$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft File: 0NbEemjLQdEG6wQtcma5y7_Bpzs.mft (raw, json) Hash identifier: l6IJgleCKRTB8mBSTlYnr1hF8Qa1I03SlB5Ae7W5caw= Subject key identifier: BB:C6:9B:74:0A:EF:44:61:BB:45:05:D4:EF:AE:5C:40:74:66:B3:65 Authority key identifier: D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B Certificate issuer: /CN=A91EBF76/serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Certificate serial: 06AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft Manifest number: 06A7 Signing time: Sun 02 Nov 2025 22:13:59 +0000 Manifest this update: Sun 02 Nov 2025 22:13:58 +0000 Manifest next update: Sun 09 Nov 2025 22:13:58 +0000 Files and hashes: 1: 0NbEemjLQdEG6wQtcma5y7_Bpzs.crl (hash: mbIIeGF9KhG77eiuIfbfkjpVbVFX0z2kIaB0qsfs13I=) 2: 5FBDA400853011EBA1AF1D76C4F9AE02.roa (hash: av1fp+B0Rvyyl/M+tQ87N6LBAVDY2pJUK/6gF5bMDYg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1708 (0x6ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBF76, serialNumber=D0D6C47A68CB41D106EB042D7266B9CBBFC1A73B Validity Not Before: Nov 2 22:13:58 2025 GMT Not After : Nov 9 22:13:58 2025 GMT Subject: CN=6907d7a7-98f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fa:19:06:c3:56:bb:cb:93:e4:7b:ad:54:69: 9f:6f:c4:dc:97:5f:b6:81:b3:fa:c4:29:5e:93:eb: ab:2a:df:af:4d:b4:13:ad:8a:43:b0:1d:51:5d:3e: 9e:b9:72:32:30:79:51:13:01:5f:72:c2:69:72:67: 48:b9:58:29:96:52:ea:6f:90:05:7a:19:40:b6:5f: 84:d9:22:f4:6f:79:1b:d9:4f:fb:7a:4f:60:c8:24: fc:e6:4a:86:73:f9:93:a3:05:4a:65:3c:f1:89:e3: aa:1d:ad:4f:d8:2a:2c:41:37:16:e0:68:7e:c5:ea: f8:ce:a6:f3:fa:d6:c0:67:cc:0a:44:d7:e3:15:a0: 33:7b:a4:81:bb:fa:c2:9c:d5:91:e1:26:19:81:b8: a6:48:bc:c1:9e:f0:6e:3a:50:3f:73:12:56:78:59: bf:31:56:2a:b2:fc:f7:17:cf:75:a2:56:35:d9:e0: 06:65:90:23:6e:2b:b6:c0:69:c6:a7:71:36:fa:27: 06:ce:18:34:fc:53:be:4a:2d:61:36:20:8e:c3:42: f5:3f:86:67:f5:e0:cb:67:81:13:4e:85:66:d0:2a: 60:bf:b3:7b:1d:30:13:25:d2:24:24:6b:f3:88:d9: 65:c2:ec:91:fd:60:4e:77:58:a7:19:7b:e6:ef:f6: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C6:9B:74:0A:EF:44:61:BB:45:05:D4:EF:AE:5C:40:74:66:B3:65 X509v3 Authority Key Identifier: keyid:D0:D6:C4:7A:68:CB:41:D1:06:EB:04:2D:72:66:B9:CB:BF:C1:A7:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0NbEemjLQdEG6wQtcma5y7_Bpzs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBF76/A6DE097C852311EBB7E9F383C4F9AE02/0NbEemjLQdEG6wQtcma5y7_Bpzs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:73:a1:5b:1e:4b:95:1d:b2:8a:5f:25:c6:e9:63:7c:5e:c2: 1a:a1:ae:4b:a6:1d:07:f7:39:c2:c5:54:9d:e4:0d:74:7a:97: 6e:9e:ef:a7:3f:52:49:be:1f:31:ea:6a:01:67:34:01:2c:41: bd:9b:ef:dd:72:3c:b1:c1:43:1c:7d:d2:07:43:6e:cb:50:3c: 86:06:7b:d1:9a:f1:ed:92:f5:34:11:07:8e:5a:1f:77:47:88: 35:7e:24:00:5d:f3:ec:f8:81:ba:a8:36:a4:e3:b2:9d:16:c3: 1b:3c:64:37:13:22:6d:42:f7:61:7a:ee:51:71:a1:cc:82:62: 96:1f:53:1b:1d:31:fc:15:78:54:82:ab:f3:1f:84:52:01:7e: 41:4a:f7:9f:18:b2:1a:60:f7:08:f8:3b:ca:98:57:3a:92:05: a4:ed:fb:c8:17:d3:24:0a:e4:ad:b9:bf:67:22:c3:c3:83:1c: 52:2e:92:c7:b9:eb:da:78:c8:41:ef:17:1a:e6:73:ea:cc:95: 06:13:e0:62:de:56:2c:e5:d3:34:4c:60:5c:7d:20:21:a3:5b: 08:d0:af:1b:04:d5:16:e4:ab:a9:fc:20:c6:b4:c2:18:74:c7: 48:3d:e9:7a:0f:92:53:02:17:0a:06:43:a5:04:9c:5c:4f:c5: aa:62:a5:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGNzYxMTAvBgNVBAUTKEQwRDZDNDdBNjhDQjQxRDEwNkVCMDQyRDcyNjZCOUNC QkZDMUE3M0IwHhcNMjUxMTAyMjIxMzU4WhcNMjUxMTA5MjIxMzU4WjAYMRYwFAYD VQQDEw02OTA3ZDdhNy05OGY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxfoZBsNWu8uT5HutVGmfb8Tcl1+2gbP6xClek+urKt+vTbQTrYpDsB1RXT6e uXIyMHlREwFfcsJpcmdIuVgpllLqb5AFehlAtl+E2SL0b3kb2U/7ek9gyCT85kqG c/mTowVKZTzxieOqHa1P2CosQTcW4Gh+xer4zqbz+tbAZ8wKRNfjFaAze6SBu/rC nNWR4SYZgbimSLzBnvBuOlA/cxJWeFm/MVYqsvz3F891olY12eAGZZAjbiu2wGnG p3E2+icGzhg0/FO+Si1hNiCOw0L1P4Zn9eDLZ4ETToVm0Cpgv7N7HTATJdIkJGvz iNllwuyR/WBOd1inGXvm7/b1+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvGm3QK 70Rhu0UF1O+uXEB0ZrNlMB8GA1UdIwQYMBaAFNDWxHpoy0HRBusELXJmucu/wac7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkY3Ni9BNkRFMDk3Qzg1 MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFkRUc2d1F0Y21hNXk3X0Jw enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzBOYkVlbWpMUWRFRzZ3UXRjbWE1eTdfQnB6cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkY3Ni9BNkRFMDk3Qzg1MjMxMUVCQjdFOUYzODNDNEY5QUUwMi8wTmJFZW1qTFFk RUc2d1F0Y21hNXk3X0JwenMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEc6FbHkuVHbKKXyXG6WN8XsIaoa5Lph0H9znCxVSd5A10epdunu+n P1JJvh8x6moBZzQBLEG9m+/dcjyxwUMcfdIHQ27LUDyGBnvRmvHtkvU0EQeOWh93 R4g1fiQAXfPs+IG6qDak47KdFsMbPGQ3EyJtQvdheu5RcaHMgmKWH1MbHTH8FXhU gqvzH4RSAX5BSvefGLIaYPcI+DvKmFc6kgWk7fvIF9MkCuStub9nIsPDgxxSLpLH uevaeMhB7xca5nPqzJUGE+Bi3lYs5dM0TGBcfSAho1sI0K8bBNUW5Kup/CDGtMIY dMdIPel6D5JTAhcKBkOlBJxcT8WqYqUx -----END CERTIFICATE-----Generated at Tue Nov 4 20:21:39 2025 by rpki-client