$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft File: K7fm9k6JPZEwSosliGA1DWdQVK0.mft (raw, json) Hash identifier: RLr0XnME7L3HfmQ/E/v0ExiWY/bhMwhFTes6SxkIT4A= Subject key identifier: 16:6F:76:D0:63:CD:2B:DF:EA:47:54:92:FE:A9:05:39:82:50:A6:E8 Authority key identifier: 2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD Certificate issuer: /CN=A91F08D9/serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft Manifest number: 27 Signing time: Wed 05 Nov 2025 07:54:33 +0000 Manifest this update: Wed 05 Nov 2025 07:54:32 +0000 Manifest next update: Wed 12 Nov 2025 07:54:32 +0000 Files and hashes: 1: K7fm9k6JPZEwSosliGA1DWdQVK0.crl (hash: XBDDTOHc4l7ggMtsr8rhFRyz4W8hodBeZIV16I/YnN8=) 2: 87B1CF3484AB11F08EC73477C4F9AE02.roa (hash: Jt9xrlHuvhlUdrVUwgtvoOyhCxiTlBYw7QDZYg605Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:54:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08D9, serialNumber=2BB7E6F64E893D91304A8B258860350D675054AD Validity Not Before: Nov 5 07:54:32 2025 GMT Not After : Nov 12 07:54:32 2025 GMT Subject: CN=690b02b8-bcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:db:c3:ee:18:d3:1e:bc:e9:5e:0e:b6:a6:35: 0b:73:01:9f:7b:40:29:9e:e2:50:11:43:36:de:e8: b5:89:f0:4c:1f:9b:19:5c:fb:ac:88:a9:ca:62:d4: 74:1e:02:b2:0c:d6:0c:26:1f:6d:fb:58:62:ab:a6: 09:ea:c8:6b:d6:90:f9:87:a8:87:bb:08:b1:27:d2: d9:24:1d:a8:99:c6:c4:cd:7c:53:ca:cd:ee:f2:43: 42:dc:74:35:97:fe:5b:4e:c3:cf:f2:0f:37:44:0a: c3:cf:ce:94:b6:8b:ab:97:94:73:94:4c:fc:ea:ce: b3:e4:e8:0e:8b:0e:43:53:fb:5b:ba:b9:d6:c8:a2: 22:4f:ee:bd:c3:d9:da:73:6f:42:aa:5b:01:c8:19: 43:8b:2d:10:1e:01:c9:e6:48:2e:ef:01:83:91:d5: c1:98:3b:16:36:4d:6f:fb:03:cf:06:34:8e:8f:ab: 70:07:ce:9d:8a:81:19:6f:b7:0c:ce:f1:6b:de:9b: f3:77:9a:3c:ff:42:96:ae:a4:f3:e4:f6:65:f2:99: 67:a8:bb:e8:e4:6b:ea:9a:b5:02:ae:62:6c:e1:8d: 63:85:78:e8:70:8d:de:54:c5:91:b5:d5:01:6a:d9: e5:1a:1a:eb:9a:d7:bf:42:d0:bc:ee:5d:00:dc:b5: b1:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:76:D0:63:CD:2B:DF:EA:47:54:92:FE:A9:05:39:82:50:A6:E8 X509v3 Authority Key Identifier: keyid:2B:B7:E6:F6:4E:89:3D:91:30:4A:8B:25:88:60:35:0D:67:50:54:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K7fm9k6JPZEwSosliGA1DWdQVK0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08D9/0FD6AB52817111F09B10AE56C4F9AE02/K7fm9k6JPZEwSosliGA1DWdQVK0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:33:35:d5:30:7e:57:32:21:52:b3:d0:eb:e4:65:08:f2:3d: b5:14:35:d9:6d:14:91:b4:31:28:a0:e9:7e:a6:b8:df:eb:62: 27:79:33:4f:1f:24:be:aa:15:88:1c:d8:fb:9e:fc:56:4d:d8: 54:a2:4b:a4:65:d4:96:c1:66:92:f0:5c:1e:05:5e:e2:e5:f2: 86:35:ea:ae:b2:21:80:9f:dd:03:8b:67:f9:86:2d:49:58:0f: bf:66:13:d3:6e:64:fe:37:96:4e:3a:2b:bb:1b:eb:1d:27:05: 78:2a:06:f3:d3:8a:9f:c6:e4:b3:26:f7:36:df:72:24:06:76: 11:87:46:67:dd:06:ca:01:2a:b1:5f:46:83:06:88:31:25:3d: 75:2e:22:57:b5:03:5a:2b:b9:2f:ab:50:43:91:b7:04:a9:7c: 69:74:eb:cc:bc:1d:20:a6:56:54:5f:43:60:9c:8f:c7:b6:14: 4f:b4:f3:73:0b:93:60:6e:4b:2a:78:6e:98:43:58:e0:dd:0f: 63:08:44:01:ec:94:f3:a6:c5:17:5c:ed:5f:43:02:ba:ae:88: f3:02:0a:3f:b3:98:d5:d0:f8:9b:04:c3:4d:06:12:30:b6:e4: a9:35:18:ed:74:5e:61:6c:da:72:14:3b:34:13:3c:c5:4b:c2: fa:fd:b3:6e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MDhEOTExMC8GA1UEBRMoMkJCN0U2RjY0RTg5M0Q5MTMwNEE4QjI1ODg2MDM1MEQ2 NzUwNTRBRDAeFw0yNTExMDUwNzU0MzJaFw0yNTExMTIwNzU0MzJaMBgxFjAUBgNV BAMTDTY5MGIwMmI4LWJjYzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC928PuGNMevOleDramNQtzAZ97QCme4lARQzbe6LWJ8Ewfmxlc+6yIqcpi1HQe ArIM1gwmH237WGKrpgnqyGvWkPmHqIe7CLEn0tkkHaiZxsTNfFPKze7yQ0LcdDWX /ltOw8/yDzdECsPPzpS2i6uXlHOUTPzqzrPk6A6LDkNT+1u6udbIoiJP7r3D2dpz b0KqWwHIGUOLLRAeAcnmSC7vAYOR1cGYOxY2TW/7A88GNI6Pq3AHzp2KgRlvtwzO 8Wvem/N3mjz/QpaupPPk9mXymWeou+jka+qatQKuYmzhjWOFeOhwjd5UxZG11QFq 2eUaGuua179C0LzuXQDctbH1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFm920GPN K9/qR1SS/qkFOYJQpugwHwYDVR0jBBgwFoAUK7fm9k6JPZEwSosliGA1DWdQVK0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYwOEQ5LzBGRDZBQjUyODE3 MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpFd1Nvc2xpR0ExRFdkUVZL MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSzdmbTlrNkpQWkV3U29zbGlHQTFEV2RRVkswLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYw OEQ5LzBGRDZBQjUyODE3MTExRjA5QjEwQUU1NkM0RjlBRTAyL0s3Zm05azZKUFpF d1Nvc2xpR0ExRFdkUVZLMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAczNdUwflcyIVKz0OvkZQjyPbUUNdltFJG0MSig6X6muN/rYid5M08f JL6qFYgc2Pue/FZN2FSiS6Rl1JbBZpLwXB4FXuLl8oY16q6yIYCf3QOLZ/mGLUlY D79mE9NuZP43lk46K7sb6x0nBXgqBvPTip/G5LMm9zbfciQGdhGHRmfdBsoBKrFf RoMGiDElPXUuIle1A1oruS+rUEORtwSpfGl068y8HSCmVlRfQ2Ccj8e2FE+083ML k2BuSyp4bphDWODdD2MIRAHslPOmxRdc7V9DArquiPMCCj+zmNXQ+JsEw00GEjC2 5Kk1GO10XmFs2nIUOzQTPMVLwvr9s24= -----END CERTIFICATE-----Generated at Wed Nov 5 15:28:31 2025 by rpki-client