$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: NJrWiL1NXgnlcxf6d7HG9iHHh1hZ1JMQLyJuVUrN8cU= Subject key identifier: 8A:C0:FF:5F:FE:4A:45:7C:D9:65:4B:3B:0A:62:8B:35:AD:4E:BB:AD Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03F8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03F1 Signing time: Mon 03 Nov 2025 00:27:47 +0000 Manifest this update: Mon 03 Nov 2025 00:27:47 +0000 Manifest next update: Mon 10 Nov 2025 00:27:46 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: ayRAxUcA/SFA0KhlCuU/xSODQFKgN0sOhehp7hlJgBA=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 8YnQugqr595jhqZisXArYlRiOGH/9vz6hBQ33+FTmLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:27:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1016 (0x3f8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Nov 3 00:27:47 2025 GMT Not After : Nov 10 00:27:46 2025 GMT Subject: CN=6907f703-cb26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:95:fe:5c:31:6e:15:9c:42:f1:b4:6b:cb:5f: 88:d2:65:59:a5:e1:81:7f:99:16:71:c5:a1:37:db: 37:4d:ab:a3:6d:fb:db:d8:ae:0a:ff:c4:21:ad:f6: 04:e4:ac:78:78:ee:6a:4c:49:d0:b6:09:e5:f8:fb: 76:f2:ee:fe:28:fb:84:71:41:1f:0f:6b:2e:fb:5d: 6e:1e:33:28:7e:40:a6:41:be:9d:81:e6:a9:ea:88: 1d:55:aa:3d:20:f9:0a:5b:a4:8a:f8:36:d9:e3:21: cf:cd:25:b1:13:77:01:ab:24:dd:50:79:61:78:26: d1:b7:b3:85:ec:6c:32:c9:97:2b:1f:3d:3a:3c:2a: 56:5f:da:e5:2c:1d:1a:4e:c3:dd:3d:19:23:be:d5: eb:4d:39:39:04:82:33:69:c6:d9:42:37:2a:e5:dd: 91:47:50:fb:4f:d8:42:39:37:be:53:46:66:bb:36: 0f:31:13:ee:e5:3e:f8:44:2d:23:e5:71:fb:38:41: 34:5c:3b:7e:dc:2d:c4:49:9f:10:06:63:50:fa:ae: ed:fd:48:ea:00:8a:65:60:f5:60:8e:fa:be:7c:19: f0:c0:7a:89:df:dc:92:5d:0d:96:f9:7e:82:e6:84: 0d:e8:5a:49:5e:de:2f:d3:a6:af:0f:dd:40:a4:d9: 33:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:C0:FF:5F:FE:4A:45:7C:D9:65:4B:3B:0A:62:8B:35:AD:4E:BB:AD X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:b4:eb:58:ce:ea:27:bf:c9:f2:d2:c3:4a:e7:3f:cf:05:c0: a2:8b:05:b4:13:7d:0e:c3:c6:fd:64:13:a3:29:32:4e:f0:07: d2:00:d8:c8:d5:07:37:6a:39:19:5b:99:ef:08:f8:19:73:43: 0e:20:f4:4f:24:27:14:93:7d:ab:fa:b8:a1:24:42:64:10:30: 56:e9:57:0f:06:5b:db:e2:78:bd:98:1f:88:5f:e9:cc:e6:19: d9:da:8f:ca:40:8b:be:a3:51:af:3c:ca:82:81:18:c4:d3:6b: 6d:2a:02:7c:bd:ce:80:f7:9f:a7:c3:58:63:10:d0:58:14:0c: f4:dc:3b:cc:84:30:26:1b:74:b7:57:60:0c:ca:a9:d8:5f:a0: 81:63:12:86:d3:7f:ed:0c:8c:f6:20:04:49:9e:70:9c:eb:df: 70:92:fb:1d:c9:59:84:28:4f:3f:3b:b7:ff:1c:82:c6:4f:1a: 21:52:a9:5b:7c:9e:db:1a:6d:06:3a:ac:33:98:db:81:b4:62: 7d:d8:8f:c9:f1:61:8d:de:b4:fb:4e:5a:0d:57:7e:5a:06:aa: df:ad:bc:14:b3:2f:cf:4e:fe:fb:13:60:03:a0:b8:d8:e1:4c: 87:37:95:d2:33:2a:7f:39:99:76:8c:bb:01:2e:87:e0:41:87: ca:35:6d:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUxMTAzMDAyNzQ3WhcNMjUxMTEwMDAyNzQ2WjAYMRYwFAYD VQQDEw02OTA3ZjcwMy1jYjI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1pX+XDFuFZxC8bRry1+I0mVZpeGBf5kWccWhN9s3Taujbfvb2K4K/8QhrfYE 5Kx4eO5qTEnQtgnl+Pt28u7+KPuEcUEfD2su+11uHjMofkCmQb6dgeap6ogdVao9 IPkKW6SK+DbZ4yHPzSWxE3cBqyTdUHlheCbRt7OF7GwyyZcrHz06PCpWX9rlLB0a TsPdPRkjvtXrTTk5BIIzacbZQjcq5d2RR1D7T9hCOTe+U0ZmuzYPMRPu5T74RC0j 5XH7OEE0XDt+3C3ESZ8QBmNQ+q7t/UjqAIplYPVgjvq+fBnwwHqJ39ySXQ2W+X6C 5oQN6FpJXt4v06avD91ApNkzmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIrA/1/+ SkV82WVLOwpiizWtTrutMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCntOtYzuonv8ny0sNK5z/PBcCiiwW0E30Ow8b9ZBOjKTJO8AfSANjI 1Qc3ajkZW5nvCPgZc0MOIPRPJCcUk32r+rihJEJkEDBW6VcPBlvb4ni9mB+IX+nM 5hnZ2o/KQIu+o1GvPMqCgRjE02ttKgJ8vc6A95+nw1hjENBYFAz03DvMhDAmG3S3 V2AMyqnYX6CBYxKG03/tDIz2IARJnnCc699wkvsdyVmEKE8/O7f/HILGTxohUqlb fJ7bGm0GOqwzmNuBtGJ92I/J8WGN3rT7TloNV35aBqrfrbwUsy/PTv77E2ADoLjY 4UyHN5XSMyp/OZl2jLsBLofgQYfKNW0e -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:38 2025 by rpki-client