$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: Tqo5H6je2b9bxNojTc83LC0LvDqFcdTit68XH514PuA= Subject key identifier: 5F:51:8C:DA:53:5D:07:44:50:E7:6C:EF:F8:BB:DD:FD:B9:6A:C9:12 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B16 Signing time: Sun 02 Nov 2025 19:19:38 +0000 Manifest this update: Sun 02 Nov 2025 19:19:38 +0000 Manifest next update: Sun 09 Nov 2025 19:19:38 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: EovtYM+U/L9ei1NAZiW/iANjhnJJYtR3KoEI7LHB8g0=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:19:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2866 (0xb32) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Nov 2 19:19:38 2025 GMT Not After : Nov 9 19:19:38 2025 GMT Subject: CN=6907aeca-acfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:7c:e8:f0:57:e8:a9:26:87:3e:88:53:70: a8:bf:f4:84:c7:50:e6:23:34:3e:08:8f:eb:c8:00: 9f:1e:32:1a:12:8b:78:3f:a2:55:dd:68:f8:c3:b0: 7f:ad:db:08:e9:55:07:c1:a0:a7:a7:30:e6:d0:a9: 8e:a3:6b:4b:31:4a:43:6a:9d:09:7c:79:8f:44:bc: 20:a2:2d:f3:25:38:d7:05:fe:1f:2e:c2:7d:7c:64: 7e:5d:21:45:4b:3b:ed:6f:68:ea:ca:bc:99:55:e4: be:5b:e8:2a:12:c5:40:10:3b:69:e8:c9:86:29:32: 7e:51:c0:95:37:5f:c2:dd:20:d7:3b:1a:a4:51:2a: c5:e4:87:bb:1f:16:0a:da:75:1e:01:52:b7:59:6c: df:1c:65:0d:96:47:61:ee:c9:9a:97:8f:be:fe:49: a8:be:e8:b0:6c:e5:b2:a5:13:05:57:68:86:9a:41: 30:88:2f:61:f2:43:ee:50:37:8b:10:e9:33:74:22: 3b:05:09:47:52:2a:e5:58:0e:14:d5:80:f8:72:d1: 91:36:73:52:14:c9:13:52:3a:5e:47:27:3d:99:33: 66:b8:89:91:06:2f:c1:37:cc:7b:28:5d:39:bf:1c: b0:ec:31:2d:50:db:c0:93:31:dc:69:7f:fc:26:14: 21:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:51:8C:DA:53:5D:07:44:50:E7:6C:EF:F8:BB:DD:FD:B9:6A:C9:12 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:f4:b5:84:fc:1c:fe:6f:71:d6:17:fe:53:fe:81:ff:e5:cc: 7d:77:a9:d0:66:f6:ee:79:fe:73:cb:38:a8:38:c6:32:00:d9: f2:4f:1b:64:f4:49:81:e0:b0:e0:46:8f:86:31:c7:86:69:51: cf:57:0c:c8:4c:13:21:95:91:ea:0b:42:ca:01:f8:e2:45:34: 61:36:4f:cf:fd:4f:7a:db:30:5a:c4:28:f4:c5:7f:0c:79:15: 29:6c:28:76:69:96:52:7e:d1:9a:2e:3c:e5:9d:e3:bb:30:9b: 2f:c2:48:e4:da:47:04:b2:a0:dc:61:89:36:5e:37:3c:73:f3: c7:7f:e6:64:29:ae:f9:42:53:9f:24:9b:e7:99:50:ad:b6:3b: a1:74:a9:b5:ea:ad:a5:5b:87:45:16:cb:26:ab:28:f6:f1:89: 34:6b:4d:b6:c9:15:d1:60:c5:6a:82:3a:e1:45:dc:ac:7f:71: ad:58:7f:f2:3c:bd:b0:28:fa:63:e2:b5:4e:5b:63:a2:c0:24: a4:1b:5d:d1:fe:3d:d9:ba:e3:3e:6b:d1:fd:f7:89:c2:00:9f: 63:ff:c3:ec:e3:e4:fa:0f:64:3e:15:9a:84:78:1c:0f:2a:9d: 54:6f:bb:7f:9e:f7:56:c5:66:42:30:6d:0f:94:9a:8a:e0:b3: 1a:b9:b5:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUxMTAyMTkxOTM4WhcNMjUxMTA5MTkxOTM4WjAYMRYwFAYD VQQDEw02OTA3YWVjYS1hY2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Sl86PBX6Kkmhz6IU3Cov/SEx1DmIzQ+CI/ryACfHjIaEot4P6JV3Wj4w7B/ rdsI6VUHwaCnpzDm0KmOo2tLMUpDap0JfHmPRLwgoi3zJTjXBf4fLsJ9fGR+XSFF Szvtb2jqyryZVeS+W+gqEsVAEDtp6MmGKTJ+UcCVN1/C3SDXOxqkUSrF5Ie7HxYK 2nUeAVK3WWzfHGUNlkdh7smal4++/kmovuiwbOWypRMFV2iGmkEwiC9h8kPuUDeL EOkzdCI7BQlHUirlWA4U1YD4ctGRNnNSFMkTUjpeRyc9mTNmuImRBi/BN8x7KF05 vxyw7DEtUNvAkzHcaX/8JhQhswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9RjNpT XQdEUOds7/i73f25askSMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi9LWE/Bz+b3HWF/5T/oH/5cx9d6nQZvbuef5zyzioOMYyANnyTxtk 9EmB4LDgRo+GMceGaVHPVwzITBMhlZHqC0LKAfjiRTRhNk/P/U962zBaxCj0xX8M eRUpbCh2aZZSftGaLjzlneO7MJsvwkjk2kcEsqDcYYk2Xjc8c/PHf+ZkKa75QlOf JJvnmVCttjuhdKm16q2lW4dFFssmqyj28Yk0a022yRXRYMVqgjrhRdysf3GtWH/y PL2wKPpj4rVOW2OiwCSkG13R/j3ZuuM+a9H994nCAJ9j/8Ps4+T6D2Q+FZqEeBwP Kp1Ub7t/nvdWxWZCMG0PlJqK4LMaubXi -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:09 2025 by rpki-client