$ rpki-client -vvf rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft File: n60jAjoVW9JbIkKAY6wZeHznwr4.mft (raw, json) Hash identifier: KdP8HNa6HRdfQWC2SsiRIIQgTBP1+6Yun6QCtSzvUZQ= Subject key identifier: A1:37:6D:90:BC:F6:49:69:25:4F:59:5C:35:38:02:A6:A0:F6:2E:E4 Authority key identifier: 9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE Certificate issuer: /CN=A91B53AF/serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Certificate serial: 07B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft Manifest number: 07B1 Signing time: Tue 04 Nov 2025 21:27:49 +0000 Manifest this update: Tue 04 Nov 2025 21:27:48 +0000 Manifest next update: Tue 11 Nov 2025 21:27:48 +0000 Files and hashes: 1: n60jAjoVW9JbIkKAY6wZeHznwr4.crl (hash: wkm8F4A8tECFrYrWVH/bZlPcX0gAOXMv059uTSSNNH0=) 2: 5E802AC41DB911EB90A5461AC4F9AE02.roa (hash: 41aqCCC0CIJrASUZjn/UMATRac/pjiORpElfAzdM3kk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:27:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1975 (0x7b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B53AF, serialNumber=9FAD23023A155BD25B22428063AC19787CE7C2BE Validity Not Before: Nov 4 21:27:48 2025 GMT Not After : Nov 11 21:27:48 2025 GMT Subject: CN=690a6fd4-f664 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:47:1f:bd:b6:f0:d8:6e:67:d2:76:a0:2f:7b: 77:e8:4a:73:18:d2:c6:4c:f1:ab:f7:f1:0c:50:53: b3:e8:60:70:1c:44:d1:79:62:24:29:6b:6f:de:eb: 49:50:75:a9:fa:df:b8:25:d6:48:b2:94:cb:39:ef: 6c:ef:c7:94:0a:93:66:e7:87:4c:de:14:12:0d:3c: fe:1a:c7:c2:99:10:d4:ef:64:0d:4c:b9:0f:4f:92: c1:fd:9f:40:55:3e:8a:bb:e8:06:da:78:5d:28:fa: 72:db:1c:7d:4f:09:30:81:71:a0:56:d1:3f:0c:b2: 7d:80:a8:58:1b:ad:52:b6:64:98:b4:55:c2:1c:f3: 63:0d:89:fa:74:c3:6e:03:13:a7:3e:40:66:d9:fe: 33:a4:1c:c7:84:b9:66:41:f2:3d:4c:aa:26:ca:7c: 50:88:7d:e1:d6:16:88:8c:27:e9:35:20:5e:96:06: 7f:2d:dd:2e:3a:52:3a:c3:46:47:89:6c:a5:3e:32: ab:49:95:5b:d8:90:cc:00:59:df:25:cb:53:c4:fa: d2:84:46:55:da:f8:bb:9a:87:da:b7:8a:44:a2:99: 62:c5:04:74:71:c8:7d:be:12:08:cd:38:3b:27:04: 96:a3:82:38:e6:b0:7f:40:48:c6:a8:a7:d9:52:a3: de:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:6D:90:BC:F6:49:69:25:4F:59:5C:35:38:02:A6:A0:F6:2E:E4 X509v3 Authority Key Identifier: keyid:9F:AD:23:02:3A:15:5B:D2:5B:22:42:80:63:AC:19:78:7C:E7:C2:BE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n60jAjoVW9JbIkKAY6wZeHznwr4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B53AF/1F49325C1DB811EB91D04319C4F9AE02/n60jAjoVW9JbIkKAY6wZeHznwr4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:34:e8:a9:49:a2:ea:c2:65:0b:7a:78:80:b8:9d:62:34:ff: 20:39:db:5e:6f:cb:79:97:90:3e:42:cb:54:0f:98:76:7f:3f: ae:56:2c:ff:59:e7:e2:f0:dc:37:b6:b0:51:e6:0f:cc:93:ab: a4:17:7a:70:0c:7c:ac:2d:0e:bc:dc:13:b7:44:4b:06:93:8b: 44:12:ca:27:01:21:08:fe:24:8d:48:11:85:20:1c:b2:47:08: 4d:5e:f1:18:08:9a:6b:3a:0c:43:b1:b6:a3:6d:a9:2f:98:aa: df:4b:49:58:db:ab:70:3a:e4:1d:c5:67:d4:12:bf:50:24:15: 4f:3e:3c:27:1c:8b:a2:7a:54:71:6d:17:17:5d:43:6b:c4:f5: 58:44:30:e9:ca:ae:93:e6:0d:4c:27:20:86:c1:bb:60:15:3c: d1:37:89:bf:42:0d:e2:8d:bd:3f:08:8d:98:44:ac:b1:80:3b: 41:e3:ea:41:d6:4c:65:00:02:50:99:2c:69:94:67:e1:23:e0: ff:20:9d:72:48:d3:e3:9f:42:3f:51:3b:33:21:42:08:a0:43: c4:74:08:33:92:cc:18:10:ea:70:96:cf:1a:ad:f9:df:d3:35: 6f:61:2b:fc:b0:fd:46:9d:64:cd:a7:45:f1:39:d6:33:bc:6d: 30:df:a0:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUzQUYxMTAvBgNVBAUTKDlGQUQyMzAyM0ExNTVCRDI1QjIyNDI4MDYzQUMxOTc4 N0NFN0MyQkUwHhcNMjUxMTA0MjEyNzQ4WhcNMjUxMTExMjEyNzQ4WjAYMRYwFAYD VQQDEw02OTBhNmZkNC1mNjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUcfvbbw2G5n0nagL3t36EpzGNLGTPGr9/EMUFOz6GBwHETReWIkKWtv3utJ UHWp+t+4JdZIspTLOe9s78eUCpNm54dM3hQSDTz+GsfCmRDU72QNTLkPT5LB/Z9A VT6Ku+gG2nhdKPpy2xx9TwkwgXGgVtE/DLJ9gKhYG61StmSYtFXCHPNjDYn6dMNu AxOnPkBm2f4zpBzHhLlmQfI9TKomynxQiH3h1haIjCfpNSBelgZ/Ld0uOlI6w0ZH iWylPjKrSZVb2JDMAFnfJctTxPrShEZV2vi7mofat4pEoplixQR0cch9vhIIzTg7 JwSWo4I45rB/QEjGqKfZUqPeLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKE3bZC8 9klpJU9ZXDU4Aqag9i7kMB8GA1UdIwQYMBaAFJ+tIwI6FVvSWyJCgGOsGXh858K+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTNBRi8xRjQ5MzI1QzFE QjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5SmJJa0tBWTZ3WmVIem53 cjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242MGpBam9WVzlKYklrS0FZNndaZUh6bndyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTNBRi8xRjQ5MzI1QzFEQjgxMUVCOTFEMDQzMTlDNEY5QUUwMi9uNjBqQWpvVlc5 SmJJa0tBWTZ3WmVIem53cjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+NOipSaLqwmULeniAuJ1iNP8gOdteb8t5l5A+QstUD5h2fz+uViz/ Wefi8Nw3trBR5g/Mk6ukF3pwDHysLQ683BO3REsGk4tEEsonASEI/iSNSBGFIByy RwhNXvEYCJprOgxDsbajbakvmKrfS0lY26twOuQdxWfUEr9QJBVPPjwnHIuielRx bRcXXUNrxPVYRDDpyq6T5g1MJyCGwbtgFTzRN4m/Qg3ijb0/CI2YRKyxgDtB4+pB 1kxlAAJQmSxplGfhI+D/IJ1ySNPjn0I/UTszIUIIoEPEdAgzkswYEOpwls8arfnf 0zVvYSv8sP1GnWTNp0XxOdYzvG0w36Bc -----END CERTIFICATE-----Generated at Wed Nov 5 15:02:53 2025 by rpki-client