$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft File: tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft (raw, json) Hash identifier: UzsI8vBrNQmYrBNI4r2fD5A/aDgBGlhgWFNRR9rabJ4= Subject key identifier: 51:C8:93:F7:AC:44:E0:A1:E3:DE:77:40:05:5F:9A:10:2B:33:82:DF Authority key identifier: B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE Certificate issuer: /CN=A91FD38A/serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Certificate serial: 0C9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft Manifest number: 0C92 Signing time: Tue 04 Nov 2025 18:26:48 +0000 Manifest this update: Tue 04 Nov 2025 18:26:47 +0000 Manifest next update: Tue 11 Nov 2025 18:26:47 +0000 Files and hashes: 1: tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl (hash: f6x8Vz2VNuMRVoeq69iP31bpIAsZc94SuxysBRv8LuQ=) 2: AA5D86B2381311EA998E103FC4F9AE02.roa (hash: SvZjqtxcRIhPhrqiLm27nklXEkCJpvMYZMwhSGgkVOM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:26:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3227 (0xc9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD38A, serialNumber=B620A9C4963766CC3C58060694922E9F678811DE Validity Not Before: Nov 4 18:26:47 2025 GMT Not After : Nov 11 18:26:47 2025 GMT Subject: CN=690a4568-c933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:82:68:24:c5:77:7f:27:75:b3:aa:68:79:96: ed:30:08:0e:12:ec:86:72:be:58:7e:d9:1f:17:57: c6:68:a0:10:0c:77:e6:01:1c:7d:45:67:85:59:dd: ab:aa:b5:20:a3:b7:5f:7e:f2:0b:0d:0b:f4:a3:69: 3c:47:02:e5:9f:df:82:72:ca:01:25:21:3e:10:de: 9e:4a:c4:18:c5:d5:4b:bd:91:32:a2:5a:15:6d:10: 58:41:49:3e:5e:d3:78:6f:66:bb:1e:fd:f5:7c:d0: 40:ba:3a:96:d4:3a:e2:f4:22:54:0f:e0:c9:90:b0: 6a:d8:9c:c1:28:88:9b:08:34:7f:c6:ca:c8:83:cb: 12:65:b6:f1:75:a5:d1:69:a7:f4:ac:69:e0:c6:4f: 30:a0:db:d1:59:fc:40:ea:6b:6d:41:c7:50:94:61: 05:5d:d1:b8:d1:8a:0d:1c:c2:7f:6e:40:d3:f0:d4: d6:6b:0f:14:8d:2f:d8:35:cd:fd:0f:00:b4:44:5f: ed:a8:d8:8a:71:b5:34:73:d3:98:7a:7a:30:a1:80: ac:e1:8a:8b:12:56:57:db:f3:24:b7:8c:e9:3e:4d: 11:68:bb:2a:40:e6:08:22:6a:54:c7:cf:f2:7a:bd: ee:87:1a:22:f0:7a:08:e2:6e:46:84:4c:19:5c:f5: cb:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:C8:93:F7:AC:44:E0:A1:E3:DE:77:40:05:5F:9A:10:2B:33:82:DF X509v3 Authority Key Identifier: keyid:B6:20:A9:C4:96:37:66:CC:3C:58:06:06:94:92:2E:9F:67:88:11:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tiCpxJY3Zsw8WAYGlJIun2eIEd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD38A/9AEF17BE05F411EA886A3C23C4F9AE02/tiCpxJY3Zsw8WAYGlJIun2eIEd4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8c:10:94:76:c0:e3:b1:93:64:b1:b5:7c:61:16:f7:29:58:88: 40:c4:f7:fb:74:16:fd:73:65:11:91:54:89:d9:4e:3b:92:12: 46:1e:3e:15:6c:60:0f:7e:63:a1:36:42:25:9b:20:c7:36:7d: 49:b5:cd:51:7e:e2:dd:4d:0a:5b:7d:cf:5b:50:a8:8f:a9:03: 2f:7b:af:66:77:e9:b5:2e:d3:ac:e2:ec:a8:56:b3:95:a6:de: dd:6a:a8:52:12:79:b1:67:16:c6:1b:11:6f:1b:6f:e5:1f:93: 3f:a3:c7:a7:1c:af:e0:52:2c:d7:73:b9:a7:39:97:b1:44:94: 18:4e:8b:97:a7:c2:90:38:fd:86:33:ac:f0:73:e3:5f:ca:7c: 0f:ad:91:f5:34:7f:5b:4b:6f:0d:41:20:ef:ba:7b:f8:cc:3c: 49:6d:a7:85:b0:01:16:13:f4:f1:b9:de:d8:a6:47:50:78:e8: d4:5a:6f:27:54:19:de:6f:d4:1e:42:8e:47:8b:d0:26:a5:f0: f0:f1:a0:66:2e:c8:b9:f0:a2:27:db:23:6b:3d:7b:44:e1:d9: 11:5c:36:cf:fd:4b:d3:4f:25:18:44:6e:5a:8f:5b:87:ce:fc: 7e:2b:11:f1:ce:7e:13:a0:34:fc:1d:3e:30:69:7d:9b:03:7b: b6:4f:c3:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQzOEExMTAvBgNVBAUTKEI2MjBBOUM0OTYzNzY2Q0MzQzU4MDYwNjk0OTIyRTlG Njc4ODExREUwHhcNMjUxMTA0MTgyNjQ3WhcNMjUxMTExMTgyNjQ3WjAYMRYwFAYD VQQDEw02OTBhNDU2OC1jOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtYJoJMV3fyd1s6poeZbtMAgOEuyGcr5YftkfF1fGaKAQDHfmARx9RWeFWd2r qrUgo7dffvILDQv0o2k8RwLln9+CcsoBJSE+EN6eSsQYxdVLvZEyoloVbRBYQUk+ XtN4b2a7Hv31fNBAujqW1Dri9CJUD+DJkLBq2JzBKIibCDR/xsrIg8sSZbbxdaXR aaf0rGngxk8woNvRWfxA6mttQcdQlGEFXdG40YoNHMJ/bkDT8NTWaw8UjS/YNc39 DwC0RF/tqNiKcbU0c9OYenowoYCs4YqLElZX2/Mkt4zpPk0RaLsqQOYIImpUx8/y er3uhxoi8HoI4m5GhEwZXPXLiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHIk/es ROCh4953QAVfmhArM4LfMB8GA1UdIwQYMBaAFLYgqcSWN2bMPFgGBpSSLp9niBHe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDM4QS85QUVGMTdCRTA1 RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pzdzhXQVlHbEpJdW4yZUlF ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RpQ3B4SlkzWnN3OFdBWUdsSkl1bjJlSUVkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDM4QS85QUVGMTdCRTA1RjQxMUVBODg2QTNDMjNDNEY5QUUwMi90aUNweEpZM1pz dzhXQVlHbEpJdW4yZUlFZDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCMEJR2wOOxk2SxtXxhFvcpWIhAxPf7dBb9c2URkVSJ2U47khJGHj4V bGAPfmOhNkIlmyDHNn1Jtc1RfuLdTQpbfc9bUKiPqQMve69md+m1LtOs4uyoVrOV pt7daqhSEnmxZxbGGxFvG2/lH5M/o8enHK/gUizXc7mnOZexRJQYTouXp8KQOP2G M6zwc+NfynwPrZH1NH9bS28NQSDvunv4zDxJbaeFsAEWE/Txud7YpkdQeOjUWm8n VBneb9QeQo5Hi9AmpfDw8aBmLsi58KIn2yNrPXtE4dkRXDbP/UvTTyUYRG5aj1uH zvx+KxHxzn4ToDT8HT4waX2bA3u2T8MT -----END CERTIFICATE-----Generated at Wed Nov 5 05:27:11 2025 by rpki-client