$ rpki-client -vvf rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft File: sxnfFFXYouFJjNxdSRVpgxxa_aE.mft (raw, json) Hash identifier: m24s8k/HStDg5ZujWihSvCF7NtxjLrHd0B/hdbHCpN8= Subject key identifier: 1F:34:8A:FC:3A:48:6B:3B:38:72:02:58:DE:A8:79:24:1D:B5:C0:BF Authority key identifier: B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 Certificate issuer: /CN=A91F87BB/serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Certificate serial: 044B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft Manifest number: 043E Signing time: Wed 05 Nov 2025 00:21:45 +0000 Manifest this update: Wed 05 Nov 2025 00:21:44 +0000 Manifest next update: Wed 12 Nov 2025 00:21:44 +0000 Files and hashes: 1: sxnfFFXYouFJjNxdSRVpgxxa_aE.crl (hash: 1/+ZBmE7PTEOvFLJ/szEcy+TkpUPSCioO4hhswVnuIw=) 2: 88B3F0026E9F11EEB03D9582C4F9AE02.roa (hash: OnZeTeaYB5z7AJuz8oi6jGvWEckKykDi+qBUmv+U0QM=) 3: DDCB6B02D9D311EEBB3BDF10C4F9AE02.roa (hash: NYRjezFURAIZr5dfzYcgObUcS0k2GZmBPMzd9N07gUQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1099 (0x44b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F87BB, serialNumber=B319DF1455D8A2E1498CDC5D491569831C5AFDA1 Validity Not Before: Nov 5 00:21:44 2025 GMT Not After : Nov 12 00:21:44 2025 GMT Subject: CN=690a9898-e281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5e:76:a5:cd:c6:a0:ed:68:ee:10:01:51:31: 03:f1:8e:12:b6:d6:75:00:98:06:4c:09:9c:a9:c0: 45:32:fc:e9:f8:54:1d:71:1d:3e:5c:39:66:94:31: 65:26:e2:40:0f:c5:f7:ab:b9:89:6e:f4:72:be:e4: 8e:46:c0:03:f3:c2:5b:9b:a9:d8:5d:cd:f1:a1:df: 8a:64:db:4b:b3:2e:d2:a5:2b:07:2f:42:51:6a:bd: 12:97:f0:68:6d:b9:48:c6:92:9d:8b:75:e5:22:74: ac:7e:b9:fe:8a:77:f2:b6:01:0f:88:af:ed:1a:96: de:00:ec:ff:fc:1b:db:dd:9a:bc:80:92:f7:7f:4b: d3:b9:fb:4a:ee:fd:c3:26:36:6c:39:df:eb:b6:a1: f7:bf:38:a6:7c:76:8d:b8:76:85:ef:35:c2:8c:f8: 64:c4:f1:ec:6a:84:aa:af:61:1e:65:41:2e:dc:00: 88:c4:a0:08:b5:0d:8d:00:b6:2d:e4:d2:a9:85:b3: 3c:4a:26:07:7b:de:54:60:87:d9:d0:8c:8e:ed:d0: 45:f3:91:f1:08:36:ff:e5:27:27:04:1b:c2:1d:0f: c5:ab:aa:92:4f:82:9b:47:70:30:2b:55:6f:d1:6a: 8d:3d:2f:b3:20:e4:3d:37:c4:db:76:83:c6:bd:e2: 2b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:34:8A:FC:3A:48:6B:3B:38:72:02:58:DE:A8:79:24:1D:B5:C0:BF X509v3 Authority Key Identifier: keyid:B3:19:DF:14:55:D8:A2:E1:49:8C:DC:5D:49:15:69:83:1C:5A:FD:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sxnfFFXYouFJjNxdSRVpgxxa_aE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F87BB/9DF0DFBE7DE911ECBEA08E0FC4F9AE02/sxnfFFXYouFJjNxdSRVpgxxa_aE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:fb:de:39:9f:97:6a:3d:24:2c:4a:5d:a1:d7:62:8d:dc:8a: 39:14:ae:fa:91:ac:e3:23:6d:65:09:64:84:f6:78:6c:fe:bd: eb:9e:c6:96:ce:01:b4:94:f8:25:a3:32:f9:91:71:6c:09:6b: 11:16:9f:68:ae:ee:df:05:76:2e:28:3c:6f:8f:41:06:00:81: a4:20:83:76:94:89:8c:97:e7:5a:70:d7:8a:ef:e5:30:80:fd: dd:0a:d0:93:a1:68:22:15:c2:61:0f:ac:82:14:e8:f7:30:2a: 17:ff:92:50:b1:96:e4:3e:8b:00:7c:b0:70:72:7e:b3:30:2f: d8:48:0c:68:7a:1c:85:d4:53:ec:55:f1:cb:c7:12:cd:0f:1e: 74:bb:9d:5d:f0:b9:cb:5d:39:da:d1:d4:64:09:a9:4d:dd:48: 2c:57:85:f0:54:66:98:ce:f9:3b:f5:f0:5d:87:23:9e:ae:3f: 38:0e:d5:2f:03:d4:e1:0e:3c:a5:5b:d9:3a:6c:c5:a5:03:1c: 38:4d:ec:b4:c4:1c:d8:bc:0d:93:95:07:92:79:23:8b:0e:f4: 14:ed:46:44:9f:d5:c8:19:8e:f5:be:fd:f6:cb:b8:e9:26:41: 28:62:07:36:32:f6:24:21:69:59:de:d3:cf:90:dd:5e:db:54: 50:be:e0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg3QkIxMTAvBgNVBAUTKEIzMTlERjE0NTVEOEEyRTE0OThDREM1RDQ5MTU2OTgz MUM1QUZEQTEwHhcNMjUxMTA1MDAyMTQ0WhcNMjUxMTEyMDAyMTQ0WjAYMRYwFAYD VQQDEw02OTBhOTg5OC1lMjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3l52pc3GoO1o7hABUTED8Y4SttZ1AJgGTAmcqcBFMvzp+FQdcR0+XDlmlDFl JuJAD8X3q7mJbvRyvuSORsAD88Jbm6nYXc3xod+KZNtLsy7SpSsHL0JRar0Sl/Bo bblIxpKdi3XlInSsfrn+infytgEPiK/tGpbeAOz//Bvb3Zq8gJL3f0vTuftK7v3D JjZsOd/rtqH3vzimfHaNuHaF7zXCjPhkxPHsaoSqr2EeZUEu3ACIxKAItQ2NALYt 5NKphbM8SiYHe95UYIfZ0IyO7dBF85HxCDb/5ScnBBvCHQ/Fq6qST4KbR3AwK1Vv 0WqNPS+zIOQ9N8TbdoPGveIrWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB80ivw6 SGs7OHICWN6oeSQdtcC/MB8GA1UdIwQYMBaAFLMZ3xRV2KLhSYzcXUkVaYMcWv2h MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODdCQi85REYwREZCRTdE RTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91RkpqTnhkU1JWcGd4eGFf YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N4bmZGRlhZb3VGSmpOeGRTUlZwZ3h4YV9hRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG ODdCQi85REYwREZCRTdERTkxMUVDQkVBMDhFMEZDNEY5QUUwMi9zeG5mRkZYWW91 RkpqTnhkU1JWcGd4eGFfYUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB+945n5dqPSQsSl2h12KN3Io5FK76kazjI21lCWSE9nhs/r3rnsaW zgG0lPglozL5kXFsCWsRFp9oru7fBXYuKDxvj0EGAIGkIIN2lImMl+dacNeK7+Uw gP3dCtCToWgiFcJhD6yCFOj3MCoX/5JQsZbkPosAfLBwcn6zMC/YSAxoehyF1FPs VfHLxxLNDx50u51d8LnLXTna0dRkCalN3UgsV4XwVGaYzvk79fBdhyOerj84DtUv A9ThDjylW9k6bMWlAxw4Tey0xBzYvA2TlQeSeSOLDvQU7UZEn9XIGY71vv32y7jp JkEoYgc2MvYkIWlZ3tPPkN1e21RQvuCo -----END CERTIFICATE-----Generated at Wed Nov 5 13:30:53 2025 by rpki-client