$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft File: RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft (raw, json) Hash identifier: L9jF9kOvVuuCGJvzfn8X9lPoSr7sd6J0tPFEEnuqzFo= Subject key identifier: 95:D5:8B:60:E1:CD:7B:9D:65:96:85:F5:B3:6A:6A:ED:2A:51:F3:33 Authority key identifier: 44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 Certificate issuer: /CN=A91E5C49/serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Certificate serial: 07C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft Manifest number: 0F73 Signing time: Tue 04 Nov 2025 21:40:48 +0000 Manifest this update: Tue 04 Nov 2025 21:40:48 +0000 Manifest next update: Tue 11 Nov 2025 21:40:48 +0000 Files and hashes: 1: RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl (hash: BJOcEmaO/NJkqy2e/DFZQkr45nHggBu2phmuHLNLq9w=) 2: 84FDF25A396711ED8AF52966C4F9AE02.roa (hash: EUTRK8zTZimnCog0ijkhm9FDi0k0sx3nv6s5rDsc3FM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1986 (0x7c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5C49, serialNumber=4416E89858DA677B0CDA33B87B2E8C8AFD1C6078 Validity Not Before: Nov 4 21:40:48 2025 GMT Not After : Nov 11 21:40:48 2025 GMT Subject: CN=690a72e0-83e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:70:b1:86:33:5d:26:2a:8d:a5:b8:5c:df: 27:fe:b9:d6:d3:65:06:92:41:6e:49:d4:cf:e7:dc: bf:2e:9e:54:85:27:86:24:0a:85:2d:60:d2:2e:aa: 79:06:36:00:ad:1e:38:20:a0:15:00:5d:84:c4:3f: 35:57:62:f3:e5:e8:06:83:cf:39:6b:01:f6:bd:bc: 50:20:f1:3b:31:32:7a:79:f5:e9:9d:b4:8b:62:eb: 8a:ca:84:78:57:ec:27:d5:ef:46:a1:f2:8a:53:01: fa:99:d0:5c:b5:d0:cc:01:8f:ae:e5:13:19:5f:5f: 77:e0:0a:17:ca:2f:60:45:93:52:e8:85:ff:44:1a: 54:9c:e6:d9:e5:76:8e:1d:a3:be:d5:6a:5e:90:90: 1d:18:a3:a6:9d:ea:39:39:73:a6:8f:16:d8:6b:30: ea:5c:81:9a:0e:70:4b:dc:8a:04:d0:74:a3:e2:98: 10:cf:bd:13:78:a3:78:99:45:f1:4c:d4:8d:98:dd: 5d:fa:95:79:50:6f:86:ba:7d:eb:2a:92:84:c3:04: 0d:f9:5d:5b:4a:f6:ca:d2:39:ac:eb:5a:48:f3:72: 35:d7:af:49:a8:13:2d:31:81:c1:80:37:0f:ec:75: 5d:18:89:26:38:30:ad:fa:35:44:4b:3a:b2:45:86: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:D5:8B:60:E1:CD:7B:9D:65:96:85:F5:B3:6A:6A:ED:2A:51:F3:33 X509v3 Authority Key Identifier: keyid:44:16:E8:98:58:DA:67:7B:0C:DA:33:B8:7B:2E:8C:8A:FD:1C:60:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RBbomFjaZ3sM2jO4ey6Miv0cYHg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5C49/8A87EFC21A4811EB8F143246C4F9AE02/RBbomFjaZ3sM2jO4ey6Miv0cYHg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:89:48:09:3d:e0:39:cd:d6:39:62:00:9d:65:fa:58:7f:11: 27:55:53:9f:5e:d0:1c:0d:94:fc:7d:92:9b:c7:e0:b1:e6:37: cd:0a:83:4c:8e:6b:a8:43:bf:b7:88:d4:1e:6a:85:9f:c7:ad: 66:8c:63:6d:ca:49:11:58:38:fd:65:61:dd:58:68:e3:4c:01: 96:23:45:3a:2b:59:0f:75:73:1a:76:13:2b:ed:27:46:0a:77: b2:ac:a7:5a:21:d4:5e:1f:e8:b1:38:ca:bf:2d:fc:9e:f7:c1: 75:d0:1e:17:07:4f:b5:6e:94:ef:7d:44:6b:6a:cf:a6:64:4e: 6c:59:8b:0d:a2:d1:d7:e7:e8:d3:28:03:a9:b3:3a:96:72:bb: a3:a5:40:ad:c7:5e:7e:b1:a0:e8:c5:c9:15:37:24:60:c0:d7: ce:95:3b:13:41:14:81:ed:6c:34:ea:8e:0f:6b:a1:a6:3c:be: 89:db:cf:bf:72:40:ae:a7:06:e3:bf:df:fd:65:b5:65:46:55: e2:96:0e:b7:be:78:bb:08:38:77:fd:a5:5a:5f:b2:e4:e8:86: 08:40:ed:98:1a:7e:23:ab:47:51:87:18:8b:61:fa:f6:53:72: 04:8b:d1:f8:f3:79:5b:3d:42:66:4a:b1:1a:10:8b:60:41:8a: b0:4c:ce:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB8IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVDNDkxMTAvBgNVBAUTKDQ0MTZFODk4NThEQTY3N0IwQ0RBMzNCODdCMkU4QzhB RkQxQzYwNzgwHhcNMjUxMTA0MjE0MDQ4WhcNMjUxMTExMjE0MDQ4WjAYMRYwFAYD VQQDEw02OTBhNzJlMC04M2UyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1DJwsYYzXSYqjaW4XN8n/rnW02UGkkFuSdTP59y/Lp5UhSeGJAqFLWDSLqp5 BjYArR44IKAVAF2ExD81V2Lz5egGg885awH2vbxQIPE7MTJ6efXpnbSLYuuKyoR4 V+wn1e9GofKKUwH6mdBctdDMAY+u5RMZX1934AoXyi9gRZNS6IX/RBpUnObZ5XaO HaO+1WpekJAdGKOmneo5OXOmjxbYazDqXIGaDnBL3IoE0HSj4pgQz70TeKN4mUXx TNSNmN1d+pV5UG+Gun3rKpKEwwQN+V1bSvbK0jms61pI83I1169JqBMtMYHBgDcP 7HVdGIkmODCt+jVESzqyRYZkrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJXVi2Dh zXudZZaF9bNqau0qUfMzMB8GA1UdIwQYMBaAFEQW6JhY2md7DNozuHsujIr9HGB4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUM0OS84QTg3RUZDMjFB NDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVozc00yak80ZXk2TWl2MGNZ SGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JCYm9tRmphWjNzTTJqTzRleTZNaXYwY1lIZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NUM0OS84QTg3RUZDMjFBNDgxMUVCOEYxNDMyNDZDNEY5QUUwMi9SQmJvbUZqYVoz c00yak80ZXk2TWl2MGNZSGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApiUgJPeA5zdY5YgCdZfpYfxEnVVOfXtAcDZT8fZKbx+Cx5jfNCoNM jmuoQ7+3iNQeaoWfx61mjGNtykkRWDj9ZWHdWGjjTAGWI0U6K1kPdXMadhMr7SdG CneyrKdaIdReH+ixOMq/Lfye98F10B4XB0+1bpTvfURras+mZE5sWYsNotHX5+jT KAOpszqWcrujpUCtx15+saDoxckVNyRgwNfOlTsTQRSB7Ww06o4Pa6GmPL6J28+/ ckCupwbjv9/9ZbVlRlXilg63vni7CDh3/aVaX7Lk6IYIQO2YGn4jq0dRhxiLYfr2 U3IEi9H483lbPUJmSrEaEItgQYqwTM4N -----END CERTIFICATE-----Generated at Wed Nov 5 01:27:52 2025 by rpki-client