$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft File: L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json) Hash identifier: zCC99kzsq75BVaq9x+FsKBcmH77kX1winfWAasThf/E= Subject key identifier: 99:1E:F7:44:B2:AB:6C:55:86:FB:F9:C1:7B:DF:86:5C:4A:66:17:47 Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 Certificate issuer: /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Certificate serial: 07FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft Manifest number: 07F4 Signing time: Sun 02 Nov 2025 21:01:15 +0000 Manifest this update: Sun 02 Nov 2025 21:01:14 +0000 Manifest next update: Sun 09 Nov 2025 21:01:14 +0000 Files and hashes: 1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: B5Nj4Cc92fBWL1VgcTQhVVA/P2x7P+uO1JLfRgJh9jY=) 2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: Rn+i/x8H2eWzt9fmwTwYfrRk8EJ3dubKBMEnFNfmhUE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2043 (0x7fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5 Validity Not Before: Nov 2 21:01:14 2025 GMT Not After : Nov 9 21:01:14 2025 GMT Subject: CN=6907c69b-c8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:c5:61:ce:5c:65:4b:44:66:69:a1:90:58: fc:4b:72:74:63:9b:15:c0:c7:c2:8e:62:a1:20:39: c4:20:d0:85:a8:23:00:6a:82:8b:44:84:6f:6c:f5: 9b:1f:24:10:11:f5:ca:e5:65:89:5a:c4:88:50:26: 62:16:63:6d:e1:6e:89:1b:1c:89:5f:5e:06:34:2c: 13:dc:75:c3:06:2c:4c:68:ce:19:18:3b:9e:a1:da: 18:c8:f8:46:01:32:3b:94:80:30:ab:d7:c6:0d:f8: b2:7b:aa:68:24:da:a4:c8:ec:6a:55:6c:30:1a:78: 81:75:5a:f5:db:4e:2c:c5:81:c0:fb:de:09:be:ae: 12:fb:26:e0:9a:9f:e3:20:3a:ed:91:1e:f9:5f:3d: 0b:16:0b:63:a4:4e:68:a4:5d:1e:12:f6:24:90:8c: ee:39:ee:69:ac:d9:9b:13:84:82:38:3b:d5:8f:f0: c6:ce:f5:8d:46:ca:1c:8c:b9:db:e6:04:6b:c1:b1: 09:c1:9d:95:86:a4:3e:63:a0:b8:1a:28:ac:4e:06: 6a:09:1b:6a:7b:75:84:f6:47:3a:10:cd:e5:b8:81: 28:30:f6:21:e6:06:42:18:15:38:05:13:c6:4d:a9: 2e:61:a3:dc:5a:8e:f4:52:f3:57:cc:91:9c:69:75: 0e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1E:F7:44:B2:AB:6C:55:86:FB:F9:C1:7B:DF:86:5C:4A:66:17:47 X509v3 Authority Key Identifier: keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 79:00:7d:da:25:5d:6f:83:6c:2c:e0:db:2a:a0:21:01:fb:c2: 6f:84:26:22:db:e3:37:f0:51:3d:57:2e:75:ad:6a:f1:bc:0e: e5:b2:12:13:2b:3e:2b:76:65:7f:98:1d:e3:88:39:52:cc:e8: c4:15:04:56:64:a0:90:6c:05:47:10:c2:49:64:d4:dc:f7:83: 61:f1:8b:ff:9b:b9:49:c6:78:b6:e8:30:30:af:b3:61:9a:5a: ad:5c:fc:06:5d:3f:cf:fa:7d:a3:56:a9:2f:1c:f5:92:b9:f3: 56:78:3d:61:49:0f:b9:7b:d6:47:36:b2:0a:40:35:fc:07:06: d4:e8:e6:f7:ab:9e:9e:b7:24:24:41:21:41:e5:45:c0:46:b4: 46:fb:83:9f:7d:f6:fb:b4:51:a4:fa:aa:e6:d7:a3:04:e0:65: 51:e7:2b:d9:8c:31:0f:79:7a:9c:b5:1d:c1:c8:bb:da:42:e3: f2:d5:75:c1:58:78:b7:f6:b4:43:42:ae:19:1c:d6:07:7e:64: 60:05:15:a4:a1:17:83:08:a8:c8:ef:de:81:18:21:d5:76:bd: 7c:e1:c3:13:e8:b6:08:bf:2d:36:24:d7:33:4d:42:66:f7:bb: fb:b0:3b:83:43:90:bf:fc:db:48:43:f9:fe:90:78:00:70:a2: 05:59:c8:f6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB/swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjczRDYxMTAvBgNVBAUTKDJGREY3QTZBRjkwNERGMkNENDdFNjVDQ0MwQzlDNUND QkYyMzk4RTUwHhcNMjUxMTAyMjEwMTE0WhcNMjUxMTA5MjEwMTE0WjAYMRYwFAYD VQQDEw02OTA3YzY5Yi1jOGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2zFYc5cZUtEZmmhkFj8S3J0Y5sVwMfCjmKhIDnEINCFqCMAaoKLRIRvbPWb HyQQEfXK5WWJWsSIUCZiFmNt4W6JGxyJX14GNCwT3HXDBixMaM4ZGDueodoYyPhG ATI7lIAwq9fGDfiye6poJNqkyOxqVWwwGniBdVr1204sxYHA+94Jvq4S+ybgmp/j IDrtkR75Xz0LFgtjpE5opF0eEvYkkIzuOe5prNmbE4SCODvVj/DGzvWNRsocjLnb 5gRrwbEJwZ2VhqQ+Y6C4GiisTgZqCRtqe3WE9kc6EM3luIEoMPYh5gZCGBU4BRPG TakuYaPcWo70UvNXzJGcaXUOOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJke90Sy q2xVhvv5wXvfhlxKZhdHMB8GA1UdIwQYMBaAFC/femr5BN8s1H5lzMDJxcy/I5jl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzNENi8xMzlFMTI0NDA1 MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5elVmbVhNd01uRnpMOGpt T1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0w5OTZhdmtFM3l6VWZtWE13TW5Gekw4am1PVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy NzNENi8xMzlFMTI0NDA1MTAxMUVCODBFMzE3NUJDNEY5QUUwMi9MOTk2YXZrRTN5 elVmbVhNd01uRnpMOGptT1UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB5AH3aJV1vg2ws4NsqoCEB+8JvhCYi2+M38FE9Vy51rWrxvA7lshIT Kz4rdmV/mB3jiDlSzOjEFQRWZKCQbAVHEMJJZNTc94Nh8Yv/m7lJxni26DAwr7Nh mlqtXPwGXT/P+n2jVqkvHPWSufNWeD1hSQ+5e9ZHNrIKQDX8BwbU6Ob3q56etyQk QSFB5UXARrRG+4Offfb7tFGk+qrm16ME4GVR5yvZjDEPeXqctR3ByLvaQuPy1XXB WHi39rRDQq4ZHNYHfmRgBRWkoReDCKjI796BGCHVdr184cMT6LYIvy02JNczTUJm 97v7sDuDQ5C//NtIQ/n+kHgAcKIFWcj2 -----END CERTIFICATE-----Generated at Mon Nov 3 18:14:32 2025 by rpki-client