$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft File: g71HreMCJZx1jHTIMLKebzpXc9s.mft (raw, json) Hash identifier: FiSx4NFjrtiYtqeveFQle7qj8GOnlu7cHNAOICMiNbI= Subject key identifier: DD:DE:68:50:15:1A:A2:45:B7:BB:00:78:25:31:D6:C2:A4:8D:E4:04 Authority key identifier: 83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB Certificate issuer: /CN=A91EC7F2/serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Certificate serial: 122F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft Manifest number: 1214 Signing time: Tue 04 Nov 2025 17:14:26 +0000 Manifest this update: Tue 04 Nov 2025 17:14:25 +0000 Manifest next update: Tue 11 Nov 2025 17:14:25 +0000 Files and hashes: 1: g71HreMCJZx1jHTIMLKebzpXc9s.crl (hash: +gsQCMceU8nCPWZTMUaR1EgO83NKpGu/cLX/A1+KXt0=) 2: 9D003F28621711E9B8C69E15C4F9AE02.roa (hash: 9dqK7fwX1U+8A9fcOv7N2ng0+RyVg5lfklaoSqiStho=) 3: 09F041C675FB11EAB470A130C4F9AE02.roa (hash: RMsg5QWeiEkRgPY6Tmmzu/lfOLCSCEngacbP0E3B76I=) 4: 9C7048DC621711E9B8C69E15C4F9AE02.roa (hash: xRGejBtSvmSQiXiFTmSi8Viq6cXlkkmhK13khjlMJ6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:14:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4655 (0x122f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC7F2, serialNumber=83BD47ADE302259C758C74C830B29E6F3A5773DB Validity Not Before: Nov 4 17:14:25 2025 GMT Not After : Nov 11 17:14:25 2025 GMT Subject: CN=690a3471-212b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:c1:93:7a:f9:85:e5:ec:e6:4f:a1:9a:7c:ee: b2:12:e2:d2:e3:95:86:ed:8f:be:41:35:87:7f:a6: 73:e3:dd:db:b1:bd:76:3e:58:f3:68:9c:c4:85:37: 43:04:e7:88:39:eb:d1:c6:63:03:9c:6e:cc:11:60: 06:83:39:60:7e:ed:b4:47:cc:7c:ae:27:a3:34:6b: 51:87:69:4d:b7:5f:80:dd:2d:55:64:0e:82:62:20: 5b:2d:ff:b0:48:a3:9a:80:26:a9:02:35:d1:f5:84: e8:b0:75:23:4d:7a:78:cf:d6:de:f8:2e:b5:5a:72: 57:ae:72:4c:b9:72:2c:25:23:d1:eb:b2:88:8a:84: ed:99:d7:de:16:71:ef:12:1b:2b:c6:2e:47:08:b8: 46:71:cc:ab:f5:09:ab:16:a4:5c:db:ec:6b:5b:be: 6c:29:87:81:2d:c5:49:1a:8a:be:5d:b0:62:20:aa: 0f:9b:8c:fc:4a:b6:0a:f1:8c:f2:95:8c:a0:7f:37: f1:48:22:42:c2:d0:5c:f8:c7:1e:93:60:4e:91:e7: 61:10:88:38:0e:1b:f9:d0:e4:37:b9:c3:ff:8f:62: 63:25:86:59:62:bb:6f:ec:67:42:b9:d1:4c:3a:51: c8:2f:8d:e2:77:e6:fb:f0:5c:b5:2c:c3:a0:71:f6: e6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DE:68:50:15:1A:A2:45:B7:BB:00:78:25:31:D6:C2:A4:8D:E4:04 X509v3 Authority Key Identifier: keyid:83:BD:47:AD:E3:02:25:9C:75:8C:74:C8:30:B2:9E:6F:3A:57:73:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g71HreMCJZx1jHTIMLKebzpXc9s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC7F2/48EFD17CF1A711E8AA614F51C4F9AE02/g71HreMCJZx1jHTIMLKebzpXc9s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:d3:39:0e:3c:ca:ac:02:32:26:3c:02:fb:b0:3d:3b:6b:8e: a2:9d:f6:84:17:50:98:e0:20:d9:2e:81:40:4d:24:ce:35:6b: 0b:9a:a6:e7:29:01:1d:13:3b:51:f9:65:f8:3e:fb:d9:af:26: 45:ee:a4:12:87:a6:25:d4:45:54:98:b1:0b:e5:d7:bc:a3:33: dc:6f:ff:7a:5a:df:ce:e3:9a:ad:8e:19:46:fd:55:32:c2:08: 81:d0:dd:10:4c:2a:af:6d:7d:1c:a0:a6:70:a5:f0:da:12:ac: 02:6b:98:20:cf:c8:c4:d0:11:27:cd:60:45:9f:77:1b:db:01: 44:24:5c:dd:87:af:81:fb:43:1d:5e:f5:7d:ff:dd:d4:74:5e: 0e:48:00:ca:38:34:bd:fb:d3:66:9d:4a:9e:82:ad:f3:2b:33: db:7c:2f:f3:ed:aa:08:86:cb:b6:78:c4:e2:33:a4:c3:f4:5d: 01:41:17:80:65:b3:c1:7c:b4:26:b7:92:25:00:bf:cf:7f:03: ad:ec:97:6d:e3:1e:a4:e3:d0:24:b0:46:91:5c:2a:f3:79:c6: 50:f8:57:83:ea:a7:13:23:e4:77:98:74:47:d1:ad:98:0c:da: 36:1a:34:ee:eb:b9:ae:69:8e:98:d7:27:02:83:0b:58:57:1e: 6c:08:30:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM3RjIxMTAvBgNVBAUTKDgzQkQ0N0FERTMwMjI1OUM3NThDNzRDODMwQjI5RTZG M0E1NzczREIwHhcNMjUxMTA0MTcxNDI1WhcNMjUxMTExMTcxNDI1WjAYMRYwFAYD VQQDEw02OTBhMzQ3MS0yMTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9cGTevmF5ezmT6GafO6yEuLS45WG7Y++QTWHf6Zz493bsb12PljzaJzEhTdD BOeIOevRxmMDnG7MEWAGgzlgfu20R8x8riejNGtRh2lNt1+A3S1VZA6CYiBbLf+w SKOagCapAjXR9YTosHUjTXp4z9be+C61WnJXrnJMuXIsJSPR67KIioTtmdfeFnHv Ehsrxi5HCLhGccyr9QmrFqRc2+xrW75sKYeBLcVJGoq+XbBiIKoPm4z8SrYK8Yzy lYygfzfxSCJCwtBc+Mcek2BOkedhEIg4Dhv50OQ3ucP/j2JjJYZZYrtv7GdCudFM OlHIL43id+b78Fy1LMOgcfbmLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN3eaFAV GqJFt7sAeCUx1sKkjeQEMB8GA1UdIwQYMBaAFIO9R63jAiWcdYx0yDCynm86V3Pb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzdGMi80OEVGRDE3Q0Yx QTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0paeDFqSFRJTUxLZWJ6cFhj OXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3MUhyZU1DSlp4MWpIVElNTEtlYnpwWGM5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzdGMi80OEVGRDE3Q0YxQTcxMUU4QUE2MTRGNTFDNEY5QUUwMi9nNzFIcmVNQ0pa eDFqSFRJTUxLZWJ6cFhjOXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBo0zkOPMqsAjImPAL7sD07a46infaEF1CY4CDZLoFATSTONWsLmqbn KQEdEztR+WX4PvvZryZF7qQSh6Yl1EVUmLEL5de8ozPcb/96Wt/O45qtjhlG/VUy wgiB0N0QTCqvbX0coKZwpfDaEqwCa5ggz8jE0BEnzWBFn3cb2wFEJFzdh6+B+0Md XvV9/93UdF4OSADKODS9+9NmnUqegq3zKzPbfC/z7aoIhsu2eMTiM6TD9F0BQReA ZbPBfLQmt5IlAL/PfwOt7Jdt4x6k49AksEaRXCrzecZQ+FeD6qcTI+R3mHRH0a2Y DNo2GjTu67muaY6Y1ycCgwtYVx5sCDAa -----END CERTIFICATE-----Generated at Wed Nov 5 15:33:05 2025 by rpki-client