$ rpki-client -vvf rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft File: SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft (raw, json) Hash identifier: iH/VWHMPveeTQ8N1ZRuykmNFf9DXGR7FBB6TJ7tNeBE= Subject key identifier: 1A:81:38:36:76:72:C0:29:A7:F8:24:4A:BE:44:D8:10:20:F2:F7:96 Authority key identifier: 4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 Certificate issuer: /CN=A91FB0D0/serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Certificate serial: 0349 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft Manifest number: 0345 Signing time: Mon 03 Nov 2025 00:58:09 +0000 Manifest this update: Mon 03 Nov 2025 00:58:09 +0000 Manifest next update: Mon 10 Nov 2025 00:58:09 +0000 Files and hashes: 1: SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl (hash: BcAzlmq1Nu37hLYOFeuDhRNFG51Z5VOFSga4cfo/hXU=) 2: D9EEB222DBFC11EC82E85E69C4F9AE02.roa (hash: ScBhfI+tDJwM84UfKu4S2Ej+l19uK9BKKc4lKatvgAY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 841 (0x349) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FB0D0, serialNumber=4B3C6956B044900100858C0DE50EB9A462B08CC7 Validity Not Before: Nov 3 00:58:09 2025 GMT Not After : Nov 10 00:58:09 2025 GMT Subject: CN=6907fe21-6410 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ce:7b:8a:d6:0f:7f:21:f1:f7:9c:82:bc:e1: 7a:f5:9a:5b:34:e3:1f:2e:40:31:be:d6:98:2a:f0: 6d:20:ca:75:10:89:8f:9b:dc:f2:ed:ab:38:48:f6: a5:17:5c:62:07:06:11:93:f8:e0:07:c3:aa:97:f6: 4c:0e:61:4e:85:ff:c1:b6:11:71:2b:aa:ef:f9:07: 92:7e:97:aa:fa:99:ce:ef:9e:cb:71:c6:1e:14:9a: ce:be:2b:8f:eb:bf:22:99:f1:b2:74:ac:55:6c:45: 0b:1d:81:b5:49:bf:42:a6:54:2b:61:4d:44:84:79: ad:19:20:1b:eb:3a:8c:7c:69:f2:76:6d:2a:78:e7: b2:85:91:09:4c:cf:0d:7e:38:62:d8:09:49:3a:ff: 07:d2:67:40:53:93:8e:7d:aa:8d:18:e7:51:ce:6f: 67:cb:22:4a:0d:75:1c:ed:aa:0e:a6:55:5a:1b:da: b4:cd:85:25:88:48:aa:61:fb:cb:d2:75:70:d1:3e: 2a:a0:aa:25:19:f7:7a:93:a5:b5:28:a1:cd:a8:d2: 41:b3:4c:16:7d:96:a0:85:86:f7:05:ff:88:9a:1d: 72:2f:4e:0b:41:9c:98:28:af:02:cb:af:e1:72:f6: fa:e5:fd:08:3d:bf:65:03:0d:c0:38:1b:8f:a1:97: 47:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:81:38:36:76:72:C0:29:A7:F8:24:4A:BE:44:D8:10:20:F2:F7:96 X509v3 Authority Key Identifier: keyid:4B:3C:69:56:B0:44:90:01:00:85:8C:0D:E5:0E:B9:A4:62:B0:8C:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SzxpVrBEkAEAhYwN5Q65pGKwjMc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FB0D0/93FB7F4EDBF611EC8B42F475C4F9AE02/SzxpVrBEkAEAhYwN5Q65pGKwjMc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:51:29:ec:5a:33:44:58:09:ef:42:49:cf:37:09:37:a1:9f: 2f:0f:b4:b5:ca:b5:3e:33:01:57:6c:23:fd:f4:8d:42:26:b3: 2b:ba:10:86:f8:ae:dc:4a:2a:29:f1:cc:41:b7:68:81:df:7e: 91:d1:d1:0a:1f:e6:a7:81:7e:2f:c1:10:89:ad:74:33:ab:f6: 64:db:ab:da:b3:8a:28:c1:63:ef:8c:43:03:7d:e6:35:0d:e4: 10:55:24:ed:34:61:71:32:bc:72:ed:93:4c:12:28:77:ea:1f: e1:d0:ae:13:88:c6:3d:f5:99:4b:66:da:aa:c5:6b:e4:f0:28: c4:95:a7:cf:54:cb:3b:84:4a:14:65:23:4a:df:26:f1:49:ef: 67:cb:23:22:b0:02:53:28:61:14:b9:be:e9:54:b1:2f:0f:57: 66:98:46:ac:e5:ff:d6:c9:ec:fc:a6:20:5f:ca:30:00:07:8f: 46:c5:d8:0d:28:39:13:e2:a6:83:c1:7d:ae:ff:a2:2b:58:2c: d4:30:46:52:7d:e4:e0:13:53:05:fb:36:a6:d5:d0:dd:dd:85: c4:f6:b2:19:c4:d4:f0:bf:ef:bf:3e:a1:54:50:f7:00:6a:77: 04:ab:9b:c0:88:17:ca:fa:d3:c8:e5:fa:fa:0c:78:12:60:1e: ca:ce:8d:08 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA0kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkIwRDAxMTAvBgNVBAUTKDRCM0M2OTU2QjA0NDkwMDEwMDg1OEMwREU1MEVCOUE0 NjJCMDhDQzcwHhcNMjUxMTAzMDA1ODA5WhcNMjUxMTEwMDA1ODA5WjAYMRYwFAYD VQQDEw02OTA3ZmUyMS02NDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqM57itYPfyHx95yCvOF69ZpbNOMfLkAxvtaYKvBtIMp1EImPm9zy7as4SPal F1xiBwYRk/jgB8Oql/ZMDmFOhf/BthFxK6rv+QeSfpeq+pnO757LccYeFJrOviuP 678imfGydKxVbEULHYG1Sb9CplQrYU1EhHmtGSAb6zqMfGnydm0qeOeyhZEJTM8N fjhi2AlJOv8H0mdAU5OOfaqNGOdRzm9nyyJKDXUc7aoOplVaG9q0zYUliEiqYfvL 0nVw0T4qoKolGfd6k6W1KKHNqNJBs0wWfZaghYb3Bf+Imh1yL04LQZyYKK8Cy6/h cvb65f0IPb9lAw3AOBuPoZdHfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqBODZ2 csApp/gkSr5E2BAg8veWMB8GA1UdIwQYMBaAFEs8aVawRJABAIWMDeUOuaRisIzH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQjBEMC85M0ZCN0Y0RURC RjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtBRUFoWXdONVE2NXBHS3dq TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1N6eHBWckJFa0FFQWhZd041UTY1cEdLd2pNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QjBEMC85M0ZCN0Y0RURCRjYxMUVDOEI0MkY0NzVDNEY5QUUwMi9TenhwVnJCRWtB RUFoWXdONVE2NXBHS3dqTWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLUSnsWjNEWAnvQknPNwk3oZ8vD7S1yrU+MwFXbCP99I1CJrMruhCG +K7cSiop8cxBt2iB336R0dEKH+angX4vwRCJrXQzq/Zk26vas4oowWPvjEMDfeY1 DeQQVSTtNGFxMrxy7ZNMEih36h/h0K4TiMY99ZlLZtqqxWvk8CjElafPVMs7hEoU ZSNK3ybxSe9nyyMisAJTKGEUub7pVLEvD1dmmEas5f/Wyez8piBfyjAAB49GxdgN KDkT4qaDwX2u/6IrWCzUMEZSfeTgE1MF+zam1dDd3YXE9rIZxNTwv++/PqFUUPcA ancEq5vAiBfK+tPI5fr6DHgSYB7Kzo0I -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:45 2025 by rpki-client