$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft File: 70llBmvaJCursGhbwuat2fdWM_0.mft (raw, json) Hash identifier: cCj4DtbhiL2TP/2sSLwsC/BBQklTTXYbWkeogbF0SBA= Subject key identifier: B8:57:F6:7E:54:D0:F7:55:8B:8B:22:F5:BB:60:1E:4D:90:62:83:93 Authority key identifier: EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD Certificate issuer: /CN=A91FE9B1/serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Certificate serial: 062A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft Manifest number: 0625 Signing time: Sun 02 Nov 2025 22:45:50 +0000 Manifest this update: Sun 02 Nov 2025 22:45:49 +0000 Manifest next update: Sun 09 Nov 2025 22:45:49 +0000 Files and hashes: 1: 70llBmvaJCursGhbwuat2fdWM_0.crl (hash: qt/KKB/fj4ZG9CqAsb5vZDbGec9XhZVbceCK7cuEVQA=) 2: 02157718B9DF11EBA8BE9876C4F9AE02.roa (hash: mRSjwQDsA2Ity8Ke/pKlCSea6N3rjwOrxrJxPkM3a1M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1578 (0x62a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE9B1, serialNumber=EF4965066BDA242BABB0685BC2E6ADD9F75633FD Validity Not Before: Nov 2 22:45:49 2025 GMT Not After : Nov 9 22:45:49 2025 GMT Subject: CN=6907df1d-3d81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:07:d5:83:a3:22:f4:d6:ba:8a:12:96:9f:10: dc:c4:a8:50:ce:6e:3a:75:fd:fb:2b:f3:96:d3:4d: 47:03:3e:6b:61:bd:e0:f7:75:c6:64:5f:21:32:70: 41:0c:de:a2:f5:d5:be:13:04:ca:4f:06:cb:a6:ac: bc:06:b3:85:48:61:83:92:1b:48:b9:83:0c:21:9e: 05:a6:fc:44:40:e2:1e:5d:bb:25:69:fa:d7:f4:ba: 7d:d5:a8:b4:4a:a2:fc:bc:52:bd:7f:9e:c8:93:8b: fd:36:11:92:15:e1:c9:fc:35:8d:f7:e6:e8:09:19: b4:19:cc:54:ed:17:cc:6e:75:70:4f:b0:7c:c4:de: 4a:74:bd:58:d7:09:d1:3a:2b:d1:62:c6:a9:40:37: 86:7a:17:0b:2c:15:0f:34:da:8b:5d:70:28:50:e4: 18:c1:3f:5e:b0:15:7f:c0:02:62:38:eb:49:4c:31: 2d:31:47:d2:00:a9:2f:7d:18:75:cd:7f:f5:d1:c3: fb:a5:76:a3:13:8c:f3:58:8f:94:65:35:50:40:dd: 16:19:7e:d1:6c:ea:95:e1:94:18:e4:39:56:19:35: 5f:ce:a6:3c:3f:47:0c:97:e9:fc:63:8a:7b:e3:da: e1:43:71:5a:a9:a7:60:46:49:7d:c8:8d:b0:0a:cf: 33:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:57:F6:7E:54:D0:F7:55:8B:8B:22:F5:BB:60:1E:4D:90:62:83:93 X509v3 Authority Key Identifier: keyid:EF:49:65:06:6B:DA:24:2B:AB:B0:68:5B:C2:E6:AD:D9:F7:56:33:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/70llBmvaJCursGhbwuat2fdWM_0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE9B1/5BB9E00AB9DB11EB9CF3B86EC4F9AE02/70llBmvaJCursGhbwuat2fdWM_0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:4e:12:6a:47:95:77:68:ed:70:e3:c5:bb:8c:1e:94:da:db: cf:55:30:f1:0a:d0:40:d9:62:60:2a:54:95:1c:d3:34:d5:19: 0c:07:10:66:76:71:4c:31:4c:9e:39:30:3a:b9:14:c8:7c:c5: 30:f3:91:4d:0d:ad:89:03:40:42:7f:4e:47:eb:99:3c:df:dd: 9a:b8:7e:b2:67:0e:8a:20:0b:78:0b:d7:a4:fb:d4:3d:e1:6a: 90:4a:ba:94:eb:a2:e9:8f:10:96:e4:f2:f8:ff:ec:1b:89:db: 1e:55:b9:b1:17:f1:be:59:99:fa:18:d2:75:e9:fb:dc:0d:76: 17:f0:83:48:b1:51:44:6f:34:5d:2b:b1:90:7e:1f:d5:bb:3d: 99:fe:ea:cb:c7:8a:8d:55:ca:90:48:dd:0a:ff:6a:9b:f4:fd: 3b:e3:c0:d2:7a:e5:b1:0c:1f:16:02:a7:00:02:d6:a7:51:94: 8d:98:8f:cc:07:e8:b0:d2:68:53:63:49:ee:ba:74:65:58:5a: f0:6c:cd:02:a3:ab:81:8c:10:02:43:02:95:2a:c1:9c:8d:88: b0:07:dc:e0:05:01:97:9a:61:b5:d4:98:dd:eb:3c:4f:8d:92: 7d:17:aa:fc:d2:c5:2d:39:06:04:78:9a:1d:61:d8:70:53:2e: 02:e2:48:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU5QjExMTAvBgNVBAUTKEVGNDk2NTA2NkJEQTI0MkJBQkIwNjg1QkMyRTZBREQ5 Rjc1NjMzRkQwHhcNMjUxMTAyMjI0NTQ5WhcNMjUxMTA5MjI0NTQ5WjAYMRYwFAYD VQQDEw02OTA3ZGYxZC0zZDgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9AfVg6Mi9Na6ihKWnxDcxKhQzm46df37K/OW001HAz5rYb3g93XGZF8hMnBB DN6i9dW+EwTKTwbLpqy8BrOFSGGDkhtIuYMMIZ4FpvxEQOIeXbslafrX9Lp91ai0 SqL8vFK9f57Ik4v9NhGSFeHJ/DWN9+boCRm0GcxU7RfMbnVwT7B8xN5KdL1Y1wnR OivRYsapQDeGehcLLBUPNNqLXXAoUOQYwT9esBV/wAJiOOtJTDEtMUfSAKkvfRh1 zX/10cP7pXajE4zzWI+UZTVQQN0WGX7RbOqV4ZQY5DlWGTVfzqY8P0cMl+n8Y4p7 49rhQ3FaqadgRkl9yI2wCs8ziQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLhX9n5U 0PdVi4si9btgHk2QYoOTMB8GA1UdIwQYMBaAFO9JZQZr2iQrq7BoW8Lmrdn3VjP9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTlCMS81QkI5RTAwQUI5 REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpDdXJzR2hid3VhdDJmZFdN XzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcwbGxCbXZhSkN1cnNHaGJ3dWF0MmZkV01fMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTlCMS81QkI5RTAwQUI5REIxMUVCOUNGM0I4NkVDNEY5QUUwMi83MGxsQm12YUpD dXJzR2hid3VhdDJmZFdNXzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEThJqR5V3aO1w48W7jB6U2tvPVTDxCtBA2WJgKlSVHNM01RkMBxBm dnFMMUyeOTA6uRTIfMUw85FNDa2JA0BCf05H65k8392auH6yZw6KIAt4C9ek+9Q9 4WqQSrqU66LpjxCW5PL4/+wbidseVbmxF/G+WZn6GNJ16fvcDXYX8INIsVFEbzRd K7GQfh/Vuz2Z/urLx4qNVcqQSN0K/2qb9P0748DSeuWxDB8WAqcAAtanUZSNmI/M B+iw0mhTY0nuunRlWFrwbM0Co6uBjBACQwKVKsGcjYiwB9zgBQGXmmG11Jjd6zxP jZJ9F6r80sUtOQYEeJodYdhwUy4C4khv -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:28 2025 by rpki-client