$ rpki-client -vvf rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft File: c72yoCvL7DyQAPZfcFyW6AgOlzA.mft (raw, json) Hash identifier: Sb9cn6sd0TSpYRXpJnhH4mUqjHBk5RFw4wSlAWFv49o= Subject key identifier: 68:08:1F:AE:A7:B0:D5:4B:32:0B:D7:55:45:1C:24:26:6C:0E:9B:38 Authority key identifier: 73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 Certificate issuer: /CN=A91F34BF/serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Certificate serial: 016D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft Manifest number: 0167 Signing time: Wed 05 Nov 2025 04:11:40 +0000 Manifest this update: Wed 05 Nov 2025 04:11:39 +0000 Manifest next update: Wed 12 Nov 2025 04:11:39 +0000 Files and hashes: 1: c72yoCvL7DyQAPZfcFyW6AgOlzA.crl (hash: a2kgAfaYKhNvcGX2fGlvlmEFSBGLYFQRCso2+SoK8/o=) 2: D4F8CEB8FE4211EF958ABE3BC4F9AE02.roa (hash: e+itOOHa2GS7haggfAySbnRHvgH3I9TscI3l9ZgslXk=) 3: 13310E94FCD011EF8F21DE62C4F9AE02.roa (hash: pCYjff74rDvqaSSHh6b2YJXJxIU8kNQvxw7uQ6aFFQ8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:11:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 365 (0x16d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F34BF, serialNumber=73BDB2A02BCBEC3C9000F65F705C96E8080E9730 Validity Not Before: Nov 5 04:11:39 2025 GMT Not After : Nov 12 04:11:39 2025 GMT Subject: CN=690ace7c-2b10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:18:56:d3:1b:1c:80:12:79:1b:ca:da:20:b6: 2b:76:20:a1:1d:40:00:ac:59:3c:39:d4:4d:26:47: 83:36:f3:83:c3:98:54:6d:ea:86:9c:03:65:70:08: 2a:0f:df:38:e2:07:50:28:8f:ac:50:08:7b:82:7e: 17:55:91:8b:06:0b:30:08:8a:7b:77:62:6b:c0:e6: 41:ac:4e:37:b4:1e:12:6f:49:eb:69:75:8d:28:cb: ef:c9:4f:66:0e:a4:e6:e8:e8:56:a2:1c:43:49:fe: 87:eb:47:5e:a6:27:7e:c6:03:c8:98:e1:08:ba:b2: f6:74:ea:ba:19:ef:c0:57:84:51:99:5d:3a:66:86: ec:4b:38:d9:01:eb:0e:11:2c:c7:91:ce:ad:5c:b1: e3:5f:b3:42:d0:42:68:42:5f:2d:d7:a8:ce:08:a0: 7a:43:0f:b4:48:91:84:44:c9:91:e6:01:aa:8e:ca: 70:47:2b:83:06:69:10:4f:d6:eb:0e:27:33:d3:27: a6:c0:4f:65:3d:7c:e3:e3:4b:c8:6b:52:8f:44:d6: 32:21:b0:63:73:09:7b:65:fc:69:7f:2f:61:e3:28: 66:7a:f8:3e:13:41:e3:fd:8a:09:65:1c:18:38:8a: bf:8b:9a:6a:bd:24:58:8f:85:ac:84:a3:a4:34:1c: 50:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:08:1F:AE:A7:B0:D5:4B:32:0B:D7:55:45:1C:24:26:6C:0E:9B:38 X509v3 Authority Key Identifier: keyid:73:BD:B2:A0:2B:CB:EC:3C:90:00:F6:5F:70:5C:96:E8:08:0E:97:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c72yoCvL7DyQAPZfcFyW6AgOlzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F34BF/4F033D849CF511EE9E4C331FC4F9AE02/c72yoCvL7DyQAPZfcFyW6AgOlzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f9:5b:9e:8c:e0:18:05:05:2b:61:10:4b:fe:1d:7e:5e:8e: b6:2d:fb:a8:d5:d1:b7:be:d9:39:04:c3:cc:70:eb:eb:cb:88: 5d:28:1e:1f:ea:72:95:af:7f:f9:55:27:93:c7:9e:79:99:57: ba:c0:16:28:5f:03:a8:f0:b5:d8:97:6d:5b:97:5e:d6:cb:4e: e3:59:09:2c:4c:45:6e:a5:e9:46:03:2d:2e:5d:44:be:4b:32: 39:97:c1:ef:8a:ba:7e:1f:f9:7f:25:20:ef:92:51:e8:2a:be: f8:36:7e:fd:3a:86:f5:72:00:00:80:30:47:24:bc:22:8b:a1: 25:4d:3e:d8:7a:e5:4c:ff:16:12:86:6b:89:b1:01:09:7c:8a: c0:fb:50:69:16:19:69:b6:c2:18:7b:d8:49:d5:69:3d:51:1a: e0:fc:36:34:c3:62:f4:2b:b2:ce:e7:ad:c7:a4:c8:23:29:71: 0e:61:ae:47:d8:36:89:db:46:fc:e9:3b:b1:63:97:34:e9:2b: 64:e8:99:d3:d9:53:fb:12:dd:6b:78:5a:49:45:5d:94:ea:31: 66:e7:96:36:f7:fb:fa:ec:a1:b1:f6:e4:60:5a:c4:c8:6d:85: d1:3d:46:8a:db:96:6f:35:58:c7:a1:12:e8:65:aa:66:78:5f: e8:15:09:d6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM0QkYxMTAvBgNVBAUTKDczQkRCMkEwMkJDQkVDM0M5MDAwRjY1RjcwNUM5NkU4 MDgwRTk3MzAwHhcNMjUxMTA1MDQxMTM5WhcNMjUxMTEyMDQxMTM5WjAYMRYwFAYD VQQDEw02OTBhY2U3Yy0yYjEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxhW0xscgBJ5G8raILYrdiChHUAArFk8OdRNJkeDNvODw5hUbeqGnANlcAgq D9844gdQKI+sUAh7gn4XVZGLBgswCIp7d2JrwOZBrE43tB4Sb0nraXWNKMvvyU9m DqTm6OhWohxDSf6H60depid+xgPImOEIurL2dOq6Ge/AV4RRmV06ZobsSzjZAesO ESzHkc6tXLHjX7NC0EJoQl8t16jOCKB6Qw+0SJGERMmR5gGqjspwRyuDBmkQT9br Dicz0yemwE9lPXzj40vIa1KPRNYyIbBjcwl7Zfxpfy9h4yhmevg+E0Hj/YoJZRwY OIq/i5pqvSRYj4WshKOkNBxQkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGgIH66n sNVLMgvXVUUcJCZsDps4MB8GA1UdIwQYMBaAFHO9sqAry+w8kAD2X3BclugIDpcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzRCRi80RjAzM0Q4NDlD RjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdEeVFBUFpmY0Z5VzZBZ09s ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M3MnlvQ3ZMN0R5UUFQWmZjRnlXNkFnT2x6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzRCRi80RjAzM0Q4NDlDRjUxMUVFOUU0QzMzMUZDNEY5QUUwMi9jNzJ5b0N2TDdE eVFBUFpmY0Z5VzZBZ09sekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCf+VuejOAYBQUrYRBL/h1+Xo62Lfuo1dG3vtk5BMPMcOvry4hdKB4f 6nKVr3/5VSeTx555mVe6wBYoXwOo8LXYl21bl17Wy07jWQksTEVupelGAy0uXUS+ SzI5l8Hvirp+H/l/JSDvklHoKr74Nn79Oob1cgAAgDBHJLwii6ElTT7YeuVM/xYS hmuJsQEJfIrA+1BpFhlptsIYe9hJ1Wk9URrg/DY0w2L0K7LO563HpMgjKXEOYa5H 2DaJ20b86TuxY5c06Stk6JnT2VP7Et1reFpJRV2U6jFm55Y29/v67KGx9uRgWsTI bYXRPUaK25ZvNVjHoRLoZapmeF/oFQnW -----END CERTIFICATE-----Generated at Wed Nov 5 18:34:25 2025 by rpki-client