$ rpki-client -vvf rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft File: fKdQzAmQd9S0MpCnYoOre_C2Smg.mft (raw, json) Hash identifier: n+GgOHyJT17vMly55jRbaX0kEsEy08xMyxYjevRWFdM= Subject key identifier: D7:5A:DF:26:1B:3B:81:78:24:50:D6:9D:08:00:7D:C9:51:0C:3E:81 Authority key identifier: 7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 Certificate issuer: /CN=A91300ED/serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Certificate serial: 070D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft Manifest number: 0707 Signing time: Tue 04 Nov 2025 22:00:24 +0000 Manifest this update: Tue 04 Nov 2025 22:00:23 +0000 Manifest next update: Tue 11 Nov 2025 22:00:23 +0000 Files and hashes: 1: fKdQzAmQd9S0MpCnYoOre_C2Smg.crl (hash: 3LCsP6FicjsIb0H9LaH1slJrLVzfHXN03u7UZKON4XI=) 2: 74897CC0622A11EBA8BA0B7EC4F9AE02.roa (hash: jMHgt7FvNkUCkLd7vYheLEj/MpewQSbVwisjvUIDov4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1805 (0x70d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91300ED, serialNumber=7CA750CC099077D4B43290A76283AB7BF0B64A68 Validity Not Before: Nov 4 22:00:23 2025 GMT Not After : Nov 11 22:00:23 2025 GMT Subject: CN=690a7778-c6ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:d9:81:c6:b5:6e:8f:4a:a4:43:b8:79:46:9b: a1:d1:64:41:91:06:50:1e:56:6d:2c:30:da:16:a0: a2:fb:5a:68:4d:ad:7b:a7:8c:db:06:d3:70:a3:c9: de:ef:c6:f2:50:60:bf:d7:7c:46:ea:4d:47:f4:8a: d6:67:91:fc:9e:04:ff:59:00:2a:ca:ce:db:ba:84: c7:fa:97:9f:f8:b9:b0:cc:bf:cc:d5:5c:39:c5:71: 2a:dc:db:75:ae:2d:03:c4:88:47:12:55:67:07:1b: fc:2f:12:9e:99:f3:2f:76:05:d0:21:25:1d:8b:e4: a3:8b:2c:5a:0e:0b:83:5a:18:f1:9e:9d:52:32:44: d4:65:33:0e:d6:99:89:ed:c1:1e:2b:35:3a:4e:9c: 2a:7e:91:91:2c:06:33:4d:52:b9:9f:34:93:2c:ec: 86:de:47:d5:3c:58:0c:0f:97:6d:e1:92:59:55:80: c4:fb:ba:4a:b6:59:bd:a0:30:2a:da:9c:ba:6d:77: d0:3e:4d:a1:e3:cc:b1:bc:d0:e8:52:c8:37:1b:99: 01:db:e7:3d:fe:19:00:d2:50:dd:54:68:a2:80:c6: 8a:cc:29:0d:ab:f9:a6:50:2c:9a:7a:c4:55:df:5f: 3a:3d:fe:07:ab:59:8c:fc:95:33:27:39:18:ee:eb: 20:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:5A:DF:26:1B:3B:81:78:24:50:D6:9D:08:00:7D:C9:51:0C:3E:81 X509v3 Authority Key Identifier: keyid:7C:A7:50:CC:09:90:77:D4:B4:32:90:A7:62:83:AB:7B:F0:B6:4A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fKdQzAmQd9S0MpCnYoOre_C2Smg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91300ED/0EC94A88622911EB8E1BC27CC4F9AE02/fKdQzAmQd9S0MpCnYoOre_C2Smg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:3c:4b:ea:3f:26:9d:79:64:15:54:21:be:cb:67:9e:41:af: 72:cf:3c:79:18:dc:58:b4:b4:2d:af:56:af:27:7c:10:c1:1f: 0b:8c:23:e3:cf:ce:ef:00:cc:6a:32:c9:ca:c4:fb:11:24:47: c4:2b:ce:62:f2:cc:b4:f7:95:6c:34:4e:13:ba:d1:8d:58:9e: 36:e8:a3:ff:9b:b4:38:06:44:9c:63:4c:4b:d1:44:93:1f:eb: 38:31:a6:5d:b7:d4:b5:b0:49:9f:1d:10:eb:d6:d4:2a:a9:d5: 4b:9b:62:20:39:1b:d0:a4:bf:a3:ee:59:e9:85:a2:d7:fe:19: eb:35:28:25:c1:20:73:26:a5:d0:8b:6d:95:34:41:b7:14:77: 34:a4:3e:b6:33:47:d9:99:09:70:d8:f1:a7:c3:fc:d3:de:75: da:75:e1:ec:fe:93:ec:bc:fa:13:60:d4:03:11:ff:c3:eb:8f: 3b:82:75:2b:00:ee:a5:2b:e5:1d:ca:75:11:09:71:fd:b9:39: 8e:44:8f:c1:9e:26:59:2b:83:0f:43:5a:db:c4:1e:17:bf:18: 32:e3:4c:f7:e0:80:8a:bc:22:d9:d5:e2:a5:4c:2c:30:12:22: 91:bd:1d:92:c2:10:c9:58:51:3e:14:26:01:cf:11:74:12:fa: 0c:50:84:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBw0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzAwRUQxMTAvBgNVBAUTKDdDQTc1MENDMDk5MDc3RDRCNDMyOTBBNzYyODNBQjdC RjBCNjRBNjgwHhcNMjUxMTA0MjIwMDIzWhcNMjUxMTExMjIwMDIzWjAYMRYwFAYD VQQDEw02OTBhNzc3OC1jNmVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3dmBxrVuj0qkQ7h5Rpuh0WRBkQZQHlZtLDDaFqCi+1poTa17p4zbBtNwo8ne 78byUGC/13xG6k1H9IrWZ5H8ngT/WQAqys7buoTH+pef+LmwzL/M1Vw5xXEq3Nt1 ri0DxIhHElVnBxv8LxKemfMvdgXQISUdi+SjiyxaDguDWhjxnp1SMkTUZTMO1pmJ 7cEeKzU6TpwqfpGRLAYzTVK5nzSTLOyG3kfVPFgMD5dt4ZJZVYDE+7pKtlm9oDAq 2py6bXfQPk2h48yxvNDoUsg3G5kB2+c9/hkA0lDdVGiigMaKzCkNq/mmUCyaesRV 3186Pf4Hq1mM/JUzJzkY7usgmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNda3yYb O4F4JFDWnQgAfclRDD6BMB8GA1UdIwQYMBaAFHynUMwJkHfUtDKQp2KDq3vwtkpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDBFRC8wRUM5NEE4ODYy MjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5UzBNcENuWW9PcmVfQzJT bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZLZFF6QW1RZDlTME1wQ25Zb09yZV9DMlNtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDBFRC8wRUM5NEE4ODYyMjkxMUVCOEUxQkMyN0NDNEY5QUUwMi9mS2RRekFtUWQ5 UzBNcENuWW9PcmVfQzJTbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEPEvqPyadeWQVVCG+y2eeQa9yzzx5GNxYtLQtr1avJ3wQwR8LjCPj z87vAMxqMsnKxPsRJEfEK85i8sy095VsNE4TutGNWJ426KP/m7Q4BkScY0xL0UST H+s4MaZdt9S1sEmfHRDr1tQqqdVLm2IgORvQpL+j7lnphaLX/hnrNSglwSBzJqXQ i22VNEG3FHc0pD62M0fZmQlw2PGnw/zT3nXadeHs/pPsvPoTYNQDEf/D6487gnUr AO6lK+UdynURCXH9uTmORI/BniZZK4MPQ1rbxB4Xvxgy40z34ICKvCLZ1eKlTCww EiKRvR2SwhDJWFE+FCYBzxF0EvoMUIRz -----END CERTIFICATE-----Generated at Wed Nov 5 19:47:13 2025 by rpki-client