$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft File: dHyGw8wUp3lzgFMVQIzcoQohR7I.mft (raw, json) Hash identifier: yrYpHqCGYRyPhzJnWNkYq3/y43xRZ6XVnD/5p1FCyu0= Subject key identifier: 3A:EF:6A:62:92:26:A0:56:BF:77:D2:5A:16:63:94:C2:3C:4D:A6:E5 Authority key identifier: 74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 Certificate issuer: /CN=A91BB94D/serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Certificate serial: 07C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft Manifest number: 07A6 Signing time: Tue 04 Nov 2025 21:29:35 +0000 Manifest this update: Tue 04 Nov 2025 21:29:35 +0000 Manifest next update: Tue 11 Nov 2025 21:29:35 +0000 Files and hashes: 1: dHyGw8wUp3lzgFMVQIzcoQohR7I.crl (hash: u2SiCGYLiKcOU7DZ7ut664Oc/j1HiDzTkozp9B+eMdM=) 2: 827329BE232B11EBB2348B23C4F9AE02.roa (hash: dCRsUxTYQfbVmR8r076QUZHUhBb4kgZRsGIm5GyZ/CI=) 3: 8126464A232B11EBB2348B23C4F9AE02.roa (hash: KN4CWPFNBhIIjqsGJhbyUP98ulbl0SGTkd2fLpRZk+I=) 4: 81D72348232B11EBB2348B23C4F9AE02.roa (hash: D4Cs5JY9tNHVDlAQoZ8zXAojWJ56gds9kQSJUSLXkfU=) 5: 8320FBE8232B11EBB2348B23C4F9AE02.roa (hash: lZu5pdaUasH8/fasxCeSUbAtaYZZr63nIN4QhjX8ELY=) 6: FAA525207A4411EB804B7430C4F9AE02.roa (hash: BhSHDdRG8/0Zm5EF7nED+w+EERbxSAwCaFSs3AEh7LU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:29:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1991 (0x7c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB94D, serialNumber=747C86C3CC14A77973805315408CDCA10A2147B2 Validity Not Before: Nov 4 21:29:35 2025 GMT Not After : Nov 11 21:29:35 2025 GMT Subject: CN=690a703f-f7a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:96:4a:ed:10:8b:48:0f:4f:62:86:2d:6c:c1: ca:33:21:b7:95:be:84:11:e0:63:8e:a3:7e:65:26: 7e:92:8d:99:d7:e0:75:0b:02:bd:06:02:42:9b:73: 47:23:68:62:76:c2:15:6b:2c:5b:23:b4:70:f1:8b: b9:f9:cd:1a:79:ae:8f:e7:17:af:d0:df:8f:74:4e: 71:ae:34:1a:62:ba:88:d2:98:bc:61:59:89:11:e9: 0d:2f:48:ef:75:41:8a:1b:ad:41:c1:ec:a2:fa:39: 34:29:36:27:45:64:a3:fc:a7:35:a4:d7:a5:38:92: 9d:16:5e:a2:69:db:d2:f1:5e:f4:37:a7:c7:9f:e7: 65:76:d2:55:41:f9:59:6e:d5:47:a8:2b:44:51:0d: bf:c1:51:d0:06:41:54:3d:33:bf:dc:84:96:42:d5: cb:2f:49:d8:49:de:1c:34:05:25:bf:98:2b:35:01: bc:39:53:d9:e9:cd:15:19:aa:f5:be:9c:c9:f6:7e: f4:e0:25:5a:4b:9d:3e:ef:9d:71:25:a0:6a:b9:73: 10:f4:3f:3a:7b:b3:78:65:6d:d5:49:11:4d:6a:58: 69:1a:70:5a:b7:43:40:c4:8f:99:21:c2:f2:95:a3: 41:37:b5:65:a6:ce:ef:43:15:37:e4:dd:57:db:33: 1d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EF:6A:62:92:26:A0:56:BF:77:D2:5A:16:63:94:C2:3C:4D:A6:E5 X509v3 Authority Key Identifier: keyid:74:7C:86:C3:CC:14:A7:79:73:80:53:15:40:8C:DC:A1:0A:21:47:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dHyGw8wUp3lzgFMVQIzcoQohR7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB94D/2C7162CC232811EB9FF6E91AC4F9AE02/dHyGw8wUp3lzgFMVQIzcoQohR7I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bf:91:0b:af:64:65:5a:4f:1f:8f:7a:58:b1:6c:b5:58:e5:4f: 03:fe:b1:3f:f5:04:67:b7:91:29:64:51:67:66:bb:58:4b:4a: 4f:4a:57:26:9b:e6:35:e3:82:dc:5e:08:65:50:10:37:8a:dc: 19:e2:86:2d:c9:de:e4:77:41:71:b8:64:eb:07:f1:e2:76:6d: 5b:49:de:57:5c:f5:3f:bd:9f:f4:a5:af:12:0d:01:0b:41:a1: 73:75:60:fc:89:e6:12:31:4a:5e:2f:dc:23:df:c1:91:c8:20: a6:43:d4:bc:d0:c3:83:fe:5c:54:e4:d0:0e:d2:ab:35:41:d7: 01:d7:8e:e8:fc:91:a5:8e:2e:b1:5e:a7:f9:09:7f:e2:5a:67: b4:c9:79:5b:01:28:0e:88:08:fd:d6:96:65:a7:41:4a:69:c6: 2a:5d:f7:a1:c7:38:38:66:1e:b9:80:c6:cd:4c:e7:b0:97:0d: 14:12:5c:b0:1a:3b:36:7e:98:22:72:0f:5f:2d:9f:01:27:9e: 2d:ee:0d:d8:a1:b4:9a:a9:be:46:4d:9e:69:8f:5a:62:42:b9: 51:57:3b:6e:cf:4b:17:df:1d:3c:2b:62:5b:b3:b7:bc:7e:dd: 8e:5d:79:92:80:aa:b3:c0:c3:f6:77:65:54:4e:e7:4a:e3:86: ea:58:5f:7f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5NEQxMTAvBgNVBAUTKDc0N0M4NkMzQ0MxNEE3Nzk3MzgwNTMxNTQwOENEQ0Ex MEEyMTQ3QjIwHhcNMjUxMTA0MjEyOTM1WhcNMjUxMTExMjEyOTM1WjAYMRYwFAYD VQQDEw02OTBhNzAzZi1mN2E5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25ZK7RCLSA9PYoYtbMHKMyG3lb6EEeBjjqN+ZSZ+ko2Z1+B1CwK9BgJCm3NH I2hidsIVayxbI7Rw8Yu5+c0aea6P5xev0N+PdE5xrjQaYrqI0pi8YVmJEekNL0jv dUGKG61Bweyi+jk0KTYnRWSj/Kc1pNelOJKdFl6iadvS8V70N6fHn+dldtJVQflZ btVHqCtEUQ2/wVHQBkFUPTO/3ISWQtXLL0nYSd4cNAUlv5grNQG8OVPZ6c0VGar1 vpzJ9n704CVaS50+751xJaBquXMQ9D86e7N4ZW3VSRFNalhpGnBat0NAxI+ZIcLy laNBN7Vlps7vQxU35N1X2zMdlwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDrvamKS JqBWv3fSWhZjlMI8TablMB8GA1UdIwQYMBaAFHR8hsPMFKd5c4BTFUCM3KEKIUey MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjk0RC8yQzcxNjJDQzIz MjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAzbHpnRk1WUUl6Y29Rb2hS N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RIeUd3OHdVcDNsemdGTVZRSXpjb1FvaFI3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjk0RC8yQzcxNjJDQzIzMjgxMUVCOUZGNkU5MUFDNEY5QUUwMi9kSHlHdzh3VXAz bHpnRk1WUUl6Y29Rb2hSN0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC/kQuvZGVaTx+PelixbLVY5U8D/rE/9QRnt5EpZFFnZrtYS0pPSlcm m+Y144LcXghlUBA3itwZ4oYtyd7kd0FxuGTrB/Hidm1bSd5XXPU/vZ/0pa8SDQEL QaFzdWD8ieYSMUpeL9wj38GRyCCmQ9S80MOD/lxU5NAO0qs1QdcB147o/JGlji6x Xqf5CX/iWme0yXlbASgOiAj91pZlp0FKacYqXfehxzg4Zh65gMbNTOewlw0UElyw Gjs2fpgicg9fLZ8BJ54t7g3YobSaqb5GTZ5pj1piQrlRVztuz0sX3x08K2Jbs7e8 ft2OXXmSgKqzwMP2d2VUTudK44bqWF9/ -----END CERTIFICATE-----Generated at Wed Nov 5 13:08:13 2025 by rpki-client