$ rpki-client -vvf rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft File: -7rBZWoMY3CLzNYNyCXmwxkacZs.mft (raw, json) Hash identifier: u8tWrcRJmvdmJkbp8g0Wx4HF1h5HUMwPC4VzBrGNItc= Subject key identifier: 62:49:EE:E9:2E:3E:CD:98:93:D0:36:84:C8:72:0B:EC:D7:32:47:8C Authority key identifier: FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B Certificate issuer: /CN=A91657DD/serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Certificate serial: 0FB4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft Manifest number: 0FA2 Signing time: Fri 31 Oct 2025 17:42:46 +0000 Manifest this update: Fri 31 Oct 2025 17:42:45 +0000 Manifest next update: Fri 07 Nov 2025 17:42:45 +0000 Files and hashes: 1: -7rBZWoMY3CLzNYNyCXmwxkacZs.crl (hash: HpwOYCOApYflSDMasOzAGHZNeezJBR//o5VqlhXI3bQ=) 2: 6AE44D5C3E4511F090A5C643C4F9AE02.roa (hash: EAEo2CWZrqKlxbxQ35euXD3MOHKDbeB7itc8qDQhAZY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4020 (0xfb4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91657DD, serialNumber=FBBAC1656A0C63708BCCD60DC825E6C3191A719B Validity Not Before: Oct 31 17:42:45 2025 GMT Not After : Nov 7 17:42:45 2025 GMT Subject: CN=6904f515-46c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:e2:79:ed:9d:70:36:60:6a:d6:c3:3e:b3:d9: 14:31:b9:ae:d9:57:b0:1d:65:3b:8a:5f:3c:d3:82: 1b:ca:75:a4:36:44:9b:a3:dc:5e:f4:1a:6f:b3:35: cd:8a:78:22:08:88:a4:58:66:52:00:80:14:db:08: 1a:98:e4:65:46:c2:77:31:af:44:86:18:92:bc:a2: ed:1e:d7:10:39:d1:b5:50:4c:7a:b1:0e:ee:20:53: 55:34:14:c8:5d:57:d8:4d:46:3f:cb:2b:a9:95:4b: 5d:dc:e4:75:5a:f9:c2:b8:43:79:59:3b:d6:ee:91: d4:b0:51:66:a5:c3:9d:90:a4:b2:e6:f8:8a:9f:ab: 9e:87:68:06:06:0d:79:da:54:f9:32:42:cd:7b:37: 52:08:c1:77:ad:6d:da:7e:d7:6c:a4:07:7c:2b:d5: 17:e7:5d:98:ed:8a:6a:30:05:e7:d8:c1:70:dd:11: d9:56:ad:b7:b1:32:73:63:9d:3f:f5:83:d2:2b:e0: 25:5e:0b:a1:37:31:b4:ab:e3:87:02:2e:e6:ae:8d: 31:bc:cc:dc:ca:25:fe:d5:c3:4b:23:32:eb:21:7d: 1f:6d:32:54:a7:bb:73:0e:34:a5:98:dd:de:68:c0: e7:08:b8:83:87:b5:9c:38:72:fa:cf:06:6e:de:44: 19:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:49:EE:E9:2E:3E:CD:98:93:D0:36:84:C8:72:0B:EC:D7:32:47:8C X509v3 Authority Key Identifier: keyid:FB:BA:C1:65:6A:0C:63:70:8B:CC:D6:0D:C8:25:E6:C3:19:1A:71:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-7rBZWoMY3CLzNYNyCXmwxkacZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91657DD/AD615F6E6E5611E9BD9B5E69C4F9AE02/-7rBZWoMY3CLzNYNyCXmwxkacZs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:97:4a:ba:a5:84:b0:90:0a:b4:0b:bc:a1:63:86:ae:7a:58: bc:f7:07:f4:e5:5f:f6:5e:39:3a:ea:1c:2d:00:55:8e:f8:26: 6b:c1:94:5a:ca:ae:08:85:98:17:54:6f:d5:16:5d:18:46:e1: b5:e3:68:02:34:80:b4:9f:ab:0b:2e:1a:fa:f3:ef:04:e0:b6: 35:a0:f5:9d:0c:7c:e7:b7:c9:bf:db:49:4a:90:9f:83:61:7a: f8:9f:dc:fd:14:9b:b9:5e:ef:c6:71:c0:99:16:c8:19:f2:b2: 6e:e6:d0:92:d1:4b:90:6f:91:44:5a:e1:09:c2:d6:15:d9:9c: 69:ec:48:c8:cc:1c:29:81:95:d5:4d:94:1a:13:a7:37:60:94: e3:6b:78:48:07:1b:80:e2:58:25:e4:9e:58:67:80:0d:a6:1b: a9:44:7b:12:75:d1:95:b4:ec:69:15:2f:6a:fc:e3:fe:86:d9: d5:d9:92:3b:c9:96:06:fe:45:c1:63:de:7f:0a:b9:13:10:51: 9a:37:59:7e:a9:ee:88:af:e9:a1:d8:66:94:a3:84:5c:36:4b: 35:6e:6b:b4:c6:b9:fd:88:6f:cf:32:08:77:44:52:20:5c:1a: 1e:4a:df:3b:42:12:66:27:fc:ac:fc:d3:3c:81:2d:85:83:f4: b6:b7:7b:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICD7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3REQxMTAvBgNVBAUTKEZCQkFDMTY1NkEwQzYzNzA4QkNDRDYwREM4MjVFNkMz MTkxQTcxOUIwHhcNMjUxMDMxMTc0MjQ1WhcNMjUxMTA3MTc0MjQ1WjAYMRYwFAYD VQQDEw02OTA0ZjUxNS00NmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6OJ57Z1wNmBq1sM+s9kUMbmu2VewHWU7il8804IbynWkNkSbo9xe9BpvszXN ingiCIikWGZSAIAU2wgamORlRsJ3Ma9EhhiSvKLtHtcQOdG1UEx6sQ7uIFNVNBTI XVfYTUY/yyuplUtd3OR1WvnCuEN5WTvW7pHUsFFmpcOdkKSy5viKn6ueh2gGBg15 2lT5MkLNezdSCMF3rW3aftdspAd8K9UX512Y7YpqMAXn2MFw3RHZVq23sTJzY50/ 9YPSK+AlXguhNzG0q+OHAi7mro0xvMzcyiX+1cNLIzLrIX0fbTJUp7tzDjSlmN3e aMDnCLiDh7WcOHL6zwZu3kQZTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGJJ7uku Ps2Yk9A2hMhyC+zXMkeMMB8GA1UdIwQYMBaAFPu6wWVqDGNwi8zWDcgl5sMZGnGb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTdERC9BRDYxNUY2RTZF NTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkzQ0x6TllOeUNYbXd4a2Fj WnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy03ckJaV29NWTNDTHpOWU55Q1htd3hrYWNacy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTdERC9BRDYxNUY2RTZFNTYxMUU5QkQ5QjVFNjlDNEY5QUUwMi8tN3JCWldvTVkz Q0x6TllOeUNYbXd4a2FjWnMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCal0q6pYSwkAq0C7yhY4aueli89wf05V/2Xjk66hwtAFWO+CZrwZRa yq4IhZgXVG/VFl0YRuG142gCNIC0n6sLLhr68+8E4LY1oPWdDHznt8m/20lKkJ+D YXr4n9z9FJu5Xu/GccCZFsgZ8rJu5tCS0UuQb5FEWuEJwtYV2Zxp7EjIzBwpgZXV TZQaE6c3YJTja3hIBxuA4lgl5J5YZ4ANphupRHsSddGVtOxpFS9q/OP+htnV2ZI7 yZYG/kXBY95/CrkTEFGaN1l+qe6Ir+mh2GaUo4RcNks1bmu0xrn9iG/PMgh3RFIg XBoeSt87QhJmJ/ys/NM8gS2Fg/S2t3te -----END CERTIFICATE-----Generated at Sat Nov 1 17:07:25 2025 by rpki-client