$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft File: FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft (raw, json) Hash identifier: XSnZUFTZIae1Lx0E9S5ibrvvDc8dxlxcIUu4l9Hgr+s= Subject key identifier: CE:DE:B0:72:95:4E:B8:FA:94:32:7C:45:57:94:B6:3A:E0:B6:E6:9D Authority key identifier: 16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 Certificate issuer: /CN=A91CB14D/serialNumber=16C662726F4A009133D6591664239E00C681A004 Certificate serial: 014E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft Manifest number: 0A07 Signing time: Sun 02 Nov 2025 20:25:36 +0000 Manifest this update: Sun 02 Nov 2025 20:25:35 +0000 Manifest next update: Sun 09 Nov 2025 20:25:35 +0000 Files and hashes: 1: FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl (hash: 2eg3XwZGmZr2K9CbYPIIY5fS43ohVEVfK97VeDr4Wo0=) 2: C483C80CDE4011EFB4A11D5CC4F9AE02.roa (hash: qD7Tfzoc4wjH2bt1dbbg4OGAjJJrb45scH4IFujWWW4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 334 (0x14e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB14D, serialNumber=16C662726F4A009133D6591664239E00C681A004 Validity Not Before: Nov 2 20:25:35 2025 GMT Not After : Nov 9 20:25:35 2025 GMT Subject: CN=6907be3f-4fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:c7:83:5e:fc:12:4d:9e:6e:1a:3e:1d:55:e3: e3:3f:1d:df:05:bf:79:af:5c:67:36:30:05:3b:30: 8d:19:8f:a2:ac:22:4e:0f:c8:50:1c:87:d0:54:ae: be:05:0d:4a:16:9a:aa:84:e1:ca:3f:17:04:40:0f: 85:f7:9c:61:b9:df:87:a7:ca:86:43:95:f1:d0:e5: 4d:c2:bc:56:42:5c:1a:e7:7b:88:23:76:89:3f:9f: 2a:6a:80:bc:a0:42:3c:ac:d3:ef:d5:0a:9f:f8:88: fb:82:14:6d:65:64:4a:29:28:bb:50:78:b6:24:ff: d1:81:bc:0e:5b:cd:bd:7a:ee:b9:38:5f:55:ee:c0: 89:97:33:1c:26:52:14:a5:dd:ea:01:7d:36:f0:b3: 0e:8d:2f:1d:8c:06:c7:9c:ab:bc:eb:d7:23:6a:41: 85:ee:39:ff:af:6a:97:d9:b2:f5:14:bf:d6:87:47: 07:0d:f1:a5:9b:63:55:83:a1:34:8e:91:84:36:ef: af:ef:21:97:92:69:38:09:f8:01:63:e1:25:49:cf: d3:2e:50:7b:3c:0f:06:3c:a8:c5:31:f0:76:f4:12: f4:d4:84:17:a1:84:b0:91:44:c4:68:5f:7b:9b:83: 6e:73:4b:0e:98:ad:80:a5:d7:37:66:c7:bf:97:2e: 1a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:DE:B0:72:95:4E:B8:FA:94:32:7C:45:57:94:B6:3A:E0:B6:E6:9D X509v3 Authority Key Identifier: keyid:16:C6:62:72:6F:4A:00:91:33:D6:59:16:64:23:9E:00:C6:81:A0:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FsZicm9KAJEz1lkWZCOeAMaBoAQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/FsZicm9KAJEz1lkWZCOeAMaBoAQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:bc:35:6a:5b:04:de:a9:c5:44:52:59:96:2d:ca:c0:97:26: 2c:12:74:da:7a:38:ce:21:3c:a8:8a:f2:84:63:a2:bb:e6:86: 2a:33:6c:a6:a0:06:d3:e7:f3:c1:f7:0b:a0:9c:4a:44:f0:e5: 53:f2:df:8f:cf:56:2a:b0:30:07:39:e4:99:8a:87:7b:bf:7b: 91:1d:a9:9e:f5:cb:44:38:8c:d6:da:8f:fb:50:61:80:d6:97: e6:ad:5a:fd:27:33:e4:4f:7f:eb:36:a7:68:d5:89:22:9f:cf: 59:01:70:69:70:0e:b0:9a:72:fc:e3:c7:86:bf:18:6e:f3:29: d5:13:5c:b9:c2:8f:9e:97:d3:99:89:23:65:56:07:c8:42:93: 39:f6:ee:6c:a4:d2:11:63:55:c2:02:db:7b:79:71:f8:fd:84: 12:c0:4c:ed:c5:07:a2:c7:45:99:f6:30:a6:77:7d:13:50:74: 48:8d:cb:3c:fa:7f:ff:24:f8:c3:b3:64:da:c9:b1:92:0c:e0: 5a:17:20:c4:cb:39:17:0e:85:fb:47:57:cf:04:4a:3d:e4:9a: 1b:a9:c8:19:a5:47:fc:01:bf:84:5a:f7:47:45:74:31:70:ed: b2:91:06:ba:86:c3:86:96:97:06:9a:b4:49:18:5f:e2:58:a1: af:7a:89:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IxNEQxMTAvBgNVBAUTKDE2QzY2MjcyNkY0QTAwOTEzM0Q2NTkxNjY0MjM5RTAw QzY4MUEwMDQwHhcNMjUxMTAyMjAyNTM1WhcNMjUxMTA5MjAyNTM1WjAYMRYwFAYD VQQDEw02OTA3YmUzZi00ZmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtMeDXvwSTZ5uGj4dVePjPx3fBb95r1xnNjAFOzCNGY+irCJOD8hQHIfQVK6+ BQ1KFpqqhOHKPxcEQA+F95xhud+Hp8qGQ5Xx0OVNwrxWQlwa53uII3aJP58qaoC8 oEI8rNPv1Qqf+Ij7ghRtZWRKKSi7UHi2JP/RgbwOW829eu65OF9V7sCJlzMcJlIU pd3qAX028LMOjS8djAbHnKu869cjakGF7jn/r2qX2bL1FL/Wh0cHDfGlm2NVg6E0 jpGENu+v7yGXkmk4CfgBY+ElSc/TLlB7PA8GPKjFMfB29BL01IQXoYSwkUTEaF97 m4Nuc0sOmK2Apdc3Zse/ly4aIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFM7esHKV Trj6lDJ8RVeUtjrgtuadMB8GA1UdIwQYMBaAFBbGYnJvSgCRM9ZZFmQjngDGgaAE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjE0RC8zMEZFMEFGRUM0 QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FKRXoxbGtXWkNPZUFNYUJv QVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZzWmljbTlLQUpFejFsa1daQ09lQU1hQm9BUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjE0RC8zMEZFMEFGRUM0QzYxMUVBQThENUJFNjZDNEY5QUUwMi9Gc1ppY205S0FK RXoxbGtXWkNPZUFNYUJvQVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBvDVqWwTeqcVEUlmWLcrAlyYsEnTaejjOITyoivKEY6K75oYqM2ym oAbT5/PB9wugnEpE8OVT8t+Pz1YqsDAHOeSZiod7v3uRHame9ctEOIzW2o/7UGGA 1pfmrVr9JzPkT3/rNqdo1Ykin89ZAXBpcA6wmnL848eGvxhu8ynVE1y5wo+el9OZ iSNlVgfIQpM59u5spNIRY1XCAtt7eXH4/YQSwEztxQeix0WZ9jCmd30TUHRIjcs8 +n//JPjDs2TaybGSDOBaFyDEyzkXDoX7R1fPBEo95JobqcgZpUf8Ab+EWvdHRXQx cO2ykQa6hsOGlpcGmrRJGF/iWKGveolA -----END CERTIFICATE-----Generated at Tue Nov 4 16:04:02 2025 by rpki-client