$ rpki-client -vvf rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft File: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft (raw, json) Hash identifier: bhY5FXq3IF4I8EBwZ0U32cwSMmKfGcz5qkOdBLg9yHE= Subject key identifier: 09:42:5B:C5:3E:9C:BA:36:0C:20:F9:3C:B2:8D:3E:88:F7:76:E2:89 Authority key identifier: E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 Certificate issuer: /CN=A91418C7/serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft Manifest number: 82 Signing time: Mon 03 Nov 2025 06:43:03 +0000 Manifest this update: Mon 03 Nov 2025 06:43:03 +0000 Manifest next update: Mon 10 Nov 2025 06:43:03 +0000 Files and hashes: 1: 42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl (hash: /y2JpFavYBBRMoWjCYgh7LjO5ZmMWEL4IyYBuA78lQ8=) 2: CDD0BE9EF99111EF945B6751C4F9AE02.roa (hash: 5D2jjmxRmYaXjLCMnBDCQ4uD7aGag4RBTpQpYik03Wk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91418C7, serialNumber=E369290FD719E3E4987D719A73B1EC77AAAF49B6 Validity Not Before: Nov 3 06:43:03 2025 GMT Not After : Nov 10 06:43:03 2025 GMT Subject: CN=69084ef7-c552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b0:5e:74:6b:62:09:71:80:b3:ce:c4:d0:0a: b4:5d:46:18:45:41:11:09:75:23:5f:b4:1b:b9:7c: dd:4c:93:9d:82:1a:b1:60:0b:31:de:6e:52:91:7d: b3:62:4e:ca:85:c5:a7:c7:6e:a5:9d:75:89:fc:01: f4:3e:54:f7:80:cc:aa:b8:0f:70:2e:4c:9f:70:e8: 16:4d:69:84:90:85:4c:fd:6a:95:76:74:8a:c7:82: 87:ff:fa:07:b1:82:15:f0:b2:47:f0:71:02:35:dc: 4e:ad:96:7b:2a:42:e1:f0:81:70:0a:8b:9a:97:03: ed:0b:ec:87:d8:e6:3f:ab:8d:9e:e8:03:57:8f:70: 06:d5:16:a2:fb:97:90:89:2e:23:30:c8:25:56:e2: 5d:86:fd:b1:fb:45:e4:b4:d6:f6:db:f9:db:2a:96: a6:09:e1:45:34:13:b3:2a:e9:dd:18:fc:21:29:cc: 09:e3:88:a6:d3:53:89:d3:02:03:f5:ad:07:39:40: 7f:83:15:29:bc:ba:f4:b7:cd:53:23:93:f7:2f:9a: c1:db:83:81:e9:30:b4:c3:bf:6a:f0:ef:e4:b3:7d: ad:9d:af:70:c9:2a:8b:99:2e:ff:e9:22:3a:cd:0b: 14:77:3d:16:d0:f8:27:5e:68:dd:df:d2:24:d1:e8: 53:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:42:5B:C5:3E:9C:BA:36:0C:20:F9:3C:B2:8D:3E:88:F7:76:E2:89 X509v3 Authority Key Identifier: keyid:E3:69:29:0F:D7:19:E3:E4:98:7D:71:9A:73:B1:EC:77:AA:AF:49:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/42kpD9cZ4-SYfXGac7Hsd6qvSbY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91418C7/F93001B6F8CF11EF82D8D52BC4F9AE02/42kpD9cZ4-SYfXGac7Hsd6qvSbY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:ec:c0:ce:4b:b8:3c:59:d4:9b:bb:aa:a1:e2:6a:ef:0d:fe: 0b:47:04:b3:e8:d4:71:ac:7b:0f:44:15:c7:e4:b8:c2:1e:89: 59:6c:99:1b:06:5f:ec:e3:56:5a:bb:75:f9:0f:39:a3:d1:6a: 68:9c:bf:72:2a:9c:a3:60:99:f7:16:76:6c:df:64:73:c3:e1: b9:82:01:38:e9:67:fd:e7:dc:53:ad:de:6f:a5:6c:83:8e:95: 53:7f:b2:98:4e:20:e9:da:0a:7a:bd:12:f2:5d:35:9e:31:8f: c6:f4:f8:2c:83:32:03:49:ca:d5:30:d6:3d:94:36:c7:d5:9c: f6:20:48:3a:93:f0:b4:6a:97:3a:7b:56:1d:6f:e3:ea:23:c1: 17:32:97:8f:6a:a0:31:60:ea:99:16:4f:69:9c:da:41:08:c7: fa:34:8f:4f:34:2b:58:47:8a:3e:84:0f:ba:64:28:c8:aa:b9: 0e:b8:f4:72:44:e0:d4:75:65:a0:08:69:6c:9e:e8:ae:d1:16: c2:6e:9f:49:06:5c:b5:df:33:49:a4:5f:0d:73:04:b2:c7:7e: 76:ef:08:ee:83:bd:f7:c0:c7:37:91:7f:93:94:f6:ce:99:60: d8:67:bb:56:6a:b7:9c:36:5a:4d:a5:67:3f:c9:19:10:30:93: 99:7c:fc:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE4QzcxMTAvBgNVBAUTKEUzNjkyOTBGRDcxOUUzRTQ5ODdENzE5QTczQjFFQzc3 QUFBRjQ5QjYwHhcNMjUxMTAzMDY0MzAzWhcNMjUxMTEwMDY0MzAzWjAYMRYwFAYD VQQDEw02OTA4NGVmNy1jNTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7BedGtiCXGAs87E0Aq0XUYYRUERCXUjX7QbuXzdTJOdghqxYAsx3m5SkX2z Yk7KhcWnx26lnXWJ/AH0PlT3gMyquA9wLkyfcOgWTWmEkIVM/WqVdnSKx4KH//oH sYIV8LJH8HECNdxOrZZ7KkLh8IFwCoualwPtC+yH2OY/q42e6ANXj3AG1Rai+5eQ iS4jMMglVuJdhv2x+0XktNb22/nbKpamCeFFNBOzKundGPwhKcwJ44im01OJ0wID 9a0HOUB/gxUpvLr0t81TI5P3L5rB24OB6TC0w79q8O/ks32tna9wySqLmS7/6SI6 zQsUdz0W0PgnXmjd39Ik0ehTlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAlCW8U+ nLo2DCD5PLKNPoj3duKJMB8GA1UdIwQYMBaAFONpKQ/XGePkmH1xmnOx7Heqr0m2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MThDNy9GOTMwMDFCNkY4 Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQtU1lmWEdhYzdIc2Q2cXZT YlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQya3BEOWNaNC1TWWZYR2FjN0hzZDZxdlNiWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MThDNy9GOTMwMDFCNkY4Q0YxMUVGODJEOEQ1MkJDNEY5QUUwMi80MmtwRDljWjQt U1lmWEdhYzdIc2Q2cXZTYlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAF7MDOS7g8WdSbu6qh4mrvDf4LRwSz6NRxrHsPRBXH5LjCHolZbJkb Bl/s41Zau3X5Dzmj0WponL9yKpyjYJn3FnZs32Rzw+G5ggE46Wf959xTrd5vpWyD jpVTf7KYTiDp2gp6vRLyXTWeMY/G9PgsgzIDScrVMNY9lDbH1Zz2IEg6k/C0apc6 e1Ydb+PqI8EXMpePaqAxYOqZFk9pnNpBCMf6NI9PNCtYR4o+hA+6ZCjIqrkOuPRy RODUdWWgCGlsnuiu0RbCbp9JBly13zNJpF8NcwSyx3527wjug733wMc3kX+TlPbO mWDYZ7tWarecNlpNpWc/yRkQMJOZfPzh -----END CERTIFICATE-----Generated at Tue Nov 4 16:13:35 2025 by rpki-client