$ rpki-client -vvf rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft File: B04WzKCA1UX-9PLYrcuQnw7LIKI.mft (raw, json) Hash identifier: 1GTsxo2+J0ISFtpmO3UYfrI9YTR2h5SiM/t7RD9Lrmc= Subject key identifier: 35:E2:73:1C:3C:80:CC:CF:69:99:10:45:12:F5:73:C7:D5:3B:C8:DA Authority key identifier: 07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 Certificate issuer: /CN=A91655EF/serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Certificate serial: 120F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft Manifest number: 11F2 Signing time: Tue 04 Nov 2025 17:15:32 +0000 Manifest this update: Tue 04 Nov 2025 17:15:32 +0000 Manifest next update: Tue 11 Nov 2025 17:15:32 +0000 Files and hashes: 1: B04WzKCA1UX-9PLYrcuQnw7LIKI.crl (hash: Wn9w0l6ucJ9CSz54fbIHzn0HTxkjWJulqe70W+VtYy8=) 2: 70F8E50039AF11EE8486453DC4F9AE02.roa (hash: CQ2YO4KFwTMH/P0kajoe5d8Btg/O5fE6q6xcjIQsWNk=) 3: BA1EA120E6FC11EE96775810C4F9AE02.roa (hash: sB4pmseHL4MX5nc05THnJz70E6W3QfcckHXpmWVSxtQ=) 4: FEDDF63AE6FC11EE8AD61644C4F9AE02.roa (hash: nPDF1Ky8Z4ZJlPWH1PkLPctnsIih8GHSZ5cqXRTU56A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:15:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4623 (0x120f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91655EF, serialNumber=074E16CCA080D545FEF4F2D8ADCB909F0ECB20A2 Validity Not Before: Nov 4 17:15:32 2025 GMT Not After : Nov 11 17:15:32 2025 GMT Subject: CN=690a34b4-3054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:53:84:07:66:61:50:24:92:24:25:2c:43:d3: 0a:d2:3f:89:12:6b:9a:79:44:24:64:b2:13:dc:5e: 8d:34:e6:79:47:87:10:b9:96:b5:47:f8:19:b0:77: 99:94:21:26:46:a7:9a:8b:2e:b5:63:a0:b5:8a:cb: 9f:b1:d0:39:05:53:12:82:f9:0f:b5:86:da:20:bb: 13:13:8e:67:88:07:c2:80:ad:17:79:82:0f:29:24: 51:1a:3f:f1:aa:d5:41:5b:65:80:1c:d1:46:95:c6: 18:68:00:ed:f2:b1:bf:41:ea:56:f9:ef:c2:ca:1e: b6:5d:79:37:83:79:23:66:f0:95:c4:4b:bb:f9:0f: 32:47:9a:88:33:bb:d5:8f:88:26:72:7f:b1:97:70: 23:7e:41:86:bc:1e:f5:ad:f9:16:16:a1:af:0b:75: 06:76:0d:52:f1:56:6f:96:76:bd:62:3c:3c:ca:90: 01:81:ac:0c:b5:d0:c6:d9:16:8c:87:4c:a1:bb:eb: ee:91:8e:dd:22:c3:ec:9d:e7:e4:26:c4:f2:29:b1: 5c:1a:98:97:a4:e9:21:5c:7e:ca:04:8f:f6:b1:94: 2a:19:b8:7a:c6:77:6a:0e:75:4a:3a:65:83:81:24: 84:64:13:01:8a:48:34:8d:2d:23:88:44:6b:82:30: 5a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E2:73:1C:3C:80:CC:CF:69:99:10:45:12:F5:73:C7:D5:3B:C8:DA X509v3 Authority Key Identifier: keyid:07:4E:16:CC:A0:80:D5:45:FE:F4:F2:D8:AD:CB:90:9F:0E:CB:20:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B04WzKCA1UX-9PLYrcuQnw7LIKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91655EF/607729D0FAC111E8BC76D671C4F9AE02/B04WzKCA1UX-9PLYrcuQnw7LIKI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:9f:bc:20:53:44:96:96:46:ee:36:a2:08:08:0c:99:07:14: fc:3a:5a:3e:d6:e6:c8:8b:c1:20:e8:21:16:0f:25:4b:4a:65: 74:d6:34:80:58:52:d8:64:e9:dd:7f:66:3c:68:e4:38:d7:05: bc:6a:21:69:80:e3:d7:2c:d3:9b:1c:6d:a8:88:d2:27:13:9f: db:45:70:71:38:59:00:23:d6:89:62:15:78:e7:ec:3c:bd:33: d6:94:2c:d9:fe:55:b0:1c:0c:16:66:ed:ff:79:6e:cc:5f:82: d5:c5:13:83:04:8f:df:c0:13:99:91:77:c8:22:77:0f:75:10: 00:0a:cd:1e:94:31:2d:47:3f:06:5f:4f:a6:c3:7b:ba:4f:d1: 39:74:f5:95:94:38:18:d2:f3:1e:a4:9e:10:cb:87:08:41:b4: b6:3d:47:e2:b0:64:d6:13:f3:79:5f:b9:6a:9c:39:9b:b8:2d: 44:0d:e6:ad:d5:4d:66:d1:dc:76:39:ed:ad:01:79:f9:d0:77: 3e:cb:d2:1b:29:55:28:23:4b:1e:0c:62:28:14:97:a3:50:27: 3e:92:a3:b3:fa:fe:54:db:12:7a:5c:ab:f7:40:05:90:86:d8: 56:a6:bd:d8:06:2f:73:27:e4:8a:e0:8c:a3:a1:46:aa:4b:33: 99:61:6a:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU1RUYxMTAvBgNVBAUTKDA3NEUxNkNDQTA4MEQ1NDVGRUY0RjJEOEFEQ0I5MDlG MEVDQjIwQTIwHhcNMjUxMTA0MTcxNTMyWhcNMjUxMTExMTcxNTMyWjAYMRYwFAYD VQQDEw02OTBhMzRiNC0zMDU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FOEB2ZhUCSSJCUsQ9MK0j+JEmuaeUQkZLIT3F6NNOZ5R4cQuZa1R/gZsHeZ lCEmRqeaiy61Y6C1isufsdA5BVMSgvkPtYbaILsTE45niAfCgK0XeYIPKSRRGj/x qtVBW2WAHNFGlcYYaADt8rG/QepW+e/Cyh62XXk3g3kjZvCVxEu7+Q8yR5qIM7vV j4gmcn+xl3AjfkGGvB71rfkWFqGvC3UGdg1S8VZvlna9Yjw8ypABgawMtdDG2RaM h0yhu+vukY7dIsPsnefkJsTyKbFcGpiXpOkhXH7KBI/2sZQqGbh6xndqDnVKOmWD gSSEZBMBikg0jS0jiERrgjBa+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDXicxw8 gMzPaZkQRRL1c8fVO8jaMB8GA1UdIwQYMBaAFAdOFsyggNVF/vTy2K3LkJ8OyyCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTVFRi82MDc3MjlEMEZB QzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFVWC05UExZcmN1UW53N0xJ S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0IwNFd6S0NBMVVYLTlQTFlyY3VRbnc3TElLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTVFRi82MDc3MjlEMEZBQzExMUU4QkM3NkQ2NzFDNEY5QUUwMi9CMDRXektDQTFV WC05UExZcmN1UW53N0xJS0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRn7wgU0SWlkbuNqIICAyZBxT8Olo+1ubIi8Eg6CEWDyVLSmV01jSA WFLYZOndf2Y8aOQ41wW8aiFpgOPXLNObHG2oiNInE5/bRXBxOFkAI9aJYhV45+w8 vTPWlCzZ/lWwHAwWZu3/eW7MX4LVxRODBI/fwBOZkXfIIncPdRAACs0elDEtRz8G X0+mw3u6T9E5dPWVlDgY0vMepJ4Qy4cIQbS2PUfisGTWE/N5X7lqnDmbuC1EDeat 1U1m0dx2Oe2tAXn50Hc+y9IbKVUoI0seDGIoFJejUCc+kqOz+v5U2xJ6XKv3QAWQ hthWpr3YBi9zJ+SK4IyjoUaqSzOZYWpg -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:52 2025 by rpki-client