$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft File: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft (raw, json) Hash identifier: H5dfI1xnTmgGLMbM9OnB8pexgv9MOiraAwP2bXjwE6M= Subject key identifier: 70:72:8B:64:A0:6F:29:DA:DE:95:56:A1:57:2E:E5:28:7B:15:0A:8B Authority key identifier: F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 Certificate issuer: /CN=A91AA053/serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Certificate serial: 0784 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft Manifest number: 077E Signing time: Tue 04 Nov 2025 21:39:15 +0000 Manifest this update: Tue 04 Nov 2025 21:39:15 +0000 Manifest next update: Tue 11 Nov 2025 21:39:15 +0000 Files and hashes: 1: -Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl (hash: r4OX99gyhQ5RteGhdnmWecmj9eH0tg3OKRqHfSdxKxY=) 2: AD7A378C334411EB901EBB81C4F9AE02.roa (hash: eouLcn6xbW+smuD9alEZOIdw6JtJlwl4bM7bG8MTvHk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:39:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1924 (0x784) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA053, serialNumber=F92A750B524794D4FBBF21885BDAF6D078F1E881 Validity Not Before: Nov 4 21:39:15 2025 GMT Not After : Nov 11 21:39:15 2025 GMT Subject: CN=690a7283-b3ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:a0:1d:2e:cd:42:28:01:84:16:7c:14:e7:0e: c1:b3:4b:0f:2d:63:25:1a:e4:26:30:cf:ae:6f:56: cb:62:bb:19:7a:2c:a7:8b:f9:58:6d:2f:44:6a:e9: 38:1f:2b:c2:e8:19:cd:fa:13:8e:64:bb:ea:6b:59: bb:62:2b:a6:c0:15:a9:7a:4b:37:9b:48:f4:99:a9: c9:75:e3:4e:84:40:4c:7d:7f:7b:ef:e1:e5:8e:de: b5:af:bf:b9:48:86:86:85:7b:9a:4d:db:bb:30:53: c4:14:97:bb:1a:be:89:f1:6f:c5:e5:19:51:c6:87: 0c:0b:ed:3a:ce:a8:02:3f:6d:f0:a3:04:66:06:df: bb:5d:be:4c:93:74:bf:38:42:f8:00:1a:9d:40:84: a8:1b:35:dc:46:9f:e8:35:98:34:dc:9a:7f:54:94: 88:4c:84:50:ea:18:46:df:1d:4e:b5:ef:4e:36:74: d1:5c:39:e3:fa:b5:35:ab:ab:4b:7c:0c:dc:5f:df: 7e:0b:cf:a9:73:90:57:7d:9c:35:bc:c4:6d:1d:65: 2c:4a:cf:b9:75:38:63:ef:f4:1c:1f:74:37:8f:d9: 1d:dd:7a:fe:f5:41:69:e2:84:f3:7c:ea:1c:f7:aa: 09:34:d0:ec:34:f6:b2:ad:97:22:51:c8:d0:37:8b: 55:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:72:8B:64:A0:6F:29:DA:DE:95:56:A1:57:2E:E5:28:7B:15:0A:8B X509v3 Authority Key Identifier: keyid:F9:2A:75:0B:52:47:94:D4:FB:BF:21:88:5B:DA:F6:D0:78:F1:E8:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA053/AFB6BF76334311EBB5365E81C4F9AE02/-Sp1C1JHlNT7vyGIW9r20Hjx6IE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:ba:e6:66:8c:37:a4:1f:e1:93:21:d2:8e:ed:da:7a:1d:cd: eb:67:ac:ce:ae:dd:74:b8:2f:e4:28:41:32:48:9c:00:26:df: 80:06:43:26:50:ea:99:7d:80:62:71:c1:75:af:69:0d:7b:d2: d0:69:d9:57:27:b7:d5:8f:f5:57:c6:b9:28:7b:b5:34:30:0f: ab:cc:06:ab:a5:5b:3a:f0:24:c3:b2:40:18:5f:e0:64:9b:dd: cc:ce:95:70:51:93:8d:2d:d5:72:3d:2a:c9:4b:96:49:00:06: 39:7e:d7:93:1a:75:ac:6b:a7:fe:71:25:5a:63:1e:57:e6:03: 1e:ce:13:98:7a:72:45:bb:10:1b:b9:d6:87:de:a4:75:e4:b2: f3:81:c5:0a:e0:f4:84:41:4e:1e:53:52:b6:15:88:77:47:d8: f2:3c:64:8f:67:c1:c6:16:8a:06:0e:6c:b7:72:98:21:02:ed: d7:d7:c9:cc:4d:15:6c:31:d2:1f:1b:f0:bf:e2:31:f0:d2:6e: 47:f3:37:cb:55:2d:d2:26:d2:0d:3e:4d:da:81:b3:e0:ee:96: dd:ec:5a:ae:76:86:b2:3c:4d:c8:ef:b9:74:55:53:41:a5:d7: 02:5c:7b:90:37:d3:d4:42:c3:74:94:e3:50:43:89:c0:69:f7: fa:5e:9d:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB4QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUEwNTMxMTAvBgNVBAUTKEY5MkE3NTBCNTI0Nzk0RDRGQkJGMjE4ODVCREFGNkQw NzhGMUU4ODEwHhcNMjUxMTA0MjEzOTE1WhcNMjUxMTExMjEzOTE1WjAYMRYwFAYD VQQDEw02OTBhNzI4My1iM2VmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA76AdLs1CKAGEFnwU5w7Bs0sPLWMlGuQmMM+ub1bLYrsZeiyni/lYbS9Eauk4 HyvC6BnN+hOOZLvqa1m7YiumwBWpeks3m0j0manJdeNOhEBMfX977+Hljt61r7+5 SIaGhXuaTdu7MFPEFJe7Gr6J8W/F5RlRxocMC+06zqgCP23wowRmBt+7Xb5Mk3S/ OEL4ABqdQISoGzXcRp/oNZg03Jp/VJSITIRQ6hhG3x1Ote9ONnTRXDnj+rU1q6tL fAzcX99+C8+pc5BXfZw1vMRtHWUsSs+5dThj7/QcH3Q3j9kd3Xr+9UFp4oTzfOoc 96oJNNDsNPayrZciUcjQN4tVfwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHByi2Sg byna3pVWoVcu5Sh7FQqLMB8GA1UdIwQYMBaAFPkqdQtSR5TU+78hiFva9tB48eiB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTA1My9BRkI2QkY3NjMz NDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxOVDd2eUdJVzlyMjBIang2 SUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcDFDMUpIbE5UN3Z5R0lXOXIyMEhqeDZJRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTA1My9BRkI2QkY3NjMzNDMxMUVCQjUzNjVFODFDNEY5QUUwMi8tU3AxQzFKSGxO VDd2eUdJVzlyMjBIang2SUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvuuZmjDekH+GTIdKO7dp6Hc3rZ6zOrt10uC/kKEEySJwAJt+ABkMm UOqZfYBiccF1r2kNe9LQadlXJ7fVj/VXxrkoe7U0MA+rzAarpVs68CTDskAYX+Bk m93MzpVwUZONLdVyPSrJS5ZJAAY5fteTGnWsa6f+cSVaYx5X5gMezhOYenJFuxAb udaH3qR15LLzgcUK4PSEQU4eU1K2FYh3R9jyPGSPZ8HGFooGDmy3cpghAu3X18nM TRVsMdIfG/C/4jHw0m5H8zfLVS3SJtINPk3agbPg7pbd7FqudoayPE3I77l0VVNB pdcCXHuQN9PUQsN0lONQQ4nAaff6Xp0N -----END CERTIFICATE-----Generated at Wed Nov 5 13:52:05 2025 by rpki-client