$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft File: 7NpzBwy2x3kNxguGn7sEMdln3k4.mft (raw, json) Hash identifier: nXLntH8fKhb+wlmXDSTFSa2jMWB6HHs1ZFok4mmQUBE= Subject key identifier: 17:8E:8D:5B:B6:BE:59:5C:68:C2:3C:A3:79:D0:96:1C:2F:FC:7E:E2 Authority key identifier: EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E Certificate issuer: /CN=A91A5C43/serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Certificate serial: 074E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft Manifest number: 0742 Signing time: Sun 02 Nov 2025 21:43:03 +0000 Manifest this update: Sun 02 Nov 2025 21:43:03 +0000 Manifest next update: Sun 09 Nov 2025 21:43:02 +0000 Files and hashes: 1: 7NpzBwy2x3kNxguGn7sEMdln3k4.crl (hash: A7Mq7z/BfSAyNwNu+1f2G5wAMr1zX4wSrp+HVFnjxXM=) 2: 69482E56075411EFB23BE380C4F9AE02.roa (hash: ZFKSwCcup8+isfjjo8Cp7fgQpt81FqZFYGAbu1futQs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1870 (0x74e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5C43, serialNumber=ECDA73070CB6C7790DC60B869FBB0431D967DE4E Validity Not Before: Nov 2 21:43:03 2025 GMT Not After : Nov 9 21:43:02 2025 GMT Subject: CN=6907d067-0a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8b:3f:9e:7e:bc:84:00:00:8b:d5:8f:df:4e: b8:e5:e1:ce:5f:fd:ea:92:dd:f4:30:1c:dc:a8:19: 96:c5:b5:35:39:35:44:96:db:20:1d:ab:00:b6:8b: 6c:3e:95:f8:ba:9d:fe:58:71:ea:15:5f:c9:fd:4f: 23:34:87:50:6e:fb:7e:11:e8:6e:24:41:fe:37:46: e2:66:8e:06:42:a2:ce:26:69:f3:c5:96:d1:a6:1f: a5:33:22:11:b4:40:f0:3b:8b:20:1a:cb:3e:ed:d4: 46:ba:8e:f5:cd:9b:23:04:3c:1a:6e:18:b7:ca:31: 8e:64:6c:98:17:e8:c4:f3:57:56:85:17:0f:7b:61: ee:9e:84:ce:98:f8:d0:0d:02:ed:56:5c:b1:1b:81: 80:fa:b5:55:8d:41:1e:54:04:35:8b:f6:18:98:c0: 88:90:18:23:7c:31:a4:0e:ee:da:3d:91:f5:b2:30: e4:24:f4:2e:9e:62:6e:64:e9:80:ac:be:98:d9:5d: eb:a1:e8:78:04:5b:4e:22:e6:d1:9c:b8:74:53:08: 2d:09:d7:e6:f4:ce:62:ae:d2:e4:1e:b4:a7:9b:54: 33:20:6e:6f:1f:df:6d:b6:e2:30:22:49:1b:5d:cb: b8:17:40:63:74:64:74:fb:12:04:55:71:55:50:96: 62:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:8E:8D:5B:B6:BE:59:5C:68:C2:3C:A3:79:D0:96:1C:2F:FC:7E:E2 X509v3 Authority Key Identifier: keyid:EC:DA:73:07:0C:B6:C7:79:0D:C6:0B:86:9F:BB:04:31:D9:67:DE:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7NpzBwy2x3kNxguGn7sEMdln3k4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5C43/89E36E6A4B2C11EB911BAD70C4F9AE02/7NpzBwy2x3kNxguGn7sEMdln3k4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b7:4a:a7:84:7f:97:ea:2f:9d:f6:6e:fe:ec:e9:65:29:38: 09:15:de:94:48:f9:bc:ef:f0:49:df:cd:98:9b:9a:c5:6b:58: 96:8f:02:61:5d:e6:aa:97:4f:d1:44:6c:af:54:b2:e0:5e:60: e1:0e:ca:fe:9b:76:33:ac:e9:67:97:96:28:54:4f:af:f7:59: a8:b2:f9:fc:96:c1:54:35:93:ec:ec:03:c4:25:fb:5f:4b:c5: 19:a8:3f:8f:9a:66:78:22:2e:a4:f5:5d:0f:bf:8a:13:e0:35: 90:c7:28:b3:ce:7f:a5:0c:2a:f7:0f:05:fa:ca:ce:f3:5c:30: 9f:cc:0a:17:8c:70:cb:63:45:e3:0e:3a:41:e7:09:1f:6e:54: 28:84:39:63:f2:1b:f2:5f:f7:3c:42:37:aa:89:ed:16:37:84: 53:e9:24:c9:ea:7a:7f:3e:1e:34:53:49:90:d2:72:ad:46:5f: e4:11:a2:15:fa:a5:6b:a8:47:ec:6f:ed:5d:5c:5a:35:d4:af: 5f:9f:0d:a3:25:4d:ba:e1:04:7d:85:6b:94:57:fe:07:b3:ea: 71:1b:35:b9:eb:f2:b6:fd:34:ce:f0:e5:02:da:a3:16:53:4f: 54:f9:77:fb:da:ee:fa:53:c0:60:35:f6:c0:ea:dd:54:dc:de: 03:d1:a5:96 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB04wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTVDNDMxMTAvBgNVBAUTKEVDREE3MzA3MENCNkM3NzkwREM2MEI4NjlGQkIwNDMx RDk2N0RFNEUwHhcNMjUxMTAyMjE0MzAzWhcNMjUxMTA5MjE0MzAyWjAYMRYwFAYD VQQDEw02OTA3ZDA2Ny0wYTdkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp4s/nn68hAAAi9WP30645eHOX/3qkt30MBzcqBmWxbU1OTVEltsgHasAtots PpX4up3+WHHqFV/J/U8jNIdQbvt+EehuJEH+N0biZo4GQqLOJmnzxZbRph+lMyIR tEDwO4sgGss+7dRGuo71zZsjBDwabhi3yjGOZGyYF+jE81dWhRcPe2HunoTOmPjQ DQLtVlyxG4GA+rVVjUEeVAQ1i/YYmMCIkBgjfDGkDu7aPZH1sjDkJPQunmJuZOmA rL6Y2V3roeh4BFtOIubRnLh0UwgtCdfm9M5irtLkHrSnm1QzIG5vH99ttuIwIkkb Xcu4F0BjdGR0+xIEVXFVUJZinQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBeOjVu2 vllcaMI8o3nQlhwv/H7iMB8GA1UdIwQYMBaAFOzacwcMtsd5DcYLhp+7BDHZZ95O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUM0My84OUUzNkU2QTRC MkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngza054Z3VHbjdzRU1kbG4z azQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdOcHpCd3kyeDNrTnhndUduN3NFTWRsbjNrNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NUM0My84OUUzNkU2QTRCMkMxMUVCOTExQkFENzBDNEY5QUUwMi83TnB6Qnd5Mngz a054Z3VHbjdzRU1kbG4zazQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKt0qnhH+X6i+d9m7+7OllKTgJFd6USPm87/BJ382Ym5rFa1iWjwJh Xeaql0/RRGyvVLLgXmDhDsr+m3YzrOlnl5YoVE+v91mosvn8lsFUNZPs7APEJftf S8UZqD+PmmZ4Ii6k9V0Pv4oT4DWQxyizzn+lDCr3DwX6ys7zXDCfzAoXjHDLY0Xj DjpB5wkfblQohDlj8hvyX/c8Qjeqie0WN4RT6STJ6np/Ph40U0mQ0nKtRl/kEaIV +qVrqEfsb+1dXFo11K9fnw2jJU264QR9hWuUV/4Hs+pxGzW56/K2/TTO8OUC2qMW U09U+Xf72u76U8BgNfbA6t1U3N4D0aWW -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:48 2025 by rpki-client