$ rpki-client -vvf rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft File: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft (raw, json) Hash identifier: 7rm/nGes1ySEt7SqnF76MPTAmIhvXiSCVep57eNYPJg= Subject key identifier: 9A:EC:28:DD:68:9F:BE:C6:6D:E0:EC:56:5C:28:BA:6D:88:01:EC:DD Authority key identifier: F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 Certificate issuer: /CN=A91F8928/serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft Manifest number: 0C90 Signing time: Fri 31 Oct 2025 18:40:37 +0000 Manifest this update: Fri 31 Oct 2025 18:40:36 +0000 Manifest next update: Fri 07 Nov 2025 18:40:36 +0000 Files and hashes: 1: 9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl (hash: rat1TcjpUCVR3M7eDD1rNBd3xFnzWMU5iLUc7JjcCaw=) 2: 93840DE204E611ED89D3B27BC4F9AE02.roa (hash: cegor5RnBc3HGGToc+6Lymvpp6wumcl5jw4jwYNABG8=) 3: E6C1F0003C7E11F08A874435C4F9AE02.roa (hash: HGkfh3dEEIqv+3vFhSnMi2VsaDRfK/TUjKt6kaMeksE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 18:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F8928, serialNumber=F5C9D30E9D0771CD07E51B2E4A52B52253ABD026 Validity Not Before: Oct 31 18:40:36 2025 GMT Not After : Nov 7 18:40:36 2025 GMT Subject: CN=690502a5-861e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:26:68:da:eb:c6:c7:3e:2c:b6:95:61:6d: 36:17:f8:ed:7e:8f:d8:10:92:a3:8c:10:74:fd:38: 9b:1d:05:ab:a9:31:7c:a0:8b:05:bd:04:eb:1d:37: 84:6b:ab:d6:a7:0e:ff:70:82:06:4e:25:e3:13:fe: 13:1f:d4:ba:42:6d:11:1d:6d:05:bb:9f:0f:bd:11: 2d:39:ab:30:b5:23:67:03:c8:86:ef:52:17:b8:73: 7c:8f:96:6d:71:7d:f6:8c:0e:4b:6e:a9:51:8f:90: 5a:f6:d8:ac:84:42:b6:20:24:39:c9:ed:dd:41:fc: 4e:09:82:a3:d9:ae:3e:8b:48:e4:b6:78:1f:e0:05: 13:75:20:d6:46:69:85:77:01:dd:b5:b1:34:19:5d: 4e:78:3a:84:18:74:fd:dd:f5:77:cc:8a:4c:d8:4c: 27:52:50:90:3c:d8:aa:a2:13:12:d7:ca:11:17:c9: 1b:3e:67:06:35:9d:c2:69:96:b9:6e:42:19:a4:ec: ad:b6:bd:4f:71:5b:19:81:cd:e7:33:8d:6a:4b:d6: 6c:19:1f:98:6f:43:a2:0b:0f:3a:38:c0:34:d3:83: e0:2d:ed:96:54:ee:a4:ab:cc:53:b5:b8:39:d6:1b: 9e:b2:18:30:80:bd:6e:88:0b:5e:79:f7:8c:d6:81: 42:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:EC:28:DD:68:9F:BE:C6:6D:E0:EC:56:5C:28:BA:6D:88:01:EC:DD X509v3 Authority Key Identifier: keyid:F5:C9:D3:0E:9D:07:71:CD:07:E5:1B:2E:4A:52:B5:22:53:AB:D0:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F8928/4DA7BB200B5B11EAA3EBC650C4F9AE02/9cnTDp0Hcc0H5RsuSlK1IlOr0CY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a2:7d:4a:72:57:9c:d6:3b:44:9e:6b:f4:47:c6:1a:fd:d2: cd:76:16:b3:0a:52:25:dc:c8:2f:9a:d3:8e:80:50:7c:e7:0f: a5:fb:b1:a0:13:45:ac:93:26:a4:f9:a3:75:ba:f1:67:e9:df: a5:65:90:21:1a:cd:4a:c3:ef:9e:fe:a0:0a:58:7e:93:cc:5c: f1:1d:e4:c5:25:37:24:91:f4:bd:ac:51:a9:67:05:e7:ef:c9: 7c:dc:8c:47:ba:cb:5d:f6:7b:82:ee:d6:1b:68:f2:e7:22:f3: 55:f1:1e:d9:8f:d1:88:5a:55:d2:e3:3e:7b:89:bc:75:3d:0b: 2a:f4:c2:5e:2b:05:3f:6b:19:6a:e4:61:dd:72:e7:f9:a3:5e: 06:61:25:3e:45:86:7e:b9:14:4b:89:4d:de:a7:3f:36:68:ee: c2:08:8f:4c:fa:2c:28:14:5a:78:16:ba:01:34:57:dc:20:78: 1a:95:12:6a:cb:28:e3:4a:37:4a:01:e9:68:be:23:5f:a0:04: d0:f3:78:79:28:37:e0:44:39:bc:c1:0d:e3:27:6a:1c:f5:62: 98:4e:20:b0:5c:51:29:6c:23:4d:1c:9d:b6:60:59:3f:ac:39: 49:3c:5c:ae:40:59:f6:df:43:e2:4c:79:2b:51:bf:b2:ad:98: 94:34:65:9e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5MjgxMTAvBgNVBAUTKEY1QzlEMzBFOUQwNzcxQ0QwN0U1MUIyRTRBNTJCNTIy NTNBQkQwMjYwHhcNMjUxMDMxMTg0MDM2WhcNMjUxMTA3MTg0MDM2WjAYMRYwFAYD VQQDEw02OTA1MDJhNS04NjFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn4maNrrxsc+LLaVYW02F/jtfo/YEJKjjBB0/TibHQWrqTF8oIsFvQTrHTeE a6vWpw7/cIIGTiXjE/4TH9S6Qm0RHW0Fu58PvREtOaswtSNnA8iG71IXuHN8j5Zt cX32jA5LbqlRj5Ba9tishEK2ICQ5ye3dQfxOCYKj2a4+i0jktngf4AUTdSDWRmmF dwHdtbE0GV1OeDqEGHT93fV3zIpM2EwnUlCQPNiqohMS18oRF8kbPmcGNZ3CaZa5 bkIZpOyttr1PcVsZgc3nM41qS9ZsGR+Yb0OiCw86OMA004PgLe2WVO6kq8xTtbg5 1hueshgwgL1uiAteefeM1oFCXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJrsKN1o n77GbeDsVlwoum2IAezdMB8GA1UdIwQYMBaAFPXJ0w6dB3HNB+UbLkpStSJTq9Am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODkyOC80REE3QkIyMDBC NUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNjMEg1UnN1U2xLMUlsT3Iw Q1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzljblREcDBIY2MwSDVSc3VTbEsxSWxPcjBDWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODkyOC80REE3QkIyMDBCNUIxMUVBQTNFQkM2NTBDNEY5QUUwMi85Y25URHAwSGNj MEg1UnN1U2xLMUlsT3IwQ1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAjon1Kclec1jtEnmv0R8Ya/dLNdhazClIl3MgvmtOOgFB85w+l+7Gg E0Wskyak+aN1uvFn6d+lZZAhGs1Kw++e/qAKWH6TzFzxHeTFJTckkfS9rFGpZwXn 78l83IxHustd9nuC7tYbaPLnIvNV8R7Zj9GIWlXS4z57ibx1PQsq9MJeKwU/axlq 5GHdcuf5o14GYSU+RYZ+uRRLiU3epz82aO7CCI9M+iwoFFp4FroBNFfcIHgalRJq yyjjSjdKAeloviNfoATQ83h5KDfgRDm8wQ3jJ2oc9WKYTiCwXFEpbCNNHJ22YFk/ rDlJPFyuQFn230PiTHkrUb+yrZiUNGWe -----END CERTIFICATE-----Generated at Sat Nov 1 14:04:57 2025 by rpki-client