$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft File: F2vOFchi1HunYKH2ZTj4HVxJO4E.mft (raw, json) Hash identifier: 7aTtRB3SjRGPDqdo2WXCZixpXMgSHKn5GmtBvg7QXsQ= Subject key identifier: 74:49:D6:FE:BC:2B:FB:21:E7:9B:30:38:0F:B8:91:8C:5C:B8:76:B3 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: B3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft Manifest number: B2 Signing time: Mon 03 Nov 2025 06:03:55 +0000 Manifest this update: Mon 03 Nov 2025 06:03:55 +0000 Manifest next update: Mon 10 Nov 2025 06:03:55 +0000 Files and hashes: 1: F2vOFchi1HunYKH2ZTj4HVxJO4E.crl (hash: jlwqkvtTzjJMGP5gYaAT3fBDDnI+cdUQifg04ojeX+4=) 2: 2CE10886A68511EFB0CF9981C4F9AE02.roa (hash: veK+ihHT7rgGehPtR5m7GK/hbNWI81sjRNiKcGQwWGg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Nov 3 06:03:55 2025 GMT Not After : Nov 10 06:03:55 2025 GMT Subject: CN=690845cb-beeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:79:1e:e8:d9:b9:9e:08:da:1a:aa:14:60:65: 98:ea:a0:34:e7:fa:96:68:c6:54:6e:3f:9d:3c:11: 46:01:30:da:21:86:09:d7:2b:7e:14:99:90:90:f9: e7:0b:2c:24:72:74:80:f5:5d:1c:15:8d:51:58:88: 7e:1c:ed:e8:b4:9b:d4:27:ac:ff:9a:85:73:ce:0b: f3:9e:4a:3a:b2:4a:20:96:1e:d3:1b:11:1c:7a:21: bf:47:56:e6:5b:0f:70:54:f8:ef:81:35:8e:83:ef: d6:13:67:da:6c:5d:5b:aa:f6:d3:a8:52:e7:f1:df: 14:5d:25:83:1e:67:96:71:86:fd:04:75:9d:f6:f0: d9:0f:99:70:1a:6a:8a:9e:80:80:02:8f:8c:0d:99: 78:c2:47:82:34:73:8e:40:ee:c8:e7:bc:9d:92:35: b0:4c:1a:d2:c7:23:98:fa:8c:73:a7:24:04:6e:58: 12:be:66:c1:95:e4:66:33:1d:2d:68:01:a9:66:0c: 8c:c5:c2:8f:cf:40:bf:d4:9b:d0:2d:b7:53:3e:c6: 8b:63:07:62:5b:db:99:86:c9:cc:92:94:05:e2:2b: 38:95:13:09:40:7d:45:3c:28:bc:51:0b:62:b7:a3: 80:f4:52:7a:3b:ec:11:8e:19:2f:86:cf:2a:8e:4b: 72:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:49:D6:FE:BC:2B:FB:21:E7:9B:30:38:0F:B8:91:8C:5C:B8:76:B3 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:3b:5a:0e:a9:56:f9:33:03:90:ef:fe:32:97:a4:ae:76:cc: c4:3d:ad:0d:90:c7:9d:0e:5a:a9:de:4a:85:47:e0:51:8a:d8: c5:4f:4d:84:9b:dc:66:a2:7e:e3:07:f0:17:b4:3b:16:ca:9f: 7f:e9:aa:cd:68:dd:88:3b:bb:c9:06:5e:76:0a:f7:3a:69:56: 24:c4:fe:1f:82:4c:92:71:1b:7e:98:ae:d9:3f:bf:fc:15:a8: ef:50:02:88:9f:f4:f9:65:fc:65:e4:98:3b:63:c0:bf:01:52: 44:93:eb:d2:46:5e:33:27:d3:ac:4a:ce:2b:2d:4a:65:0c:9c: 02:35:51:c6:74:2e:c8:55:40:dd:ef:00:ae:39:89:79:20:33: 0d:c5:02:50:98:6f:39:e3:ed:50:83:d4:a6:d9:cf:9a:83:1f: a4:7e:1e:14:14:82:4b:11:6b:4a:ca:36:e3:9d:42:ae:c8:bf: 11:fd:9e:67:34:fe:47:dd:8f:42:3a:61:28:ea:43:9d:59:74: c7:93:a5:1b:23:5c:00:c2:91:9b:78:e6:41:12:cb:5d:2b:c1: ea:bc:b9:15:b7:dc:98:e6:13:a6:c2:7d:04:33:77:40:b2:ed: b4:96:e8:a6:79:f7:b1:c8:5b:85:10:ec:75:ca:d7:c9:71:e5: 90:7c:53:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjUxMTAzMDYwMzU1WhcNMjUxMTEwMDYwMzU1WjAYMRYwFAYD VQQDEw02OTA4NDVjYi1iZWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv3ke6Nm5ngjaGqoUYGWY6qA05/qWaMZUbj+dPBFGATDaIYYJ1yt+FJmQkPnn CywkcnSA9V0cFY1RWIh+HO3otJvUJ6z/moVzzgvznko6skoglh7TGxEceiG/R1bm Ww9wVPjvgTWOg+/WE2fabF1bqvbTqFLn8d8UXSWDHmeWcYb9BHWd9vDZD5lwGmqK noCAAo+MDZl4wkeCNHOOQO7I57ydkjWwTBrSxyOY+oxzpyQEblgSvmbBleRmMx0t aAGpZgyMxcKPz0C/1JvQLbdTPsaLYwdiW9uZhsnMkpQF4is4lRMJQH1FPCi8UQti t6OA9FJ6O+wRjhkvhs8qjktyUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHRJ1v68 K/sh55swOA+4kYxcuHazMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MDZFNC8zMkU5OTNDMEE2ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFI dW5ZS0gyWlRqNEhWeEpPNEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvO1oOqVb5MwOQ7/4yl6SudszEPa0NkMedDlqp3kqFR+BRitjFT02E m9xmon7jB/AXtDsWyp9/6arNaN2IO7vJBl52Cvc6aVYkxP4fgkyScRt+mK7ZP7/8 FajvUAKIn/T5Zfxl5Jg7Y8C/AVJEk+vSRl4zJ9OsSs4rLUplDJwCNVHGdC7IVUDd 7wCuOYl5IDMNxQJQmG854+1Qg9Sm2c+agx+kfh4UFIJLEWtKyjbjnUKuyL8R/Z5n NP5H3Y9COmEo6kOdWXTHk6UbI1wAwpGbeOZBEstdK8HqvLkVt9yY5hOmwn0EM3dA su20luimefexyFuFEOx1ytfJceWQfFOB -----END CERTIFICATE-----Generated at Tue Nov 4 22:52:13 2025 by rpki-client