$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft File: dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft (raw, json) Hash identifier: TIAF2voGUzfurjz188Hs01/dBqdc3t0TU8qM98uMj/Y= Subject key identifier: 4B:38:95:AB:2E:F1:E4:87:B5:6F:39:3D:B8:52:70:B4:6E:73:2E:3A Authority key identifier: 74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 Certificate issuer: /CN=A91AD705/serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Certificate serial: 02FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft Manifest number: 02F7 Signing time: Wed 05 Nov 2025 01:17:49 +0000 Manifest this update: Wed 05 Nov 2025 01:17:48 +0000 Manifest next update: Wed 12 Nov 2025 01:17:48 +0000 Files and hashes: 1: dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl (hash: /NL5haXWh3MmMSaRSFTY12Kzq7QHrGqVzNP2X3BWcoI=) 2: D628208AFB7611EC96592431C4F9AE02.roa (hash: tDCtD935JtRcgKFjdurBw3JcU/lSCjaGyyfEOwNOFIg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 763 (0x2fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AD705, serialNumber=747CC7CBDB22BD9A482D3351809DEA9BC1460284 Validity Not Before: Nov 5 01:17:48 2025 GMT Not After : Nov 12 01:17:48 2025 GMT Subject: CN=690aa5bd-9e53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:77:50:f0:4e:f4:07:12:d0:88:9b:75:e8: f5:cc:97:51:98:da:f7:10:99:a9:b5:ce:06:75:96: 66:93:3c:19:3a:dc:69:eb:54:e7:9e:2b:1e:3a:e4: 80:57:40:bb:8e:51:14:4f:0c:6f:d5:ca:a2:ea:96: 62:67:1c:d4:16:34:82:d8:2e:fa:03:e0:e5:fb:54: c0:67:01:c3:72:ae:64:b6:b2:fc:3f:d0:e8:08:02: 36:6c:5c:4f:3a:37:3c:6d:30:62:be:68:83:76:46: a5:e7:b4:f5:af:ac:e5:fb:f3:7b:5a:35:a4:ba:ed: fc:37:e5:4e:24:da:64:54:b0:eb:9a:d0:c3:a7:c6: b1:4e:af:40:c8:48:5c:4a:d7:2d:2f:37:f6:fe:8c: 0f:a7:97:28:c8:6b:4a:75:47:b2:1b:4f:fd:2d:2f: 3c:5f:30:54:3d:23:60:76:a8:19:5c:ce:cf:97:e1: 7b:52:c5:0a:4d:84:0b:ac:db:c4:03:a2:27:ad:17: 97:8f:fc:db:11:50:a8:67:f6:39:54:13:4e:13:db: a8:2b:e9:1f:f0:51:da:99:c7:d6:ab:5f:53:16:34: f9:63:44:cb:a9:17:9f:1c:be:02:4f:d7:25:d1:9d: 9c:96:30:98:e9:a5:0c:25:6d:c1:09:2f:0c:e9:77: b3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:38:95:AB:2E:F1:E4:87:B5:6F:39:3D:B8:52:70:B4:6E:73:2E:3A X509v3 Authority Key Identifier: keyid:74:7C:C7:CB:DB:22:BD:9A:48:2D:33:51:80:9D:EA:9B:C1:46:02:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHzHy9sivZpILTNRgJ3qm8FGAoQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD705/BA1DB762FB7411EC96A5B430C4F9AE02/dHzHy9sivZpILTNRgJ3qm8FGAoQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:95:2f:46:cf:16:62:04:ca:d3:04:e9:98:ce:c7:b3:31:0c: 15:5d:08:74:84:f9:a2:86:7a:9e:4a:49:0b:2d:56:96:6d:09: 67:d0:4d:9b:c5:69:3d:51:e3:d6:69:44:8e:4b:eb:45:87:c8: f7:fe:49:88:33:29:87:93:e9:b3:c8:fb:1d:cf:70:4c:fc:31: dc:cd:b6:ce:4e:d1:8e:c1:6a:6f:fe:34:06:e5:ac:34:62:15: b6:bb:45:1c:ef:25:a5:c7:84:22:2a:af:47:e0:e9:d9:0d:f4: 87:32:74:be:86:9d:4b:85:95:3c:64:f6:74:b4:c3:dd:03:a5: 8d:f1:39:d1:c8:f1:0b:b5:6f:bd:c1:d4:bd:50:73:53:87:cd: be:87:b1:e9:9b:87:db:1b:55:a4:45:7a:1f:e8:ca:0c:76:9a: ed:6b:8c:d8:ec:6a:33:9f:4e:e6:bd:82:cb:7c:04:26:c0:3c: c6:97:64:64:31:a7:8f:16:7b:ad:43:fd:1e:ad:51:4b:8c:4d: e6:eb:d6:34:b5:4e:f4:32:e8:98:57:87:a0:b9:12:41:54:c2: 42:67:2b:4c:d7:ae:63:7f:aa:da:20:f6:63:f7:4a:b8:bf:03: e3:3c:6d:cb:1c:fa:6d:61:9e:13:fd:f3:01:44:6f:48:15:67: ba:08:92:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAvswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUQ3MDUxMTAvBgNVBAUTKDc0N0NDN0NCREIyMkJEOUE0ODJEMzM1MTgwOURFQTlC QzE0NjAyODQwHhcNMjUxMTA1MDExNzQ4WhcNMjUxMTEyMDExNzQ4WjAYMRYwFAYD VQQDEw02OTBhYTViZC05ZTUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApOx3UPBO9AcS0Iibdej1zJdRmNr3EJmptc4GdZZmkzwZOtxp61TnniseOuSA V0C7jlEUTwxv1cqi6pZiZxzUFjSC2C76A+Dl+1TAZwHDcq5ktrL8P9DoCAI2bFxP Ojc8bTBivmiDdkal57T1r6zl+/N7WjWkuu38N+VOJNpkVLDrmtDDp8axTq9AyEhc StctLzf2/owPp5coyGtKdUeyG0/9LS88XzBUPSNgdqgZXM7Pl+F7UsUKTYQLrNvE A6InrReXj/zbEVCoZ/Y5VBNOE9uoK+kf8FHamcfWq19TFjT5Y0TLqRefHL4CT9cl 0Z2cljCY6aUMJW3BCS8M6XezwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs4lasu 8eSHtW85PbhScLRucy46MB8GA1UdIwQYMBaAFHR8x8vbIr2aSC0zUYCd6pvBRgKE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRDcwNS9CQTFEQjc2MkZC NzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZacElMVE5SZ0ozcW04RkdB b1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIekh5OXNpdlpwSUxUTlJnSjNxbThGR0FvUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RDcwNS9CQTFEQjc2MkZCNzQxMUVDOTZBNUI0MzBDNEY5QUUwMi9kSHpIeTlzaXZa cElMVE5SZ0ozcW04RkdBb1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNlS9GzxZiBMrTBOmYzsezMQwVXQh0hPmihnqeSkkLLVaWbQln0E2b xWk9UePWaUSOS+tFh8j3/kmIMymHk+mzyPsdz3BM/DHczbbOTtGOwWpv/jQG5aw0 YhW2u0Uc7yWlx4QiKq9H4OnZDfSHMnS+hp1LhZU8ZPZ0tMPdA6WN8TnRyPELtW+9 wdS9UHNTh82+h7Hpm4fbG1WkRXof6MoMdprta4zY7Gozn07mvYLLfAQmwDzGl2Rk MaePFnutQ/0erVFLjE3m69Y0tU70MuiYV4eguRJBVMJCZytM165jf6raIPZj90q4 vwPjPG3LHPptYZ4T/fMBRG9IFWe6CJLW -----END CERTIFICATE-----Generated at Wed Nov 5 10:30:10 2025 by rpki-client