$ rpki-client -vvf rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft File: u8EDVhr9epMDbRxy3UwKfCpOKc4.mft (raw, json) Hash identifier: lx/Nxtjc0D0C9bUpV7hqwxhWvgkNNDqgeUuwvVo+iYE= Subject key identifier: 05:66:3E:3B:0C:7A:F0:F0:48:BB:BE:A7:57:1F:5D:B9:E8:31:79:5A Authority key identifier: BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE Certificate issuer: /CN=A91F277D/serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft Manifest number: 069E Signing time: Sun 02 Nov 2025 22:00:07 +0000 Manifest this update: Sun 02 Nov 2025 22:00:07 +0000 Manifest next update: Sun 09 Nov 2025 22:00:07 +0000 Files and hashes: 1: u8EDVhr9epMDbRxy3UwKfCpOKc4.crl (hash: JL9zWF6swvcMqZyuCLE//YEglBN0Prb1/5OBcUhWPG8=) 2: CEF8E22E711711EDB49CE11AC4F9AE02.roa (hash: MXG2UaX3e+u+Jgkl2hW9VaZ5bWI3Hg2FUtWl1xPKFxI=) 3: 70A77C348D6C11EBAFD23A2EC4F9AE02.roa (hash: A5KK9SQwb+EDWJ4jMnTUQq3SJ0SvbTU26Y/s1pM+n+I=) 4: 0BABC0DCB15D11EB8937582CC4F9AE02.roa (hash: myGu3py2MJoX+9pcsdAEfeXFlVuZbTSedA0MlFyQwmI=) 5: 715924988D6C11EBAFD23A2EC4F9AE02.roa (hash: IRx8YlQZD3iZNO8ZkV5fm0YkjEB3fazq27IMfHjcxDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:00:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F277D, serialNumber=BBC103561AFD7A93036D1C72DD4C0A7C2A4E29CE Validity Not Before: Nov 2 22:00:07 2025 GMT Not After : Nov 9 22:00:07 2025 GMT Subject: CN=6907d467-eff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3d:20:d8:1c:b4:86:37:bf:22:cc:57:6d:3b: 33:47:18:e0:af:b9:f6:ea:d8:35:9d:49:e3:f2:0d: 71:b5:50:c8:9d:ee:22:22:17:d9:1b:cf:15:a8:76: 35:e4:d6:8c:fb:a1:35:e3:fa:38:27:5f:54:d1:38: 11:a4:ea:26:70:ce:23:cf:3d:a6:e3:4a:d8:af:8d: 7d:3d:f1:3c:a3:39:0f:9b:2d:f1:07:dc:39:5f:7d: 57:0b:77:c6:11:68:22:d2:48:96:99:81:e1:38:fc: a1:0c:90:c9:a5:70:68:5b:b3:49:1b:0e:79:07:ad: 61:7b:f3:72:1d:b0:8f:29:89:3b:6e:47:23:c2:d6: 61:66:9d:d6:66:44:bd:ea:7a:c9:49:4c:cf:ef:5c: e4:ad:9b:04:48:dc:18:33:f7:a4:3f:9b:ea:37:a2: 42:57:66:78:92:9d:f6:88:4f:f8:5a:f3:41:8b:93: 13:68:c8:4f:e9:0a:05:8e:71:1b:95:77:90:53:d9: 6d:8a:d3:d4:da:1b:2a:9f:3e:b0:51:03:9a:4c:4b: f2:18:80:87:e2:62:a8:58:17:f1:2a:3e:2e:78:f9: 81:54:2f:c6:44:a8:60:17:5a:44:f4:48:63:53:40: a1:34:3d:a5:f4:b8:76:c2:b0:34:79:82:4c:bc:45: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:66:3E:3B:0C:7A:F0:F0:48:BB:BE:A7:57:1F:5D:B9:E8:31:79:5A X509v3 Authority Key Identifier: keyid:BB:C1:03:56:1A:FD:7A:93:03:6D:1C:72:DD:4C:0A:7C:2A:4E:29:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u8EDVhr9epMDbRxy3UwKfCpOKc4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F277D/78A1D08E8D6B11EB9840E05FC4F9AE02/u8EDVhr9epMDbRxy3UwKfCpOKc4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:0a:68:e3:ff:b2:f1:ba:e9:36:20:aa:05:97:45:74:e0:ca: 1a:76:b8:75:2a:2e:50:a2:5e:5d:48:57:9f:e2:b0:0c:6e:6f: e3:e6:3f:39:f9:29:df:df:f8:ac:59:f3:44:f6:80:9b:a9:d4: 82:25:6c:41:00:28:de:34:d9:6b:6a:6c:46:f5:16:b1:d3:af: a1:a3:45:8a:0f:22:ae:c0:ca:ee:11:60:1d:ce:40:c0:54:b7: 1a:25:9f:4b:c0:d8:6c:99:6e:b0:a2:d4:9c:af:21:cd:d4:96: bf:1b:23:0f:09:8c:97:30:b7:f7:7f:5d:89:30:7e:4f:1d:ca: d7:03:ac:65:4c:a2:be:f7:ea:78:4e:da:de:b3:fb:1c:0b:62: e0:35:5c:70:c0:eb:ef:42:87:ad:e5:38:d5:94:c8:22:a7:92: 2d:c4:d4:71:2f:91:fa:fc:05:ce:71:9e:92:58:d3:d8:77:79: 20:74:d5:39:8f:c6:d9:38:14:f4:16:2b:fd:b0:be:dc:30:b2: 42:ee:0d:7f:e2:15:a0:c9:99:44:5b:dd:0c:1f:93:c3:eb:56: f4:7c:f9:7b:b7:3d:82:47:a1:d8:cf:e2:f2:6e:cb:3f:22:4b: bb:2f:23:3a:44:b7:d1:c8:0c:e2:ea:f3:6a:4a:ac:1c:73:45: b6:74:ec:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjI3N0QxMTAvBgNVBAUTKEJCQzEwMzU2MUFGRDdBOTMwMzZEMUM3MkRENEMwQTdD MkE0RTI5Q0UwHhcNMjUxMTAyMjIwMDA3WhcNMjUxMTA5MjIwMDA3WjAYMRYwFAYD VQQDEw02OTA3ZDQ2Ny1lZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyj0g2By0hje/IsxXbTszRxjgr7n26tg1nUnj8g1xtVDIne4iIhfZG88VqHY1 5NaM+6E14/o4J19U0TgRpOomcM4jzz2m40rYr419PfE8ozkPmy3xB9w5X31XC3fG EWgi0kiWmYHhOPyhDJDJpXBoW7NJGw55B61he/NyHbCPKYk7bkcjwtZhZp3WZkS9 6nrJSUzP71zkrZsESNwYM/ekP5vqN6JCV2Z4kp32iE/4WvNBi5MTaMhP6QoFjnEb lXeQU9ltitPU2hsqnz6wUQOaTEvyGICH4mKoWBfxKj4uePmBVC/GRKhgF1pE9Ehj U0ChND2l9Lh2wrA0eYJMvEX55QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAVmPjsM evDwSLu+p1cfXbnoMXlaMB8GA1UdIwQYMBaAFLvBA1Ya/XqTA20cct1MCnwqTinO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjc3RC83OEExRDA4RThE NkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVwTURiUnh5M1V3S2ZDcE9L YzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3U4RURWaHI5ZXBNRGJSeHkzVXdLZkNwT0tjNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Mjc3RC83OEExRDA4RThENkIxMUVCOTg0MEUwNUZDNEY5QUUwMi91OEVEVmhyOWVw TURiUnh5M1V3S2ZDcE9LYzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAWCmjj/7Lxuuk2IKoFl0V04Moadrh1Ki5Qol5dSFef4rAMbm/j5j85 +Snf3/isWfNE9oCbqdSCJWxBACjeNNlramxG9Rax06+ho0WKDyKuwMruEWAdzkDA VLcaJZ9LwNhsmW6wotScryHN1Ja/GyMPCYyXMLf3f12JMH5PHcrXA6xlTKK+9+p4 Ttres/scC2LgNVxwwOvvQoet5TjVlMgip5ItxNRxL5H6/AXOcZ6SWNPYd3kgdNU5 j8bZOBT0Fiv9sL7cMLJC7g1/4hWgyZlEW90MH5PD61b0fPl7tz2CR6HYz+Lybss/ Iku7LyM6RLfRyAzi6vNqSqwcc0W2dOwA -----END CERTIFICATE-----Generated at Tue Nov 4 20:03:41 2025 by rpki-client