$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: ff3eVDW/y19GyA2kxop2vse/lZCzEduRzQdItAUv1FM= Subject key identifier: 7A:CC:F2:74:27:78:B0:EF:9D:54:42:69:DC:0B:FB:7F:E2:F4:FC:7F Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B84 Signing time: Sun 02 Nov 2025 19:01:26 +0000 Manifest this update: Sun 02 Nov 2025 19:01:26 +0000 Manifest next update: Sun 09 Nov 2025 19:01:26 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: ijw5roMHV0TZd0cYpQhgtIifugSnp8sLRPvvuIbEs9I=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Nov 2 19:01:26 2025 GMT Not After : Nov 9 19:01:26 2025 GMT Subject: CN=6907aa86-84c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:60:c4:92:ec:cb:d4:7c:0a:21:bd:ba:5d: e1:65:dc:d6:0d:d7:70:c0:64:60:d9:52:65:79:4a: 6c:34:94:f2:b2:2a:60:13:f9:46:5a:eb:60:a5:bb: cd:00:b1:8d:d2:0b:b0:43:4f:bc:e2:c7:08:43:2d: 1c:7f:51:08:7e:28:f7:39:16:68:1f:81:bc:82:39: a3:b4:ee:0d:ea:8a:4a:78:b2:a7:69:77:04:fd:51: 5f:ca:ae:8a:c7:e6:9d:23:79:96:1c:2c:8a:fc:77: e5:67:78:45:e6:ff:b2:5a:6d:ae:70:a3:67:9f:b8: 53:21:44:59:ac:3a:b3:2c:07:6e:90:bf:5f:74:e7: 9b:2c:4f:43:27:34:2a:32:e1:56:6d:d5:2e:50:f0: 2b:70:10:67:38:25:3e:79:81:59:f6:02:f8:2c:e0: cd:0a:9e:bf:97:d7:a0:54:c2:ba:28:e5:46:29:ed: 1f:bd:00:8c:80:de:25:51:d1:20:56:cc:0f:8a:12: 7c:55:a0:c7:5a:b4:01:69:4a:6b:9c:2b:c9:dd:da: c3:80:8e:58:b6:0e:a0:84:68:98:e4:a9:c8:79:f7: db:8a:2d:4c:29:34:de:79:64:80:fd:aa:93:c2:22: f6:2c:1b:2b:92:b5:d8:e7:6e:f7:de:25:14:95:a3: b5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CC:F2:74:27:78:B0:EF:9D:54:42:69:DC:0B:FB:7F:E2:F4:FC:7F X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:5b:41:cc:39:0b:93:58:1a:25:4f:d9:27:90:a8:55:2c:4d: ce:76:c4:7d:4c:82:4d:78:8a:38:71:29:67:01:72:b5:47:26: f2:79:b0:46:d3:25:3f:b0:ac:93:36:19:58:d3:df:8a:30:3b: 2f:3b:e8:f3:d0:13:1b:77:fe:e9:1b:a8:b8:f7:c7:a4:fe:2b: 36:60:da:d7:74:c6:40:35:c1:b9:0c:68:81:26:38:6a:ec:78: f2:a3:ab:77:34:da:43:d4:a3:f6:40:cb:e5:cb:ce:c3:a3:82: e0:50:c1:6f:7d:68:9f:a0:fc:18:d8:98:5f:14:fe:74:62:53: bf:02:7a:21:65:c5:10:70:13:22:9c:4d:56:a1:d3:41:ba:fa: a6:89:0c:ea:f6:7b:13:f6:50:ae:98:b0:6d:6a:b3:65:4b:c0: ef:ed:36:e4:f9:ee:a7:67:6b:c3:11:2d:f7:9a:d2:6b:6d:41: 12:1c:4f:3c:40:c4:94:4b:04:3a:d5:4a:49:39:f6:bb:bc:2f: ba:68:6f:67:3b:9a:ed:18:c2:44:c2:ef:49:91:48:1e:53:83: a9:c9:02:ca:70:78:a2:16:90:ec:ed:01:02:56:1d:83:c5:fe: 9b:0a:2a:95:d0:47:a5:80:e2:48:d8:b9:3e:c0:aa:75:cb:97: 9d:8f:6c:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUxMTAyMTkwMTI2WhcNMjUxMTA5MTkwMTI2WjAYMRYwFAYD VQQDEw02OTA3YWE4Ni04NGM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnmRgxJLsy9R8CiG9ul3hZdzWDddwwGRg2VJleUpsNJTysipgE/lGWutgpbvN ALGN0guwQ0+84scIQy0cf1EIfij3ORZoH4G8gjmjtO4N6opKeLKnaXcE/VFfyq6K x+adI3mWHCyK/HflZ3hF5v+yWm2ucKNnn7hTIURZrDqzLAdukL9fdOebLE9DJzQq MuFWbdUuUPArcBBnOCU+eYFZ9gL4LODNCp6/l9egVMK6KOVGKe0fvQCMgN4lUdEg VswPihJ8VaDHWrQBaUprnCvJ3drDgI5Ytg6ghGiY5KnIeffbii1MKTTeeWSA/aqT wiL2LBsrkrXY52733iUUlaO1JwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHrM8nQn eLDvnVRCadwL+3/i9Px/MB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJW0HMOQuTWBolT9knkKhVLE3OdsR9TIJNeIo4cSlnAXK1RybyebBG 0yU/sKyTNhlY09+KMDsvO+jz0BMbd/7pG6i498ek/is2YNrXdMZANcG5DGiBJjhq 7Hjyo6t3NNpD1KP2QMvly87Do4LgUMFvfWifoPwY2JhfFP50YlO/AnohZcUQcBMi nE1WodNBuvqmiQzq9nsT9lCumLBtarNlS8Dv7Tbk+e6nZ2vDES33mtJrbUESHE88 QMSUSwQ61UpJOfa7vC+6aG9nO5rtGMJEwu9JkUgeU4OpyQLKcHiiFpDs7QECVh2D xf6bCiqV0EelgOJI2Lk+wKp1y5edj2ze -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:12 2025 by rpki-client