$ rpki-client -vvf rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft File: sGfGu3DfDcBM5398jXZwakn2y4U.mft (raw, json) Hash identifier: lrH7/K6/8cunXqm6UbgvW1/LN/WzDFO5/Qj9mpaUcqY= Subject key identifier: FD:AD:08:07:99:08:CD:A1:0E:7A:73:D2:94:58:64:BB:B8:41:CF:87 Authority key identifier: B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 Certificate issuer: /CN=A91D366A/serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Certificate serial: 02DE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft Manifest number: 02B0 Signing time: Mon 03 Nov 2025 01:36:50 +0000 Manifest this update: Mon 03 Nov 2025 01:36:49 +0000 Manifest next update: Mon 10 Nov 2025 01:36:49 +0000 Files and hashes: 1: sGfGu3DfDcBM5398jXZwakn2y4U.crl (hash: Ntiap9xknPMRGdVGj3MeWHMcLYplGXmhPtD6PcWuO5U=) 2: DF9C04F4897811F08A9D002AC4F9AE02.roa (hash: XfF79hvTmc8NMCL/hID++kJM7536Tc7Eia39Bf3yFuA=) 3: D6D1A360323911F0BDA2E834C4F9AE02.roa (hash: 3S7sTHQwNR4M05c/J0LAnFvlwfRaJo13g2aipeOM4II=) 4: 6E41DE08310A11F0AC8DF544C4F9AE02.roa (hash: MdnsK78f+RePT5EKFxzpSrHG7P2t5sm3+YBB1dYO5+4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 734 (0x2de) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D366A, serialNumber=B067C6BB70DF0DC04CE77F7C8D76706A49F6CB85 Validity Not Before: Nov 3 01:36:49 2025 GMT Not After : Nov 10 01:36:49 2025 GMT Subject: CN=69080732-8ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d1:3f:98:ed:ac:20:ca:0a:15:63:45:08:56: 2a:97:21:7b:7b:27:aa:e9:2e:e7:64:ff:67:56:90: f2:b0:ef:35:83:d5:e4:c5:7c:11:66:62:2f:08:d9: 0c:02:64:5d:42:09:0c:f4:56:d4:f0:48:61:1b:9b: a6:8e:2b:15:ec:29:01:83:ab:96:af:26:22:f8:61: 1c:95:c0:58:e1:1b:22:4f:ed:b0:8b:1e:ce:c1:d4: cc:63:7a:9d:91:21:5d:3e:6b:4f:e2:10:04:f9:87: 27:e5:fc:c4:b9:07:f9:b6:08:7f:71:f2:4c:b3:12: 5f:6d:bf:7b:c4:c6:43:d4:e2:d5:0a:1e:13:36:84: 11:ba:9c:e4:e7:e2:ab:3c:f8:e3:a4:05:ee:17:9c: 28:10:62:4c:41:5d:76:37:bf:0a:c7:86:1c:c3:0b: 0c:60:4d:e2:80:c6:07:6b:be:30:d7:ca:d1:6c:96: da:18:70:54:46:5e:2a:2e:a2:84:c6:78:3c:e6:29: 9e:b0:e8:6d:cf:3e:23:7b:b6:c7:2d:20:6c:f1:46: ee:27:13:57:c2:66:b8:ee:8b:e8:21:28:24:ee:08: 2e:a0:38:eb:d7:c4:b3:dc:f4:ca:a9:f7:c5:ab:a1: bc:21:c6:11:f3:45:3b:89:f2:d7:ce:2a:e1:04:48: 1d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AD:08:07:99:08:CD:A1:0E:7A:73:D2:94:58:64:BB:B8:41:CF:87 X509v3 Authority Key Identifier: keyid:B0:67:C6:BB:70:DF:0D:C0:4C:E7:7F:7C:8D:76:70:6A:49:F6:CB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sGfGu3DfDcBM5398jXZwakn2y4U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D366A/EC09AA4A307D11EDA6C3A212C4F9AE02/sGfGu3DfDcBM5398jXZwakn2y4U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:17:a8:ec:92:de:8a:dc:da:d5:81:0b:eb:88:f6:00:a7:cc: 9a:99:9b:3d:86:ff:2d:85:cb:da:15:79:02:48:61:c5:87:9f: 31:98:a5:ce:2c:93:21:8d:55:4a:a3:50:fe:77:97:51:81:27: 12:6e:be:3c:7b:5c:fb:f3:9e:dd:1a:c8:48:fc:03:08:54:2e: 27:8c:e7:8f:ff:4f:52:b2:b7:9b:de:66:04:f4:6f:e5:99:f2: e9:28:de:01:b5:92:0c:8e:8e:5f:6e:74:ce:39:c2:1a:0e:9a: 14:8f:75:9e:34:aa:f8:73:cb:d8:61:ee:02:1f:9c:99:70:bc: aa:d7:05:ac:6b:c0:56:76:89:cd:20:7d:c9:1b:82:98:b9:89: f9:94:82:8d:07:d5:9d:64:a5:f3:27:e8:29:81:5b:0c:76:b8: 18:34:8a:51:55:82:2a:51:bb:19:bc:13:42:62:ae:b0:a1:ed: d9:c5:50:44:e1:d8:c9:1a:b5:1e:9d:0c:99:14:5f:6b:dd:5c: 5c:ac:bd:d2:da:ad:9f:af:ee:2a:ee:1b:dd:79:5a:bb:42:ab: a1:89:20:76:a4:ca:40:69:98:66:97:84:bf:68:b4:32:76:b9: 2a:4e:e1:5c:ad:90:46:e5:59:31:1d:44:fd:aa:02:bd:8d:30: 27:ca:d9:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAt4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDM2NkExMTAvBgNVBAUTKEIwNjdDNkJCNzBERjBEQzA0Q0U3N0Y3QzhENzY3MDZB NDlGNkNCODUwHhcNMjUxMTAzMDEzNjQ5WhcNMjUxMTEwMDEzNjQ5WjAYMRYwFAYD VQQDEw02OTA4MDczMi04YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvtE/mO2sIMoKFWNFCFYqlyF7eyeq6S7nZP9nVpDysO81g9XkxXwRZmIvCNkM AmRdQgkM9FbU8EhhG5umjisV7CkBg6uWryYi+GEclcBY4RsiT+2wix7OwdTMY3qd kSFdPmtP4hAE+Ycn5fzEuQf5tgh/cfJMsxJfbb97xMZD1OLVCh4TNoQRupzk5+Kr PPjjpAXuF5woEGJMQV12N78Kx4YcwwsMYE3igMYHa74w18rRbJbaGHBURl4qLqKE xng85imesOhtzz4je7bHLSBs8UbuJxNXwma47ovoISgk7gguoDjr18Sz3PTKqffF q6G8IcYR80U7ifLXzirhBEgdOQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP2tCAeZ CM2hDnpz0pRYZLu4Qc+HMB8GA1UdIwQYMBaAFLBnxrtw3w3ATOd/fI12cGpJ9suF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzY2QS9FQzA5QUE0QTMw N0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRjQk01Mzk4alhad2FrbjJ5 NFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NHZkd1M0RmRGNCTTUzOThqWFp3YWtuMnk0VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzY2QS9FQzA5QUE0QTMwN0QxMUVEQTZDM0EyMTJDNEY5QUUwMi9zR2ZHdTNEZkRj Qk01Mzk4alhad2FrbjJ5NFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSF6jskt6K3NrVgQvriPYAp8yamZs9hv8thcvaFXkCSGHFh58xmKXO LJMhjVVKo1D+d5dRgScSbr48e1z7857dGshI/AMIVC4njOeP/09Ssreb3mYE9G/l mfLpKN4BtZIMjo5fbnTOOcIaDpoUj3WeNKr4c8vYYe4CH5yZcLyq1wWsa8BWdonN IH3JG4KYuYn5lIKNB9WdZKXzJ+gpgVsMdrgYNIpRVYIqUbsZvBNCYq6woe3ZxVBE 4djJGrUenQyZFF9r3VxcrL3S2q2fr+4q7hvdeVq7QquhiSB2pMpAaZhml4S/aLQy drkqTuFcrZBG5VkxHUT9qgK9jTAnytnK -----END CERTIFICATE-----Generated at Tue Nov 4 02:16:48 2025 by rpki-client