$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft File: sKQkzjnHjGXb8v_AKtuONUA2ycA.mft (raw, json) Hash identifier: puSILB0s4/3s2c0vAnjcYLlDsFiKpWzE4BekxEKO03w= Subject key identifier: DE:46:A1:B6:72:8E:8E:CD:6C:CB:1E:D5:38:AD:E3:48:8C:CC:75:DD Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0B05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft Manifest number: 0AF9 Signing time: Sun 02 Nov 2025 19:21:19 +0000 Manifest this update: Sun 02 Nov 2025 19:21:19 +0000 Manifest next update: Sun 09 Nov 2025 19:21:19 +0000 Files and hashes: 1: sKQkzjnHjGXb8v_AKtuONUA2ycA.crl (hash: G6HQDjVgLit60qRxLoDOBR6e4u+pJAlWmyyWB7VZKP4=) 2: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (hash: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:21:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2821 (0xb05) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Nov 2 19:21:19 2025 GMT Not After : Nov 9 19:21:19 2025 GMT Subject: CN=6907af2f-992e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:90:64:c3:01:dd:9c:39:64:a2:98:4f:4a: 85:d1:30:90:e4:b0:5c:65:aa:0f:c5:d3:0c:8b:52: bd:4f:ea:b0:d2:ad:5c:90:c8:77:4a:02:ed:39:c9: 53:45:2a:1d:d9:1d:06:1e:a9:92:e2:73:37:e6:1a: 20:eb:f8:5b:ed:91:a6:55:fb:30:99:60:3d:ca:d4: 77:c8:10:db:41:69:c7:2a:b7:00:e3:b3:93:ec:89: aa:1a:79:75:14:b1:ae:17:6e:88:06:9d:1b:e4:52: fc:6d:db:22:58:aa:c6:00:d5:44:21:76:ad:b6:39: 2a:9a:ae:b0:cd:e8:84:fb:4b:2a:c6:61:26:2e:63: 8a:e5:d3:9c:ac:aa:27:86:98:ef:66:b4:00:a0:7b: 29:12:f4:c1:56:a3:07:bd:04:83:c9:57:a5:8b:40: cb:1a:dd:78:a3:ee:21:ea:c4:53:58:f1:1f:64:e2: 76:71:59:39:4c:c8:17:58:fa:6e:6a:06:cf:ca:0b: c2:a5:3d:0b:db:e5:8f:20:6b:96:94:e6:9a:2b:5c: 6f:c4:0f:20:27:ee:ae:ba:32:d1:a6:e4:2d:18:33: c9:82:d4:15:e2:ec:4a:fd:13:2e:8e:cf:0e:47:ba: 9d:0c:dd:80:78:6b:46:7c:bd:84:37:b3:54:8d:cd: d0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:46:A1:B6:72:8E:8E:CD:6C:CB:1E:D5:38:AD:E3:48:8C:CC:75:DD X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:13:22:8f:a6:c2:6d:6e:cf:e3:b9:23:4d:75:e8:cc:d8:f7: 35:e7:7d:9c:47:f2:28:38:4f:bc:d2:c5:f9:8a:89:6c:1c:2b: 6b:92:e4:14:89:7b:be:9b:10:08:14:c0:94:0e:be:83:61:68: 47:79:c5:39:e5:e3:85:85:8d:89:cc:63:3f:bd:c1:a5:e8:10: c7:ba:65:4d:55:db:ec:d5:03:45:80:28:c1:bc:bf:7a:cd:cf: 93:29:5a:4f:da:c6:0d:a4:e9:bb:60:54:e9:33:ee:30:e1:c0: 63:c8:65:79:c7:a9:0b:45:2b:e9:48:2e:4c:bd:3c:6a:c6:f3: 9d:01:a4:b8:11:9d:f8:76:09:58:b8:55:c9:bf:7a:f1:87:eb: 04:69:59:3c:3e:e9:c2:9c:ed:e0:f9:60:f2:9c:30:46:e2:38: c4:b9:04:45:45:ce:cf:bd:e4:2b:e4:0e:e8:02:6e:ca:a4:a3: 5d:c8:a5:e8:e9:8b:36:ff:c1:e1:01:7a:0d:c8:c5:ca:46:17: 5b:39:a5:2a:b3:bd:ba:33:e2:e2:35:29:4a:08:54:e8:60:d7: 8a:06:45:0c:0a:61:99:00:c1:99:19:97:76:42:81:a2:2d:53: 57:20:f9:4f:99:7d:8e:87:f9:bc:03:3f:f5:78:b7:55:9b:30: 5b:63:e9:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCwUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUxMTAyMTkyMTE5WhcNMjUxMTA5MTkyMTE5WjAYMRYwFAYD VQQDEw02OTA3YWYyZi05OTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq+qQZMMB3Zw5ZKKYT0qF0TCQ5LBcZaoPxdMMi1K9T+qw0q1ckMh3SgLtOclT RSod2R0GHqmS4nM35hog6/hb7ZGmVfswmWA9ytR3yBDbQWnHKrcA47OT7ImqGnl1 FLGuF26IBp0b5FL8bdsiWKrGANVEIXattjkqmq6wzeiE+0sqxmEmLmOK5dOcrKon hpjvZrQAoHspEvTBVqMHvQSDyVeli0DLGt14o+4h6sRTWPEfZOJ2cVk5TMgXWPpu agbPygvCpT0L2+WPIGuWlOaaK1xvxA8gJ+6uujLRpuQtGDPJgtQV4uxK/RMujs8O R7qdDN2AeGtGfL2EN7NUjc3QHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN5GobZy jo7NbMse1Tit40iMzHXdMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzE2NS8yMTVGRUZCNDU1QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpH WGI4dl9BS3R1T05VQTJ5Y0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhEyKPpsJtbs/juSNNdejM2Pc1532cR/IoOE+80sX5iolsHCtrkuQU iXu+mxAIFMCUDr6DYWhHecU55eOFhY2JzGM/vcGl6BDHumVNVdvs1QNFgCjBvL96 zc+TKVpP2sYNpOm7YFTpM+4w4cBjyGV5x6kLRSvpSC5MvTxqxvOdAaS4EZ34dglY uFXJv3rxh+sEaVk8PunCnO3g+WDynDBG4jjEuQRFRc7PveQr5A7oAm7KpKNdyKXo 6Ys2/8HhAXoNyMXKRhdbOaUqs726M+LiNSlKCFToYNeKBkUMCmGZAMGZGZd2QoGi LVNXIPlPmX2Oh/m8Az/1eLdVmzBbY+nS -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:59 2025 by rpki-client