$ rpki-client -vvf rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft File: rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft (raw, json) Hash identifier: PB3es35PphIKyMIPTc0BI/9Ld0ywcuvaSD5EsLdoH5g= Subject key identifier: F8:2E:64:AC:FA:45:3F:32:B6:D9:B0:F8:1B:BE:56:0D:8C:B7:AA:E1 Authority key identifier: AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 Certificate issuer: /CN=A91878B2/serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Certificate serial: 06C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft Manifest number: 06BD Signing time: Tue 04 Nov 2025 22:13:28 +0000 Manifest this update: Tue 04 Nov 2025 22:13:27 +0000 Manifest next update: Tue 11 Nov 2025 22:13:27 +0000 Files and hashes: 1: rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl (hash: SONErOL7UCLaMLSOHE7B0zmDvBeQTQfWqm2iPCb8c9Y=) 2: 47249F9E7D7D11EBA5FADA5FC4F9AE02.roa (hash: nOK4DMRRD7EMHW1vygJSaZC/Q2N8Vn6fopdd1X9izD0=) 3: 467830CE7D7D11EBA5FADA5FC4F9AE02.roa (hash: Hr3eqEAtIPRi0Gbgk6nGIIh7VqbumXAU2t+2EOfBUjg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:13:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1737 (0x6c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91878B2, serialNumber=ADDEE909A3167621553FD44E0224D38A06787987 Validity Not Before: Nov 4 22:13:27 2025 GMT Not After : Nov 11 22:13:27 2025 GMT Subject: CN=690a7a87-cbab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:e2:c7:4b:af:25:26:38:5e:d9:d4:f9:80: 55:f3:6e:1d:72:cc:b1:a2:b3:5c:4d:ea:ef:2e:ee: f7:b5:37:2d:e9:d9:14:ea:6d:3b:37:5a:1c:d9:ce: f0:d3:e1:db:76:e3:a7:c7:e1:8c:42:a4:b6:64:54: 36:58:cf:ed:8c:f6:93:3f:42:f1:d8:26:b2:94:37: 43:e7:b3:b1:c8:7f:2e:b7:cc:87:9a:e0:25:a7:bd: 8d:9b:e8:55:cf:a7:b3:62:db:48:f2:f2:65:4a:b4: a3:63:b2:23:da:5e:1a:5d:1e:c6:a0:10:f2:70:0c: 7d:09:28:f2:16:f5:08:38:b8:b8:cf:5a:de:39:6a: 3a:3f:37:02:de:59:59:3d:6f:29:63:a9:f7:da:85: bf:83:92:46:70:c3:25:f3:a2:47:c4:47:8e:3e:93: ef:96:53:c7:ef:02:46:5a:12:10:04:14:c2:b1:ac: 9b:e2:b3:fd:05:f7:28:65:f4:5b:08:a3:45:aa:c5: 2e:9f:fe:3e:97:03:08:fa:78:90:7c:c2:99:76:dd: ab:a4:13:2c:63:92:1a:36:2f:29:12:23:76:92:e7: 6d:d4:d5:55:d9:97:b4:33:98:c7:dc:e6:8c:13:56: 80:a8:ff:06:13:21:18:61:5c:28:0a:b0:86:1a:b0: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:2E:64:AC:FA:45:3F:32:B6:D9:B0:F8:1B:BE:56:0D:8C:B7:AA:E1 X509v3 Authority Key Identifier: keyid:AD:DE:E9:09:A3:16:76:21:55:3F:D4:4E:02:24:D3:8A:06:78:79:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rd7pCaMWdiFVP9ROAiTTigZ4eYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91878B2/739BBA5A7D7B11EBA622275BC4F9AE02/rd7pCaMWdiFVP9ROAiTTigZ4eYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 04:c1:bb:7b:9b:2c:f1:2d:8e:0f:c9:e6:51:4d:93:73:fd:1e: 64:d9:96:62:f8:03:c2:25:02:8d:90:ef:95:b0:3f:8e:b0:fb: 51:16:19:37:ca:4a:40:6b:2a:57:34:39:f9:a1:f7:be:3e:42: ca:67:68:ed:cf:4b:2e:6a:a0:8e:fb:62:7f:bd:b8:e2:09:15: 2d:8d:5a:ce:a8:ba:0e:d6:d1:34:ff:fa:69:03:8a:cd:58:7f: c0:e0:be:97:72:ad:73:4a:09:a6:4a:5f:b7:be:da:64:29:b8: da:a5:82:1c:45:3b:c3:bd:07:6f:fa:24:da:42:1b:03:3f:21: 2e:bd:e8:52:cc:1b:b0:84:1d:65:b8:fa:0d:17:14:77:aa:d8: 4d:64:f2:32:7f:92:74:54:0d:4b:04:37:8e:9a:9b:70:41:32: d9:4d:aa:cd:66:96:d4:c1:03:85:77:71:2e:2c:ff:07:d5:c7: 17:87:b0:f0:fe:e1:52:93:96:8b:0f:47:f9:44:45:45:8d:b8: ea:f0:58:fe:69:25:bd:b8:6c:7a:4d:78:36:b2:bd:da:76:9c: f0:e8:ed:58:a4:43:d1:ec:2b:f3:48:06:f7:8c:f8:04:f9:e4: 2d:0e:f6:cc:4e:19:28:d4:5e:18:cd:ec:a5:2f:b6:6f:73:99: 1c:99:5c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc4QjIxMTAvBgNVBAUTKEFEREVFOTA5QTMxNjc2MjE1NTNGRDQ0RTAyMjREMzhB MDY3ODc5ODcwHhcNMjUxMTA0MjIxMzI3WhcNMjUxMTExMjIxMzI3WjAYMRYwFAYD VQQDEw02OTBhN2E4Ny1jYmFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3Uzix0uvJSY4XtnU+YBV824dcsyxorNcTervLu73tTct6dkU6m07N1oc2c7w 0+HbduOnx+GMQqS2ZFQ2WM/tjPaTP0Lx2CaylDdD57OxyH8ut8yHmuAlp72Nm+hV z6ezYttI8vJlSrSjY7Ij2l4aXR7GoBDycAx9CSjyFvUIOLi4z1reOWo6PzcC3llZ PW8pY6n32oW/g5JGcMMl86JHxEeOPpPvllPH7wJGWhIQBBTCsayb4rP9BfcoZfRb CKNFqsUun/4+lwMI+niQfMKZdt2rpBMsY5IaNi8pEiN2kudt1NVV2Ze0M5jH3OaM E1aAqP8GEyEYYVwoCrCGGrAT3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPguZKz6 RT8yttmw+Bu+Vg2Mt6rhMB8GA1UdIwQYMBaAFK3e6QmjFnYhVT/UTgIk04oGeHmH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzhCMi83MzlCQkE1QTdE N0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2RpRlZQOVJPQWlUVGlnWjRl WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JkN3BDYU1XZGlGVlA5Uk9BaVRUaWdaNGVZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzhCMi83MzlCQkE1QTdEN0IxMUVCQTYyMjI3NUJDNEY5QUUwMi9yZDdwQ2FNV2Rp RlZQOVJPQWlUVGlnWjRlWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAEwbt7myzxLY4PyeZRTZNz/R5k2ZZi+APCJQKNkO+VsD+OsPtRFhk3 ykpAaypXNDn5ofe+PkLKZ2jtz0suaqCO+2J/vbjiCRUtjVrOqLoO1tE0//ppA4rN WH/A4L6Xcq1zSgmmSl+3vtpkKbjapYIcRTvDvQdv+iTaQhsDPyEuvehSzBuwhB1l uPoNFxR3qthNZPIyf5J0VA1LBDeOmptwQTLZTarNZpbUwQOFd3EuLP8H1ccXh7Dw /uFSk5aLD0f5REVFjbjq8Fj+aSW9uGx6TXg2sr3adpzw6O1YpEPR7CvzSAb3jPgE +eQtDvbMThko1F4YzeylL7Zvc5kcmVyF -----END CERTIFICATE-----Generated at Wed Nov 5 23:06:30 2025 by rpki-client