$ rpki-client -vvf rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft File: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft (raw, json) Hash identifier: OBNHn/OvvuLuKw028TN5iDRI5wNoX0BSFfPxuKvq5Jo= Subject key identifier: E7:A7:5B:1C:79:73:67:07:2E:C0:89:12:DE:EA:B8:45:E3:0F:26:44 Authority key identifier: 9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 Certificate issuer: /CN=A91325C7/serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Certificate serial: 0735 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft Manifest number: 0727 Signing time: Tue 04 Nov 2025 21:52:10 +0000 Manifest this update: Tue 04 Nov 2025 21:52:09 +0000 Manifest next update: Tue 11 Nov 2025 21:52:09 +0000 Files and hashes: 1: mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl (hash: 2jucS+/auV0cSOsyEBaK9zZXWZSnfxt+VI2Cp0UgoJM=) 2: 591B98DE548711EB89568B65C4F9AE02.roa (hash: d7N6f6yC80H+bBisy6d0uZFPMZkPZ4+tK8vPcg2RMI4=) 3: 59BC86E0548711EB89568B65C4F9AE02.roa (hash: XqZL53ufCEPPnAj9K+Mz0fhXU33hy00eQ9KaFrfBZL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1845 (0x735) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91325C7, serialNumber=9A14836A2186D1972214862248355DAB8BB97366 Validity Not Before: Nov 4 21:52:09 2025 GMT Not After : Nov 11 21:52:09 2025 GMT Subject: CN=690a7589-73e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c6:aa:d0:bd:e0:c9:49:3e:4f:d5:de:b7:de: c0:95:da:89:a9:dc:dd:cb:ca:de:7e:70:e8:48:28: cd:d8:39:df:a5:96:54:90:73:73:39:e8:8d:52:59: f6:56:07:8b:44:ef:46:a8:6e:12:2f:7e:ca:33:30: d8:28:5e:af:a1:46:53:80:bb:ce:70:15:73:c1:c2: 23:ec:fd:08:7c:e5:d9:60:f5:42:b7:7f:de:8b:0d: e0:94:d8:cb:6b:10:57:5e:69:a8:bd:40:47:43:cb: 0c:73:34:38:8b:46:7c:cb:5d:8e:7c:13:21:b4:ff: 4f:6d:66:ad:3d:a8:c9:e6:30:34:a8:be:58:d2:b1: f7:b3:b6:d7:e5:0b:b6:1b:66:04:d9:2d:bb:a6:54: ba:e1:80:66:4a:f5:fc:c5:46:b7:2a:e3:ce:3b:9e: fc:91:2c:e9:49:93:a0:ea:c8:aa:f4:c6:6e:65:0b: c4:81:e7:7d:01:89:ae:54:ab:8a:29:9c:cf:52:cc: 87:15:fd:18:0a:68:ba:65:2d:d4:aa:39:b3:b1:e6: 2c:23:40:df:09:48:b1:fb:77:48:2d:a5:94:86:aa: 20:c4:ab:19:fa:6c:ea:a4:14:6b:8a:19:b5:41:cf: 96:c2:c9:96:a0:ba:a3:ab:38:e9:07:6b:7b:6c:d2: 87:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:A7:5B:1C:79:73:67:07:2E:C0:89:12:DE:EA:B8:45:E3:0F:26:44 X509v3 Authority Key Identifier: keyid:9A:14:83:6A:21:86:D1:97:22:14:86:22:48:35:5D:AB:8B:B9:73:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91325C7/24398230548611EB9F98C264C4F9AE02/mhSDaiGG0ZciFIYiSDVdq4u5c2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:25:05:61:9b:5d:c7:4d:73:4c:13:6f:0a:d3:90:17:8d:2e: ef:fb:39:6b:0b:c3:5c:eb:41:57:ff:c8:8b:13:98:1a:f9:c8: a0:15:6e:ac:22:2e:db:d5:7e:c8:8d:b0:14:ba:6a:19:be:45: d5:c9:61:3b:03:81:0c:0b:05:46:ca:73:93:e0:09:1b:7d:0d: 24:0c:e7:52:c2:d0:d2:78:b2:fa:47:d6:1f:3c:60:27:f7:19: 62:3d:24:eb:24:f6:e9:96:69:cb:34:80:a6:02:1c:67:9c:af: 59:35:ad:dc:3d:55:ea:55:e9:38:33:f7:9b:33:d3:76:a3:0e: e9:b5:d2:a4:9f:09:52:26:19:83:6f:c2:1c:c8:2d:cc:d4:a1: ab:fe:ba:3e:30:e2:8c:10:c0:eb:03:12:14:50:f4:93:f0:7f: 3a:c9:be:95:4e:28:9e:60:a1:45:3d:0d:74:77:53:cd:3d:68: 53:49:0d:97:38:55:38:e8:60:73:1b:df:b4:b8:25:cc:c7:78: 6a:43:30:81:66:4d:79:cf:cb:51:ff:0f:8a:68:73:41:5c:36: 63:37:f2:83:82:44:c9:58:fc:19:9e:0d:1e:96:94:b7:61:c6: 02:54:7e:e1:8f:e1:84:c9:3a:00:70:73:15:8a:59:82:d4:b0: b9:0b:1e:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBzUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI1QzcxMTAvBgNVBAUTKDlBMTQ4MzZBMjE4NkQxOTcyMjE0ODYyMjQ4MzU1REFC OEJCOTczNjYwHhcNMjUxMTA0MjE1MjA5WhcNMjUxMTExMjE1MjA5WjAYMRYwFAYD VQQDEw02OTBhNzU4OS03M2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApcaq0L3gyUk+T9Xet97AldqJqdzdy8refnDoSCjN2DnfpZZUkHNzOeiNUln2 VgeLRO9GqG4SL37KMzDYKF6voUZTgLvOcBVzwcIj7P0IfOXZYPVCt3/eiw3glNjL axBXXmmovUBHQ8sMczQ4i0Z8y12OfBMhtP9PbWatPajJ5jA0qL5Y0rH3s7bX5Qu2 G2YE2S27plS64YBmSvX8xUa3KuPOO578kSzpSZOg6siq9MZuZQvEged9AYmuVKuK KZzPUsyHFf0YCmi6ZS3UqjmzseYsI0DfCUix+3dILaWUhqogxKsZ+mzqpBRrihm1 Qc+WwsmWoLqjqzjpB2t7bNKHVwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOenWxx5 c2cHLsCJEt7quEXjDyZEMB8GA1UdIwQYMBaAFJoUg2ohhtGXIhSGIkg1XauLuXNm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjVDNy8yNDM5ODIzMDU0 ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBaY2lGSVlpU0RWZHE0dTVj MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21oU0RhaUdHMFpjaUZJWWlTRFZkcTR1NWMyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MjVDNy8yNDM5ODIzMDU0ODYxMUVCOUY5OEMyNjRDNEY5QUUwMi9taFNEYWlHRzBa Y2lGSVlpU0RWZHE0dTVjMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnJQVhm13HTXNME28K05AXjS7v+zlrC8Nc60FX/8iLE5ga+cigFW6s Ii7b1X7IjbAUumoZvkXVyWE7A4EMCwVGynOT4AkbfQ0kDOdSwtDSeLL6R9YfPGAn 9xliPSTrJPbplmnLNICmAhxnnK9ZNa3cPVXqVek4M/ebM9N2ow7ptdKknwlSJhmD b8IcyC3M1KGr/ro+MOKMEMDrAxIUUPST8H86yb6VTiieYKFFPQ10d1PNPWhTSQ2X OFU46GBzG9+0uCXMx3hqQzCBZk15z8tR/w+KaHNBXDZjN/KDgkTJWPwZng0elpS3 YcYCVH7hj+GEyToAcHMVilmC1LC5Cx5F -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:38 2025 by rpki-client