$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft File: cri4zRAwexYyTYeYJ98ypKqNaqE.mft (raw, json) Hash identifier: GeeTogxZNPZ3dgyJziCz1g3qGYtbENQy4Y63HjEAEyU= Subject key identifier: 14:E2:AB:E1:DC:ED:9A:F1:25:E8:7B:B5:CF:93:2C:41:E8:01:4B:A3 Authority key identifier: 72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 Certificate issuer: /CN=A91FF19B/serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Certificate serial: 0486 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft Manifest number: 047B Signing time: Wed 05 Nov 2025 00:14:50 +0000 Manifest this update: Wed 05 Nov 2025 00:14:50 +0000 Manifest next update: Wed 12 Nov 2025 00:14:50 +0000 Files and hashes: 1: cri4zRAwexYyTYeYJ98ypKqNaqE.crl (hash: nLdh2C12i2BVDMu9I+NBCI4zAC20GuhSHiKc6X/TE18=) 2: 0C023160C4C911EE9278E261C4F9AE02.roa (hash: WCMKfsm9/EeBkBa5cFgOrZbAGuLyEt0uGvg0UunKLIU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:14:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1158 (0x486) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF19B, serialNumber=72B8B8CD10307B16324D879827DF32A4AA8D6AA1 Validity Not Before: Nov 5 00:14:50 2025 GMT Not After : Nov 12 00:14:50 2025 GMT Subject: CN=690a96fa-0250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:af:0b:80:84:6b:44:9d:de:99:2c:47:b7:e4: 80:2a:7e:f7:a8:a0:7e:85:68:b8:32:84:31:8d:50: 95:0d:15:f9:c9:d9:1b:7a:5d:1e:76:8f:11:68:e8: 22:3e:b3:23:c2:cb:e4:e8:2d:33:e9:50:01:00:07: f0:03:a6:9a:4e:fd:61:ff:3e:a9:15:2e:9d:52:ff: f4:4f:0b:ce:ec:4a:1a:12:cd:9e:9d:49:39:6c:99: a5:9b:2f:55:29:40:25:03:6c:65:0b:83:cb:3a:bf: 49:81:ae:a6:38:6d:32:0f:7b:8b:86:3c:c6:68:be: 4b:ea:a7:ea:18:ef:dc:5f:e4:26:e8:64:83:d5:35: 66:4b:8b:8f:da:0d:67:dd:55:d1:83:b4:01:8b:78: 98:ef:20:e1:a6:e6:2b:17:04:a8:62:86:af:d0:78: e8:6d:b7:2a:25:30:d1:a5:40:98:c6:84:2e:6f:57: d6:e6:bc:bf:ba:69:5b:3e:e1:6f:47:d1:55:7e:6c: 90:e5:5f:0d:78:12:76:83:cf:fa:5a:db:d7:c3:36: 5d:ad:61:62:97:4a:0d:0a:4d:30:0c:68:e6:16:56: 26:d1:68:74:a8:51:5e:b4:6f:06:75:df:6e:53:51: f3:08:1e:56:c6:b1:32:f4:c2:11:61:36:a2:0c:c8: 04:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:E2:AB:E1:DC:ED:9A:F1:25:E8:7B:B5:CF:93:2C:41:E8:01:4B:A3 X509v3 Authority Key Identifier: keyid:72:B8:B8:CD:10:30:7B:16:32:4D:87:98:27:DF:32:A4:AA:8D:6A:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cri4zRAwexYyTYeYJ98ypKqNaqE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF19B/36488D80665B11EC8885A480C4F9AE02/cri4zRAwexYyTYeYJ98ypKqNaqE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ca:95:c6:70:93:f8:50:8f:d8:95:5d:7b:d7:50:89:82:67:da: 0e:b9:c5:e4:1c:33:25:44:af:e7:0b:d1:49:e9:83:42:6d:33: 36:00:ef:8f:d4:34:e1:4f:8e:fb:16:6a:07:67:1b:c8:c5:95: ba:22:14:1b:fc:c6:01:91:6e:c6:d2:89:e0:a3:8e:cc:4c:08: 6a:c8:96:a2:96:c1:d6:e9:78:01:9e:23:64:89:5c:59:42:df: 8f:80:98:20:63:51:ed:39:f9:0e:74:e2:d2:e1:78:a7:63:f3: 9c:7c:8b:c9:ca:19:73:f1:b2:70:c2:ee:3c:55:69:87:67:bd: 00:0a:8d:d8:fb:bd:10:6c:49:39:c9:d8:9f:2b:2a:9a:d1:92: 77:a4:b2:2b:87:4a:fb:5d:1e:f0:df:56:95:a8:49:7b:c3:79: fd:c9:ca:c0:5c:5a:95:2e:6b:1c:bf:e7:04:59:b6:55:4f:ad: 12:dc:cb:10:07:8b:3f:e6:54:3b:5c:28:ff:cc:06:37:1f:28: ac:4b:ad:ca:89:b1:1f:3e:4a:a3:c5:1b:e5:5d:c2:f1:19:a6: b6:cb:72:a1:41:29:ab:39:63:9f:c3:bc:52:8c:f5:49:b3:b9: 26:05:2a:97:0a:5b:15:48:43:47:52:7f:0f:57:26:12:27:4d: 3e:f9:7d:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxOUIxMTAvBgNVBAUTKDcyQjhCOENEMTAzMDdCMTYzMjREODc5ODI3REYzMkE0 QUE4RDZBQTEwHhcNMjUxMTA1MDAxNDUwWhcNMjUxMTEyMDAxNDUwWjAYMRYwFAYD VQQDEw02OTBhOTZmYS0wMjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3q8LgIRrRJ3emSxHt+SAKn73qKB+hWi4MoQxjVCVDRX5ydkbel0edo8RaOgi PrMjwsvk6C0z6VABAAfwA6aaTv1h/z6pFS6dUv/0TwvO7EoaEs2enUk5bJmlmy9V KUAlA2xlC4PLOr9Jga6mOG0yD3uLhjzGaL5L6qfqGO/cX+Qm6GSD1TVmS4uP2g1n 3VXRg7QBi3iY7yDhpuYrFwSoYoav0HjobbcqJTDRpUCYxoQub1fW5ry/umlbPuFv R9FVfmyQ5V8NeBJ2g8/6WtvXwzZdrWFil0oNCk0wDGjmFlYm0Wh0qFFetG8Gdd9u U1HzCB5WxrEy9MIRYTaiDMgEBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBTiq+Hc 7ZrxJeh7tc+TLEHoAUujMB8GA1UdIwQYMBaAFHK4uM0QMHsWMk2HmCffMqSqjWqh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjE5Qi8zNjQ4OEQ4MDY2 NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4WXlUWWVZSjk4eXBLcU5h cUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NyaTR6UkF3ZXhZeVRZZVlKOTh5cEtxTmFxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjE5Qi8zNjQ4OEQ4MDY2NUIxMUVDODg4NUE0ODBDNEY5QUUwMi9jcmk0elJBd2V4 WXlUWWVZSjk4eXBLcU5hcUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDKlcZwk/hQj9iVXXvXUImCZ9oOucXkHDMlRK/nC9FJ6YNCbTM2AO+P 1DThT477FmoHZxvIxZW6IhQb/MYBkW7G0ongo47MTAhqyJailsHW6XgBniNkiVxZ Qt+PgJggY1HtOfkOdOLS4XinY/OcfIvJyhlz8bJwwu48VWmHZ70ACo3Y+70QbEk5 ydifKyqa0ZJ3pLIrh0r7XR7w31aVqEl7w3n9ycrAXFqVLmscv+cEWbZVT60S3MsQ B4s/5lQ7XCj/zAY3HyisS63KibEfPkqjxRvlXcLxGaa2y3KhQSmrOWOfw7xSjPVJ s7kmBSqXClsVSENHUn8PVyYSJ00++X3q -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:27 2025 by rpki-client