$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft File: CuIi7F4XpuYytVnUnFse8zLaQ8s.mft (raw, json) Hash identifier: 9T6ulrInsIbxZuP218lhavqzZSrDfgzJ0qcrx82cYio= Subject key identifier: EE:BF:38:86:FE:DC:39:85:A4:11:AD:8B:80:9A:B1:4B:DC:28:E5:B2 Authority key identifier: 0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB Certificate issuer: /CN=A91C7C04/serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Certificate serial: 073F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft Manifest number: 0723 Signing time: Sun 02 Nov 2025 21:52:05 +0000 Manifest this update: Sun 02 Nov 2025 21:52:04 +0000 Manifest next update: Sun 09 Nov 2025 21:52:04 +0000 Files and hashes: 1: CuIi7F4XpuYytVnUnFse8zLaQ8s.crl (hash: pi263xv5zEhymL1GWjfnZgygdHt+rQisvg5cigjHDOk=) 2: DA45147EB35E11EE8EED0E37C4F9AE02.roa (hash: MLem2RJrmzD72xixiKpCd0XFlZ6/VicCf/qXTlSWENc=) 3: F097281C169A11EF8927EC2DC4F9AE02.roa (hash: w3Ln1KV8lxVl5Uw2YRQh7wulnVukzVJfQnsYtJXybYU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:52:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1855 (0x73f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7C04, serialNumber=0AE222EC5E17A6E632B559D49C5B1EF332DA43CB Validity Not Before: Nov 2 21:52:04 2025 GMT Not After : Nov 9 21:52:04 2025 GMT Subject: CN=6907d284-9f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:16:53:ef:cc:e9:06:8d:f5:fb:39:41:e9:54: 45:60:8e:b6:88:ff:a7:1f:b9:cd:70:01:50:66:77: 50:c8:56:a1:c6:27:8b:af:c0:ad:93:b6:64:10:9f: 82:e0:0f:dd:e6:9f:6f:09:e6:b8:8c:ab:b2:55:e3: 19:60:cd:79:6a:98:49:ca:bb:cd:72:80:28:22:2a: 1c:88:ec:27:1e:7b:7d:14:b9:c2:b3:da:ea:60:37: 65:7b:01:1c:97:5b:cd:71:68:bf:3c:99:22:de:32: ea:41:99:42:d2:f9:07:aa:f6:ad:d8:ef:0b:d6:ff: e5:9e:f9:d7:b0:64:99:dd:6e:d3:d2:32:35:f9:ed: 4c:15:72:09:e8:ca:a5:5d:c1:b1:6f:e3:66:a1:07: 1a:4e:c8:77:44:aa:0b:f8:45:5d:f4:ec:e8:23:10: 9b:93:40:ac:f2:45:c7:e7:b9:0e:54:a9:66:66:7a: 29:8d:ab:27:d0:33:7e:d2:36:d5:4a:fa:09:a0:91: b5:ed:fe:5b:10:6f:51:41:72:41:d0:69:36:30:d5: 8a:d4:b9:84:5e:d7:6e:3a:46:7b:7c:46:3c:f4:f9: e5:66:17:fe:30:c2:c3:05:b8:4c:42:51:d4:18:f2: c7:b7:27:a8:12:32:0a:ed:79:68:4d:66:b2:81:17: 50:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:BF:38:86:FE:DC:39:85:A4:11:AD:8B:80:9A:B1:4B:DC:28:E5:B2 X509v3 Authority Key Identifier: keyid:0A:E2:22:EC:5E:17:A6:E6:32:B5:59:D4:9C:5B:1E:F3:32:DA:43:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CuIi7F4XpuYytVnUnFse8zLaQ8s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7C04/A0DB35525FB411EBAB7C6A23C4F9AE02/CuIi7F4XpuYytVnUnFse8zLaQ8s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:b5:f7:58:4d:b7:17:e8:51:d8:73:d1:95:42:2d:16:f7:9e: 5a:48:d1:64:3b:6e:ee:6a:4b:74:ed:bf:94:c9:87:64:8d:73: 9b:03:2a:2e:af:ec:c5:17:88:e8:98:c9:9d:c2:b4:15:0e:ba: f9:82:62:c5:5d:9a:8d:7f:34:63:e8:e9:2a:7a:cb:27:8a:c0: 9b:84:c7:fd:dc:12:92:ff:3c:50:5b:b6:4b:7a:56:07:41:11: 6f:5e:38:f4:60:30:e1:f0:60:79:88:58:6b:b7:63:fe:ec:9a: 57:ee:c1:da:10:72:b8:bb:da:b5:26:43:68:61:f2:df:06:d7: 3b:b5:89:2a:06:e6:c6:06:18:b2:e2:8d:aa:bb:63:47:61:8e: 55:1e:fa:09:90:47:ec:5e:e6:4a:11:76:12:24:93:7e:d7:60: 35:1e:f9:8a:b2:1e:1d:80:35:b0:0b:ac:62:29:ce:08:71:a6: 98:a6:00:29:a0:12:fa:d7:11:83:5f:42:69:b2:9c:ce:51:19: f7:3d:79:e3:0f:22:d4:fc:2d:51:9d:4f:ff:e5:23:64:24:11: 95:5c:2f:64:30:80:81:1a:25:a3:10:2c:20:54:8c:4d:3f:c9: fc:d6:f3:0e:d5:de:c9:82:6f:c2:b5:39:6b:3b:40:32:ca:cd: f4:71:bb:56 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBz8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzdDMDQxMTAvBgNVBAUTKDBBRTIyMkVDNUUxN0E2RTYzMkI1NTlENDlDNUIxRUYz MzJEQTQzQ0IwHhcNMjUxMTAyMjE1MjA0WhcNMjUxMTA5MjE1MjA0WjAYMRYwFAYD VQQDEw02OTA3ZDI4NC05ZjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BZT78zpBo31+zlB6VRFYI62iP+nH7nNcAFQZndQyFahxieLr8Ctk7ZkEJ+C 4A/d5p9vCea4jKuyVeMZYM15aphJyrvNcoAoIiociOwnHnt9FLnCs9rqYDdlewEc l1vNcWi/PJki3jLqQZlC0vkHqvat2O8L1v/lnvnXsGSZ3W7T0jI1+e1MFXIJ6Mql XcGxb+NmoQcaTsh3RKoL+EVd9OzoIxCbk0Cs8kXH57kOVKlmZnopjasn0DN+0jbV SvoJoJG17f5bEG9RQXJB0Gk2MNWK1LmEXtduOkZ7fEY89PnlZhf+MMLDBbhMQlHU GPLHtyeoEjIK7XloTWaygRdQPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO6/OIb+ 3DmFpBGti4CasUvcKOWyMB8GA1UdIwQYMBaAFAriIuxeF6bmMrVZ1JxbHvMy2kPL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDN0MwNC9BMERCMzU1MjVG QjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1WXl0Vm5VbkZzZTh6TGFR OHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N1SWk3RjRYcHVZeXRWblVuRnNlOHpMYVE4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0MwNC9BMERCMzU1MjVGQjQxMUVCQUI3QzZBMjNDNEY5QUUwMi9DdUlpN0Y0WHB1 WXl0Vm5VbkZzZTh6TGFROHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVtfdYTbcX6FHYc9GVQi0W955aSNFkO27uakt07b+UyYdkjXObAyou r+zFF4jomMmdwrQVDrr5gmLFXZqNfzRj6OkqessnisCbhMf93BKS/zxQW7ZLelYH QRFvXjj0YDDh8GB5iFhrt2P+7JpX7sHaEHK4u9q1JkNoYfLfBtc7tYkqBubGBhiy 4o2qu2NHYY5VHvoJkEfsXuZKEXYSJJN+12A1HvmKsh4dgDWwC6xiKc4IcaaYpgAp oBL61xGDX0JpspzOURn3PXnjDyLU/C1RnU//5SNkJBGVXC9kMICBGiWjECwgVIxN P8n81vMO1d7Jgm/CtTlrO0Ayys30cbtW -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:10 2025 by rpki-client