$ rpki-client -vvf rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft File: ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft (raw, json) Hash identifier: A2h/D9JHPAbbQ0G73UmJecFsspNHyYalMbXemBInMEg= Subject key identifier: 82:70:FD:78:16:1D:46:B0:3B:A7:1F:5B:22:09:11:4F:B9:18:1D:B6 Authority key identifier: 91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F Certificate issuer: /CN=A91128B5/serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Certificate serial: 062C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft Manifest number: 0627 Signing time: Sun 02 Nov 2025 22:45:14 +0000 Manifest this update: Sun 02 Nov 2025 22:45:14 +0000 Manifest next update: Sun 09 Nov 2025 22:45:14 +0000 Files and hashes: 1: ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl (hash: YeKKdYSmL6OHznC3JNS0Xi+TJBRy4aQttaCQDpxtAtM=) 2: 74BDB7D0B96C11EB956C1D2DC4F9AE02.roa (hash: IADvK+KgV5vnYxJ4wHU1Xtz8TSGee8Bm5ZckrfzrChM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1580 (0x62c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91128B5, serialNumber=91AEE960DC41FF98ED1B3723343173938126DC9F Validity Not Before: Nov 2 22:45:14 2025 GMT Not After : Nov 9 22:45:14 2025 GMT Subject: CN=6907defa-0bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:dc:a8:53:08:31:4e:62:f1:8a:ec:e4:b7: f3:5f:2e:73:f6:48:c8:1f:49:8d:58:11:09:8f:97: b7:23:67:94:12:0c:25:a0:bd:5c:b0:32:b6:d7:d6: 49:f4:e9:a4:e7:f3:56:41:e8:40:e2:a9:07:b1:4f: 1f:95:bc:fb:49:37:d3:5c:e3:6e:38:89:cd:9b:f4: 4c:ff:f5:f3:0f:0f:92:58:69:9f:87:bd:df:df:7a: f0:6a:48:7a:31:20:96:45:95:b4:bc:4c:bc:93:69: f5:f3:2c:c7:d7:c1:c2:a2:5d:07:8e:8e:56:34:2e: 38:7d:d7:27:d3:69:e2:b0:51:65:45:23:2b:8e:84: 1a:63:9a:71:7c:f6:70:67:81:4c:85:93:14:ff:f3: dc:05:ce:6d:0e:56:e2:9c:65:e4:01:22:48:d1:3b: 07:d2:46:46:ed:b2:6a:e2:d2:a1:2d:2b:24:b7:8c: 4d:1b:6c:fc:27:ee:97:c1:5a:d5:86:2f:f4:a1:b3: 77:42:cc:77:98:3c:0e:5b:d7:49:4f:d6:81:e1:1f: 9b:69:cb:57:63:67:6a:d4:ed:db:18:c6:e9:34:68: 82:4d:cd:57:73:31:9b:5b:a3:03:32:1b:18:d8:7d: 8d:4a:e3:08:a9:0a:2c:de:d8:d8:81:61:0e:fd:58: 63:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:70:FD:78:16:1D:46:B0:3B:A7:1F:5B:22:09:11:4F:B9:18:1D:B6 X509v3 Authority Key Identifier: keyid:91:AE:E9:60:DC:41:FF:98:ED:1B:37:23:34:31:73:93:81:26:DC:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ka7pYNxB_5jtGzcjNDFzk4Em3J8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91128B5/3EBCD1DAB96B11EBB16EEF2CC4F9AE02/ka7pYNxB_5jtGzcjNDFzk4Em3J8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:d4:d6:98:a0:7b:b0:dc:0a:b3:e3:60:74:68:62:d5:82:2e: 9a:0d:eb:e5:59:7f:d1:fb:92:cc:cb:b1:da:16:84:c2:63:6b: 5e:e9:87:1c:de:23:5a:b3:4d:7e:64:12:6e:9a:6c:f9:ad:7f: 6f:9f:01:0d:3d:f3:89:5e:c2:f7:58:3d:00:39:36:24:ab:03: 07:e7:f4:61:79:6e:bf:73:f5:29:46:7d:ae:c4:35:83:1d:99: 0b:7f:d1:e8:ff:f7:5b:8c:eb:5d:6d:5f:d8:ef:4b:29:cc:f5: cf:e6:fe:f9:4a:b3:08:9a:62:04:64:75:44:c0:d8:fe:10:6a: 56:0f:cb:36:40:cf:c9:ec:3f:08:05:4e:be:26:68:76:34:eb: 25:71:c9:48:79:4d:70:c5:fe:99:5f:0f:8a:0c:ac:d2:d4:35: 21:db:b7:b1:da:84:1b:23:68:96:e4:b7:a4:5c:08:c2:3f:e0: d5:8e:d6:1e:9a:db:c5:10:68:a7:19:95:5d:2b:3b:e4:a0:c6: e2:3d:09:c7:9e:f6:6a:2e:6e:4b:00:78:e1:c5:0a:8b:90:2d: 71:bf:25:70:86:8c:79:4e:2e:09:19:26:84:39:12:60:cc:57: 89:01:7a:59:12:08:95:33:eb:3c:00:08:af:b1:7e:27:19:80: e7:ab:2c:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBiwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTI4QjUxMTAvBgNVBAUTKDkxQUVFOTYwREM0MUZGOThFRDFCMzcyMzM0MzE3Mzkz ODEyNkRDOUYwHhcNMjUxMTAyMjI0NTE0WhcNMjUxMTA5MjI0NTE0WjAYMRYwFAYD VQQDEw02OTA3ZGVmYS0wYmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrDcqFMIMU5i8Yrs5LfzXy5z9kjIH0mNWBEJj5e3I2eUEgwloL1csDK219ZJ 9Omk5/NWQehA4qkHsU8flbz7STfTXONuOInNm/RM//XzDw+SWGmfh73f33rwakh6 MSCWRZW0vEy8k2n18yzH18HCol0Hjo5WNC44fdcn02nisFFlRSMrjoQaY5pxfPZw Z4FMhZMU//PcBc5tDlbinGXkASJI0TsH0kZG7bJq4tKhLSskt4xNG2z8J+6XwVrV hi/0obN3Qsx3mDwOW9dJT9aB4R+bactXY2dq1O3bGMbpNGiCTc1XczGbW6MDMhsY 2H2NSuMIqQos3tjYgWEO/VhjSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJw/XgW HUawO6cfWyIJEU+5GB22MB8GA1UdIwQYMBaAFJGu6WDcQf+Y7Rs3IzQxc5OBJtyf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjhCNS8zRUJDRDFEQUI5 NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81anRHemNqTkRGems0RW0z SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2thN3BZTnhCXzVqdEd6Y2pOREZ6azRFbTNKOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjhCNS8zRUJDRDFEQUI5NkIxMUVCQjE2RUVGMkNDNEY5QUUwMi9rYTdwWU54Ql81 anRHemNqTkRGems0RW0zSjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAT1NaYoHuw3Aqz42B0aGLVgi6aDevlWX/R+5LMy7HaFoTCY2te6Ycc 3iNas01+ZBJummz5rX9vnwENPfOJXsL3WD0AOTYkqwMH5/RheW6/c/UpRn2uxDWD HZkLf9Ho//dbjOtdbV/Y70spzPXP5v75SrMImmIEZHVEwNj+EGpWD8s2QM/J7D8I BU6+Jmh2NOslcclIeU1wxf6ZXw+KDKzS1DUh27ex2oQbI2iW5LekXAjCP+DVjtYe mtvFEGinGZVdKzvkoMbiPQnHnvZqLm5LAHjhxQqLkC1xvyVwhox5Ti4JGSaEORJg zFeJAXpZEgiVM+s8AAivsX4nGYDnqyw1 -----END CERTIFICATE-----Generated at Tue Nov 4 11:55:46 2025 by rpki-client