$ rpki-client -vvf rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft File: SBcgosjubOySR3dhkymcEP63ykQ.mft (raw, json) Hash identifier: 7V1fXCwj2heVzueyIXTqrhrDgj38lgN8o8JDRW5yvqc= Subject key identifier: DE:D2:69:7A:86:72:3D:50:DA:3C:D1:46:DB:BC:13:9D:4F:23:20:AC Authority key identifier: 48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 Certificate issuer: /CN=A91FD2E3/serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Certificate serial: 0181 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft Manifest number: 017D Signing time: Mon 03 Nov 2025 03:43:51 +0000 Manifest this update: Mon 03 Nov 2025 03:43:50 +0000 Manifest next update: Mon 10 Nov 2025 03:43:50 +0000 Files and hashes: 1: SBcgosjubOySR3dhkymcEP63ykQ.crl (hash: fYMMxZAo94Dl83zzaQICJIjCtFXE/9zQUp/3i6wRrhE=) 2: A38F041873C011EEB1A68245C4F9AE02.roa (hash: 3QT9VgasquPbgXpBTFff0Gu2hJL8xTVrH9a//E9hWWo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 385 (0x181) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FD2E3, serialNumber=481720A2C8EE6CEC9247776193299C10FEB7CA44 Validity Not Before: Nov 3 03:43:50 2025 GMT Not After : Nov 10 03:43:50 2025 GMT Subject: CN=690824f7-9a88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:ea:18:58:a1:00:11:83:70:d2:b9:55:3d:1d: 64:d2:5c:61:23:af:63:01:07:a2:17:91:ed:ce:8c: 95:aa:c5:61:aa:33:01:75:14:a0:c9:4b:14:16:25: db:3b:b6:2e:63:be:f8:2c:8e:ff:28:cc:3b:1d:36: 48:18:73:ec:8f:a0:b2:68:57:46:92:ea:31:c5:7d: 4a:87:e2:d9:82:6d:1d:b5:a1:42:3a:f7:2e:24:79: f2:58:9b:51:70:ec:40:c3:aa:f1:93:7c:08:98:ff: 38:4a:e1:45:b5:fa:18:79:8f:7d:56:3a:d3:d9:08: e0:e4:f6:87:2c:50:25:b6:ef:b2:89:5b:0b:01:88: 0f:e0:83:86:83:fc:d5:ac:09:c4:6a:9b:00:14:4d: d3:64:a7:a2:49:c5:ac:86:c1:11:e3:b1:ad:8b:97: ea:5d:da:d0:98:38:05:92:c4:9f:99:63:e2:23:0b: f5:89:ad:41:35:5d:fc:3b:33:65:de:2d:60:34:01: 40:4b:0c:00:af:77:9e:de:9b:f0:27:c4:ea:f0:2f: bf:71:fc:04:6f:89:29:cd:73:c9:4d:9d:e3:be:7b: df:68:86:4a:67:dc:cb:6f:af:cd:03:16:9b:98:04: 19:0d:52:76:a4:ab:d7:3c:1e:7d:e7:44:40:8a:73: fa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D2:69:7A:86:72:3D:50:DA:3C:D1:46:DB:BC:13:9D:4F:23:20:AC X509v3 Authority Key Identifier: keyid:48:17:20:A2:C8:EE:6C:EC:92:47:77:61:93:29:9C:10:FE:B7:CA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SBcgosjubOySR3dhkymcEP63ykQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FD2E3/4F4179A473C011EEB827F444C4F9AE02/SBcgosjubOySR3dhkymcEP63ykQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:94:2c:9c:4f:6a:99:91:8c:d8:ad:48:f6:fa:30:72:26:80: dc:b2:90:27:50:10:d2:bd:a1:48:c9:60:b1:ca:f0:ff:75:96: 0e:27:a2:8b:07:be:0f:dc:da:9a:58:5c:d0:f3:d6:39:2d:6d: 01:85:25:d6:07:11:ea:1b:e0:ec:a1:7e:3a:c7:93:b9:58:ba: 60:37:f9:32:a4:ec:81:1a:93:a0:f5:d9:f9:5c:0b:b9:2b:e9: 3c:6f:a3:73:6f:1d:a0:5a:74:3c:c6:86:48:d6:60:43:3f:08: 85:e4:d6:fb:5a:39:e7:37:c4:ac:f3:78:9e:95:bb:58:0b:0c: b0:0c:b4:42:6d:af:be:1d:56:1e:6a:ae:3c:00:29:52:dc:d7: e5:62:4f:85:f1:ac:f1:5c:aa:5c:97:8c:8c:06:b8:69:d8:52: ca:cb:18:0e:62:e4:47:b5:79:07:37:e7:a2:9a:8c:93:81:0a: d0:4c:46:7c:f9:c7:2c:73:cb:d1:f7:74:5e:b6:8d:37:55:f5: fa:b0:0e:28:1d:eb:c9:b2:d7:9d:b9:67:ca:ba:5d:7f:1d:40: e2:00:d4:76:ca:f6:08:11:d6:b6:55:63:e8:b6:45:95:d9:31: e9:3a:44:7d:a3:18:49:64:82:da:0e:77:2a:16:23:5e:84:53: 8d:f2:6f:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkQyRTMxMTAvBgNVBAUTKDQ4MTcyMEEyQzhFRTZDRUM5MjQ3Nzc2MTkzMjk5QzEw RkVCN0NBNDQwHhcNMjUxMTAzMDM0MzUwWhcNMjUxMTEwMDM0MzUwWjAYMRYwFAYD VQQDEw02OTA4MjRmNy05YTg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9uoYWKEAEYNw0rlVPR1k0lxhI69jAQeiF5HtzoyVqsVhqjMBdRSgyUsUFiXb O7YuY774LI7/KMw7HTZIGHPsj6CyaFdGkuoxxX1Kh+LZgm0dtaFCOvcuJHnyWJtR cOxAw6rxk3wImP84SuFFtfoYeY99VjrT2Qjg5PaHLFAltu+yiVsLAYgP4IOGg/zV rAnEapsAFE3TZKeiScWshsER47Gti5fqXdrQmDgFksSfmWPiIwv1ia1BNV38OzNl 3i1gNAFASwwAr3ee3pvwJ8Tq8C+/cfwEb4kpzXPJTZ3jvnvfaIZKZ9zLb6/NAxab mAQZDVJ2pKvXPB5950RAinP6AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7SaXqG cj1Q2jzRRtu8E51PIyCsMB8GA1UdIwQYMBaAFEgXIKLI7mzskkd3YZMpnBD+t8pE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRDJFMy80RjQxNzlBNDcz QzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJPeVNSM2Roa3ltY0VQNjN5 a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1NCY2dvc2p1Yk95U1IzZGhreW1jRVA2M3lrUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RDJFMy80RjQxNzlBNDczQzAxMUVFQjgyN0Y0NDRDNEY5QUUwMi9TQmNnb3NqdWJP eVNSM2Roa3ltY0VQNjN5a1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+lCycT2qZkYzYrUj2+jByJoDcspAnUBDSvaFIyWCxyvD/dZYOJ6KL B74P3NqaWFzQ89Y5LW0BhSXWBxHqG+DsoX46x5O5WLpgN/kypOyBGpOg9dn5XAu5 K+k8b6Nzbx2gWnQ8xoZI1mBDPwiF5Nb7WjnnN8Ss83ielbtYCwywDLRCba++HVYe aq48AClS3NflYk+F8azxXKpcl4yMBrhp2FLKyxgOYuRHtXkHN+eimoyTgQrQTEZ8 +ccsc8vR93Reto03VfX6sA4oHevJsteduWfKul1/HUDiANR2yvYIEda2VWPotkWV 2THpOkR9oxhJZILaDncqFiNehFON8m9E -----END CERTIFICATE-----Generated at Tue Nov 4 21:37:08 2025 by rpki-client