$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft File: sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft (raw, json) Hash identifier: dD0KOuSICYj5MVB9VXfAtTbRV8KJ7ZHRCksHAMw2euo= Subject key identifier: 75:81:A7:46:1A:83:61:D0:48:AB:9E:0D:31:73:E7:32:FE:B6:C5:D1 Authority key identifier: B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 Certificate issuer: /CN=A91BEA8B/serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Certificate serial: 4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft Manifest number: 4D Signing time: Wed 05 Nov 2025 07:32:41 +0000 Manifest this update: Wed 05 Nov 2025 07:32:41 +0000 Manifest next update: Wed 12 Nov 2025 07:32:41 +0000 Files and hashes: 1: sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl (hash: 4dLrG3vhrtTdAhE7By9PIBz97FdRb4W0YYfL0n9EAEM=) 2: D6E8451C889611F0B5CFE458C4F9AE02.roa (hash: o6qskbuLkzt0B6DeqPyqMtn3vK2zO8Pni4GeYykc/7w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:32:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78 (0x4e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=B15B4057AB5096B324ABCB1C7F027B6FA366C8D5 Validity Not Before: Nov 5 07:32:41 2025 GMT Not After : Nov 12 07:32:41 2025 GMT Subject: CN=690afd99-9981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:64:02:6f:91:00:ab:5d:90:e6:d1:76:ed:8f: 2e:26:ee:e4:ad:bc:e7:2f:a5:3e:a5:6c:67:90:df: f5:35:7e:5b:06:73:af:29:e2:6d:72:1f:3c:eb:a4: c9:95:1f:3d:31:4a:18:fb:0f:78:f1:23:d6:4a:4c: c1:af:3f:76:ef:5b:3e:4b:b4:41:f0:1f:d7:9c:34: 3f:07:20:d8:60:82:78:b6:33:36:59:ef:94:d6:c8: 29:4e:50:6a:fe:e9:87:c0:e5:bb:61:fa:11:11:ac: f2:ee:47:2f:73:3a:97:ea:78:46:e1:07:b9:39:1e: c6:6e:21:17:89:7e:98:04:38:55:95:5e:fc:3f:c3: 52:0a:cc:46:ca:0f:2c:a8:f4:80:39:65:da:0e:60: 6d:e8:a8:13:73:27:b6:b0:28:7f:e8:af:21:2e:ee: 81:eb:42:ef:6a:b3:55:e4:ae:d9:1e:49:14:7b:bb: be:64:78:44:8e:05:1b:1d:ad:f1:66:d4:40:47:b6: 39:3d:3b:1c:11:87:cc:f6:03:ce:a3:ab:de:29:e2: 37:3c:7a:e6:16:b8:d1:f3:2f:bb:e4:0c:96:98:f7: 32:04:db:3d:55:33:c8:4d:a3:d2:d9:6f:f0:cc:a9: f4:47:bc:7e:ea:10:6e:32:73:74:99:92:f6:11:27: 17:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:81:A7:46:1A:83:61:D0:48:AB:9E:0D:31:73:E7:32:FE:B6:C5:D1 X509v3 Authority Key Identifier: keyid:B1:5B:40:57:AB:50:96:B3:24:AB:CB:1C:7F:02:7B:6F:A3:66:C8:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sVtAV6tQlrMkq8scfwJ7b6NmyNU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/C27E37964B8111F08F65507EC4F9AE02/sVtAV6tQlrMkq8scfwJ7b6NmyNU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:c4:1d:15:b4:c4:f4:a7:85:64:a2:8e:15:ae:55:97:ae:f4: b2:19:c3:07:d1:20:43:72:93:29:d7:a2:3a:5b:18:71:56:c1: a9:8b:d5:03:f4:0b:5a:86:ed:62:2c:e6:e6:aa:8e:a3:7d:c3: c7:99:d8:77:79:2e:fa:db:be:bf:2d:6d:4b:1c:a1:a8:c6:7f: 75:05:9d:71:b0:02:13:cf:7c:a8:06:75:06:65:4e:88:09:51: f8:cc:88:c4:ac:c2:8a:ac:af:08:01:06:6e:9d:76:09:93:7a: 0f:6b:99:69:90:a5:96:7a:9e:f2:33:c9:7f:e3:6b:92:ba:cd: 6b:2c:9f:6a:35:c5:d4:75:55:b7:6a:1a:e4:5a:b3:b2:8c:f5: 4b:53:a3:b6:be:0b:1c:28:2b:60:35:98:b4:9a:b5:58:73:27: 64:dd:24:d5:bd:f1:f1:61:79:9f:f8:56:49:c8:11:ea:a3:9a: 6a:20:ca:67:e3:66:b1:de:3a:23:f7:f5:e7:1b:44:f3:80:6b: ce:10:d1:a5:12:f9:76:3a:92:3e:4c:b1:6e:8a:72:dd:2a:15: 61:8c:5b:ef:af:4f:53:f2:3f:01:86:c1:42:89:ef:49:c5:e4: 37:4b:15:87:71:e6:50:87:d8:17:f7:3e:4a:01:4e:d1:f1:e7: 8c:04:c8:23 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBTjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoQjE1QjQwNTdBQjUwOTZCMzI0QUJDQjFDN0YwMjdCNkZB MzY2QzhENTAeFw0yNTExMDUwNzMyNDFaFw0yNTExMTIwNzMyNDFaMBgxFjAUBgNV BAMTDTY5MGFmZDk5LTk5ODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCZAJvkQCrXZDm0Xbtjy4m7uStvOcvpT6lbGeQ3/U1flsGc68p4m1yHzzrpMmV Hz0xShj7D3jxI9ZKTMGvP3bvWz5LtEHwH9ecND8HINhggni2MzZZ75TWyClOUGr+ 6YfA5bth+hERrPLuRy9zOpfqeEbhB7k5HsZuIReJfpgEOFWVXvw/w1IKzEbKDyyo 9IA5ZdoOYG3oqBNzJ7awKH/oryEu7oHrQu9qs1XkrtkeSRR7u75keESOBRsdrfFm 1EBHtjk9OxwRh8z2A86jq94p4jc8euYWuNHzL7vkDJaY9zIE2z1VM8hNo9LZb/DM qfRHvH7qEG4yc3SZkvYRJxe/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUdYGnRhqD YdBIq54NMXPnMv62xdEwHwYDVR0jBBgwFoAUsVtAV6tQlrMkq8scfwJ7b6NmyNUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0MyN0UzNzk2NEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJNa3E4c2Nmd0o3YjZObXlO VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvc1Z0QVY2dFFsck1rcThzY2Z3SjdiNk5teU5VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJF QThCL0MyN0UzNzk2NEI4MTExRjA4RjY1NTA3RUM0RjlBRTAyL3NWdEFWNnRRbHJN a3E4c2Nmd0o3YjZObXlOVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGbEHRW0xPSnhWSijhWuVZeu9LIZwwfRIENykynXojpbGHFWwamL1QP0 C1qG7WIs5uaqjqN9w8eZ2Hd5Lvrbvr8tbUscoajGf3UFnXGwAhPPfKgGdQZlTogJ UfjMiMSswoqsrwgBBm6ddgmTeg9rmWmQpZZ6nvIzyX/ja5K6zWssn2o1xdR1Vbdq GuRas7KM9UtTo7a+CxwoK2A1mLSatVhzJ2TdJNW98fFheZ/4VknIEeqjmmogymfj ZrHeOiP39ecbRPOAa84Q0aUS+XY6kj5MsW6Kct0qFWGMW++vT1PyPwGGwUKJ70nF 5DdLFYdx5lCH2Bf3PkoBTtHx54wEyCM= -----END CERTIFICATE-----Generated at Wed Nov 5 11:42:18 2025 by rpki-client