$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft File: 7sDpmYfcHqnUAviE_NqX4DFFpKA.mft (raw, json) Hash identifier: p4zL6NnRKI56sSbRe0c+laJCU4X7c14mh/iR9mRomJo= Subject key identifier: 69:E8:B2:B3:4E:B1:72:F0:A9:54:99:20:FF:B5:00:BB:94:D5:8B:7F Authority key identifier: EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 Certificate issuer: /CN=A91AE1B5/serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Certificate serial: 0127 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft Manifest number: 0123 Signing time: Wed 05 Nov 2025 04:53:22 +0000 Manifest this update: Wed 05 Nov 2025 04:53:22 +0000 Manifest next update: Wed 12 Nov 2025 04:53:22 +0000 Files and hashes: 1: 7sDpmYfcHqnUAviE_NqX4DFFpKA.crl (hash: FVcqrIrJysBhwbHN3CJABp0F1ixVNaOIKYvGEDMW8kU=) 2: D2A2FF4A003B11EFA6658D0DC4F9AE02.roa (hash: 7/3ODwQ2dlZbxqeVnJstobH8SWsvoF3IBlCZtLMYHu8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 295 (0x127) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AE1B5, serialNumber=EEC0E99987DC1EA9D402F884FCDA97E03145A4A0 Validity Not Before: Nov 5 04:53:22 2025 GMT Not After : Nov 12 04:53:22 2025 GMT Subject: CN=690ad842-0827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:65:08:ea:41:12:6f:5b:89:ca:63:f1:85:5a: 22:53:03:4b:65:ce:48:25:e7:25:02:9a:a3:ea:7e: 2a:ee:a5:a7:a5:2f:fe:7a:40:5b:5a:a3:28:17:d1: db:22:da:af:9f:14:20:a7:6c:26:39:65:32:89:a8: 3b:47:dc:ee:23:9f:36:fe:81:6e:ca:97:4c:f2:68: e9:e1:7c:61:01:79:f5:4a:ad:10:b9:9d:5f:0c:e8: ef:29:5b:01:95:74:f7:d2:c8:7b:22:41:c9:27:43: 0e:85:cc:5b:78:df:bf:c1:26:75:c9:68:82:a5:45: 29:8d:b1:5d:67:c5:46:26:8f:8d:a0:f9:70:17:3f: 7c:87:84:3a:e7:5d:26:7c:bf:26:42:cf:78:5f:03: 33:17:7a:d1:16:e4:8b:8f:92:1f:dd:eb:a4:04:2f: aa:08:27:7e:9d:e7:e7:43:82:62:c4:2e:ec:e6:e2: c7:99:c0:9f:ba:a5:18:d2:5d:4c:d9:71:73:84:10: d5:dc:19:eb:b6:19:54:7b:c6:9a:74:af:e3:ff:d5: d2:29:97:c1:df:a0:cf:4b:28:c8:f0:42:5f:d8:53: 7e:39:6f:bf:1c:37:08:05:5c:28:f8:38:b8:38:ad: 93:05:0e:53:e0:38:6f:1c:71:87:1a:47:15:cb:60: ab:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E8:B2:B3:4E:B1:72:F0:A9:54:99:20:FF:B5:00:BB:94:D5:8B:7F X509v3 Authority Key Identifier: keyid:EE:C0:E9:99:87:DC:1E:A9:D4:02:F8:84:FC:DA:97:E0:31:45:A4:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7sDpmYfcHqnUAviE_NqX4DFFpKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE1B5/8B405E5E003B11EF911B8F68C4F9AE02/7sDpmYfcHqnUAviE_NqX4DFFpKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:e5:3f:bb:3a:94:9d:92:c0:02:df:b6:72:ff:6d:6c:bb:be: 94:2f:1a:68:e9:23:28:d6:3d:a8:31:24:f4:87:36:2d:30:8b: 58:19:26:70:5e:63:b9:14:89:94:f9:29:92:e9:1f:b0:a9:72: 98:72:02:cb:9b:a3:5d:5a:cc:e4:0d:7d:89:95:53:33:a8:d2: 37:5e:38:23:51:ee:0a:b3:c4:49:11:5f:f8:05:cb:98:b9:2f: bd:c9:35:4b:50:8e:ed:76:39:a1:b0:09:30:d4:fd:58:ca:9c: b7:70:71:da:c4:e8:9f:c1:a5:47:a7:86:85:0c:da:1d:14:68: 74:f9:f5:5e:2e:c1:0c:1f:18:77:a0:29:13:2b:16:84:ba:f8: f0:75:66:72:0f:b4:1e:68:a1:09:98:bf:f0:5d:c2:5b:c1:fa: a1:34:eb:1f:16:d4:86:f7:70:6d:2a:1b:27:3e:a8:cc:24:3e: eb:89:23:16:0a:00:4b:18:6e:c1:08:75:08:32:d9:aa:70:82: 91:cd:a5:96:97:3a:17:57:1a:ee:ce:14:f2:4f:0d:19:bf:66: 10:cd:87:c3:b1:bd:91:24:12:d8:26:16:09:3a:05:f2:71:7c: 37:d2:d3:0e:51:fc:b1:fb:bc:52:e4:bf:98:54:f3:3e:4d:46: b0:c6:c5:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAScwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUUxQjUxMTAvBgNVBAUTKEVFQzBFOTk5ODdEQzFFQTlENDAyRjg4NEZDREE5N0Uw MzE0NUE0QTAwHhcNMjUxMTA1MDQ1MzIyWhcNMjUxMTEyMDQ1MzIyWjAYMRYwFAYD VQQDEw02OTBhZDg0Mi0wODI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuWUI6kESb1uJymPxhVoiUwNLZc5IJeclApqj6n4q7qWnpS/+ekBbWqMoF9Hb ItqvnxQgp2wmOWUyiag7R9zuI582/oFuypdM8mjp4XxhAXn1Sq0QuZ1fDOjvKVsB lXT30sh7IkHJJ0MOhcxbeN+/wSZ1yWiCpUUpjbFdZ8VGJo+NoPlwFz98h4Q6510m fL8mQs94XwMzF3rRFuSLj5If3eukBC+qCCd+nefnQ4JixC7s5uLHmcCfuqUY0l1M 2XFzhBDV3BnrthlUe8aadK/j/9XSKZfB36DPSyjI8EJf2FN+OW+/HDcIBVwo+Di4 OK2TBQ5T4DhvHHGHGkcVy2CrvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGnosrNO sXLwqVSZIP+1ALuU1Yt/MB8GA1UdIwQYMBaAFO7A6ZmH3B6p1AL4hPzal+AxRaSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRTFCNS84QjQwNUU1RTAw M0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hxblVBdmlFX05xWDRERkZw S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdzRHBtWWZjSHFuVUF2aUVfTnFYNERGRnBLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RTFCNS84QjQwNUU1RTAwM0IxMUVGOTExQjhGNjhDNEY5QUUwMi83c0RwbVlmY0hx blVBdmlFX05xWDRERkZwS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ5T+7OpSdksAC37Zy/21su76ULxpo6SMo1j2oMST0hzYtMItYGSZw XmO5FImU+SmS6R+wqXKYcgLLm6NdWszkDX2JlVMzqNI3XjgjUe4Ks8RJEV/4BcuY uS+9yTVLUI7tdjmhsAkw1P1Yypy3cHHaxOifwaVHp4aFDNodFGh0+fVeLsEMHxh3 oCkTKxaEuvjwdWZyD7QeaKEJmL/wXcJbwfqhNOsfFtSG93BtKhsnPqjMJD7riSMW CgBLGG7BCHUIMtmqcIKRzaWWlzoXVxruzhTyTw0Zv2YQzYfDsb2RJBLYJhYJOgXy cXw30tMOUfyx+7xS5L+YVPM+TUawxsXR -----END CERTIFICATE-----Generated at Wed Nov 5 23:52:14 2025 by rpki-client