$ rpki-client -vvf rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft File: 7DQrlR3sel8OPnf5LMsf-yHhmlg.mft (raw, json) Hash identifier: KAhVenuYkiF4HJ2W1QoTIzzTkh3Nlzc9teJYY17sdx8= Subject key identifier: 0A:C1:D2:22:82:03:14:8B:6E:23:DC:A0:2A:16:80:D6:37:6B:DD:B7 Authority key identifier: EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 Certificate issuer: /CN=A91D40A4/serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Certificate serial: 041C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft Manifest number: 0414 Signing time: Mon 03 Nov 2025 00:21:23 +0000 Manifest this update: Mon 03 Nov 2025 00:21:23 +0000 Manifest next update: Mon 10 Nov 2025 00:21:23 +0000 Files and hashes: 1: 7DQrlR3sel8OPnf5LMsf-yHhmlg.crl (hash: SRmypy9fwM8T3pYZhqmbHH5sUbvvGAEcuR6HL6VczQE=) 2: 873831CC8A7E11EC8FD93687C4F9AE02.roa (hash: cu8wLYBxbGfRWUV9Ye7bg1eRpOLSnTYKjsEY2WUidXM=) 3: 867F3CF88A7E11EC8FD93687C4F9AE02.roa (hash: EDOt0WGEdnT9+FI7T0IrxIQR/uJ+FjweoW8YpKMKOQA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1052 (0x41c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D40A4, serialNumber=EC342B951DEC7A5F0E3E77F92CCB1FFB21E19A58 Validity Not Before: Nov 3 00:21:23 2025 GMT Not After : Nov 10 00:21:23 2025 GMT Subject: CN=6907f583-c6f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:f6:f8:8e:ed:d5:94:d9:2d:56:fd:f9:f7: 0f:a7:83:50:48:6c:47:65:75:fb:47:1f:2c:59:e1: 94:ed:97:da:24:17:3e:24:02:b0:0b:5b:50:0c:6b: aa:cf:c3:9d:6f:f9:30:a9:7d:7f:bf:69:b3:17:59: 55:50:d1:43:f0:cb:cc:bc:60:6d:99:82:d6:71:28: 90:ea:08:ff:67:9e:55:60:a7:26:08:75:05:59:5b: 91:d9:b9:61:a6:5e:17:75:8b:99:b1:ef:d1:cb:4d: 71:c7:b0:fd:0b:04:31:4a:f0:13:07:bd:09:78:08: 6a:e4:b6:7c:5d:19:4f:a8:38:50:77:87:f6:9d:f7: cc:03:9d:4f:76:ac:e8:00:5a:3d:1e:3c:b0:74:45: 5e:86:58:80:a1:71:c1:5f:99:33:65:6a:68:ac:dc: b7:02:7a:8d:dd:71:04:e2:79:e1:a8:6c:f1:08:e7: 75:02:61:0e:48:83:39:36:90:d2:90:c9:0e:ed:fe: f6:ba:40:b5:ae:89:be:bd:79:7f:f9:48:0d:cf:5b: 5d:2c:a9:99:86:e3:5a:6b:9e:51:7f:4f:a8:07:4b: b0:02:29:af:75:94:5c:d4:6f:1c:da:4f:63:d8:d3: 27:7f:d8:7c:28:9c:64:ae:d8:45:27:2b:f0:b7:81: 0e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C1:D2:22:82:03:14:8B:6E:23:DC:A0:2A:16:80:D6:37:6B:DD:B7 X509v3 Authority Key Identifier: keyid:EC:34:2B:95:1D:EC:7A:5F:0E:3E:77:F9:2C:CB:1F:FB:21:E1:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7DQrlR3sel8OPnf5LMsf-yHhmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D40A4/29F4BAFC8A7A11ECB7AF2445C4F9AE02/7DQrlR3sel8OPnf5LMsf-yHhmlg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:29:19:84:cb:2f:15:3c:a2:3b:2b:b0:12:1a:46:1b:fd:11: 09:1c:6f:84:fa:f7:c3:d3:d8:dc:69:36:04:e2:e7:f8:e3:56: 62:28:0a:db:d0:6c:fe:59:65:e0:00:e1:a5:1d:67:b2:89:ea: 2c:e0:bb:3b:d6:60:ed:7d:8b:8e:83:59:c0:b2:dd:df:fb:51: 0f:10:7e:ca:f6:dc:8b:a1:81:7d:01:6f:73:ac:d9:f4:f0:35: cb:e9:af:dc:fb:8b:bd:a2:8a:51:37:a9:ae:87:b7:4c:57:51: dd:62:c5:63:ed:f6:a1:d8:83:1d:49:2d:f0:28:ac:d0:9c:5f: 11:ac:37:8f:e8:3c:a1:91:80:55:cd:9d:61:cb:70:7d:89:f2: c7:c9:c0:d1:ec:f1:be:89:8e:43:94:b2:35:f6:c1:29:1b:74: 03:7e:39:07:17:fd:f2:65:92:b4:4f:f3:b7:18:2e:f5:23:09: f0:44:53:e6:de:f4:d8:6c:1e:0e:e2:9d:0e:68:d5:34:d7:f3: d8:09:db:3f:6e:ab:87:22:7e:42:b1:9c:d7:93:ac:c0:44:b8: 38:d2:a7:78:36:35:4f:12:25:fd:c1:23:58:d6:e5:c6:8d:c9: 5e:29:e5:24:b2:b8:86:83:6f:48:16:24:18:bf:65:52:61:ca: 1c:2a:3e:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQwQTQxMTAvBgNVBAUTKEVDMzQyQjk1MURFQzdBNUYwRTNFNzdGOTJDQ0IxRkZC MjFFMTlBNTgwHhcNMjUxMTAzMDAyMTIzWhcNMjUxMTEwMDAyMTIzWjAYMRYwFAYD VQQDEw02OTA3ZjU4My1jNmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdT2+I7t1ZTZLVb9+fcPp4NQSGxHZXX7Rx8sWeGU7ZfaJBc+JAKwC1tQDGuq z8Odb/kwqX1/v2mzF1lVUNFD8MvMvGBtmYLWcSiQ6gj/Z55VYKcmCHUFWVuR2blh pl4XdYuZse/Ry01xx7D9CwQxSvATB70JeAhq5LZ8XRlPqDhQd4f2nffMA51Pdqzo AFo9HjywdEVehliAoXHBX5kzZWporNy3AnqN3XEE4nnhqGzxCOd1AmEOSIM5NpDS kMkO7f72ukC1rom+vXl/+UgNz1tdLKmZhuNaa55Rf0+oB0uwAimvdZRc1G8c2k9j 2NMnf9h8KJxkrthFJyvwt4EOswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArB0iKC AxSLbiPcoCoWgNY3a923MB8GA1UdIwQYMBaAFOw0K5Ud7HpfDj53+SzLH/sh4ZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDBBNC8yOUY0QkFGQzhB N0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2VsOE9QbmY1TE1zZi15SGht bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdEUXJsUjNzZWw4T1BuZjVMTXNmLXlIaG1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDBBNC8yOUY0QkFGQzhBN0ExMUVDQjdBRjI0NDVDNEY5QUUwMi83RFFybFIzc2Vs OE9QbmY1TE1zZi15SGhtbGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/KRmEyy8VPKI7K7ASGkYb/REJHG+E+vfD09jcaTYE4uf441ZiKArb 0Gz+WWXgAOGlHWeyieos4Ls71mDtfYuOg1nAst3f+1EPEH7K9tyLoYF9AW9zrNn0 8DXL6a/c+4u9oopRN6muh7dMV1HdYsVj7fah2IMdSS3wKKzQnF8RrDeP6DyhkYBV zZ1hy3B9ifLHycDR7PG+iY5DlLI19sEpG3QDfjkHF/3yZZK0T/O3GC71IwnwRFPm 3vTYbB4O4p0OaNU01/PYCds/bquHIn5CsZzXk6zARLg40qd4NjVPEiX9wSNY1uXG jcleKeUksriGg29IFiQYv2VSYcocKj6+ -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:01 2025 by rpki-client