$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft File: 1vBnJNCWhwftHfr9uyJYArPaoZQ.mft (raw, json) Hash identifier: x3OyQcI/aBQkugmf0KkteQdcaXBDWqd0oSqUxaTR7lE= Subject key identifier: CB:D0:CE:F6:0E:F1:55:23:E3:46:77:7F:F5:2C:92:FB:F8:E0:87:16 Authority key identifier: D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 Certificate issuer: /CN=A91D1F95/serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft Manifest number: 02AF Signing time: Wed 05 Nov 2025 01:36:34 +0000 Manifest this update: Wed 05 Nov 2025 01:36:33 +0000 Manifest next update: Wed 12 Nov 2025 01:36:33 +0000 Files and hashes: 1: 1vBnJNCWhwftHfr9uyJYArPaoZQ.crl (hash: p3FI3BfeISbQSvsfAgRjq+gSoYFsqLm3dYaurs0Yluc=) 2: 834FFE88679911EEB8243436C4F9AE02.roa (hash: 2l18e24CMiHud0NJE3O3nns7nMxFpBn60Kr5He67lRQ=) 3: C965E8C4679911EEB466ED36C4F9AE02.roa (hash: ZMuXU8x5oSWaUY/w5FJOwLEX4Eyd5ZHjHOMaRrHb7zk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:36:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1F95, serialNumber=D6F06724D0968707ED1DFAFDBB225802B3DAA194 Validity Not Before: Nov 5 01:36:33 2025 GMT Not After : Nov 12 01:36:33 2025 GMT Subject: CN=690aaa22-1ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:0c:28:25:01:c1:c9:03:70:78:f2:28:27: ab:b5:f9:66:01:be:08:0b:7e:e9:0c:2d:c9:a4:7b: 3f:9e:d3:46:69:3f:76:41:d0:02:a0:c7:a3:4b:6a: 0a:07:5f:29:bb:fd:0d:5f:6f:23:43:2c:f3:13:fe: 6c:d2:52:5c:1c:a9:f4:5e:ad:e6:4c:37:aa:59:aa: ba:c3:64:87:48:96:c1:56:4c:c9:5b:7a:a4:87:e4: 67:ae:d3:5f:bf:79:a6:d7:8d:e9:1c:c6:56:ed:96: 2d:57:39:e3:38:b3:ee:56:ea:5f:cb:c0:d0:8b:44: f2:a0:30:1e:e3:68:30:8a:46:20:9a:d5:31:16:b2: b2:e9:2e:b7:51:5f:57:7a:05:fd:fd:8e:22:97:e3: 3a:10:8f:88:6f:0e:66:1b:b7:b4:d1:db:dd:da:6b: 69:29:a7:88:47:35:ef:10:17:f9:72:fd:e6:4e:fa: e0:7a:f3:4d:7c:1b:29:c2:c4:14:91:b3:e5:79:11: 4b:ba:1f:8e:58:2c:59:d7:3f:74:c0:c6:d1:19:a7: eb:14:04:46:8f:03:73:89:05:9a:64:2f:df:52:42: 1b:9e:54:f7:94:0b:33:54:8e:7a:d1:8f:be:f2:2b: 84:30:ea:ee:7a:57:b2:6c:49:17:7a:19:0a:83:05: 58:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D0:CE:F6:0E:F1:55:23:E3:46:77:7F:F5:2C:92:FB:F8:E0:87:16 X509v3 Authority Key Identifier: keyid:D6:F0:67:24:D0:96:87:07:ED:1D:FA:FD:BB:22:58:02:B3:DA:A1:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vBnJNCWhwftHfr9uyJYArPaoZQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1F95/FF93EC72195F11EDB2BDF95EC4F9AE02/1vBnJNCWhwftHfr9uyJYArPaoZQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ad:81:a6:0c:64:94:34:f1:fd:d3:c7:31:11:73:a1:51:57: 26:be:f6:be:2a:f1:7c:d9:70:09:d3:12:a4:88:fd:0e:7e:25: 86:f1:a1:80:ea:d4:f9:06:67:18:b8:a9:a4:6a:4e:78:03:b7: 96:f3:d9:02:3b:62:0d:de:22:6d:7f:32:cf:a1:c4:87:42:86: 92:05:39:14:cb:bb:cb:77:36:44:81:51:23:3c:e6:be:29:bf: f1:d1:96:b0:66:aa:a7:aa:df:75:81:d8:0f:3f:41:53:e2:e2: 0c:ec:54:d4:9a:e7:d1:79:59:a5:13:f9:0a:c1:81:ba:7e:45: ac:41:2b:7a:9d:a0:59:fc:45:45:ce:13:d9:cc:cf:9f:15:da: a8:a8:03:ef:fe:57:87:80:2e:e1:ad:b5:ed:10:5c:5f:34:0f: 3d:54:d6:d8:c9:a9:a9:74:4d:0b:43:56:e1:43:e2:e9:54:9f: 24:eb:ba:e1:3f:6c:a0:1c:f5:2b:ed:7f:ca:2b:09:96:5b:fe: 18:80:01:35:61:3e:b1:43:17:03:72:f2:78:6a:2e:d1:bd:5f: bb:7e:98:86:b8:93:e2:b6:12:38:fa:58:9f:aa:ed:fc:c4:73: 84:66:29:89:5c:62:47:30:25:c1:44:28:3c:50:82:aa:de:9c: 9a:3a:47:e9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFGOTUxMTAvBgNVBAUTKEQ2RjA2NzI0RDA5Njg3MDdFRDFERkFGREJCMjI1ODAy QjNEQUExOTQwHhcNMjUxMTA1MDEzNjMzWhcNMjUxMTEyMDEzNjMzWjAYMRYwFAYD VQQDEw02OTBhYWEyMi0xZWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm9kMKCUBwckDcHjyKCertflmAb4IC37pDC3JpHs/ntNGaT92QdACoMejS2oK B18pu/0NX28jQyzzE/5s0lJcHKn0Xq3mTDeqWaq6w2SHSJbBVkzJW3qkh+RnrtNf v3mm143pHMZW7ZYtVznjOLPuVupfy8DQi0TyoDAe42gwikYgmtUxFrKy6S63UV9X egX9/Y4il+M6EI+Ibw5mG7e00dvd2mtpKaeIRzXvEBf5cv3mTvrgevNNfBspwsQU kbPleRFLuh+OWCxZ1z90wMbRGafrFARGjwNziQWaZC/fUkIbnlT3lAszVI560Y++ 8iuEMOrueleybEkXehkKgwVYwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMvQzvYO 8VUj40Z3f/Uskvv44IcWMB8GA1UdIwQYMBaAFNbwZyTQlocH7R36/bsiWAKz2qGU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUY5NS9GRjkzRUM3MjE5 NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3ZnRIZnI5dXlKWUFyUGFv WlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2Qm5KTkNXaHdmdEhmcjl1eUpZQXJQYW9aUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUY5NS9GRjkzRUM3MjE5NUYxMUVEQjJCREY5NUVDNEY5QUUwMi8xdkJuSk5DV2h3 ZnRIZnI5dXlKWUFyUGFvWlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMrYGmDGSUNPH908cxEXOhUVcmvva+KvF82XAJ0xKkiP0OfiWG8aGA 6tT5BmcYuKmkak54A7eW89kCO2IN3iJtfzLPocSHQoaSBTkUy7vLdzZEgVEjPOa+ Kb/x0ZawZqqnqt91gdgPP0FT4uIM7FTUmufReVmlE/kKwYG6fkWsQSt6naBZ/EVF zhPZzM+fFdqoqAPv/leHgC7hrbXtEFxfNA89VNbYyampdE0LQ1bhQ+LpVJ8k67rh P2ygHPUr7X/KKwmWW/4YgAE1YT6xQxcDcvJ4ai7RvV+7fpiGuJPithI4+lifqu38 xHOEZimJXGJHMCXBRCg8UIKq3pyaOkfp -----END CERTIFICATE-----Generated at Wed Nov 5 21:11:04 2025 by rpki-client