$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: gvtXqayZeA8Yzt2w4V/kml2y9wt5nQ6upogPKOODM9w= Subject key identifier: 20:01:B6:5A:ED:34:90:F5:C7:C8:1D:4B:F3:FE:A1:AE:BA:B3:23:B1 Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0FB5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FA3 Signing time: Sun 02 Nov 2025 17:32:53 +0000 Manifest this update: Sun 02 Nov 2025 17:32:52 +0000 Manifest next update: Sun 09 Nov 2025 17:32:52 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: lf8j+Ylx7UZWTu0b55evktBBJuXAAg+1kwZRVV7pFvU=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: EAEo2CWZrqKlxbxQ35euXD3MOHKDbeB7itc8qDQhAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:32:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4021 (0xfb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Nov 2 17:32:52 2025 GMT Not After : Nov 9 17:32:52 2025 GMT Subject: CN=690795c5-b6f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f5:28:07:f4:d7:aa:23:10:aa:2c:0a:46:e1: 18:34:ad:18:ba:a7:5a:ee:80:79:06:40:ed:74:99: ec:ae:68:ec:bf:06:02:b5:5a:68:d2:b1:e0:8c:73: 50:75:55:b3:74:f3:99:3c:d2:db:ee:14:f9:9e:77: 39:71:37:72:52:ca:12:e0:b1:b5:30:74:c7:01:db: db:6b:22:eb:f6:62:e9:fb:5f:ac:39:66:0c:cb:dd: 9b:8a:30:ff:3c:20:97:75:e6:47:e2:e0:17:40:69: 4b:d1:b0:6f:87:7c:8e:38:58:09:0d:c0:09:ab:44: cf:84:d2:3e:48:b6:4e:2d:66:f6:c1:68:20:23:24: 4f:a9:af:cc:63:89:96:54:83:58:f7:05:14:e3:ad: 56:6a:1f:1f:17:59:00:50:15:20:93:13:ee:4e:49: ce:37:6f:b2:b0:ac:a8:04:89:93:84:12:11:f8:66: c6:81:0a:6a:7d:ae:10:ec:0a:ea:d6:b0:fd:44:00: ce:12:0b:80:f0:66:d3:1c:e5:78:75:2a:bc:00:97: ef:57:a4:85:f3:ce:74:74:2e:ff:a6:55:e6:3a:9a: 7c:c9:f5:81:00:a1:39:37:48:15:a6:d6:29:b0:eb: 02:b0:69:ae:62:34:6f:85:6c:3b:df:f4:8f:b2:e2: 7b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:01:B6:5A:ED:34:90:F5:C7:C8:1D:4B:F3:FE:A1:AE:BA:B3:23:B1 X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:8d:f4:0b:20:44:a0:87:4a:63:70:fc:07:c4:39:8c:83: b3:c4:d9:60:1d:57:95:d8:4b:c7:2c:17:5a:50:39:7d:f9:f9: 3e:0f:b1:17:37:4a:59:92:83:b8:16:af:d7:35:41:5b:eb:d9: 3d:32:ee:ba:49:45:bc:aa:ab:77:c4:78:d4:04:f0:74:73:a3: 2b:27:92:8e:6f:9b:cd:77:30:27:14:4c:ce:a7:1a:26:ea:c2: d4:35:61:27:ad:1a:5e:0e:5a:b2:f3:c0:56:7c:5c:76:41:40: 55:07:4c:13:96:04:08:0d:f1:68:6f:bb:c4:2d:8d:50:cd:67: 42:cd:e0:a5:2c:bb:c4:d0:3f:a0:46:a6:4a:db:96:2b:e3:72: 68:b9:7c:d1:3c:3f:bd:bc:57:88:64:4f:2f:93:b2:88:cc:a2: 3f:5b:3f:38:ac:dd:a9:96:be:ec:37:02:a9:a7:22:d1:e7:1b: 07:7d:98:1a:f8:84:a3:56:25:84:50:92:98:cd:2f:3a:e7:7a: 05:a7:16:51:10:df:a5:10:38:18:62:ca:5a:52:17:e2:79:22: 5c:2d:2a:d0:40:e1:f3:91:3e:21:bb:9e:1f:64:f2:08:c0:b9: d8:90:0d:b4:8d:a6:d5:54:2a:e0:27:8d:58:b0:0f:33:fd:5f: 81:63:fc:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUxMTAyMTczMjUyWhcNMjUxMTA5MTczMjUyWjAYMRYwFAYD VQQDEw02OTA3OTVjNS1iNmY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxvUoB/TXqiMQqiwKRuEYNK0Yuqda7oB5BkDtdJnsrmjsvwYCtVpo0rHgjHNQ dVWzdPOZPNLb7hT5nnc5cTdyUsoS4LG1MHTHAdvbayLr9mLp+1+sOWYMy92bijD/ PCCXdeZH4uAXQGlL0bBvh3yOOFgJDcAJq0TPhNI+SLZOLWb2wWggIyRPqa/MY4mW VINY9wUU461Wah8fF1kAUBUgkxPuTknON2+ysKyoBImThBIR+GbGgQpqfa4Q7Arq 1rD9RADOEguA8GbTHOV4dSq8AJfvV6SF8850dC7/plXmOpp8yfWBAKE5N0gVptYp sOsCsGmuYjRvhWw73/SPsuJ7tQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCABtlrt NJD1x8gdS/P+oa66syOxMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl6430CyBEoIdKY3D8B8Q5jIOzxNlgHVeV2EvHLBdaUDl9+fk+D7EX N0pZkoO4Fq/XNUFb69k9Mu66SUW8qqt3xHjUBPB0c6MrJ5KOb5vNdzAnFEzOpxom 6sLUNWEnrRpeDlqy88BWfFx2QUBVB0wTlgQIDfFob7vELY1QzWdCzeClLLvE0D+g RqZK25Yr43JouXzRPD+9vFeIZE8vk7KIzKI/Wz84rN2plr7sNwKppyLR5xsHfZga +ISjViWEUJKYzS8653oFpxZREN+lEDgYYspaUhfieSJcLSrQQOHzkT4hu54fZPII wLnYkA20jabVVCrgJ41YsA8z/V+BY/yK -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:16 2025 by rpki-client