$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft File: fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft (raw, json) Hash identifier: nJz7WvmMYfHpoxZRmOjQ5eVATeTilck2oj05NxXqPs8= Subject key identifier: B4:99:E4:51:2F:8E:6C:71:0B:FA:49:05:72:9F:09:50:4E:B9:D3:48 Authority key identifier: 7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B Certificate issuer: /CN=A91CFCF8/serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft Manifest number: 0428 Signing time: Mon 03 Nov 2025 00:21:40 +0000 Manifest this update: Mon 03 Nov 2025 00:21:39 +0000 Manifest next update: Mon 10 Nov 2025 00:21:39 +0000 Files and hashes: 1: fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl (hash: mucGFWhcLcknTSU4bJb8RwP8uab5PWBb2aP+E4JEkX4=) 2: 13A285FAB19A11EF8A0E4356C4F9AE02.roa (hash: 0AdbgXl2PM0dKWxojYYhrZuTuIt1BCoahGNDArgAJi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFCF8, serialNumber=7C5E0DDC4F5869747B2A358C9B7C0F31E8D8DD8B Validity Not Before: Nov 3 00:21:39 2025 GMT Not After : Nov 10 00:21:39 2025 GMT Subject: CN=6907f594-066a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:c5:c3:74:26:bf:87:8b:f9:59:c2:8e:09: 7d:fe:65:e0:16:bf:c0:e7:fa:12:23:3c:cb:f9:4e: 53:c8:8a:66:8b:36:ae:fe:bf:04:3c:9b:fa:77:15: 76:1f:8c:a8:a7:25:82:59:ef:00:f7:b6:a1:d1:e0: 13:3e:d7:8c:c8:7f:c9:dd:08:f2:2d:b6:97:7d:9a: 10:02:18:8b:c5:93:bb:ab:14:0f:d3:af:a5:1e:87: d5:29:62:bc:68:7d:b2:d0:03:e7:e9:cc:a2:28:62: 3b:71:ca:f7:be:ce:43:07:c9:42:a6:c9:45:42:b0: 73:69:d9:aa:d5:2e:bd:66:c8:1c:40:77:60:29:f1: 5a:6f:22:ac:98:57:d1:c7:bf:29:48:53:2f:df:7e: a2:5c:e7:3e:a9:8b:58:af:c4:07:d0:f7:95:f1:dc: 29:08:ae:be:63:59:21:84:05:f9:5b:e7:8c:5a:62: 03:03:89:fa:88:1b:cf:4a:63:97:03:20:e9:76:0a: f7:f4:c2:0e:c0:6e:9d:03:b2:47:d4:76:4f:34:41: 66:c6:ea:23:5e:7c:a2:3e:91:f2:7c:26:7e:55:de: 96:60:38:aa:3f:ef:5a:bf:fe:04:90:2d:aa:53:40: d6:51:33:52:9a:67:87:8b:30:7f:a0:62:48:59:6b: 70:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:99:E4:51:2F:8E:6C:71:0B:FA:49:05:72:9F:09:50:4E:B9:D3:48 X509v3 Authority Key Identifier: keyid:7C:5E:0D:DC:4F:58:69:74:7B:2A:35:8C:9B:7C:0F:31:E8:D8:DD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fF4N3E9YaXR7KjWMm3wPMejY3Ys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFCF8/05E4C2D28B0211EC85F2D074C4F9AE02/fF4N3E9YaXR7KjWMm3wPMejY3Ys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:48:97:f2:15:64:5e:8d:2b:39:82:a8:52:97:50:b6:9b:78: 6f:68:91:f6:ce:04:4b:1c:db:e0:66:96:75:0b:4f:07:66:dd: f6:6f:5e:a7:c1:1f:8c:61:d5:29:3b:b8:de:fc:2d:cf:7f:01: 08:3f:5b:81:a8:d4:fe:17:3d:02:3a:0f:56:0a:8a:69:23:6f: 44:8b:a6:d5:05:f1:f8:c9:b6:24:77:5d:82:e2:e5:f9:9c:98: d1:66:28:0f:8e:e3:f9:44:87:04:7b:25:8b:1d:ec:b1:86:cf: 5f:d7:26:24:bc:38:e4:99:c6:14:25:d2:e8:cb:ae:65:21:69: 98:de:74:5f:dc:07:17:5b:17:e2:2a:64:38:b3:2d:2a:41:93: f4:53:5b:0c:83:3e:5f:6e:38:ee:bc:07:20:6c:f7:78:83:6a: 8d:3f:2f:32:f3:ae:4d:c4:44:03:06:6f:bd:49:33:1f:75:34: 85:43:48:9b:ed:07:c9:c0:e6:dd:16:9f:56:9f:a0:20:49:cb: c6:31:aa:bc:ae:36:49:42:57:03:5c:22:02:25:e1:93:02:78: 2e:ed:16:4c:72:75:50:03:2b:49:f5:aa:3e:ec:d2:b9:60:e4: 31:ac:df:e2:7f:84:01:f1:c5:c3:5e:27:fb:b8:0f:f3:a5:e3: a7:63:35:26 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZDRjgxMTAvBgNVBAUTKDdDNUUwRERDNEY1ODY5NzQ3QjJBMzU4QzlCN0MwRjMx RThEOEREOEIwHhcNMjUxMTAzMDAyMTM5WhcNMjUxMTEwMDAyMTM5WjAYMRYwFAYD VQQDEw02OTA3ZjU5NC0wNjZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywHFw3Qmv4eL+VnCjgl9/mXgFr/A5/oSIzzL+U5TyIpmizau/r8EPJv6dxV2 H4yopyWCWe8A97ah0eATPteMyH/J3QjyLbaXfZoQAhiLxZO7qxQP06+lHofVKWK8 aH2y0APn6cyiKGI7ccr3vs5DB8lCpslFQrBzadmq1S69ZsgcQHdgKfFabyKsmFfR x78pSFMv336iXOc+qYtYr8QH0PeV8dwpCK6+Y1khhAX5W+eMWmIDA4n6iBvPSmOX AyDpdgr39MIOwG6dA7JH1HZPNEFmxuojXnyiPpHyfCZ+Vd6WYDiqP+9av/4EkC2q U0DWUTNSmmeHizB/oGJIWWtwdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSZ5FEv jmxxC/pJBXKfCVBOudNIMB8GA1UdIwQYMBaAFHxeDdxPWGl0eyo1jJt8DzHo2N2L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkNGOC8wNUU0QzJEMjhC MDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFYUjdLaldNbTN3UE1lalkz WXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZGNE4zRTlZYVhSN0tqV01tM3dQTWVqWTNZcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkNGOC8wNUU0QzJEMjhCMDIxMUVDODVGMkQwNzRDNEY5QUUwMi9mRjROM0U5WWFY UjdLaldNbTN3UE1lalkzWXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhSJfyFWRejSs5gqhSl1C2m3hvaJH2zgRLHNvgZpZ1C08HZt32b16n wR+MYdUpO7je/C3PfwEIP1uBqNT+Fz0COg9WCoppI29Ei6bVBfH4ybYkd12C4uX5 nJjRZigPjuP5RIcEeyWLHeyxhs9f1yYkvDjkmcYUJdLoy65lIWmY3nRf3AcXWxfi KmQ4sy0qQZP0U1sMgz5fbjjuvAcgbPd4g2qNPy8y865NxEQDBm+9STMfdTSFQ0ib 7QfJwObdFp9Wn6AgScvGMaq8rjZJQlcDXCICJeGTAngu7RZMcnVQAytJ9ao+7NK5 YOQxrN/if4QB8cXDXif7uA/zpeOnYzUm -----END CERTIFICATE-----Generated at Tue Nov 4 12:55:09 2025 by rpki-client