d:be:bc:54:a7:78:9a:0f:8a:14:df:38:f2: ce:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:E5:70:74:70:AE:F8:50:6C:D9:C6:F7:5D:CA:DE:97:9C:4E:7F:D6 X509v3 Authority Key Identifier: keyid:09:C3:6B:C6:5D:E7:2A:04:14:7F:9D:72:20:BD:BA:8D:52:5D:15:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CcNrxl3nKgQUf51yIL26jVJdFWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/A397A3E426ED11EFB4C9BA28C4F9AE02/CcNrxl3nKgQUf51yIL26jVJdFWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:ba:96:ac:df:4a:db:b2:b3:73:64:33:f0:68:a3:95:09:4f: 55:6f:93:99:44:17:6b:f3:e8:8b:3a:a0:5d:08:fe:01:ec:82: 42:dd:fa:47:73:43:cd:e4:df:15:9f:9f:09:2c:9a:82:89:4e: d5:53:11:75:d6:46:30:45:1e:0b:6c:35:98:13:ca:b9:13:55: 36:ae:e0:ae:d2:99:3d:18:ec:69:f0:01:f0:57:2a:65:4f:3c: 9e:58:9a:13:02:f6:cc:cd:a1:88:9c:47:e4:aa:11:52:1b:7e: ce:e3:20:13:75:03:1f:05:e3:c9:c6:6d:3e:94:67:fa:26:f8: bb:4d:6e:3a:bd:3f:a1:6a:7c:69:02:7c:ef:aa:90:08:68:5f: 4c:02:73:ad:7e:2c:34:e3:dd:6b:39:26:a2:e3:8e:54:1c:1d: 14:18:ed:02:b7:a1:4e:b1:d9:04:b0:32:1b:ac:39:2f:f8:d7: fa:a0:91:57:f3:3a:d4:47:db:e1:da:c2:f9:2f:4f:7c:56:bd: 62:60:17:13:ba:47:1e:4f:ef:fb:1a:cb:25:9f:7c:d6:2a:ef: 94:87:d0:a7:ce:76:b1:c2:4f:28:92:8b:20:0f:06:d6:3c:d4: d6:34:55:1e:2b:9f:59:b2:de:f6:40:67:b3:a1:4b:32:81:a4: 61:bd:b1:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDA5QzM2QkM2NURFNzJBMDQxNDdGOUQ3MjIwQkRCQThE NTI1RDE1NjQwHhcNMjUxMTA1MDUwOTE5WhcNMjUxMTEyMDUwOTE5WjAYMRYwFAYD VQQDEw02OTBhZGJmZi05NmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3nw0J+3qLgJQ26jtjqMHsgN01yehzEKe7w9nwUTjWQubZ5/uk/Kw+C3u0Ha5 uIwj7CME2Fm8KLZBMdYTN/JKPO8sZwzjasbJjj+bQWi/Tgl/8Xxhiq/Lf4fCF9iG we2qeL/7r0Ty7B8YKLcDqQIThdQStWac2q3qLgFfyDeLC96rbbdMSwPVgee6nkYF fRhd/LfUJtK506sAFK7DJZFC6mtv8BVS4BnBBNt4hpqLkbtGoKPNgwBw4i3ZVPbx 1H4f5Ktf4fPv9f6RKFW7jQqKIror4f1T7GFzUrGAlVD9yx3nrLuvphr+zMnV4Zhe XzZVVI2+vFSneJoPihTfOPLOHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjlcHRw rvhQbNnG913K3pecTn/WMB8GA1UdIwQYMBaAFAnDa8Zd5yoEFH+dciC9uo1SXRVk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy9BMzk3QTNFNDI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktnUVVmNTF5SUwyNmpWSmRG V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NjTnJ4bDNuS2dRVWY1MXlJTDI2alZKZEZXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODNEQy9BMzk3QTNFNDI2RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9DY05yeGwzbktn UVVmNTF5SUwyNmpWSmRGV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFupas30rbsrNzZDPwaKOVCU9Vb5OZRBdr8+iLOqBdCP4B7IJC3fpH c0PN5N8Vn58JLJqCiU7VUxF11kYwRR4LbDWYE8q5E1U2ruCu0pk9GOxp8AHwVypl TzyeWJoTAvbMzaGInEfkqhFSG37O4yATdQMfBePJxm0+lGf6Jvi7TW46vT+hanxp AnzvqpAIaF9MAnOtfiw0491rOSai445UHB0UGO0Ct6FOsdkEsDIbrDkv+Nf6oJFX 8zrUR9vh2sL5L098Vr1iYBcTukceT+/7Gssln3zWKu+Uh9Cnznaxwk8okosgDwbW PNTWNFUeK59Zst72QGezoUsygaRhvbHL -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:52 2025 by rpki-client