$ rpki-client -vvf rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft File: 71ABp1tYBZ2TpdMWOFS0atZqnsg.mft (raw, json) Hash identifier: mO69CO/F7CXSBEJ5Zl4K5CUqDAq16UrvlnyMEgallWw= Subject key identifier: 55:93:66:01:68:34:EC:F5:B2:CB:6F:C0:74:66:DA:91:B5:2C:1B:A8 Authority key identifier: EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 Certificate issuer: /CN=A91E0E19/serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Certificate serial: 05B7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft Manifest number: 05AC Signing time: Tue 04 Nov 2025 23:14:04 +0000 Manifest this update: Tue 04 Nov 2025 23:14:03 +0000 Manifest next update: Tue 11 Nov 2025 23:14:03 +0000 Files and hashes: 1: 71ABp1tYBZ2TpdMWOFS0atZqnsg.crl (hash: 5FoZ9HvmRFtcdoV3AxXDI4uYtIvmkIG7HobQn4KQnaU=) 2: AB22314C35C211ED8FD8923EC4F9AE02.roa (hash: MnGT95K1KMZ27Vz9GV0/eAka386Vq2ptFRht280ijWY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 23:14:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1463 (0x5b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E0E19, serialNumber=EF5001A75B58059D93A5D3163854B46AD66A9EC8 Validity Not Before: Nov 4 23:14:03 2025 GMT Not After : Nov 11 23:14:03 2025 GMT Subject: CN=690a88bb-45f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:21:95:a3:56:67:29:aa:bc:98:15:b2:c7:6a: 56:ab:cc:9b:61:7f:9f:6e:2c:9a:09:7a:38:ad:a3: d3:bf:fb:a9:63:31:a3:a1:65:67:07:1e:dd:96:00: 05:35:13:26:76:5c:28:98:8a:2b:bb:6a:21:86:25: ed:d0:2c:7d:78:f7:ba:71:37:0b:fe:92:7f:d2:06: 05:ea:21:20:9a:9d:30:ff:59:f8:33:25:b7:df:32: dc:ed:b6:b1:6a:d2:5b:1b:0b:cc:e2:fb:69:d5:08: 7a:82:23:46:38:2f:07:c9:f0:cd:ff:25:cf:d4:9b: 52:c9:b7:58:9e:a4:92:bf:40:2b:d7:4a:fa:86:99: 04:63:1e:e4:90:7f:e7:78:d1:30:ec:3c:3c:39:4e: 5c:0b:f9:2d:11:94:8f:6f:42:56:d5:2b:52:eb:6a: 48:5b:57:ed:b8:4c:70:38:5e:aa:73:d9:be:a8:d2: af:5d:4b:08:d4:3d:d5:94:5a:7c:9a:c4:9c:89:58: 84:d0:40:4a:f1:5b:41:9f:aa:78:e0:26:1c:82:33: 97:e4:f9:a1:a1:0b:64:96:04:be:61:29:84:af:78: 69:82:90:ac:b5:67:5f:f4:0e:0e:a0:41:05:5e:30: af:33:73:9f:fb:ba:a2:6a:97:77:ad:ef:fa:9e:8d: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:93:66:01:68:34:EC:F5:B2:CB:6F:C0:74:66:DA:91:B5:2C:1B:A8 X509v3 Authority Key Identifier: keyid:EF:50:01:A7:5B:58:05:9D:93:A5:D3:16:38:54:B4:6A:D6:6A:9E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/71ABp1tYBZ2TpdMWOFS0atZqnsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E0E19/7071464EEDEF11EB8E21DE2DC4F9AE02/71ABp1tYBZ2TpdMWOFS0atZqnsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ee:9d:db:d4:44:3b:6a:6a:b8:f0:55:2e:be:b8:14:c1:be: 48:3d:1d:af:66:e9:51:de:35:dc:f8:01:4e:f2:89:38:b8:0a: 08:48:f9:95:d1:c7:be:ca:03:94:c4:9d:7d:ce:c7:68:8e:b1: 62:c7:4c:ae:88:7a:52:23:24:2d:08:80:3f:f5:a5:54:e4:a5: de:ef:23:09:e5:42:b3:e7:0c:fa:dd:51:94:c4:b9:3b:14:da: 6e:39:17:aa:29:a8:3a:3d:6d:a5:c9:12:02:5b:d8:30:fe:25: 6c:76:c1:3c:54:df:3c:b2:85:d9:4c:07:b3:b7:30:02:52:74: 05:85:01:7c:86:21:73:de:f9:c8:05:6c:57:89:7d:9b:ce:2e: 02:4e:97:a7:ea:9b:e8:25:88:3d:0d:93:11:6d:1c:3d:51:f1: 33:dc:0d:5c:b7:16:f1:9e:8c:02:c7:9a:c0:1d:ef:94:b5:3e: 74:93:9c:bd:86:aa:ef:57:df:c2:8d:1d:4f:2e:a1:eb:2c:40: 9a:bb:79:ad:24:b4:6e:5c:5c:ff:1d:21:3e:d8:8d:b7:16:af: 09:b5:bf:2f:39:af:b7:26:c3:9a:73:06:9e:0e:b5:3b:8a:3b: 72:f8:49:70:0f:ab:29:22:8e:73:2c:dd:c0:33:f0:2e:ea:f5: 13:a2:82:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBbcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTBFMTkxMTAvBgNVBAUTKEVGNTAwMUE3NUI1ODA1OUQ5M0E1RDMxNjM4NTRCNDZB RDY2QTlFQzgwHhcNMjUxMTA0MjMxNDAzWhcNMjUxMTExMjMxNDAzWjAYMRYwFAYD VQQDEw02OTBhODhiYi00NWY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1yGVo1ZnKaq8mBWyx2pWq8ybYX+fbiyaCXo4raPTv/upYzGjoWVnBx7dlgAF NRMmdlwomIoru2ohhiXt0Cx9ePe6cTcL/pJ/0gYF6iEgmp0w/1n4MyW33zLc7bax atJbGwvM4vtp1Qh6giNGOC8HyfDN/yXP1JtSybdYnqSSv0Ar10r6hpkEYx7kkH/n eNEw7Dw8OU5cC/ktEZSPb0JW1StS62pIW1ftuExwOF6qc9m+qNKvXUsI1D3VlFp8 msSciViE0EBK8VtBn6p44CYcgjOX5PmhoQtklgS+YSmEr3hpgpCstWdf9A4OoEEF XjCvM3Of+7qiapd3re/6no3XWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFWTZgFo NOz1sstvwHRm2pG1LBuoMB8GA1UdIwQYMBaAFO9QAadbWAWdk6XTFjhUtGrWap7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMEUxOS83MDcxNDY0RUVE RUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJaMlRwZE1XT0ZTMGF0WnFu c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcxQUJwMXRZQloyVHBkTVdPRlMwYXRacW5zZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MEUxOS83MDcxNDY0RUVERUYxMUVCOEUyMURFMkRDNEY5QUUwMi83MUFCcDF0WUJa MlRwZE1XT0ZTMGF0WnFuc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBO7p3b1EQ7amq48FUuvrgUwb5IPR2vZulR3jXc+AFO8ok4uAoISPmV 0ce+ygOUxJ19zsdojrFix0yuiHpSIyQtCIA/9aVU5KXe7yMJ5UKz5wz63VGUxLk7 FNpuOReqKag6PW2lyRICW9gw/iVsdsE8VN88soXZTAeztzACUnQFhQF8hiFz3vnI BWxXiX2bzi4CTpen6pvoJYg9DZMRbRw9UfEz3A1ctxbxnowCx5rAHe+UtT50k5y9 hqrvV9/CjR1PLqHrLECau3mtJLRuXFz/HSE+2I23Fq8Jtb8vOa+3JsOacwaeDrU7 ijty+ElwD6spIo5zLN3AM/Au6vUTooK5 -----END CERTIFICATE-----Generated at Wed Nov 5 05:17:56 2025 by rpki-client