$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft File: MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft (raw, json) Hash identifier: RBc6+BZPQwRQXxKVStN97/JxG+g8FuGhKs0vHWXU3bg= Subject key identifier: C3:FA:8E:3D:4B:A1:C0:EF:4F:C1:A8:75:17:A4:44:8D:C1:B5:6D:CE Authority key identifier: 31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 Certificate issuer: /CN=A91A7B94/serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Certificate serial: 01C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft Manifest number: 01AB Signing time: Mon 03 Nov 2025 03:17:19 +0000 Manifest this update: Mon 03 Nov 2025 03:17:19 +0000 Manifest next update: Mon 10 Nov 2025 03:17:19 +0000 Files and hashes: 1: MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl (hash: /zQQT3Z1Mo4qDxOB3B14/rW5WV5o/7oXTmbdz4zheLI=) 2: 268DF20A940C11EE9B034255C4F9AE02.roa (hash: aCRExS5DnfsTuKFO3j5l5FwgpOm/WlnAPskO0rJLDBs=) 3: 2732E7CE940C11EE9B034255C4F9AE02.roa (hash: DDHSWZe791uy4+U5yKnw8zBiUtA+w+RcnsWDB5ybRyQ=) 4: D29109C4EC6E11EEAEF9610BC4F9AE02.roa (hash: BcLY7oMUnLKfEC6kmeMo8UAfxh3cVF8GTCR1ucwc+GE=) 5: 7474F998377111EE8AFEB74DC4F9AE02.roa (hash: O0JvuW/fAeVeuUsjAYxUZNZozxxHkizgMHqq+vXDxb8=) 6: B0562E7AEC6E11EEB7FC060BC4F9AE02.roa (hash: i5y01FxwrzwvdRLuJ1QWhaUFh0DlOeo/c50i3fKnhnM=) 7: 9D6E545AA84B11F0B4DF3885C4F9AE02.roa (hash: LKz1FayrdnRrvliw00WIAS29yyi3eRFLQzN0+Q7hzDY=) 8: D2093EF4EC6E11EEAEF9610BC4F9AE02.roa (hash: YKptoaPA/kG9oQGSQXRVkcCT64hKQtrNBVoucH+n7WM=) 9: E9874B2A16D011EF90793868C4F9AE02.roa (hash: OMocOIigdUMlThynKaISsjS6m/5nmlE5jKORfpqeU4g=) 10: AFDF1A1AEC6E11EEB7FC060BC4F9AE02.roa (hash: F0RV+JTQGhHlnI/6EwNqqM+RL/9QUrqm1TlGHVe9hmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 452 (0x1c4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B94, serialNumber=3126F4EF05E3AE75A09144B667D39347D4DAA890 Validity Not Before: Nov 3 03:17:19 2025 GMT Not After : Nov 10 03:17:19 2025 GMT Subject: CN=69081ebf-d2a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2d:df:4b:4c:d2:45:a9:e0:e4:51:30:f2:2c: d2:7c:5f:df:75:70:80:54:d3:b6:b6:c4:ab:95:07: 99:ca:39:72:36:bb:5b:61:a8:44:31:f0:c7:ef:69: 28:13:39:82:6b:1c:67:b1:fe:b7:bc:9b:11:b4:a1: b2:8f:3d:d4:99:bb:57:0e:e0:a8:62:d8:6e:7c:77: cd:1a:54:11:06:67:2b:46:0a:ce:f1:bc:24:fa:91: 54:9d:cc:f2:4e:fa:f3:49:1f:17:9e:ad:08:f9:af: 1a:ce:72:31:7a:cc:28:9d:51:40:89:3a:b1:16:ca: 57:9d:d4:6c:d0:3b:e9:7c:96:9c:3c:60:b3:01:5a: d6:15:b1:da:b0:10:8f:5a:7e:2b:7b:05:00:04:b2: 6e:3c:19:98:0b:a1:9a:d5:d1:a7:14:f5:c2:37:3d: d0:a1:ac:88:b6:9c:62:62:9a:58:3f:13:85:bf:c3: 9a:26:8b:c9:7b:2e:e2:50:13:4f:de:6b:ec:36:06: 39:05:08:9f:f5:fc:fd:70:76:f3:88:67:a4:51:19: 0a:11:f8:ed:f2:dd:cd:86:2d:3f:d0:ee:6b:c2:ac: 4f:1a:61:61:fd:87:1e:1f:12:9e:1b:aa:6d:6c:65: 0c:2f:e0:9c:bc:a0:05:ce:78:10:66:d9:df:b8:c6: 6e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FA:8E:3D:4B:A1:C0:EF:4F:C1:A8:75:17:A4:44:8D:C1:B5:6D:CE X509v3 Authority Key Identifier: keyid:31:26:F4:EF:05:E3:AE:75:A0:91:44:B6:67:D3:93:47:D4:DA:A8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MSb07wXjrnWgkUS2Z9OTR9TaqJA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B94/CC741BB6377011EE8DC8BB34C4F9AE02/MSb07wXjrnWgkUS2Z9OTR9TaqJA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c7:c4:d2:96:f8:fa:5c:de:de:af:36:db:30:f8:f1:05:4b: a4:aa:35:75:7a:81:d4:5c:f8:f3:dc:e8:13:bc:d5:29:92:02: 9e:3a:87:8a:ed:18:d2:c3:0d:fa:84:d7:b1:42:9b:65:4d:63: 11:aa:44:4c:73:c5:1d:55:c2:33:1f:04:23:98:3e:2c:e9:75: 07:16:41:f7:a9:a9:93:cd:13:34:3a:de:3e:8a:1a:42:8f:5e: 71:28:f1:03:93:1e:af:74:27:cb:ec:ff:a1:f6:f7:70:6d:8d: 14:15:5d:90:ee:d4:ea:97:84:3e:18:f8:3d:c3:1e:7d:1b:32: f0:d1:e3:82:f8:66:c3:23:ed:3e:6d:1d:f5:d6:a6:34:15:e6: f3:d8:12:0a:33:cf:70:eb:b6:d1:6e:aa:92:1b:2d:e0:b5:27: 5f:02:49:1d:5e:8d:79:ac:8c:f5:fd:d4:92:d1:d7:d2:d3:67: 80:bf:bd:1a:f7:6c:49:81:78:b0:cf:2b:7d:fc:20:8d:36:4c: c5:cd:ec:40:c3:2e:76:0b:5e:e8:34:8f:22:47:6a:03:6c:f6: 18:f1:7e:06:85:5c:7d:18:e4:6f:fd:88:53:5b:01:d6:06:3e: b2:7c:20:4d:29:a9:02:6a:03:6f:90:7a:5f:e1:f3:4a:93:15: fa:53:43:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAcQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTdCOTQxMTAvBgNVBAUTKDMxMjZGNEVGMDVFM0FFNzVBMDkxNDRCNjY3RDM5MzQ3 RDREQUE4OTAwHhcNMjUxMTAzMDMxNzE5WhcNMjUxMTEwMDMxNzE5WjAYMRYwFAYD VQQDEw02OTA4MWViZi1kMmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvi3fS0zSRang5FEw8izSfF/fdXCAVNO2tsSrlQeZyjlyNrtbYahEMfDH72ko EzmCaxxnsf63vJsRtKGyjz3UmbtXDuCoYthufHfNGlQRBmcrRgrO8bwk+pFUnczy TvrzSR8Xnq0I+a8aznIxeswonVFAiTqxFspXndRs0DvpfJacPGCzAVrWFbHasBCP Wn4rewUABLJuPBmYC6Ga1dGnFPXCNz3QoayItpxiYppYPxOFv8OaJovJey7iUBNP 3mvsNgY5BQif9fz9cHbziGekURkKEfjt8t3Nhi0/0O5rwqxPGmFh/YceHxKeG6pt bGUML+CcvKAFzngQZtnfuMZuFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMP6jj1L ocDvT8GodRekRI3BtW3OMB8GA1UdIwQYMBaAFDEm9O8F4651oJFEtmfTk0fU2qiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBN0I5NC9DQzc0MUJCNjM3 NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJuV2drVVMyWjlPVFI5VGFx SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01TYjA3d1hqcm5XZ2tVUzJaOU9UUjlUYXFKQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0I5NC9DQzc0MUJCNjM3NzAxMUVFOERDOEJCMzRDNEY5QUUwMi9NU2IwN3dYanJu V2drVVMyWjlPVFI5VGFxSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsx8TSlvj6XN7erzbbMPjxBUukqjV1eoHUXPjz3OgTvNUpkgKeOoeK 7RjSww36hNexQptlTWMRqkRMc8UdVcIzHwQjmD4s6XUHFkH3qamTzRM0Ot4+ihpC j15xKPEDkx6vdCfL7P+h9vdwbY0UFV2Q7tTql4Q+GPg9wx59GzLw0eOC+GbDI+0+ bR311qY0Febz2BIKM89w67bRbqqSGy3gtSdfAkkdXo15rIz1/dSS0dfS02eAv70a 92xJgXiwzyt9/CCNNkzFzexAwy52C17oNI8iR2oDbPYY8X4GhVx9GORv/YhTWwHW Bj6yfCBNKakCagNvkHpf4fNKkxX6U0Me -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:42 2025 by rpki-client