$ rpki-client -vvf rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft File: l42uLBCnLtBPlBKP_F6Mt9EC6so.mft (raw, json) Hash identifier: tZtsWi6UaJubRYXslMYLh0kF/lBTxACt/Mf5CxpJ8WI= Subject key identifier: 96:CB:1F:78:64:D0:12:04:19:3D:B4:41:7F:6F:96:69:DC:EB:3C:53 Authority key identifier: 97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA Certificate issuer: /CN=A91555EA/serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft Manifest number: 0B85 Signing time: Tue 04 Nov 2025 19:08:45 +0000 Manifest this update: Tue 04 Nov 2025 19:08:45 +0000 Manifest next update: Tue 11 Nov 2025 19:08:45 +0000 Files and hashes: 1: l42uLBCnLtBPlBKP_F6Mt9EC6so.crl (hash: O75CR48ucqZg2XxR2ljVprVTQssFmtyxcbO5kvl9Wjg=) 2: 436398BA3B7011EAA14F566EC4F9AE02.roa (hash: orMTuhNCmn5/4lVWP0hvNJHm2iToMZFaKY4Tk1oMp1M=) 3: 0D3A7A803B7311EA80E1F877C4F9AE02.roa (hash: DQ4zjVC/izJ/mpi1KCeEh40z0Ktl3VHP629G9xZ43Is=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91555EA, serialNumber=978DAE2C10A72ED04F94128FFC5E8CB7D102EACA Validity Not Before: Nov 4 19:08:45 2025 GMT Not After : Nov 11 19:08:45 2025 GMT Subject: CN=690a4f3d-1753 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:77:8c:e4:ce:61:09:17:91:bd:47:46:79:10: df:71:8d:16:18:0e:99:b7:75:91:43:8f:8f:cd:40: 1f:d2:b9:f2:2d:3c:00:ce:d0:59:7e:27:49:ca:35: e8:c9:95:e3:f8:88:b1:dd:b4:4d:6b:5a:05:e8:ef: e7:76:95:5c:a5:15:04:e7:79:0c:b7:7e:c4:5a:e0: ab:e9:b6:a7:6e:45:be:8e:0f:9b:24:df:00:fc:e3: 52:98:d3:bf:db:71:c7:73:d6:22:15:9c:5d:f6:15: ee:43:bf:1d:c5:54:87:ed:5d:ae:b5:ed:b2:a0:cb: 06:3f:61:8a:ae:b0:47:e2:a2:b4:5c:ca:01:c9:02: ad:ab:ef:d1:e9:8b:a6:79:70:de:7b:23:5d:47:a8: 0e:73:c4:b6:99:c9:db:a1:77:25:af:d3:23:44:ae: 0b:61:bb:e1:e3:b1:3c:70:e8:46:bc:cf:07:8f:22: 62:be:87:35:0d:db:35:5a:df:8a:d9:ee:c1:37:ed: 4b:9a:22:ee:28:25:bc:71:55:98:89:bc:a0:e6:5d: 02:3b:3c:69:ab:7e:54:4c:6e:ef:1d:86:76:cc:62: d5:2e:d1:5a:55:d4:3f:5c:c1:ec:e3:b8:90:c1:a8: 08:ea:85:ca:87:e0:27:84:bd:af:19:17:5c:a7:ca: cf:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:CB:1F:78:64:D0:12:04:19:3D:B4:41:7F:6F:96:69:DC:EB:3C:53 X509v3 Authority Key Identifier: keyid:97:8D:AE:2C:10:A7:2E:D0:4F:94:12:8F:FC:5E:8C:B7:D1:02:EA:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l42uLBCnLtBPlBKP_F6Mt9EC6so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91555EA/7C60B9F63B6E11EAAE5F166BC4F9AE02/l42uLBCnLtBPlBKP_F6Mt9EC6so.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:6f:f4:4e:36:75:39:9a:c3:ea:0f:f1:83:ea:69:2c:3f:16: 0b:0c:f7:92:d0:67:45:08:90:68:a1:54:71:bd:c9:73:22:cd: 0e:2d:28:41:76:05:de:29:91:7d:e6:26:f2:2a:47:17:5a:d3: 72:7c:da:c8:8f:dc:85:bd:9b:77:bc:33:ca:96:cf:c8:bf:f7: 49:d9:b3:a4:17:83:fb:61:4f:e3:a8:13:15:a8:15:19:81:8a: 2d:21:ee:3f:d8:c7:9b:aa:69:34:6f:84:da:69:df:76:5a:14: 5d:82:df:01:c3:50:67:a8:4d:0e:5c:7f:a1:93:b3:51:73:b8: c6:5a:d1:26:bb:c9:36:94:ff:77:af:a3:3f:72:f7:87:f7:21: 9f:2e:38:9f:b8:34:bf:77:9c:ad:3a:a6:eb:05:24:88:7a:82: 01:a3:15:55:d7:84:0b:5e:e2:c7:0a:5d:fc:5c:5f:09:47:e2: 0c:f9:7d:a6:44:0e:a5:bc:4d:56:91:e7:fd:5e:ac:7b:c3:85: 59:57:c0:53:24:cc:87:83:b9:25:ae:68:a2:eb:7a:a5:56:3e: 3d:3f:7e:1f:e6:95:97:a8:7a:ec:a1:e7:b4:0b:d1:6f:e4:b7: 17:00:72:f4:72:11:54:b4:e0:29:77:a3:2a:41:ff:68:fb:f8: 13:c9:ad:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU1RUExMTAvBgNVBAUTKDk3OERBRTJDMTBBNzJFRDA0Rjk0MTI4RkZDNUU4Q0I3 RDEwMkVBQ0EwHhcNMjUxMTA0MTkwODQ1WhcNMjUxMTExMTkwODQ1WjAYMRYwFAYD VQQDEw02OTBhNGYzZC0xNzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxHeM5M5hCReRvUdGeRDfcY0WGA6Zt3WRQ4+PzUAf0rnyLTwAztBZfidJyjXo yZXj+Iix3bRNa1oF6O/ndpVcpRUE53kMt37EWuCr6banbkW+jg+bJN8A/ONSmNO/ 23HHc9YiFZxd9hXuQ78dxVSH7V2ute2yoMsGP2GKrrBH4qK0XMoByQKtq+/R6Yum eXDeeyNdR6gOc8S2mcnboXclr9MjRK4LYbvh47E8cOhGvM8HjyJivoc1Dds1Wt+K 2e7BN+1LmiLuKCW8cVWYibyg5l0COzxpq35UTG7vHYZ2zGLVLtFaVdQ/XMHs47iQ wagI6oXKh+AnhL2vGRdcp8rPEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJbLH3hk 0BIEGT20QX9vlmnc6zxTMB8GA1UdIwQYMBaAFJeNriwQpy7QT5QSj/xejLfRAurK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTVFQS83QzYwQjlGNjNC NkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0QlBsQktQX0Y2TXQ5RUM2 c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w0MnVMQkNuTHRCUGxCS1BfRjZNdDlFQzZzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTVFQS83QzYwQjlGNjNCNkUxMUVBQUU1RjE2NkJDNEY5QUUwMi9sNDJ1TEJDbkx0 QlBsQktQX0Y2TXQ5RUM2c28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAQb/RONnU5msPqD/GD6mksPxYLDPeS0GdFCJBooVRxvclzIs0OLShB dgXeKZF95ibyKkcXWtNyfNrIj9yFvZt3vDPKls/Iv/dJ2bOkF4P7YU/jqBMVqBUZ gYotIe4/2Mebqmk0b4Taad92WhRdgt8Bw1BnqE0OXH+hk7NRc7jGWtEmu8k2lP93 r6M/cveH9yGfLjifuDS/d5ytOqbrBSSIeoIBoxVV14QLXuLHCl38XF8JR+IM+X2m RA6lvE1Wkef9Xqx7w4VZV8BTJMyHg7klrmii63qlVj49P34f5pWXqHrsoee0C9Fv 5LcXAHL0chFUtOApd6MqQf9o+/gTya1E -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:40 2025 by rpki-client