$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: +j0EcUKFMyUS2iifH5IbufHDHR4YsPb3smvI7/S7R6k= Subject key identifier: A1:53:AC:0D:68:9B:F3:CB:30:42:8F:59:BF:D1:34:6A:F3:6A:FB:68 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 03BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 03B8 Signing time: Wed 05 Nov 2025 00:46:35 +0000 Manifest this update: Wed 05 Nov 2025 00:46:35 +0000 Manifest next update: Wed 12 Nov 2025 00:46:35 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: jb8yN1CUroM0lxiQQUhDlm5icI9Z8QM7yCbCT2APQdI=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:46:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 957 (0x3bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Nov 5 00:46:35 2025 GMT Not After : Nov 12 00:46:35 2025 GMT Subject: CN=690a9e6b-01e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:71:81:bc:14:8f:25:40:f5:6a:79:9a:68: 8e:55:aa:41:50:45:4a:a2:0b:4d:a9:d7:28:74:22: 4b:0f:06:4c:42:6b:60:c9:79:4d:e5:bb:3a:43:df: 92:80:15:86:22:74:0d:aa:59:c2:d5:b9:ae:f6:8c: 46:2e:c9:d0:51:d3:f9:75:73:b9:ee:da:01:fe:4b: a0:08:23:c2:c4:a6:5e:60:12:fb:fd:f8:84:c5:67: fd:d6:ed:90:5a:4e:37:76:8a:61:ab:e8:41:1f:33: cb:55:e6:ba:4d:19:63:25:44:c6:72:99:8f:8c:52: f5:e4:7d:6d:3a:6b:aa:55:1b:51:80:ef:c1:cb:f0: 48:14:7c:96:64:18:33:82:b7:62:6c:93:51:9d:f2: 28:e3:4e:21:7f:d8:13:d7:14:f7:72:ad:c7:3c:45: 27:11:9c:a2:3a:c1:e7:92:c0:f4:df:ad:58:1a:53: 36:dd:40:a1:a7:b3:87:ce:e2:c6:47:79:cb:27:d0: f7:4a:47:2c:2b:45:68:9b:f9:1b:eb:19:a0:8a:36: 13:0e:29:5a:17:44:8b:d4:8f:a2:77:9e:be:1f:c1: 73:09:31:64:12:31:3c:61:78:d5:6b:c5:6f:aa:76: ba:a9:64:3a:25:50:58:da:c5:c7:8e:40:f9:a7:98: 21:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:53:AC:0D:68:9B:F3:CB:30:42:8F:59:BF:D1:34:6A:F3:6A:FB:68 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:8d:83:59:c6:87:7e:93:6e:7f:3a:14:40:0b:01:be:29:22: 83:4c:76:e1:03:f3:27:21:8e:d1:ad:13:e2:83:0f:41:e9:4d: 7f:d7:9f:56:65:39:9f:f5:46:84:ba:21:97:d7:93:b2:d9:c9: b4:2f:5e:8c:ee:fa:16:a1:8c:b8:9b:f2:68:07:09:9a:de:4c: 73:02:40:d8:9b:34:e6:f8:59:72:1a:62:86:97:2c:b7:23:80: e5:1a:61:18:46:a9:96:ac:af:a2:98:ee:d5:00:44:4f:9b:23: 0b:93:c5:98:34:cc:6d:34:75:ac:17:b7:99:ba:9d:d5:1b:6f: 40:7a:14:0b:7e:b4:c3:06:24:0c:85:63:49:6e:b4:16:e4:a1: 4d:62:8c:88:66:ef:1b:e0:13:9c:81:26:be:78:8d:9c:0f:f9: 1d:55:e9:5f:2d:e6:fb:a4:5c:f8:cb:23:8b:de:88:42:41:da: 53:f5:24:eb:53:e5:0c:a3:76:c8:58:0b:84:97:9a:e7:4d:2c: 38:73:7e:87:8e:32:50:ad:a1:ab:54:5d:41:2d:e9:9c:5a:51: fe:03:8c:0b:4f:95:ea:18:99:9b:8d:30:f6:8f:35:80:89:13: 8c:25:95:6a:9d:da:a3:60:93:57:8d:18:13:20:2e:2f:5a:ca: 0d:46:1c:cb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUxMTA1MDA0NjM1WhcNMjUxMTEyMDA0NjM1WjAYMRYwFAYD VQQDEw02OTBhOWU2Yi0wMWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuptxgbwUjyVA9Wp5mmiOVapBUEVKogtNqdcodCJLDwZMQmtgyXlN5bs6Q9+S gBWGInQNqlnC1bmu9oxGLsnQUdP5dXO57toB/kugCCPCxKZeYBL7/fiExWf91u2Q Wk43dophq+hBHzPLVea6TRljJUTGcpmPjFL15H1tOmuqVRtRgO/By/BIFHyWZBgz grdibJNRnfIo404hf9gT1xT3cq3HPEUnEZyiOsHnksD0361YGlM23UChp7OHzuLG R3nLJ9D3SkcsK0Vom/kb6xmgijYTDilaF0SL1I+id56+H8FzCTFkEjE8YXjVa8Vv qna6qWQ6JVBY2sXHjkD5p5ghBwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKFTrA1o m/PLMEKPWb/RNGrzavtoMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAyjYNZxod+k25/OhRACwG+KSKDTHbhA/MnIY7RrRPigw9B6U1/159W ZTmf9UaEuiGX15Oy2cm0L16M7voWoYy4m/JoBwma3kxzAkDYmzTm+FlyGmKGlyy3 I4DlGmEYRqmWrK+imO7VAERPmyMLk8WYNMxtNHWsF7eZup3VG29AehQLfrTDBiQM hWNJbrQW5KFNYoyIZu8b4BOcgSa+eI2cD/kdVelfLeb7pFz4yyOL3ohCQdpT9STr U+UMo3bIWAuEl5rnTSw4c36HjjJQraGrVF1BLemcWlH+A4wLT5XqGJmbjTD2jzWA iROMJZVqndqjYJNXjRgTIC4vWsoNRhzL -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:33 2025 by rpki-client