$ rpki-client -vvf rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft File: -L04pMnwxPpzvw2Q_wzKgC2_1tw.mft (raw, json) Hash identifier: VD/5/cksMh5hxU994VnuCdtyaXILZLSfgyMSEY5JqVU= Subject key identifier: 23:ED:52:63:E2:D5:D7:E9:E4:42:B6:2B:3B:F5:23:45:6A:7D:35:92 Authority key identifier: F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC Certificate issuer: /CN=A91407B7/serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Certificate serial: 083B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft Manifest number: 082A Signing time: Tue 04 Nov 2025 20:53:51 +0000 Manifest this update: Tue 04 Nov 2025 20:53:51 +0000 Manifest next update: Tue 11 Nov 2025 20:53:51 +0000 Files and hashes: 1: -L04pMnwxPpzvw2Q_wzKgC2_1tw.crl (hash: 7DQe/BM5WWQKV0huJqZIp47gWCRBCNYNpI+Li01R6iA=) 2: 26833348954511EFA5D9B90FC4F9AE02.roa (hash: K1UuNBw5WFh1vrFCgINXdCeXsqQDIqc2wdlXDmKdmEY=) 3: 4878EA2E954511EF87341210C4F9AE02.roa (hash: PQWGngD3aYy1WNrpxXg2QYd1WAV8RW9TqsL6xqvwEK0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:53:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2107 (0x83b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91407B7, serialNumber=F8BD38A4C9F0C4FA73BF0D90FF0CCA802DBFD6DC Validity Not Before: Nov 4 20:53:51 2025 GMT Not After : Nov 11 20:53:51 2025 GMT Subject: CN=690a67df-c4c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:ca:c0:fa:44:98:e2:41:c5:03:4f:2e:09:a4: 54:f9:14:ab:66:2e:0c:01:0a:25:a4:db:1e:65:bf: e6:63:50:b7:ee:78:a3:bc:1d:72:31:e5:27:b2:45: 4a:92:b9:12:87:e3:89:fb:09:6f:a2:6d:6c:f9:aa: 32:15:6c:d9:5d:2a:1a:01:92:83:6d:17:b8:c2:c5: 6f:c0:38:b3:f6:2e:96:67:c3:85:1e:9c:b3:89:18: 31:9d:f1:b4:10:ad:ca:09:6d:00:41:20:07:ab:7a: fb:52:16:0c:e4:a0:87:35:b7:11:bc:57:f9:73:57: d3:30:b6:3f:74:a1:4d:2c:9b:10:e2:e9:6a:b2:83: 35:23:ee:60:f8:c0:33:d2:97:b3:c0:e4:0a:f3:0d: 2e:3e:a9:59:54:b2:ca:c4:27:e0:b9:42:d7:de:ad: 9f:86:1e:37:07:c4:e8:55:40:7a:ad:70:cd:8f:8f: a2:20:ee:4d:f1:04:bf:c9:ca:01:ab:ca:8d:2a:80: 1b:a1:6b:82:9f:3a:c7:84:9f:5c:4b:b2:f5:ee:1b: a2:73:ac:c3:bc:e0:0e:d0:3f:93:fe:f7:34:cd:60: f4:2b:db:ef:c8:c9:e7:a9:00:47:55:02:cd:f1:76: d0:c4:a2:e3:60:91:40:e9:81:08:41:55:99:0d:ae: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:ED:52:63:E2:D5:D7:E9:E4:42:B6:2B:3B:F5:23:45:6A:7D:35:92 X509v3 Authority Key Identifier: keyid:F8:BD:38:A4:C9:F0:C4:FA:73:BF:0D:90:FF:0C:CA:80:2D:BF:D6:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-L04pMnwxPpzvw2Q_wzKgC2_1tw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91407B7/BD6FE850F17511EAB56B004CC4F9AE02/-L04pMnwxPpzvw2Q_wzKgC2_1tw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:42:df:ae:a1:1e:bf:df:0e:2d:45:8c:02:9d:46:15:21:a1: d2:dd:3d:d6:08:4b:70:35:45:7f:55:34:40:01:93:82:d3:40: 7a:d3:6d:35:02:73:00:67:bc:cd:62:fa:aa:20:bb:01:79:25: 29:7e:cb:2e:38:61:60:fd:cd:fe:6e:26:37:db:5e:ac:4e:93: 51:30:e3:2b:87:8f:12:51:dc:47:bc:7d:85:4a:51:34:0a:d0: e7:06:25:7b:58:00:44:a1:cd:f4:32:2a:59:07:3e:a0:42:c6: dd:ee:76:1b:68:7a:e6:82:4f:f1:cd:66:cd:6a:ea:46:e0:3c: 6b:d1:91:84:9d:5c:3c:c0:56:2b:77:f2:db:7e:22:08:09:37: 61:66:3f:55:b6:de:e1:e6:1d:b9:72:05:03:29:f3:13:18:04: b9:69:32:e0:f1:0b:e8:37:6d:5d:3e:b0:a0:2e:f1:43:39:f0: e5:9f:48:1c:52:56:da:52:03:db:9a:5a:ba:93:47:3c:3f:d8: 05:04:d0:bf:92:11:0f:6a:4a:f5:b4:e2:01:93:9f:e8:29:df: 34:d0:1b:9a:67:83:fc:8b:d9:35:f3:98:62:34:40:30:52:56: e9:29:72:30:00:5e:76:65:4e:40:e4:c8:09:68:a8:87:26:89: 52:ac:29:64 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA3QjcxMTAvBgNVBAUTKEY4QkQzOEE0QzlGMEM0RkE3M0JGMEQ5MEZGMENDQTgw MkRCRkQ2REMwHhcNMjUxMTA0MjA1MzUxWhcNMjUxMTExMjA1MzUxWjAYMRYwFAYD VQQDEw02OTBhNjdkZi1jNGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+8rA+kSY4kHFA08uCaRU+RSrZi4MAQolpNseZb/mY1C37nijvB1yMeUnskVK krkSh+OJ+wlvom1s+aoyFWzZXSoaAZKDbRe4wsVvwDiz9i6WZ8OFHpyziRgxnfG0 EK3KCW0AQSAHq3r7UhYM5KCHNbcRvFf5c1fTMLY/dKFNLJsQ4ulqsoM1I+5g+MAz 0pezwOQK8w0uPqlZVLLKxCfguULX3q2fhh43B8ToVUB6rXDNj4+iIO5N8QS/ycoB q8qNKoAboWuCnzrHhJ9cS7L17huic6zDvOAO0D+T/vc0zWD0K9vvyMnnqQBHVQLN 8XbQxKLjYJFA6YEIQVWZDa59twIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCPtUmPi 1dfp5EK2Kzv1I0VqfTWSMB8GA1UdIwQYMBaAFPi9OKTJ8MT6c78NkP8MyoAtv9bc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDdCNy9CRDZGRTg1MEYx NzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQcHp2dzJRX3d6S2dDMl8x dHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1MMDRwTW53eFBwenZ3MlFfd3pLZ0MyXzF0dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MDdCNy9CRDZGRTg1MEYxNzUxMUVBQjU2QjAwNENDNEY5QUUwMi8tTDA0cE1ud3hQ cHp2dzJRX3d6S2dDMl8xdHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlQt+uoR6/3w4tRYwCnUYVIaHS3T3WCEtwNUV/VTRAAZOC00B60201 AnMAZ7zNYvqqILsBeSUpfssuOGFg/c3+biY3216sTpNRMOMrh48SUdxHvH2FSlE0 CtDnBiV7WABEoc30MipZBz6gQsbd7nYbaHrmgk/xzWbNaupG4Dxr0ZGEnVw8wFYr d/LbfiIICTdhZj9Vtt7h5h25cgUDKfMTGAS5aTLg8QvoN21dPrCgLvFDOfDln0gc UlbaUgPbmlq6k0c8P9gFBNC/khEPakr1tOIBk5/oKd800BuaZ4P8i9k185hiNEAw UlbpKXIwAF52ZU5A5MgJaKiHJolSrClk -----END CERTIFICATE-----Generated at Wed Nov 5 17:18:15 2025 by rpki-client