$ rpki-client -vvf rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft File: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft (raw, json) Hash identifier: RbhGGlvWG7GbmS0bDAPZreXLuiNBcG8WjFbzPhb4QWE= Subject key identifier: 26:27:8D:7A:18:78:6A:05:D1:CF:BE:72:B8:9A:A2:5E:EE:E4:AF:68 Authority key identifier: 7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 Certificate issuer: /CN=A91803B8/serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Certificate serial: 0B19 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft Manifest number: 0B0B Signing time: Sun 02 Nov 2025 19:20:02 +0000 Manifest this update: Sun 02 Nov 2025 19:20:02 +0000 Manifest next update: Sun 09 Nov 2025 19:20:02 +0000 Files and hashes: 1: ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl (hash: 8Nc3Mw0gcPR8lzHWiX9XAO3Ej154gUOBhmDsYRmG2B0=) 2: 378397D8539A11EAAA519470C4F9AE02.roa (hash: h5uNrPFBAo9PVtuy9fkhCKzQMKirI5eC6bYq1yraKFU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2841 (0xb19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91803B8, serialNumber=7EDE2765365414EA5C1D9E49F1788D094EABFB74 Validity Not Before: Nov 2 19:20:02 2025 GMT Not After : Nov 9 19:20:02 2025 GMT Subject: CN=6907aee2-677e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f5:66:af:f8:38:c3:6d:9b:2b:34:74:dd:8a: 87:3d:13:aa:0b:cb:2a:88:19:04:bf:a1:8f:af:e0: 05:a3:71:bc:e8:79:86:53:b5:8e:e7:74:be:da:72: 5b:93:cc:58:09:1c:44:33:f8:64:e3:5c:21:12:22: 9f:a7:2e:85:94:85:a1:57:1d:a7:3c:20:6d:bc:8f: 4c:6a:05:2f:41:9b:b2:21:bd:9b:e1:65:84:ab:ef: be:53:07:8a:66:3e:ad:96:57:2b:fa:a0:5a:41:73: f8:98:3c:2e:b0:d4:c1:46:67:c1:39:a6:a9:f4:ee: b0:46:88:de:94:ac:a4:60:f2:3d:cb:57:09:38:54: 61:de:a1:65:b0:f4:ed:c9:4b:05:49:f1:f9:eb:92: 79:0a:a5:ef:b9:61:de:31:82:1a:2c:b5:96:3c:d7: a2:d9:2d:cb:50:44:81:79:fd:ee:4e:93:08:fe:c2: f4:06:e8:a2:2f:05:3d:c9:82:25:70:cb:eb:8b:1a: 03:9f:79:da:05:61:19:91:16:01:15:48:80:f8:99: 15:96:82:44:f3:9a:0c:45:17:14:18:98:d3:74:b1: 1a:51:80:3e:21:ce:99:11:32:c2:45:91:b9:2c:81: 0c:51:f7:10:66:21:91:1c:0a:33:24:3d:6d:ab:c4: b8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:27:8D:7A:18:78:6A:05:D1:CF:BE:72:B8:9A:A2:5E:EE:E4:AF:68 X509v3 Authority Key Identifier: keyid:7E:DE:27:65:36:54:14:EA:5C:1D:9E:49:F1:78:8D:09:4E:AB:FB:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803B8/3D6B5934539911EA9EAD4B6FC4F9AE02/ft4nZTZUFOpcHZ5J8XiNCU6r-3Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e9:91:2f:68:d1:fa:c3:cf:ac:99:ea:5e:d5:20:00:bb:45: a4:3c:e8:96:46:f4:f2:32:ee:98:0f:af:ed:69:5e:65:f3:13: 18:26:df:19:1c:78:72:99:af:a6:2e:4f:0b:a4:bf:cb:04:4b: d2:20:47:1f:fa:fe:bf:e8:89:68:bd:e0:62:ee:87:13:e5:fc: 64:0f:d0:63:4e:dc:67:d8:82:47:16:7b:31:be:95:2c:89:72: 3d:b9:39:fa:b6:99:f3:a7:0e:15:f4:9f:f5:63:36:2d:e3:47: 44:0f:02:6a:04:42:f8:f4:08:f5:1b:36:83:d2:10:da:68:4e: 81:2e:82:95:65:ad:cd:26:73:0a:f9:3d:e2:3a:76:dc:2e:18: 43:34:1e:4f:89:2a:fe:8a:dd:6c:6b:a7:37:53:44:f2:fd:71: ad:bd:53:90:b5:f2:98:c2:02:08:39:c5:22:62:6f:96:c6:f5: a2:a5:0e:39:49:79:00:14:f4:51:e6:d2:1d:c4:ef:53:5b:1d: e5:6e:8c:54:e4:30:49:8b:87:d6:11:04:c9:49:e1:38:c7:52: 60:4f:02:ba:98:da:bb:7e:aa:b7:53:87:95:1a:73:4e:2c:80: 28:00:82:54:3d:56:a8:3b:17:47:0d:28:99:f0:5c:18:e1:6f: c9:51:4b:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODAzQjgxMTAvBgNVBAUTKDdFREUyNzY1MzY1NDE0RUE1QzFEOUU0OUYxNzg4RDA5 NEVBQkZCNzQwHhcNMjUxMTAyMTkyMDAyWhcNMjUxMTA5MTkyMDAyWjAYMRYwFAYD VQQDEw02OTA3YWVlMi02NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfVmr/g4w22bKzR03YqHPROqC8sqiBkEv6GPr+AFo3G86HmGU7WO53S+2nJb k8xYCRxEM/hk41whEiKfpy6FlIWhVx2nPCBtvI9MagUvQZuyIb2b4WWEq+++UweK Zj6tllcr+qBaQXP4mDwusNTBRmfBOaap9O6wRojelKykYPI9y1cJOFRh3qFlsPTt yUsFSfH565J5CqXvuWHeMYIaLLWWPNei2S3LUESBef3uTpMI/sL0BuiiLwU9yYIl cMvrixoDn3naBWEZkRYBFUiA+JkVloJE85oMRRcUGJjTdLEaUYA+Ic6ZETLCRZG5 LIEMUfcQZiGRHAozJD1tq8S4ZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCYnjXoY eGoF0c++criaol7u5K9oMB8GA1UdIwQYMBaAFH7eJ2U2VBTqXB2eSfF4jQlOq/t0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MDNCOC8zRDZCNTkzNDUz OTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZPcGNIWjVKOFhpTkNVNnIt M1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z0NG5aVFpVRk9wY0haNUo4WGlOQ1U2ci0zUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 MDNCOC8zRDZCNTkzNDUzOTkxMUVBOUVBRDRCNkZDNEY5QUUwMi9mdDRuWlRaVUZP cGNIWjVKOFhpTkNVNnItM1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB76ZEvaNH6w8+smepe1SAAu0WkPOiWRvTyMu6YD6/taV5l8xMYJt8Z HHhyma+mLk8LpL/LBEvSIEcf+v6/6IloveBi7ocT5fxkD9BjTtxn2IJHFnsxvpUs iXI9uTn6tpnzpw4V9J/1YzYt40dEDwJqBEL49Aj1GzaD0hDaaE6BLoKVZa3NJnMK +T3iOnbcLhhDNB5PiSr+it1sa6c3U0Ty/XGtvVOQtfKYwgIIOcUiYm+WxvWipQ45 SXkAFPRR5tIdxO9TWx3lboxU5DBJi4fWEQTJSeE4x1JgTwK6mNq7fqq3U4eVGnNO LIAoAIJUPVaoOxdHDSiZ8FwY4W/JUUuf -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:17 2025 by rpki-client