$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft File: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft (raw, json) Hash identifier: n0OS62HKn7ZLugSRnD5O0OanLb3cvLoWK6UJBUTEs1Y= Subject key identifier: 9A:3D:B9:7E:EF:EE:D9:A6:59:8E:EC:3D:A6:08:31:3F:02:7A:6C:89 Authority key identifier: 69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 Certificate issuer: /CN=A91FCF44/serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft Manifest number: F5 Signing time: Wed 05 Nov 2025 05:38:27 +0000 Manifest this update: Wed 05 Nov 2025 05:38:27 +0000 Manifest next update: Wed 12 Nov 2025 05:38:27 +0000 Files and hashes: 1: aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl (hash: Rp1qNW/FaJXC1FqXWs0WSthxMJmj5rngQK29QClqCMk=) 2: B2A0074EAD4F11EF93ECF282C4F9AE02.roa (hash: Vji2bwj5pG0AmszlyVBCPumUcxu21MvYnK8Tx2Nah1A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:38:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF44, serialNumber=6998D9B5327BBF894ED56197C47EC896FAE59E34 Validity Not Before: Nov 5 05:38:27 2025 GMT Not After : Nov 12 05:38:27 2025 GMT Subject: CN=690ae2d3-d837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ce:82:51:24:89:70:9e:a0:1e:51:4f:98:53: af:ba:19:fb:6a:b6:29:f1:af:97:6a:e4:c6:de:95: 45:7d:d4:3f:e8:8c:64:e5:37:61:08:8f:88:0a:aa: d2:ca:d5:54:ac:93:6e:43:aa:bc:89:94:0a:c8:8f: 8e:79:d3:51:b8:1d:ad:59:b2:7f:ae:f7:b7:70:9d: cc:d6:f7:9b:3e:6a:f8:17:d7:aa:a7:1d:8d:b1:a5: b5:7c:96:8d:6f:ab:81:e3:d8:5e:c7:be:cf:f4:b2: 14:99:fb:5b:ac:e5:61:57:cb:c4:32:c6:9c:e9:ad: 26:e7:3a:3f:26:bc:30:8f:a6:5a:66:13:43:6f:98: 4f:d0:1d:64:6a:18:19:c4:5b:78:dc:84:86:fd:74: 87:e0:27:6d:8f:5d:e8:d7:f8:9f:c2:8f:fd:d2:ac: cf:e6:d3:a2:bb:84:9c:f5:1e:9d:c0:83:d7:e8:98: 5b:3f:b4:de:ab:33:8a:8b:3c:89:ea:75:1f:15:db: ad:eb:2b:4c:f4:7c:77:58:ee:e9:d8:6c:a0:56:31: 4b:af:f5:41:fb:15:1a:38:f9:30:37:64:17:3e:f3: f8:18:a6:91:b4:42:c5:0b:a7:44:fc:f7:42:d5:72: e9:16:ed:d1:f0:5f:7f:3e:6a:f7:b4:b9:28:10:50: 2d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:B9:7E:EF:EE:D9:A6:59:8E:EC:3D:A6:08:31:3F:02:7A:6C:89 X509v3 Authority Key Identifier: keyid:69:98:D9:B5:32:7B:BF:89:4E:D5:61:97:C4:7E:C8:96:FA:E5:9E:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF44/94110604602C11EF97D73C5FC4F9AE02/aZjZtTJ7v4lO1WGXxH7IlvrlnjQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:8d:5d:82:59:7e:74:24:ff:9a:be:14:f3:a6:f0:dc:ec:a0: 7d:f9:a3:56:51:3e:dd:87:c1:36:d8:bd:eb:c4:c1:74:c7:22: c6:7e:53:ab:c0:ed:a9:95:91:0b:3e:f0:1d:95:b1:92:c7:80: 8f:7a:c8:68:7a:c4:81:1a:73:85:97:f1:34:f9:6b:11:39:e9: b3:55:70:44:3d:a0:b0:07:71:df:c8:94:8b:d0:f0:5f:f8:88: 95:52:db:cb:99:20:de:b7:64:11:b1:2d:a7:73:ed:93:f0:d4: 7a:c0:f3:16:7b:d4:89:c9:71:01:6b:68:11:5e:54:11:8e:89: ff:36:36:bb:4f:ee:f4:80:a7:7d:07:72:e7:64:76:ec:81:23: 7e:33:3e:3b:25:98:7c:93:db:fb:1a:69:5a:7c:2a:9d:63:12: 20:49:5f:75:39:ce:d8:6d:92:6f:4f:34:da:34:61:ff:d0:08: 59:3a:36:79:bb:8e:9a:dc:b7:5c:23:69:67:68:87:4d:23:db: 1b:7f:55:13:5d:dc:a4:09:dc:91:b6:ec:57:32:25:fd:a0:9c: fd:02:f4:2c:a3:a0:e0:37:8e:9a:8c:9a:53:18:7f:4d:79:8e: 11:6d:51:ce:d9:39:f3:51:39:f8:c0:09:6a:12:9b:ae:1d:58: af:83:7d:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGNDQxMTAvBgNVBAUTKDY5OThEOUI1MzI3QkJGODk0RUQ1NjE5N0M0N0VDODk2 RkFFNTlFMzQwHhcNMjUxMTA1MDUzODI3WhcNMjUxMTEyMDUzODI3WjAYMRYwFAYD VQQDEw02OTBhZTJkMy1kODM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0c6CUSSJcJ6gHlFPmFOvuhn7arYp8a+XauTG3pVFfdQ/6Ixk5TdhCI+ICqrS ytVUrJNuQ6q8iZQKyI+OedNRuB2tWbJ/rve3cJ3M1vebPmr4F9eqpx2NsaW1fJaN b6uB49hex77P9LIUmftbrOVhV8vEMsac6a0m5zo/Jrwwj6ZaZhNDb5hP0B1kahgZ xFt43ISG/XSH4Cdtj13o1/ifwo/90qzP5tOiu4Sc9R6dwIPX6JhbP7TeqzOKizyJ 6nUfFdut6ytM9Hx3WO7p2GygVjFLr/VB+xUaOPkwN2QXPvP4GKaRtELFC6dE/PdC 1XLpFu3R8F9/Pmr3tLkoEFAtmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJo9uX7v 7tmmWY7sPaYIMT8CemyJMB8GA1UdIwQYMBaAFGmY2bUye7+JTtVhl8R+yJb65Z40 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y0NC85NDExMDYwNDYw MkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0bE8xV0dYeEg3SWx2cmxu alEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Faalp0VEo3djRsTzFXR1h4SDdJbHZybG5qUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y0NC85NDExMDYwNDYwMkMxMUVGOTdENzNDNUZDNEY5QUUwMi9hWmpadFRKN3Y0 bE8xV0dYeEg3SWx2cmxualEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBjV2CWX50JP+avhTzpvDc7KB9+aNWUT7dh8E22L3rxMF0xyLGflOr wO2plZELPvAdlbGSx4CPeshoesSBGnOFl/E0+WsROemzVXBEPaCwB3HfyJSL0PBf +IiVUtvLmSDet2QRsS2nc+2T8NR6wPMWe9SJyXEBa2gRXlQRjon/Nja7T+70gKd9 B3LnZHbsgSN+Mz47JZh8k9v7GmlafCqdYxIgSV91Oc7YbZJvTzTaNGH/0AhZOjZ5 u46a3LdcI2lnaIdNI9sbf1UTXdykCdyRtuxXMiX9oJz9AvQso6DgN46ajJpTGH9N eY4RbVHO2TnzUTn4wAlqEpuuHVivg30Y -----END CERTIFICATE-----Generated at Wed Nov 5 18:00:06 2025 by rpki-client