$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft File: 7TFghH3ErtktjFnRmEZbHL7y3yI.mft (raw, json) Hash identifier: HbZvcyKNS8Q5Ly0ARvlK6r1skjPrpVxOXLboIbxhrhM= Subject key identifier: A6:90:B7:8E:23:0A:07:D1:57:49:52:96:8E:4B:B0:1C:45:F4:D5:D9 Authority key identifier: ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 Certificate issuer: /CN=A91B6C85/serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Certificate serial: 0106 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft Manifest number: 0106 Signing time: Wed 05 Nov 2025 05:09:36 +0000 Manifest this update: Wed 05 Nov 2025 05:09:35 +0000 Manifest next update: Wed 12 Nov 2025 05:09:35 +0000 Files and hashes: 1: 7TFghH3ErtktjFnRmEZbHL7y3yI.crl (hash: GhVj9dZ5WBD6tWYi3mUIJ74vaGSeLzEi3BIdnxu4l6k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:09:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 262 (0x106) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6C85, serialNumber=ED3160847DC4AED92D8C59D198465B1CBEF2DF22 Validity Not Before: Nov 5 05:09:35 2025 GMT Not After : Nov 12 05:09:35 2025 GMT Subject: CN=690adc10-fd14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b6:ce:1c:40:af:9a:08:8b:95:ba:de:03:62: d1:09:e0:cc:2e:9c:30:60:43:74:38:3c:f9:d4:66: 7d:e5:8f:17:91:38:cb:1e:04:46:bb:40:d5:75:ab: 48:c3:a6:ab:17:b2:45:46:a4:0a:95:fe:79:2f:e0: 1d:af:19:2f:3b:4d:ec:23:93:9c:17:4f:0a:08:3a: 90:3e:ab:c6:80:d1:79:94:e4:94:e5:92:c5:f6:29: 56:70:d4:1a:83:85:99:c8:96:d6:8c:d6:2f:3b:1a: 96:c7:38:41:63:3c:91:f9:fa:02:9c:5b:f1:dd:09: fc:37:67:eb:fa:fc:5e:74:34:a6:3c:2f:d4:6c:fd: 8e:03:20:b9:54:7f:de:49:51:cb:b3:2e:b5:24:f4: cc:3f:3e:64:41:81:f6:28:c6:ff:0f:33:de:eb:a4: 09:b3:97:ba:35:f6:35:77:fd:dc:34:c5:2c:92:02: d0:b3:9c:86:4c:ab:b4:b7:6d:d3:69:8e:1e:e1:ca: a9:b8:4a:d6:bc:33:70:e5:a4:ff:30:a2:e7:c7:79: 03:a0:17:43:3c:08:a8:b0:28:fe:ec:e0:9e:fd:e4: 99:38:42:52:29:ab:cd:17:90:7d:54:a8:9e:5d:04: 0c:7d:66:e7:43:34:f8:65:a2:79:07:5e:38:1e:d5: c1:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:90:B7:8E:23:0A:07:D1:57:49:52:96:8E:4B:B0:1C:45:F4:D5:D9 X509v3 Authority Key Identifier: keyid:ED:31:60:84:7D:C4:AE:D9:2D:8C:59:D1:98:46:5B:1C:BE:F2:DF:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7TFghH3ErtktjFnRmEZbHL7y3yI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6C85/28707CBE288611EF8F1FB185C4F9AE02/7TFghH3ErtktjFnRmEZbHL7y3yI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:34:f3:5d:38:82:89:6f:88:61:ae:5f:a7:4e:38:3e:bd:e0: 0d:56:27:9e:49:1b:45:88:eb:9f:22:28:73:42:08:cd:f2:17: c5:5b:c9:2c:0f:3e:12:38:a1:5f:c5:d9:31:ad:79:8c:67:d4: 1f:66:f8:70:07:00:b6:eb:c5:81:45:b8:4d:66:6d:47:3b:3d: 61:19:12:e3:a4:fe:bc:c2:41:1c:61:88:ed:c6:52:90:2d:e1: e1:c7:98:72:a5:56:02:58:8c:10:ec:d9:14:43:56:a8:48:65: d5:d5:2d:a2:0a:95:37:ed:6d:5a:5c:2b:22:8e:2c:ac:de:03: c5:dc:23:8b:a7:73:08:d6:b3:6a:8b:f3:a9:db:87:28:e6:bb: e2:99:95:9e:8d:67:99:48:5d:1e:b2:cf:0a:60:00:af:cb:27: db:4d:60:8c:a4:41:24:04:ff:90:4b:6c:5a:c6:00:b2:0a:de: 8d:f2:7a:c2:45:4e:44:35:63:07:b9:69:f8:7a:1d:c0:59:6f: f5:92:be:91:56:d2:a0:5c:e2:07:fe:0f:79:08:3e:e5:f1:98: 33:4c:80:25:df:e2:e5:63:e3:ba:d9:2a:98:8f:23:69:47:30: bd:a9:6f:9f:b1:82:4f:2b:26:61:37:80:66:ee:a8:e4:f7:05: 8f:16:23:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjZDODUxMTAvBgNVBAUTKEVEMzE2MDg0N0RDNEFFRDkyRDhDNTlEMTk4NDY1QjFD QkVGMkRGMjIwHhcNMjUxMTA1MDUwOTM1WhcNMjUxMTEyMDUwOTM1WjAYMRYwFAYD VQQDEw02OTBhZGMxMC1mZDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuLbOHECvmgiLlbreA2LRCeDMLpwwYEN0ODz51GZ95Y8XkTjLHgRGu0DVdatI w6arF7JFRqQKlf55L+AdrxkvO03sI5OcF08KCDqQPqvGgNF5lOSU5ZLF9ilWcNQa g4WZyJbWjNYvOxqWxzhBYzyR+foCnFvx3Qn8N2fr+vxedDSmPC/UbP2OAyC5VH/e SVHLsy61JPTMPz5kQYH2KMb/DzPe66QJs5e6NfY1d/3cNMUskgLQs5yGTKu0t23T aY4e4cqpuErWvDNw5aT/MKLnx3kDoBdDPAiosCj+7OCe/eSZOEJSKavNF5B9VKie XQQMfWbnQzT4ZaJ5B144HtXBJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKaQt44j CgfRV0lSlo5LsBxF9NXZMB8GA1UdIwQYMBaAFO0xYIR9xK7ZLYxZ0ZhGWxy+8t8i MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNkM4NS8yODcwN0NCRTI4 ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0a3RqRm5SbUVaYkhMN3kz eUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdURmdoSDNFcnRrdGpGblJtRVpiSEw3eTN5SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NkM4NS8yODcwN0NCRTI4ODYxMUVGOEYxRkIxODVDNEY5QUUwMi83VEZnaEgzRXJ0 a3RqRm5SbUVaYkhMN3kzeUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyNPNdOIKJb4hhrl+nTjg+veANVieeSRtFiOufIihzQgjN8hfFW8ks Dz4SOKFfxdkxrXmMZ9QfZvhwBwC268WBRbhNZm1HOz1hGRLjpP68wkEcYYjtxlKQ LeHhx5hypVYCWIwQ7NkUQ1aoSGXV1S2iCpU37W1aXCsijiys3gPF3COLp3MI1rNq i/Op24co5rvimZWejWeZSF0ess8KYACvyyfbTWCMpEEkBP+QS2xaxgCyCt6N8nrC RU5ENWMHuWn4eh3AWW/1kr6RVtKgXOIH/g95CD7l8ZgzTIAl3+LlY+O62SqYjyNp RzC9qW+fsYJPKyZhN4Bm7qjk9wWPFiMq -----END CERTIFICATE-----Generated at Wed Nov 5 17:17:01 2025 by rpki-client