$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft File: g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft (raw, json) Hash identifier: E/BIcCmqt0MBG0VdoIA+Vq6QWN5PSmmoBtyG9k9HdnQ= Subject key identifier: 9A:8B:5A:0D:DF:5F:A9:3F:A0:E3:F5:D1:49:B5:45:14:98:71:71:4D Authority key identifier: 83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 Certificate issuer: /CN=A91AB4BA/serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft Manifest number: 0206 Signing time: Mon 03 Nov 2025 02:19:07 +0000 Manifest this update: Mon 03 Nov 2025 02:19:06 +0000 Manifest next update: Mon 10 Nov 2025 02:19:06 +0000 Files and hashes: 1: g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl (hash: o7l3rW31G4sv2Pb4QJ/kM/zOiBeXriJSU1ZiY4gHaG8=) 2: 93E8AC909CA111ED97E7FC20C4F9AE02.roa (hash: yz7MYEbOgQ8Al3poUxihFYnUX5uLUR4cvOqS22MeFsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB4BA, serialNumber=83B6E7EA23BDC3A38D60B4FFA2EFF5A18F1DCD68 Validity Not Before: Nov 3 02:19:06 2025 GMT Not After : Nov 10 02:19:06 2025 GMT Subject: CN=6908111a-aec1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:c2:14:15:df:d8:d8:fd:4b:81:6f:8f:2a: aa:be:06:44:7b:44:7f:63:d1:85:82:e2:5a:10:ff: b7:5c:f8:c0:9c:6f:71:b6:c2:30:f0:8d:72:20:61: 6f:f4:79:4b:46:a3:e3:73:ad:0f:f7:eb:82:74:bf: 62:f5:14:b9:45:ab:7a:9f:07:e7:87:ff:0f:78:82: ff:25:10:fb:f9:4b:c0:0c:04:bf:34:2f:15:f7:1d: ef:06:db:91:fc:99:1f:11:1c:66:6b:ac:46:ca:2d: d7:a3:57:91:79:91:9b:ba:12:a7:82:f0:23:80:47: 8c:2d:43:72:34:61:d9:f1:60:6a:3f:ca:17:f9:15: 31:4a:cb:32:7a:a4:e3:f4:21:10:67:45:d3:37:c3: a8:c8:09:8c:ae:d9:c1:02:ca:62:cc:8d:68:d8:6d: 1b:94:5e:0d:52:cc:2e:ff:4f:c0:39:0b:f4:ce:84: 97:ff:3e:c7:1a:cc:83:55:a8:82:e3:6a:1d:e2:e9: 7f:70:f0:4f:70:d8:42:6d:8c:3b:96:86:4b:0f:2c: ca:d1:06:5e:3f:3d:2f:0b:19:1a:3d:3a:5d:3b:92: 15:8b:1c:61:33:18:5a:0f:bb:f1:12:7c:9d:09:e4: 0d:f5:8d:25:29:4a:38:e1:57:c4:dc:a2:b8:78:19: 57:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:8B:5A:0D:DF:5F:A9:3F:A0:E3:F5:D1:49:B5:45:14:98:71:71:4D X509v3 Authority Key Identifier: keyid:83:B6:E7:EA:23:BD:C3:A3:8D:60:B4:FF:A2:EF:F5:A1:8F:1D:CD:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g7bn6iO9w6ONYLT_ou_1oY8dzWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB4BA/C73E18449C9E11ED91B7161DC4F9AE02/g7bn6iO9w6ONYLT_ou_1oY8dzWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d1:47:c7:fa:99:9c:99:0d:59:a9:15:53:4f:45:46:6b:fb: a5:a0:bc:97:09:ec:d7:a7:b9:7f:2e:e5:70:88:07:73:da:51: 1a:61:e2:d6:38:8f:37:e8:d2:ff:12:88:60:fc:15:b1:d4:d1: 29:b9:37:79:ca:8f:d5:e6:62:f3:40:3d:da:a1:b1:4e:9c:15: c2:de:79:d0:8b:5a:d9:48:1c:91:ca:ac:7e:6a:5f:3f:f0:47: f2:35:92:26:63:18:07:df:f9:48:b5:1c:17:8a:f7:e1:3b:62: 25:73:82:6a:a0:43:95:92:d8:e8:78:6a:a1:a3:b9:11:2e:03: 72:0c:7d:b3:e8:67:3d:b4:6b:c7:37:8f:2d:0e:1d:55:80:0c: 65:d9:d8:b6:4f:04:1a:9c:be:d9:45:20:9c:13:87:09:9f:88: 48:53:ea:a1:1f:34:54:29:f3:c9:dc:a1:f8:fc:88:cf:54:c8: b7:c9:06:28:d3:4b:60:d1:08:c0:89:62:e5:21:e1:85:df:98: e2:e6:db:bb:1d:1c:f0:3d:27:29:10:5d:5c:47:68:0c:f6:09: 82:e7:00:45:27:05:2d:8a:03:a0:fd:89:94:75:ed:8c:21:a2: 3f:b5:b4:09:81:51:8b:37:a4:a0:42:8f:9b:7d:5d:51:79:06: 01:ef:d8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUI0QkExMTAvBgNVBAUTKDgzQjZFN0VBMjNCREMzQTM4RDYwQjRGRkEyRUZGNUEx OEYxRENENjgwHhcNMjUxMTAzMDIxOTA2WhcNMjUxMTEwMDIxOTA2WjAYMRYwFAYD VQQDEw02OTA4MTExYS1hZWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvffCFBXf2Nj9S4FvjyqqvgZEe0R/Y9GFguJaEP+3XPjAnG9xtsIw8I1yIGFv 9HlLRqPjc60P9+uCdL9i9RS5Rat6nwfnh/8PeIL/JRD7+UvADAS/NC8V9x3vBtuR /JkfERxma6xGyi3Xo1eReZGbuhKngvAjgEeMLUNyNGHZ8WBqP8oX+RUxSssyeqTj 9CEQZ0XTN8OoyAmMrtnBAspizI1o2G0blF4NUswu/0/AOQv0zoSX/z7HGsyDVaiC 42od4ul/cPBPcNhCbYw7loZLDyzK0QZePz0vCxkaPTpdO5IVixxhMxhaD7vxEnyd CeQN9Y0lKUo44VfE3KK4eBlXEQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJqLWg3f X6k/oOP10Um1RRSYcXFNMB8GA1UdIwQYMBaAFIO25+ojvcOjjWC0/6Lv9aGPHc1o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjRCQS9DNzNFMTg0NDlD OUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2T05ZTFRfb3VfMW9ZOGR6 V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c3Ym42aU85dzZPTllMVF9vdV8xb1k4ZHpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjRCQS9DNzNFMTg0NDlDOUUxMUVEOTFCNzE2MURDNEY5QUUwMi9nN2JuNmlPOXc2 T05ZTFRfb3VfMW9ZOGR6V2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB70UfH+pmcmQ1ZqRVTT0VGa/uloLyXCezXp7l/LuVwiAdz2lEaYeLW OI836NL/Eohg/BWx1NEpuTd5yo/V5mLzQD3aobFOnBXC3nnQi1rZSByRyqx+al8/ 8EfyNZImYxgH3/lItRwXivfhO2Ilc4JqoEOVktjoeGqho7kRLgNyDH2z6Gc9tGvH N48tDh1VgAxl2di2TwQanL7ZRSCcE4cJn4hIU+qhHzRUKfPJ3KH4/IjPVMi3yQYo 00tg0QjAiWLlIeGF35ji5tu7HRzwPScpEF1cR2gM9gmC5wBFJwUtigOg/YmUde2M IaI/tbQJgVGLN6SgQo+bfV1ReQYB79hm -----END CERTIFICATE-----Generated at Tue Nov 4 01:07:28 2025 by rpki-client