$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft File: -SrbMNtsD5zpgLXbl3FF-MGcgks.mft (raw, json) Hash identifier: TlJkDepWSXmgMMqEYQ2U+v4o21Vd5wbiQ0Nrf3ksmow= Subject key identifier: D5:F3:74:E0:37:EB:24:53:DC:5C:DC:3A:B8:6C:1B:C9:C3:B2:37:8D Authority key identifier: F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B Certificate issuer: /CN=A91C0FCC/serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Certificate serial: 096F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft Manifest number: 0968 Signing time: Sun 02 Nov 2025 20:04:34 +0000 Manifest this update: Sun 02 Nov 2025 20:04:33 +0000 Manifest next update: Sun 09 Nov 2025 20:04:33 +0000 Files and hashes: 1: -SrbMNtsD5zpgLXbl3FF-MGcgks.crl (hash: StFryCwMfhumXE74UfxlR3wUdzd5ql5mG3rUWOLGDEQ=) 2: A778AAF6A42111EAB3108934C4F9AE02.roa (hash: nYjWOytssQAvKUrx53OAPZHiEKpRdEsbmRx5MJFOOy4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2415 (0x96f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0FCC, serialNumber=F92ADB30DB6C0F9CE980B5DB977145F8C19C824B Validity Not Before: Nov 2 20:04:33 2025 GMT Not After : Nov 9 20:04:33 2025 GMT Subject: CN=6907b951-3369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:91:72:38:bf:c0:67:e8:80:ff:58:c4:12:ad: c8:ce:ef:96:94:9a:bf:61:81:c0:04:8c:de:2b:2d: 20:50:50:7b:f9:36:3b:be:c3:38:b3:58:b8:cb:8c: 29:be:24:29:a0:61:9c:8a:be:1a:f0:ff:ca:56:38: 67:08:2d:34:ae:2a:c2:e2:b9:e1:cc:f3:ac:5d:44: 0a:37:cc:b5:06:a5:72:d5:25:d6:dd:7a:41:23:3b: 8e:8c:4d:da:60:3c:17:1b:34:a4:48:5d:40:5a:71: 44:43:5c:29:be:19:9f:bd:10:ae:d2:7a:a4:b0:3f: 92:3b:17:66:64:6c:d7:11:de:c6:d3:3d:f0:46:a5: 28:50:07:ec:a3:59:9b:78:55:0e:ba:34:e6:d4:f6: c2:10:bd:95:8c:49:ac:53:43:9f:35:c2:18:c8:2c: 46:fd:b6:38:96:43:7f:79:6c:1b:ab:00:1c:0c:fe: fd:35:3d:06:e5:2f:39:21:a6:10:1f:b7:20:20:00: 9c:20:2d:a3:83:1a:f6:31:01:ff:9e:1f:d9:b6:78: 28:b9:cc:23:2d:49:02:4a:9e:e8:54:e8:ad:e5:79: b9:cc:3d:f1:b3:b4:2a:6f:5b:75:8d:b7:a1:c0:74: a2:aa:2a:ad:9f:64:db:47:65:70:56:74:62:6c:c5: 44:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:F3:74:E0:37:EB:24:53:DC:5C:DC:3A:B8:6C:1B:C9:C3:B2:37:8D X509v3 Authority Key Identifier: keyid:F9:2A:DB:30:DB:6C:0F:9C:E9:80:B5:DB:97:71:45:F8:C1:9C:82:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-SrbMNtsD5zpgLXbl3FF-MGcgks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0FCC/F5C42408A41F11EABDC2F531C4F9AE02/-SrbMNtsD5zpgLXbl3FF-MGcgks.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:d0:6c:ab:29:0a:18:3b:2d:4e:f9:7e:c0:ab:f1:09:9e:e4: cd:20:d3:51:d1:7c:5a:7e:ce:89:8c:62:65:cd:e6:b4:29:0e: 83:57:ee:4e:15:30:97:b8:da:57:fd:98:f9:0a:a8:0f:a7:40: 09:5f:0f:25:b2:b6:f2:68:6b:4c:e2:2b:1b:88:ab:9c:b3:fa: 6b:17:9c:5b:96:f8:4b:62:3e:ae:b9:dc:48:98:49:e1:ea:ae: 67:12:01:5e:e6:d9:05:a4:68:0c:82:49:a2:e0:93:0c:b8:c7: d1:6e:33:79:7c:5f:e3:f7:fc:54:8f:88:26:64:f9:56:86:89: 30:73:8c:c1:5b:62:72:01:5e:3e:28:38:5f:28:10:ff:60:28: cb:66:46:1e:93:88:d0:79:73:3f:71:a0:d1:86:ba:ce:2e:9a: bb:93:79:b7:83:87:f0:89:ae:14:63:23:86:5d:4e:a9:79:53: ff:3d:e4:f1:31:0c:21:fa:b5:7a:fd:60:62:cb:6b:2d:9b:38: 13:2b:31:e4:07:e3:8b:67:ee:7b:3d:21:ef:24:43:3d:e1:de: 6f:39:23:95:27:3d:8e:c7:11:c5:cc:e1:cc:fc:89:3f:97:b7: 03:41:b6:b0:c0:50:71:a5:ae:47:3c:aa:38:b8:b1:da:ac:40: 04:ef:76:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBGQ0MxMTAvBgNVBAUTKEY5MkFEQjMwREI2QzBGOUNFOTgwQjVEQjk3NzE0NUY4 QzE5QzgyNEIwHhcNMjUxMTAyMjAwNDMzWhcNMjUxMTA5MjAwNDMzWjAYMRYwFAYD VQQDEw02OTA3Yjk1MS0zMzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZFyOL/AZ+iA/1jEEq3Izu+WlJq/YYHABIzeKy0gUFB7+TY7vsM4s1i4y4wp viQpoGGcir4a8P/KVjhnCC00rirC4rnhzPOsXUQKN8y1BqVy1SXW3XpBIzuOjE3a YDwXGzSkSF1AWnFEQ1wpvhmfvRCu0nqksD+SOxdmZGzXEd7G0z3wRqUoUAfso1mb eFUOujTm1PbCEL2VjEmsU0OfNcIYyCxG/bY4lkN/eWwbqwAcDP79NT0G5S85IaYQ H7cgIACcIC2jgxr2MQH/nh/ZtngoucwjLUkCSp7oVOit5Xm5zD3xs7Qqb1t1jbeh wHSiqiqtn2TbR2VwVnRibMVE7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXzdOA3 6yRT3FzcOrhsG8nDsjeNMB8GA1UdIwQYMBaAFPkq2zDbbA+c6YC125dxRfjBnIJL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEZDQy9GNUM0MjQwOEE0 MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1enBnTFhibDNGRi1NR2Nn a3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1TcmJNTnRzRDV6cGdMWGJsM0ZGLU1HY2drcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEZDQy9GNUM0MjQwOEE0MUYxMUVBQkRDMkY1MzFDNEY5QUUwMi8tU3JiTU50c0Q1 enBnTFhibDNGRi1NR2Nna3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy0GyrKQoYOy1O+X7Aq/EJnuTNINNR0Xxafs6JjGJlzea0KQ6DV+5O FTCXuNpX/Zj5CqgPp0AJXw8lsrbyaGtM4isbiKucs/prF5xblvhLYj6uudxImEnh 6q5nEgFe5tkFpGgMgkmi4JMMuMfRbjN5fF/j9/xUj4gmZPlWhokwc4zBW2JyAV4+ KDhfKBD/YCjLZkYek4jQeXM/caDRhrrOLpq7k3m3g4fwia4UYyOGXU6peVP/PeTx MQwh+rV6/WBiy2stmzgTKzHkB+OLZ+57PSHvJEM94d5vOSOVJz2OxxHFzOHM/Ik/ l7cDQbawwFBxpa5HPKo4uLHarEAE73Zr -----END CERTIFICATE-----Generated at Tue Nov 4 02:17:08 2025 by rpki-client