$ rpki-client -vvf rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft File: n7qfr8GmfUUaL1m57iMkLqndRXI.mft (raw, json) Hash identifier: Qo9VkmDsHnqARy8eZcAKz3lDb1i7jO6Z50Qsa5Ax9v0= Subject key identifier: 55:14:03:BB:8D:2C:E7:74:7A:E9:AB:DC:47:D1:3D:2F:88:33:A5:A2 Authority key identifier: 9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 Certificate issuer: /CN=A91895D8/serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Certificate serial: 10A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft Manifest number: 1097 Signing time: Tue 04 Nov 2025 17:26:44 +0000 Manifest this update: Tue 04 Nov 2025 17:26:43 +0000 Manifest next update: Tue 11 Nov 2025 17:26:43 +0000 Files and hashes: 1: n7qfr8GmfUUaL1m57iMkLqndRXI.crl (hash: /risimjd0UWoK1UWOOfpqKBj1Wut6y3XY930NTnyHvE=) 2: 566988C8717411E9AF629E4BC4F9AE02.roa (hash: EtmvbN1xVVE7PUjHrIh1I7up8NoBR/klrPWqoCS0Bq8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:26:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4256 (0x10a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91895D8, serialNumber=9FBA9FAFC1A67D451A2F59B9EE23242EA9DD4572 Validity Not Before: Nov 4 17:26:43 2025 GMT Not After : Nov 11 17:26:43 2025 GMT Subject: CN=690a3754-3470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:0e:a6:0f:b0:52:83:bc:ef:a0:2f:63:72: c1:e0:02:33:19:bd:1d:cf:5f:ef:46:16:56:64:29: 6d:eb:4a:1a:96:53:01:8e:26:37:97:e7:84:86:f3: 39:04:df:9c:99:d7:66:11:ec:c2:41:97:84:64:8e: 95:b9:cf:a9:40:d4:32:56:62:f2:82:9d:01:64:24: d5:36:89:a3:cb:52:70:7b:3f:ec:75:bf:b9:48:c2: 94:fb:7f:da:f7:98:03:61:72:d6:34:bc:65:42:de: 9c:c9:bb:c4:15:e9:a1:f0:28:9d:ea:52:ea:e4:7c: 17:1e:99:bd:c2:52:44:fc:b4:f0:ac:70:1e:eb:49: c6:86:a2:19:15:f0:24:10:cd:fc:82:8c:37:d0:22: dd:68:5f:4a:31:ce:aa:bd:70:b5:4b:32:57:12:cf: 76:08:f0:dd:7e:6f:12:e0:a2:e4:d0:9b:83:17:71: 97:25:22:a5:3f:5a:67:7d:f2:1e:2e:b7:39:71:e4: 46:c1:f2:65:0a:5a:fa:90:05:b1:a4:c3:be:8a:77: 07:27:c1:e9:ff:b6:b7:04:dc:57:f7:ed:bf:8c:46: f1:b9:4a:f2:04:9c:8b:71:87:7b:23:94:c5:48:f2: a8:6e:ad:cc:9e:54:0a:cb:84:9f:dd:82:1a:ee:1a: b8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:14:03:BB:8D:2C:E7:74:7A:E9:AB:DC:47:D1:3D:2F:88:33:A5:A2 X509v3 Authority Key Identifier: keyid:9F:BA:9F:AF:C1:A6:7D:45:1A:2F:59:B9:EE:23:24:2E:A9:DD:45:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n7qfr8GmfUUaL1m57iMkLqndRXI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91895D8/4F314C403ADC11E9B1D30C12C4F9AE02/n7qfr8GmfUUaL1m57iMkLqndRXI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d4:25:ac:b8:f3:38:b1:47:58:22:f1:04:04:43:d5:10:41:b6: 52:7f:49:ac:7a:72:b2:f9:9f:4f:90:0a:5a:42:fe:ef:ac:37: e2:8f:04:c9:b2:a2:6b:88:83:f9:f3:65:31:df:a9:fd:c9:b9: 04:47:0c:1e:fb:0f:fd:29:70:76:c2:b2:d1:fb:76:23:ee:02: d8:02:ab:8d:af:7c:ec:78:2a:83:e9:e7:ff:4f:c4:cb:90:fc: ad:aa:42:41:22:e0:74:d6:91:c6:91:0f:c0:a5:05:69:c4:20: 06:11:04:50:a8:a0:b5:6c:b6:69:49:aa:e2:37:fd:79:07:c9: 52:39:72:a2:94:40:9f:7c:35:7e:d0:21:a3:4c:78:68:0b:f1: f0:4c:ba:7e:dd:81:c2:9f:54:42:b5:a5:1b:e7:0c:0d:d6:db: 82:86:e8:be:f7:54:1a:b5:15:8d:03:c6:a6:76:13:6a:c5:19: 81:c1:ad:ae:64:5d:32:30:17:cf:b4:00:e8:e7:ec:d7:76:91: 35:de:a0:68:b7:c4:4c:d3:ef:d5:7f:92:ad:66:8d:bf:83:0a: c8:56:7c:ad:64:c9:b0:f7:6e:fb:e3:f0:11:4a:32:b6:1b:a7: 6f:5b:9e:df:35:5a:40:f8:df:82:68:bf:10:3e:e2:c6:a6:dd: 46:54:3f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk1RDgxMTAvBgNVBAUTKDlGQkE5RkFGQzFBNjdENDUxQTJGNTlCOUVFMjMyNDJF QTlERDQ1NzIwHhcNMjUxMTA0MTcyNjQzWhcNMjUxMTExMTcyNjQzWjAYMRYwFAYD VQQDEw02OTBhMzc1NC0zNDcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzcMOpg+wUoO876AvY3LB4AIzGb0dz1/vRhZWZClt60oallMBjiY3l+eEhvM5 BN+cmddmEezCQZeEZI6Vuc+pQNQyVmLygp0BZCTVNomjy1Jwez/sdb+5SMKU+3/a 95gDYXLWNLxlQt6cybvEFemh8Cid6lLq5HwXHpm9wlJE/LTwrHAe60nGhqIZFfAk EM38gow30CLdaF9KMc6qvXC1SzJXEs92CPDdfm8S4KLk0JuDF3GXJSKlP1pnffIe Lrc5ceRGwfJlClr6kAWxpMO+incHJ8Hp/7a3BNxX9+2/jEbxuUryBJyLcYd7I5TF SPKobq3MnlQKy4Sf3YIa7hq43wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFUUA7uN LOd0eumr3EfRPS+IM6WiMB8GA1UdIwQYMBaAFJ+6n6/Bpn1FGi9Zue4jJC6p3UVy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTVEOC80RjMxNEM0MDNB REMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZVVWFMMW01N2lNa0xxbmRS WEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL243cWZyOEdtZlVVYUwxbTU3aU1rTHFuZFJYSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTVEOC80RjMxNEM0MDNBREMxMUU5QjFEMzBDMTJDNEY5QUUwMi9uN3FmcjhHbWZV VWFMMW01N2lNa0xxbmRSWEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDUJay48zixR1gi8QQEQ9UQQbZSf0msenKy+Z9PkApaQv7vrDfijwTJ sqJriIP582Ux36n9ybkERwwe+w/9KXB2wrLR+3Yj7gLYAquNr3zseCqD6ef/T8TL kPytqkJBIuB01pHGkQ/ApQVpxCAGEQRQqKC1bLZpSariN/15B8lSOXKilECffDV+ 0CGjTHhoC/HwTLp+3YHCn1RCtaUb5wwN1tuChui+91QatRWNA8amdhNqxRmBwa2u ZF0yMBfPtADo5+zXdpE13qBot8RM0+/Vf5KtZo2/gwrIVnytZMmw92774/ARSjK2 G6dvW57fNVpA+N+CaL8QPuLGpt1GVD+s -----END CERTIFICATE-----Generated at Wed Nov 5 19:30:21 2025 by rpki-client