$ rpki-client -vvf rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft File: 07yEKALa0i1cMMKCZffRCL1HjnA.mft (raw, json) Hash identifier: FSzVuIXye33Jq8Sf+0jhrt/PgUFzw1sr2tTpVppitCc= Subject key identifier: E6:C8:C8:D9:53:68:12:0D:C2:D0:6D:42:2B:C4:61:24:E9:C7:53:C7 Authority key identifier: D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 Certificate issuer: /CN=A91B758E/serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Certificate serial: 0147 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft Manifest number: 013F Signing time: Mon 03 Nov 2025 04:27:04 +0000 Manifest this update: Mon 03 Nov 2025 04:27:04 +0000 Manifest next update: Mon 10 Nov 2025 04:27:04 +0000 Files and hashes: 1: 07yEKALa0i1cMMKCZffRCL1HjnA.crl (hash: o3gFEa9S2SLXIG/kVsvAIdqd9ghXLZYaPQrlE+TmhEA=) 2: 675CAE1C097B11F089FAE77FC4F9AE02.roa (hash: g8goRa5uN0098PK1vnqVTndrxAdY1S5JKnq752ZsLOQ=) 3: C63D0814097B11F0B1329480C4F9AE02.roa (hash: BxZpcifR3l7qhnt+56VpPmZ3hTQmgPYYxX/h3b9rorE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 327 (0x147) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B758E, serialNumber=D3BC842802DAD22D5C30C28265F7D108BD478E70 Validity Not Before: Nov 3 04:27:04 2025 GMT Not After : Nov 10 04:27:04 2025 GMT Subject: CN=69082f18-f2b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:12:74:5f:f7:9d:21:12:dd:c1:d5:7c:a2:8e: 93:80:b6:44:c4:0a:98:2a:23:7e:55:db:44:a5:0b: 46:a1:22:72:73:39:66:42:f9:79:9b:f2:f4:18:cc: 06:e2:8e:b5:3a:17:b8:63:dc:70:35:68:d5:3a:11: 88:c5:2f:88:2f:f0:ce:9c:f3:a6:cd:04:32:47:3e: f1:37:27:c6:4f:9d:2d:57:a7:a5:47:40:1d:34:11: 51:2e:41:4f:36:cd:bd:8c:ce:11:d4:aa:de:dc:99: 40:ed:c6:c1:3e:9f:8a:a2:86:f5:94:70:5e:ea:c7: ae:1d:71:e0:73:74:3d:13:2d:b0:89:50:de:9d:aa: 47:b6:65:69:03:d4:39:3d:c2:63:5f:62:73:44:39: 40:90:b4:67:f3:ad:10:d8:15:d4:fa:da:db:06:61: 8b:cc:52:30:97:e8:c5:4c:0d:70:40:89:e4:b4:53: 3d:2d:f1:aa:d5:bf:62:23:5e:0c:99:c5:ca:2b:6d: 57:c9:81:e5:f2:a6:56:4a:31:de:ea:53:19:e5:e9: ad:9b:08:a3:a6:8d:77:ff:c7:6a:4e:29:a2:f8:c2: 7b:3c:05:17:1c:89:91:18:02:b9:b5:db:e5:7a:38: db:67:21:51:7f:ac:bf:55:c1:fc:df:0c:8d:24:12: 2c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C8:C8:D9:53:68:12:0D:C2:D0:6D:42:2B:C4:61:24:E9:C7:53:C7 X509v3 Authority Key Identifier: keyid:D3:BC:84:28:02:DA:D2:2D:5C:30:C2:82:65:F7:D1:08:BD:47:8E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/07yEKALa0i1cMMKCZffRCL1HjnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B758E/DDEC8124D53D11EE8F1E8A85C4F9AE02/07yEKALa0i1cMMKCZffRCL1HjnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:ce:7f:33:2e:1f:9e:6a:33:6e:35:99:29:57:b0:b4:e3:18: 8b:49:b3:f7:6d:04:3f:9f:4e:e7:43:44:d1:ef:43:12:27:4d: dd:13:4d:cb:9d:39:f6:01:8b:af:32:46:20:9d:b1:35:f2:81: 10:b0:9a:be:56:39:bf:de:b0:ad:67:78:8e:25:73:5b:13:33: 22:d6:47:17:86:b3:25:50:6f:84:91:c1:2d:7f:42:e9:2e:6d: fe:bf:c8:1b:1a:92:53:91:50:5c:05:8d:f8:b8:9c:ef:54:d6: 75:c7:ac:f9:c2:d9:13:3a:1e:03:12:2e:87:e2:ac:81:d7:96: 97:01:b8:27:db:b6:b1:5d:24:75:46:28:30:09:8d:e2:c7:43: 61:f7:93:41:cb:6f:ca:be:31:71:67:a6:3d:30:fe:1f:4e:a4: 47:4a:07:8b:cc:20:85:0e:19:89:b9:64:9f:d9:8d:b1:14:1d: 0d:18:d1:38:c9:4d:29:5a:66:b1:36:c9:8b:f9:f9:93:a2:e3: 4d:f6:b1:74:2e:de:a5:38:33:e8:b0:6d:5f:2e:dc:fc:24:8f: d4:28:c5:47:f6:f0:2d:e9:95:7b:b8:38:85:a6:48:c7:68:dd: 66:92:a2:7c:82:34:85:29:e9:a1:c2:c8:09:48:49:2e:05:ed: e6:d3:6a:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc1OEUxMTAvBgNVBAUTKEQzQkM4NDI4MDJEQUQyMkQ1QzMwQzI4MjY1RjdEMTA4 QkQ0NzhFNzAwHhcNMjUxMTAzMDQyNzA0WhcNMjUxMTEwMDQyNzA0WjAYMRYwFAYD VQQDEw02OTA4MmYxOC1mMmI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyxJ0X/edIRLdwdV8oo6TgLZExAqYKiN+VdtEpQtGoSJyczlmQvl5m/L0GMwG 4o61Ohe4Y9xwNWjVOhGIxS+IL/DOnPOmzQQyRz7xNyfGT50tV6elR0AdNBFRLkFP Ns29jM4R1Kre3JlA7cbBPp+Koob1lHBe6seuHXHgc3Q9Ey2wiVDenapHtmVpA9Q5 PcJjX2JzRDlAkLRn860Q2BXU+trbBmGLzFIwl+jFTA1wQInktFM9LfGq1b9iI14M mcXKK21XyYHl8qZWSjHe6lMZ5emtmwijpo13/8dqTimi+MJ7PAUXHImRGAK5tdvl ejjbZyFRf6y/VcH83wyNJBIsJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFObIyNlT aBINwtBtQivEYSTpx1PHMB8GA1UdIwQYMBaAFNO8hCgC2tItXDDCgmX30Qi9R45w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzU4RS9EREVDODEyNEQ1 M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBpMWNNTUtDWmZmUkNMMUhq bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzA3eUVLQUxhMGkxY01NS0NaZmZSQ0wxSGpuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzU4RS9EREVDODEyNEQ1M0QxMUVFOEYxRThBODVDNEY5QUUwMi8wN3lFS0FMYTBp MWNNTUtDWmZmUkNMMUhqbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAzn8zLh+eajNuNZkpV7C04xiLSbP3bQQ/n07nQ0TR70MSJ03dE03L nTn2AYuvMkYgnbE18oEQsJq+Vjm/3rCtZ3iOJXNbEzMi1kcXhrMlUG+EkcEtf0Lp Lm3+v8gbGpJTkVBcBY34uJzvVNZ1x6z5wtkTOh4DEi6H4qyB15aXAbgn27axXSR1 RigwCY3ix0Nh95NBy2/KvjFxZ6Y9MP4fTqRHSgeLzCCFDhmJuWSf2Y2xFB0NGNE4 yU0pWmaxNsmL+fmTouNN9rF0Lt6lODPosG1fLtz8JI/UKMVH9vAt6ZV7uDiFpkjH aN1mkqJ8gjSFKemhwsgJSEkuBe3m02oL -----END CERTIFICATE-----Generated at Tue Nov 4 21:30:46 2025 by rpki-client