$ rpki-client -vvf rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft File: sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft (raw, json) Hash identifier: XnRMhQ3bylySW+2n7CF9qjvVPtM8ArIsgreVN/p14q8= Subject key identifier: A6:24:C2:89:F0:E0:14:FD:01:A1:8C:68:BD:99:C7:8F:F7:7B:6C:30 Authority key identifier: B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD Certificate issuer: /CN=A91144C9/serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Certificate serial: 75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft Manifest number: 72 Signing time: Mon 03 Nov 2025 06:55:21 +0000 Manifest this update: Mon 03 Nov 2025 06:55:20 +0000 Manifest next update: Mon 10 Nov 2025 06:55:20 +0000 Files and hashes: 1: sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl (hash: eGR+nHLCV4xLqaTFw+7j9MhrULXJ1x8RWvgtqssdu2o=) 2: 9F25E6340ECA11F0BAAE344AC4F9AE02.roa (hash: S0xpbapYuUp7EVUcnIqHkGByKZFeAz8MROSbzxDfhw4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91144C9, serialNumber=B0D525EA99D4C8EC75607126A49EF6707BD6F4AD Validity Not Before: Nov 3 06:55:20 2025 GMT Not After : Nov 10 06:55:20 2025 GMT Subject: CN=690851d8-52e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:db:6b:fa:11:f5:29:1d:09:a3:98:d1:99: 45:7d:5a:4a:eb:0f:d2:09:8b:7d:a4:a3:83:88:85: 85:d2:4c:23:b1:b9:0b:70:5a:c1:71:75:8a:51:01: 87:5a:65:da:79:06:25:2b:51:d5:d8:17:d2:47:23: 81:f7:02:f5:85:4a:55:4e:f1:1a:54:e4:6f:f1:af: 67:0e:dd:94:f4:3b:ca:92:8c:ad:06:16:a9:2a:f5: 42:e0:69:f2:21:3f:f6:a3:2a:5e:46:1c:2d:46:45: f0:43:85:2e:c0:ba:d8:fb:48:61:1c:41:4d:13:e2: 23:02:ca:e1:e9:8b:46:aa:cf:da:e8:77:15:76:14: d6:ee:47:f5:f0:0f:81:15:99:f7:7d:5c:2c:49:37: 1d:82:0f:cf:a5:fc:8b:c0:00:ec:db:c4:e6:82:a0: 25:0c:12:53:ed:62:92:88:5a:94:83:c9:c8:21:e6: ed:26:cc:67:59:64:3e:89:1f:8f:4c:74:10:9c:40: a8:58:c9:eb:78:e9:23:1b:5a:fc:e4:ee:76:ee:6e: 7a:fa:22:43:e2:c3:5f:8d:83:10:6f:1c:70:dd:48: 9d:5d:ba:da:1d:e4:65:15:73:33:df:eb:d7:31:42: 0c:a3:82:6d:bd:07:b2:cd:a5:4b:f7:dc:ec:f5:08: 03:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:24:C2:89:F0:E0:14:FD:01:A1:8C:68:BD:99:C7:8F:F7:7B:6C:30 X509v3 Authority Key Identifier: keyid:B0:D5:25:EA:99:D4:C8:EC:75:60:71:26:A4:9E:F6:70:7B:D6:F4:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sNUl6pnUyOx1YHEmpJ72cHvW9K0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91144C9/7BA3E70C0EC911F0A26FF144C4F9AE02/sNUl6pnUyOx1YHEmpJ72cHvW9K0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:2e:f1:10:d8:f2:ec:59:3d:8d:85:7a:de:87:06:68:27:1b: e1:9f:e7:d7:48:ef:5e:ee:56:9d:6a:1a:8f:72:86:08:cc:ed: 2f:eb:75:6d:68:66:b6:e5:19:87:c4:d8:ef:ec:51:10:4d:a3: 4e:61:02:1e:f2:21:c5:bc:42:18:29:c6:db:57:62:9f:f2:48: 44:1a:f6:dd:5f:b2:60:f2:2a:7e:4b:56:73:ab:f3:14:48:82: a8:2b:15:68:64:7e:7c:75:cc:8c:a6:76:c5:48:01:61:d2:97: ec:8d:73:e7:ae:2d:04:c0:c5:16:73:5c:84:31:e0:b9:c2:1a: 8c:9b:14:b9:5e:91:24:8d:1c:f2:3d:46:e6:65:fe:7c:e6:4a: 19:83:0c:c9:d3:64:6f:22:47:a4:23:4b:28:c4:be:d0:f8:00: 4f:b4:91:71:20:10:9a:36:fa:55:fe:d0:4b:91:4b:ef:db:46: 68:db:75:4f:cb:d3:f5:ab:45:e4:41:13:e0:43:ee:6b:c8:b6: 35:3b:61:d5:ce:53:99:c7:fb:f4:4e:07:41:80:6c:1f:8c:ed: 48:2d:37:27:84:ca:f2:99:d3:bd:04:f4:75:82:d0:27:fa:53: 7b:f1:bb:80:55:b8:27:8d:4d:04:17:6d:fb:ae:0e:f3:52:0e: 54:ae:ad:16 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NDRDOTExMC8GA1UEBRMoQjBENTI1RUE5OUQ0QzhFQzc1NjA3MTI2QTQ5RUY2NzA3 QkQ2RjRBRDAeFw0yNTExMDMwNjU1MjBaFw0yNTExMTAwNjU1MjBaMBgxFjAUBgNV BAMTDTY5MDg1MWQ4LTUyZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBxttr+hH1KR0Jo5jRmUV9WkrrD9IJi32ko4OIhYXSTCOxuQtwWsFxdYpRAYda Zdp5BiUrUdXYF9JHI4H3AvWFSlVO8RpU5G/xr2cO3ZT0O8qSjK0GFqkq9ULgafIh P/ajKl5GHC1GRfBDhS7Autj7SGEcQU0T4iMCyuHpi0aqz9rodxV2FNbuR/XwD4EV mfd9XCxJNx2CD8+l/IvAAOzbxOaCoCUMElPtYpKIWpSDycgh5u0mzGdZZD6JH49M dBCcQKhYyet46SMbWvzk7nbubnr6IkPiw1+NgxBvHHDdSJ1dutod5GUVczPf69cx Qgyjgm29B7LNpUv33Oz1CAObAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpiTCifDg FP0BoYxovZnHj/d7bDAwHwYDVR0jBBgwFoAUsNUl6pnUyOx1YHEmpJ72cHvW9K0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0NEM5LzdCQTNFNzBDMEVD OTExRjBBMjZGRjE0NEM0RjlBRTAyL3NOVWw2cG5VeU94MVlIRW1wSjcyY0h2VzlL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvc05VbDZwblV5T3gxWUhFbXBKNzJjSHZXOUswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 NEM5LzdCQTNFNzBDMEVDOTExRjBBMjZGRjE0NEM0RjlBRTAyL3NOVWw2cG5VeU94 MVlIRW1wSjcyY0h2VzlLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGUu8RDY8uxZPY2Fet6HBmgnG+Gf59dI717uVp1qGo9yhgjM7S/rdW1o ZrblGYfE2O/sURBNo05hAh7yIcW8QhgpxttXYp/ySEQa9t1fsmDyKn5LVnOr8xRI gqgrFWhkfnx1zIymdsVIAWHSl+yNc+euLQTAxRZzXIQx4LnCGoybFLlekSSNHPI9 RuZl/nzmShmDDMnTZG8iR6QjSyjEvtD4AE+0kXEgEJo2+lX+0EuRS+/bRmjbdU/L 0/WrReRBE+BD7mvItjU7YdXOU5nH+/ROB0GAbB+M7UgtNyeEyvKZ070E9HWC0Cf6 U3vxu4BVuCeNTQQXbfuuDvNSDlSurRY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:04:54 2025 by rpki-client