$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: shIev9rmc0jsOtB0ZaJFw5dxI+f2hyCvDCgY/qcDmII= Subject key identifier: FC:DF:C5:6B:04:D0:DB:12:F5:52:0D:69:86:57:D4:4C:C6:71:A8:C7 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 221D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21FC Signing time: Tue 04 Nov 2025 15:59:06 +0000 Manifest this update: Tue 04 Nov 2025 15:59:06 +0000 Manifest next update: Tue 11 Nov 2025 15:59:06 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: BVBVmtYwmZKHjHQfw5s2xvdv7x34oN2mIGAP12tFwnA=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:59:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8733 (0x221d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Nov 4 15:59:06 2025 GMT Not After : Nov 11 15:59:06 2025 GMT Subject: CN=690a22ca-d273 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8e:ed:86:e4:86:8a:9e:4b:b2:6a:49:05:78: ef:77:74:27:b6:aa:ad:cf:7a:9e:a9:2a:b4:72:e5: 8c:1a:f7:66:b2:e1:60:94:0b:0c:39:d9:fc:0e:ae: d6:5e:1a:b6:55:40:76:44:b0:2c:66:ca:28:48:c0: 84:c2:e5:3c:d1:75:f7:57:82:4f:18:b4:6a:86:ac: ae:f3:83:24:18:6d:2d:47:d6:f8:a5:e4:a5:af:67: dc:a0:2f:21:96:0a:2d:bd:33:99:17:f5:98:af:dd: b4:2b:fd:3a:15:f2:90:a9:da:35:44:10:e5:bc:c6: df:09:a1:e3:f4:0c:de:9b:3e:e2:d5:0d:a6:f8:1a: 37:f6:10:ac:14:96:58:1d:30:59:d7:e7:f1:0e:b2: da:b7:5f:dc:44:f0:87:49:c4:ae:81:96:5c:4b:1a: d9:2b:8d:ae:13:f8:79:e7:a6:3c:42:2d:4d:66:a9: 85:4a:b1:a9:e8:f1:f6:2b:ae:fa:13:57:a8:e3:9c: 97:8c:86:f6:b4:f7:40:2e:a0:bb:30:f8:b3:e9:41: 04:01:87:23:34:52:57:4d:d8:e1:61:75:26:2f:24: f4:cc:63:6b:bb:21:c1:a7:04:95:20:ff:65:fd:ef: 8e:bc:ac:96:15:b5:e2:c8:d8:4e:4b:f6:68:7a:23: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DF:C5:6B:04:D0:DB:12:F5:52:0D:69:86:57:D4:4C:C6:71:A8:C7 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:26:25:f8:54:9b:28:33:29:db:af:96:70:6a:37:28:f9:26: b1:d0:18:33:7e:16:98:a6:30:91:23:6e:53:b8:8f:48:b4:68: a1:63:33:10:c5:06:d3:d3:69:28:76:7e:05:cf:ac:cc:ec:6f: cf:14:8a:3e:b9:7b:67:d4:36:c2:cf:fd:de:bb:e3:89:f8:1a: cd:ad:03:c9:94:be:18:92:4c:72:9e:8f:e3:e5:2d:73:95:d4: a0:e4:ec:ae:7e:7a:01:69:d4:92:27:4a:c7:cd:5b:a8:fb:90: 40:53:a9:a7:27:a6:d9:72:87:21:88:6b:ac:72:ca:f9:fd:3b: ab:dc:a9:02:c2:8b:4c:df:d3:36:2e:d7:dd:68:c0:5f:8a:d0: 24:b0:ae:02:2f:a2:eb:30:57:3d:95:90:b9:1a:10:a0:ac:49: fd:2a:a9:42:59:ee:d1:e1:eb:e4:bf:b2:63:d3:8c:cd:78:c3: 43:14:2c:0a:5d:35:74:24:6c:20:d2:5e:b5:b2:c7:02:0e:19: 3c:6e:00:d0:3a:e0:0e:42:45:1b:b4:95:93:7f:45:06:b8:b3: 1f:a1:4b:98:a1:14:a0:90:12:4a:dc:0c:1a:08:7f:79:35:44: fc:e7:9b:9e:74:b4:71:bc:7b:00:a0:25:ae:c2:d9:a2:e9:2f: b0:b6:6a:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIh0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUxMTA0MTU1OTA2WhcNMjUxMTExMTU1OTA2WjAYMRYwFAYD VQQDEw02OTBhMjJjYS1kMjczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY7thuSGip5LsmpJBXjvd3Qntqqtz3qeqSq0cuWMGvdmsuFglAsMOdn8Dq7W Xhq2VUB2RLAsZsooSMCEwuU80XX3V4JPGLRqhqyu84MkGG0tR9b4peSlr2fcoC8h lgotvTOZF/WYr920K/06FfKQqdo1RBDlvMbfCaHj9Azemz7i1Q2m+Bo39hCsFJZY HTBZ1+fxDrLat1/cRPCHScSugZZcSxrZK42uE/h556Y8Qi1NZqmFSrGp6PH2K676 E1eo45yXjIb2tPdALqC7MPiz6UEEAYcjNFJXTdjhYXUmLyT0zGNruyHBpwSVIP9l /e+OvKyWFbXiyNhOS/ZoeiNJ9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPzfxWsE 0NsS9VINaYZX1EzGcajHMB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfJiX4VJsoMynbr5Zwajco+Sax0BgzfhaYpjCRI25TuI9ItGihYzMQ xQbT02kodn4Fz6zM7G/PFIo+uXtn1DbCz/3eu+OJ+BrNrQPJlL4Ykkxyno/j5S1z ldSg5OyufnoBadSSJ0rHzVuo+5BAU6mnJ6bZcochiGuscsr5/Tur3KkCwotM39M2 LtfdaMBfitAksK4CL6LrMFc9lZC5GhCgrEn9KqlCWe7R4evkv7Jj04zNeMNDFCwK XTV0JGwg0l61sscCDhk8bgDQOuAOQkUbtJWTf0UGuLMfoUuYoRSgkBJK3AwaCH95 NUT855uedLRxvHsAoCWuwtmi6S+wtmqS -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:51 2025 by rpki-client