$ rpki-client -vvf rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft File: 99bebnsqx71FDHcVhj6XmVU4Pk4.mft (raw, json) Hash identifier: Opz6Oxl9zQZGGbDQTQQtsFXjTVWXIPK0GdV8Jg2AVok= Subject key identifier: 3C:26:17:D7:7F:8A:55:C3:3C:27:F8:B6:B2:50:BE:7D:CC:7B:DD:B9 Authority key identifier: F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E Certificate issuer: /CN=A91E33AA/serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft Manifest number: 41 Signing time: Wed 05 Nov 2025 07:38:12 +0000 Manifest this update: Wed 05 Nov 2025 07:38:11 +0000 Manifest next update: Wed 12 Nov 2025 07:38:11 +0000 Files and hashes: 1: 99bebnsqx71FDHcVhj6XmVU4Pk4.crl (hash: KGvvj1Yf6bevPHJ89ykS6A3VQ/bi2C6lDATeAVvxSz8=) 2: E68B45D6596711F094054D6BC4F9AE02.roa (hash: KsrzFIQg6uK84oBVBjzffm7U9gXX448ArNBcSCFz+n0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E33AA, serialNumber=F7D6DE6E7B2AC7BD450C7715863E979955383E4E Validity Not Before: Nov 5 07:38:11 2025 GMT Not After : Nov 12 07:38:11 2025 GMT Subject: CN=690afee3-f123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:94:57:e0:10:8e:99:f9:a1:ae:b9:c8:1c:b4: 8b:16:1a:4d:7d:a0:69:e3:b7:fc:d2:ee:11:b8:1f: f7:74:47:6a:df:8b:0e:0a:c1:0d:56:16:79:8a:27: 33:01:ad:99:ec:7c:47:fc:4d:86:24:27:4c:0f:1e: 9a:a9:fd:be:b3:d1:85:4e:27:5d:a1:da:c1:53:a7: 13:5d:c9:a5:99:e7:fd:d7:ca:8a:18:62:6f:77:e0: 4b:56:0a:6c:46:59:f0:4d:fb:3c:ae:0d:16:3c:3b: a9:ac:d5:92:37:75:0c:d8:59:0c:25:37:cb:67:04: 50:b3:b7:b9:7a:14:ce:ed:6b:a2:7e:a7:55:25:3d: 4d:24:75:2b:ea:25:00:6f:af:b8:e6:ad:cd:8a:6b: fa:2f:e0:fa:43:e0:f1:08:17:dc:5d:46:c0:b4:3a: d2:7f:57:5e:f5:02:d7:9d:3e:98:c2:28:0f:32:42: 1e:3e:ef:da:96:1e:ed:a7:d7:30:0b:56:42:c8:63: 21:37:03:ff:37:04:30:1a:8d:a1:82:d2:2e:c0:ae: 09:c6:39:e7:e4:fa:75:2e:67:85:89:91:7b:c9:db: bd:b3:3c:85:63:2c:87:da:a7:16:15:87:db:11:de: d7:ed:57:c2:6d:ee:7d:f0:41:0d:0e:55:1e:36:be: a0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:26:17:D7:7F:8A:55:C3:3C:27:F8:B6:B2:50:BE:7D:CC:7B:DD:B9 X509v3 Authority Key Identifier: keyid:F7:D6:DE:6E:7B:2A:C7:BD:45:0C:77:15:86:3E:97:99:55:38:3E:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/99bebnsqx71FDHcVhj6XmVU4Pk4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E33AA/52D9AD46596711F08C40792CC4F9AE02/99bebnsqx71FDHcVhj6XmVU4Pk4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:82:9c:31:0d:9a:cb:c7:31:94:29:a0:2f:a7:24:53:f5:7a: de:1b:ad:70:63:b4:62:0c:6d:5f:d8:cf:fe:eb:3d:28:eb:2e: b9:e0:51:b7:3f:33:04:f4:49:d5:de:03:56:e2:55:58:53:d4: 6c:ef:0a:94:84:df:e1:6b:b6:9f:ef:48:16:4a:64:bc:fa:b2: 33:94:33:2c:f4:ba:b5:a4:67:56:c1:6b:7a:5a:db:ec:ea:d4: bf:c8:75:4c:0f:11:d5:80:85:a8:0c:f3:66:97:c0:fd:71:85: c6:8e:9a:30:04:8a:8d:4a:70:65:e7:ab:86:be:33:f6:e2:cd: de:ba:67:24:81:ec:e6:a9:ef:a4:93:42:9c:a9:91:fb:c6:08: 06:c2:e9:52:31:88:cd:ca:10:71:ff:6a:0a:8d:d2:fe:5c:21: 42:fe:47:d9:61:e8:92:59:ae:f6:76:4a:0e:7c:b2:ce:a7:0a: 4b:db:b7:37:88:22:78:c8:ac:b9:21:de:fa:38:0d:0b:a0:f5: a7:64:c3:b1:9f:83:d1:27:7e:45:58:03:da:45:b9:ad:aa:03: 3d:50:98:c2:bc:ef:87:a6:90:12:4f:15:03:24:cc:c9:bb:f1: 1c:fb:68:b2:94:d5:44:cd:b1:3d:be:91:b9:c4:d6:7c:4c:63: 12:c6:7d:de -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzNBQTExMC8GA1UEBRMoRjdENkRFNkU3QjJBQzdCRDQ1MEM3NzE1ODYzRTk3OTk1 NTM4M0U0RTAeFw0yNTExMDUwNzM4MTFaFw0yNTExMTIwNzM4MTFaMBgxFjAUBgNV BAMTDTY5MGFmZWUzLWYxMjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8lFfgEI6Z+aGuucgctIsWGk19oGnjt/zS7hG4H/d0R2rfiw4KwQ1WFnmKJzMB rZnsfEf8TYYkJ0wPHpqp/b6z0YVOJ12h2sFTpxNdyaWZ5/3XyooYYm934EtWCmxG WfBN+zyuDRY8O6ms1ZI3dQzYWQwlN8tnBFCzt7l6FM7ta6J+p1UlPU0kdSvqJQBv r7jmrc2Ka/ov4PpD4PEIF9xdRsC0OtJ/V171AtedPpjCKA8yQh4+79qWHu2n1zAL VkLIYyE3A/83BDAajaGC0i7ArgnGOefk+nUuZ4WJkXvJ272zPIVjLIfapxYVh9sR 3tftV8Jt7n3wQQ0OVR42vqArAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPCYX13+K VcM8J/i2slC+fcx73bkwHwYDVR0jBBgwFoAU99bebnsqx71FDHcVhj6XmVU4Pk4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzM0FBLzUyRDlBRDQ2NTk2 NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcxRkRIY1ZoajZYbVZVNFBr NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOTliZWJuc3F4NzFGREhjVmhqNlhtVlU0UGs0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUz M0FBLzUyRDlBRDQ2NTk2NzExRjA4QzQwNzkyQ0M0RjlBRTAyLzk5YmVibnNxeDcx RkRIY1ZoajZYbVZVNFBrNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHGCnDENmsvHMZQpoC+nJFP1et4brXBjtGIMbV/Yz/7rPSjrLrngUbc/ MwT0SdXeA1biVVhT1GzvCpSE3+Frtp/vSBZKZLz6sjOUMyz0urWkZ1bBa3pa2+zq 1L/IdUwPEdWAhagM82aXwP1xhcaOmjAEio1KcGXnq4a+M/bizd66ZySB7Oap76ST QpypkfvGCAbC6VIxiM3KEHH/agqN0v5cIUL+R9lh6JJZrvZ2Sg58ss6nCkvbtzeI InjIrLkh3vo4DQug9adkw7Gfg9EnfkVYA9pFua2qAz1QmMK874emkBJPFQMkzMm7 8Rz7aLKU1UTNsT2+kbnE1nxMYxLGfd4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:49:41 2025 by rpki-client