$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: HatZOq61u39irCjEGfCgginDPb7dA1orm0/gGNBbjdw= Subject key identifier: 97:33:51:AF:44:4D:30:2B:2B:AE:C0:73:D2:04:A0:00:65:D2:CE:B7 Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0B06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AFA Signing time: Tue 04 Nov 2025 19:28:57 +0000 Manifest this update: Tue 04 Nov 2025 19:28:57 +0000 Manifest next update: Tue 11 Nov 2025 19:28:57 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: 5qXK6XTZwUZn/3WOp6zzor3Hbz70wdVtUAbuqqopfYg=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:28:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2822 (0xb06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Nov 4 19:28:57 2025 GMT Not After : Nov 11 19:28:57 2025 GMT Subject: CN=690a53f9-0f29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7e:76:da:ff:66:f2:a4:0b:bb:e6:c5:66:8c: a3:94:18:8d:d2:f6:72:92:dc:eb:c5:6e:30:85:7a: 77:97:69:5e:e1:5d:d6:f1:2e:e5:69:3a:c2:0f:2d: 78:df:d4:34:ff:cb:60:3f:de:03:e2:73:52:7b:34: d1:b6:01:cc:52:5f:25:6e:6b:2c:eb:e1:99:ec:b1: b3:83:6e:78:d8:06:b8:4d:d2:ad:a9:38:15:8b:6e: 11:ca:48:44:3f:6e:92:8a:77:c1:2b:52:60:71:fb: 8e:fb:9c:26:10:c1:71:84:80:8b:51:d0:37:d4:61: 65:90:f1:4a:36:e3:bb:84:cb:d3:32:a3:c9:5c:3b: 5d:15:2e:86:3b:21:a6:a4:99:7a:b1:be:8d:1a:25: c6:7e:a7:7d:ee:e6:e5:d5:c8:94:df:fb:61:55:bf: ba:28:e7:0f:a4:bf:a4:bb:d5:44:67:00:9f:38:37: bf:91:cc:be:dd:fc:ea:fc:85:c8:fa:d3:98:57:be: 5f:88:48:16:da:d7:76:4f:6f:a7:44:61:92:8b:2a: 86:bb:a2:1c:d4:68:3a:11:44:23:03:b5:20:21:f9: 9b:20:9a:f9:45:4f:88:e6:e5:06:81:9b:35:a1:af: 5b:53:f6:df:62:49:0a:34:de:26:26:df:91:1a:e2: 9a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:33:51:AF:44:4D:30:2B:2B:AE:C0:73:D2:04:A0:00:65:D2:CE:B7 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:bd:38:12:d8:66:87:c8:98:0b:dd:35:48:c3:33:1f:2f:0b: aa:21:7b:42:a2:60:c8:7e:e5:4c:c8:02:0e:3e:86:e3:02:da: 84:27:02:9e:66:7a:39:cd:0b:a4:d8:ae:61:fe:df:1b:29:63: c3:8f:1e:79:e5:a9:b0:45:5d:e9:cb:af:11:a3:4a:be:e6:1a: 23:93:70:70:87:e9:95:18:18:ac:77:ef:6a:d0:a1:aa:d7:9c: 6e:99:d7:be:01:58:28:b2:5d:0c:f9:9e:f3:a0:c7:29:ab:52: 60:e3:9d:07:7c:ea:76:a3:7e:a0:a7:d8:f3:53:a3:4d:20:97: 10:65:af:97:ed:ea:d2:b7:45:cd:8a:d5:18:9c:6d:c8:10:ff: 8e:25:50:78:00:84:5c:2c:00:ff:b8:8a:ad:51:cc:b5:b7:81: 7b:fc:61:59:e0:2a:d8:13:e2:d8:33:f6:cf:02:de:79:c5:a0: e2:86:c7:7e:4b:c7:76:3c:5d:96:60:83:e3:c3:95:65:c8:37: 17:67:46:f4:58:e7:74:05:8a:d0:34:32:d5:a0:c4:20:01:5f: 3d:e4:c7:5d:ea:b6:32:28:10:9b:cd:0d:a1:2c:1d:d8:0f:f0: bb:80:88:d3:cb:be:fe:d9:13:78:52:c9:ca:d5:fa:92:19:a8: c2:f6:5f:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUxMTA0MTkyODU3WhcNMjUxMTExMTkyODU3WjAYMRYwFAYD VQQDEw02OTBhNTNmOS0wZjI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxn522v9m8qQLu+bFZoyjlBiN0vZyktzrxW4whXp3l2le4V3W8S7laTrCDy14 39Q0/8tgP94D4nNSezTRtgHMUl8lbmss6+GZ7LGzg2542Aa4TdKtqTgVi24RykhE P26SinfBK1JgcfuO+5wmEMFxhICLUdA31GFlkPFKNuO7hMvTMqPJXDtdFS6GOyGm pJl6sb6NGiXGfqd97ubl1ciU3/thVb+6KOcPpL+ku9VEZwCfODe/kcy+3fzq/IXI +tOYV75fiEgW2td2T2+nRGGSiyqGu6Ic1Gg6EUQjA7UgIfmbIJr5RU+I5uUGgZs1 oa9bU/bfYkkKNN4mJt+RGuKaVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJczUa9E TTArK67Ac9IEoABl0s63MB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxvTgS2GaHyJgL3TVIwzMfLwuqIXtComDIfuVMyAIOPobjAtqEJwKe Zno5zQuk2K5h/t8bKWPDjx555amwRV3py68Ro0q+5hojk3Bwh+mVGBisd+9q0KGq 15xumde+AVgosl0M+Z7zoMcpq1Jg450HfOp2o36gp9jzU6NNIJcQZa+X7erSt0XN itUYnG3IEP+OJVB4AIRcLAD/uIqtUcy1t4F7/GFZ4CrYE+LYM/bPAt55xaDihsd+ S8d2PF2WYIPjw5VlyDcXZ0b0WOd0BYrQNDLVoMQgAV895Mdd6rYyKBCbzQ2hLB3Y D/C7gIjTy77+2RN4UsnK1fqSGajC9l+U -----END CERTIFICATE-----Generated at Wed Nov 5 12:07:47 2025 by rpki-client