$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft File: 76axB-8ZSk3WeyjVVYARdcz3FEU.mft (raw, json) Hash identifier: yjeeXoq+4ep/FNpgzQpwWUG9SlTDskAF6Gpx5iAuvbY= Subject key identifier: A8:42:46:DD:3E:77:77:CF:AB:EA:80:BE:F2:5D:AD:07:60:38:2C:7A Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 0794 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft Manifest number: 0789 Signing time: Tue 04 Nov 2025 21:37:27 +0000 Manifest this update: Tue 04 Nov 2025 21:37:27 +0000 Manifest next update: Tue 11 Nov 2025 21:37:27 +0000 Files and hashes: 1: 76axB-8ZSk3WeyjVVYARdcz3FEU.crl (hash: S6A/GV20zgkB85YqMPtHm+fwkV510cis0B5jZ1yOv6A=) 2: 666595E890A911EDA8F5FF52C4F9AE02.roa (hash: BtJQntraWj3X9XmZWJOEGn+Y1wojJqx0bXvw8A5EV+g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1940 (0x794) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Nov 4 21:37:27 2025 GMT Not After : Nov 11 21:37:27 2025 GMT Subject: CN=690a7217-33bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:6b:82:db:e2:50:55:91:d2:4d:fc:4a:d2: fc:2b:55:bc:79:df:2f:cf:6e:57:17:28:c5:a4:55: ae:64:e2:6c:60:77:3f:d5:5f:85:2b:b8:2f:ad:65: 4e:68:de:4c:cc:91:55:ae:f1:ee:07:53:0d:8f:48: b7:76:f5:1c:8b:fa:ce:f9:d8:7f:b9:bf:ed:cc:08: 90:05:f0:fd:94:40:12:66:f4:40:c7:51:1b:8c:00: 66:3b:13:ac:f5:1f:13:6a:53:5a:15:67:20:f9:42: 9c:87:33:87:5d:be:0a:ca:bd:95:d0:87:ae:fd:86: f0:55:96:6a:7b:69:e8:69:89:5d:7e:3d:fc:da:17: e0:d7:07:ef:fc:1b:17:18:b4:e5:36:63:e4:02:60: b3:43:de:57:7b:45:38:26:b0:e1:fd:05:c8:58:d3: 31:ca:45:13:74:09:d0:a2:e9:a5:52:df:4c:37:29: cf:3a:1a:f6:a4:44:34:a4:4d:99:be:ae:ac:bd:8c: 57:cb:36:8d:ff:f2:2e:65:f5:9a:5b:88:17:5e:7b: da:df:d8:c9:94:a5:d5:5b:c5:8a:e5:23:9f:5a:71: 0c:dc:9c:24:ac:5f:18:51:7e:a2:72:03:c2:b0:2b: de:17:22:85:ed:1c:7a:e6:0f:49:db:de:4d:de:2e: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:42:46:DD:3E:77:77:CF:AB:EA:80:BE:F2:5D:AD:07:60:38:2C:7A X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:0a:99:bd:dc:d9:e5:f5:a2:3d:e8:86:28:1f:3f:99:70:79: 79:a4:91:e9:bd:77:53:2b:87:e4:8c:5b:1c:04:a7:eb:0b:91: c9:51:97:45:e5:33:88:8c:67:5e:50:7c:18:0a:a7:d1:71:e2: 3a:d6:7a:4e:c4:f8:cf:d7:f6:a0:a8:c4:2d:7d:2b:cd:76:25: 65:7b:01:41:43:cc:a8:88:d1:8d:2b:e7:c0:57:fa:ca:6a:35: d5:b4:2f:2f:08:de:52:19:1f:11:23:3e:99:04:12:2b:d9:cb: 8d:87:25:0b:e6:0f:c7:ce:49:da:e1:82:24:6b:2e:0e:a0:30: 49:1e:77:f1:00:e8:58:a6:a5:4d:40:26:53:c7:30:36:3b:cc: c0:5d:c3:04:50:fe:2f:45:a4:d4:52:f6:35:10:ab:89:be:ed: 03:5f:69:88:fa:fb:ad:1a:0c:1f:7a:48:ec:97:ec:f8:6f:0e: 96:8f:d5:1a:2b:a9:72:d8:06:84:b7:85:b6:58:f6:79:27:f2: 98:9c:41:38:2a:55:c2:35:0f:33:b5:4d:4b:71:f5:1f:73:69: 5f:ca:01:74:1a:0f:98:52:9e:6e:4e:1b:c1:c6:0c:91:3d:52: a1:5d:ac:fa:8b:4a:08:70:5a:dc:7d:41:cd:44:a3:8c:c6:cc: 3a:09:53:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB5QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjUxMTA0MjEzNzI3WhcNMjUxMTExMjEzNzI3WjAYMRYwFAYD VQQDEw02OTBhNzIxNy0zM2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtrtrgtviUFWR0k38StL8K1W8ed8vz25XFyjFpFWuZOJsYHc/1V+FK7gvrWVO aN5MzJFVrvHuB1MNj0i3dvUci/rO+dh/ub/tzAiQBfD9lEASZvRAx1EbjABmOxOs 9R8TalNaFWcg+UKchzOHXb4Kyr2V0Ieu/YbwVZZqe2noaYldfj382hfg1wfv/BsX GLTlNmPkAmCzQ95Xe0U4JrDh/QXIWNMxykUTdAnQoumlUt9MNynPOhr2pEQ0pE2Z vq6svYxXyzaN//IuZfWaW4gXXnva39jJlKXVW8WK5SOfWnEM3JwkrF8YUX6icgPC sCveFyKF7Rx65g9J295N3i5P4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKhCRt0+ d3fPq+qAvvJdrQdgOCx6MB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RkZENy83QjQwOUNBMDJGQTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNr M1dleWpWVllBUmRjejNGRVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBlCpm93Nnl9aI96IYoHz+ZcHl5pJHpvXdTK4fkjFscBKfrC5HJUZdF 5TOIjGdeUHwYCqfRceI61npOxPjP1/agqMQtfSvNdiVlewFBQ8yoiNGNK+fAV/rK ajXVtC8vCN5SGR8RIz6ZBBIr2cuNhyUL5g/Hzkna4YIkay4OoDBJHnfxAOhYpqVN QCZTxzA2O8zAXcMEUP4vRaTUUvY1EKuJvu0DX2mI+vutGgwfekjsl+z4bw6Wj9Ua K6ly2AaEt4W2WPZ5J/KYnEE4KlXCNQ8ztU1LcfUfc2lfygF0Gg+YUp5uThvBxgyR PVKhXaz6i0oIcFrcfUHNRKOMxsw6CVPN -----END CERTIFICATE-----Generated at Wed Nov 5 17:56:38 2025 by rpki-client