$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft File: 1fbdY8A4EGCv-8nSDtMPB_veiOo.mft (raw, json) Hash identifier: Qsz7fnqcbYnchc66xlUC7UMeXm1IaaNetpdh0CMkUtw= Subject key identifier: 47:E1:DC:BE:8A:43:42:8F:EE:79:91:E5:25:EA:A0:23:B1:1C:23:C4 Authority key identifier: D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA Certificate issuer: /CN=A91BBF7F/serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Certificate serial: 0F38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft Manifest number: 0F20 Signing time: Tue 04 Nov 2025 17:41:48 +0000 Manifest this update: Tue 04 Nov 2025 17:41:47 +0000 Manifest next update: Tue 11 Nov 2025 17:41:47 +0000 Files and hashes: 1: 1fbdY8A4EGCv-8nSDtMPB_veiOo.crl (hash: X1sfNzEYsVCK4MM9aevpeAbE3J5BHJV1iSIRYVn5j6E=) 2: 656CB24EC9F611ED9853C583C4F9AE02.roa (hash: w9f85Y+KRBnRa0YJSmsDyyhylh1UfaYw453pU7HjF1A=) 3: 64554290C9F611ED9853C583C4F9AE02.roa (hash: OKUbU8IYBtUlB8hYEhyLNWGvkxYq3YMYoLZU29fzMeU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3896 (0xf38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBF7F, serialNumber=D5F6DD63C0381060AFFBC9D20ED30F07FBDE88EA Validity Not Before: Nov 4 17:41:47 2025 GMT Not After : Nov 11 17:41:47 2025 GMT Subject: CN=690a3adb-275e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b3:6f:46:95:18:6e:57:8a:07:87:1d:47:65: 85:d6:d3:07:4d:62:a7:95:6e:70:9c:94:e7:9c:74: 13:fa:b7:e7:9b:6e:b0:a2:6b:a3:dc:10:f2:87:c5: 80:8f:32:2b:5b:92:56:84:80:fd:69:c5:ca:ce:3f: 40:14:ed:73:4d:57:05:60:6d:ac:f0:d3:d2:11:61: 32:51:41:ca:aa:78:75:71:f9:75:a2:14:31:59:bb: 1d:b6:92:13:ce:20:95:3c:9a:d3:b9:44:36:a2:49: da:b0:24:b3:1c:77:57:f9:95:0a:f3:9e:dd:92:70: 0e:c6:1d:0f:4b:af:fc:1c:7c:d8:ae:1a:9b:e8:aa: 9c:30:86:50:93:21:e5:72:4b:36:c3:73:a4:7f:6e: ba:dc:1f:7e:af:a0:d9:29:3b:5a:52:b6:15:19:30: 74:10:dd:32:5c:9d:c5:49:0a:83:b9:f8:6e:dd:8d: 93:62:e5:ac:fa:48:42:8d:e7:39:e6:60:0e:5f:64: 60:44:9e:ad:28:00:10:98:28:60:bd:2c:f2:be:ec: 8f:b2:f5:6b:26:d2:2b:d1:35:70:16:2b:4d:a3:6c: df:e9:45:f7:14:b0:eb:f7:5a:0d:99:4c:61:d6:28: 8f:7a:fc:16:b0:26:48:73:81:02:9f:0a:95:3f:b4: cb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:E1:DC:BE:8A:43:42:8F:EE:79:91:E5:25:EA:A0:23:B1:1C:23:C4 X509v3 Authority Key Identifier: keyid:D5:F6:DD:63:C0:38:10:60:AF:FB:C9:D2:0E:D3:0F:07:FB:DE:88:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1fbdY8A4EGCv-8nSDtMPB_veiOo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBF7F/453EB6F4874511E9BF86445CC4F9AE02/1fbdY8A4EGCv-8nSDtMPB_veiOo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c3:d9:0b:72:ed:87:15:6f:c3:f0:b5:7f:cf:4f:02:51:b7:9e: 3f:27:7e:eb:92:ff:8a:3b:cd:46:a0:d7:d8:b1:39:9a:6e:1c: d3:90:a7:9f:ac:84:4e:a8:ee:34:30:7b:d7:8a:78:6c:45:04: ff:99:75:56:cc:36:8f:17:b6:71:a2:fa:27:22:73:20:16:29: f6:c0:e1:e8:5c:2e:07:15:25:0f:1b:f5:e4:30:a5:f4:38:5c: db:0d:05:09:25:e3:7a:eb:27:f6:ad:e2:18:d6:02:32:2c:7a: 35:c3:5e:c1:fe:83:c7:84:49:f6:57:2f:59:bc:70:91:72:a5: 4b:fb:78:3c:f6:b3:01:94:ec:85:45:cc:3e:95:45:a3:c8:84: 1e:0d:20:03:fc:bc:72:08:38:de:5a:85:a2:10:87:39:f1:32: fc:be:62:0f:50:e9:1a:4e:7a:a9:97:c0:28:b8:b5:c7:2e:67: 17:80:a8:8c:9e:95:43:5f:07:e8:49:29:a2:4e:51:c4:48:91: 58:50:f2:24:bd:a5:1a:ba:07:e4:19:f7:e4:ec:77:7f:d0:27: 25:b1:d2:96:5e:f9:aa:60:f4:60:43:97:5f:68:b5:bd:b7:59: ec:0c:b4:97:06:86:29:ff:5c:cb:5b:9d:e2:3a:d7:4d:77:06: 47:e4:2a:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDzgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJGN0YxMTAvBgNVBAUTKEQ1RjZERDYzQzAzODEwNjBBRkZCQzlEMjBFRDMwRjA3 RkJERTg4RUEwHhcNMjUxMTA0MTc0MTQ3WhcNMjUxMTExMTc0MTQ3WjAYMRYwFAYD VQQDEw02OTBhM2FkYi0yNzVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvLNvRpUYbleKB4cdR2WF1tMHTWKnlW5wnJTnnHQT+rfnm26womuj3BDyh8WA jzIrW5JWhID9acXKzj9AFO1zTVcFYG2s8NPSEWEyUUHKqnh1cfl1ohQxWbsdtpIT ziCVPJrTuUQ2oknasCSzHHdX+ZUK857dknAOxh0PS6/8HHzYrhqb6KqcMIZQkyHl cks2w3Okf2663B9+r6DZKTtaUrYVGTB0EN0yXJ3FSQqDufhu3Y2TYuWs+khCjec5 5mAOX2RgRJ6tKAAQmChgvSzyvuyPsvVrJtIr0TVwFitNo2zf6UX3FLDr91oNmUxh 1iiPevwWsCZIc4ECnwqVP7TLPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfh3L6K Q0KP7nmR5SXqoCOxHCPEMB8GA1UdIwQYMBaAFNX23WPAOBBgr/vJ0g7TDwf73ojq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkY3Ri80NTNFQjZGNDg3 NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVHQ3YtOG5TRHRNUEJfdmVp T28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFmYmRZOEE0RUdDdi04blNEdE1QQl92ZWlPby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QkY3Ri80NTNFQjZGNDg3NDUxMUU5QkY4NjQ0NUNDNEY5QUUwMi8xZmJkWThBNEVH Q3YtOG5TRHRNUEJfdmVpT28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDD2Qty7YcVb8PwtX/PTwJRt54/J37rkv+KO81GoNfYsTmabhzTkKef rIROqO40MHvXinhsRQT/mXVWzDaPF7ZxovonInMgFin2wOHoXC4HFSUPG/XkMKX0 OFzbDQUJJeN66yf2reIY1gIyLHo1w17B/oPHhEn2Vy9ZvHCRcqVL+3g89rMBlOyF Rcw+lUWjyIQeDSAD/LxyCDjeWoWiEIc58TL8vmIPUOkaTnqpl8AouLXHLmcXgKiM npVDXwfoSSmiTlHESJFYUPIkvaUaugfkGffk7Hd/0CclsdKWXvmqYPRgQ5dfaLW9 t1nsDLSXBoYp/1zLW53iOtdNdwZH5CpD -----END CERTIFICATE-----Generated at Tue Nov 4 21:19:59 2025 by rpki-client