$ rpki-client -vvf rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft File: fLBjBy0uSJJZhhStW6tT4d6v9wE.mft (raw, json) Hash identifier: BAk6mQ6qYGHIVX/yUs/EVF+tH4FFOyDHJDZQwXUPkzs= Subject key identifier: 8A:0A:53:62:1E:04:98:61:07:3D:07:A8:62:06:28:AF:01:49:72:22 Authority key identifier: 7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 Certificate issuer: /CN=A91B994F/serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Certificate serial: 0850 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft Manifest number: 0846 Signing time: Sun 02 Nov 2025 20:42:28 +0000 Manifest this update: Sun 02 Nov 2025 20:42:28 +0000 Manifest next update: Sun 09 Nov 2025 20:42:28 +0000 Files and hashes: 1: fLBjBy0uSJJZhhStW6tT4d6v9wE.crl (hash: FX8q2lZ7Hko1icce0zzukl6fTPuAKeg5HhdOayfy8OM=) 2: 2B24D5DC854511EB9B57240FC4F9AE02.roa (hash: Gbqi/30snlG70x9ANTB06c1PKeyR99Ii/Ej/rBkuNcg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B994F, serialNumber=7CB063072D2E4892598614AD5BAB53E1DEAFF701 Validity Not Before: Nov 2 20:42:28 2025 GMT Not After : Nov 9 20:42:28 2025 GMT Subject: CN=6907c234-c155 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:0f:3e:fe:be:bf:7f:4c:15:c8:51:5c:27:8e: 71:d5:4a:22:fa:89:a1:0a:36:d8:ef:b5:fb:12:db: 57:f4:fb:a7:fd:26:df:d6:00:ee:f8:7f:4a:3c:5c: b0:5e:9c:64:f0:f1:c3:6a:37:71:69:a8:d2:54:de: 87:f6:49:29:35:b6:01:80:7f:c3:fa:83:57:ae:85: bc:35:f4:06:6c:b3:bc:81:1c:3e:45:fc:b1:c3:0b: 78:e5:3a:1e:42:9d:ff:93:ea:03:77:8b:bd:59:e1: 2d:23:c8:9c:ad:d0:e9:53:ba:a5:88:41:c3:87:49: f2:4b:9d:ea:23:3d:26:60:3d:46:2b:85:53:b8:26: cd:aa:8e:1d:4d:27:b6:2a:e4:b8:29:90:04:9a:67: 3b:8e:fe:4e:b8:af:6f:d7:ba:17:a9:c7:d1:54:94: c1:f7:99:c8:f6:c5:20:5d:a1:01:00:2a:8f:4c:7e: af:a3:12:0e:ed:84:8f:45:e1:ac:d4:a9:22:18:89: 1f:f0:09:17:25:5b:8a:e7:44:a2:3c:a2:d1:41:95: e7:0e:bd:ca:1d:eb:68:47:b3:4a:7b:20:b2:46:8b: a5:c9:67:d0:95:0c:1d:a4:0b:8d:63:2d:18:02:92: 30:6f:d3:b5:3c:e8:3f:39:ef:d4:80:cf:6b:63:2d: 67:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:53:62:1E:04:98:61:07:3D:07:A8:62:06:28:AF:01:49:72:22 X509v3 Authority Key Identifier: keyid:7C:B0:63:07:2D:2E:48:92:59:86:14:AD:5B:AB:53:E1:DE:AF:F7:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fLBjBy0uSJJZhhStW6tT4d6v9wE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B994F/AAFD14ECE5A211EA89A3606DC4F9AE02/fLBjBy0uSJJZhhStW6tT4d6v9wE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:28:23:47:98:1f:97:5b:a0:d8:8d:b2:6e:d6:5a:57:f5:74: 02:1f:24:55:53:0d:02:d5:f6:9e:93:5c:9d:82:b2:74:cb:77: b5:26:9f:05:c4:b2:54:cc:3b:6a:4f:33:94:b1:84:e2:11:51: 7d:47:be:f6:09:dd:36:5e:77:c9:cf:c4:9c:90:ee:a7:f8:f8: 9f:db:8a:29:03:d2:6f:4e:70:8f:2d:e6:76:05:33:b2:82:02: df:d1:3f:82:10:cf:ee:27:25:f4:3e:e4:71:9c:88:7e:86:bb: 9f:f6:26:47:f5:63:44:c1:b8:6e:38:0b:aa:23:a0:5e:3e:e0: 4f:30:11:8e:32:bd:62:69:f5:80:b3:07:31:46:f6:41:cc:a7: 28:ee:be:d1:ba:83:33:fe:52:78:67:b3:ee:23:a4:cd:c5:6c: fc:b5:6a:d5:4b:a7:8e:79:dc:6c:28:69:a2:69:45:56:11:2a: 0b:ba:fd:38:79:21:b3:d0:97:4f:56:a2:1e:b5:73:90:dc:92: a1:b7:1a:cd:63:d4:1a:3c:c0:16:fa:8e:04:14:ea:67:a3:08: ee:4a:14:c7:bd:6f:62:31:92:2d:74:82:ec:40:23:44:42:82: 6d:cb:69:e1:b0:1b:89:4c:cb:bc:c3:62:d8:5c:6b:0c:3d:b4: 76:a3:c9:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjk5NEYxMTAvBgNVBAUTKDdDQjA2MzA3MkQyRTQ4OTI1OTg2MTRBRDVCQUI1M0Ux REVBRkY3MDEwHhcNMjUxMTAyMjA0MjI4WhcNMjUxMTA5MjA0MjI4WjAYMRYwFAYD VQQDEw02OTA3YzIzNC1jMTU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Q8+/r6/f0wVyFFcJ45x1Uoi+omhCjbY77X7EttX9Pun/Sbf1gDu+H9KPFyw Xpxk8PHDajdxaajSVN6H9kkpNbYBgH/D+oNXroW8NfQGbLO8gRw+Rfyxwwt45Toe Qp3/k+oDd4u9WeEtI8icrdDpU7qliEHDh0nyS53qIz0mYD1GK4VTuCbNqo4dTSe2 KuS4KZAEmmc7jv5OuK9v17oXqcfRVJTB95nI9sUgXaEBACqPTH6voxIO7YSPReGs 1KkiGIkf8AkXJVuK50SiPKLRQZXnDr3KHetoR7NKeyCyRoulyWfQlQwdpAuNYy0Y ApIwb9O1POg/Oe/UgM9rYy1nFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIoKU2Ie BJhhBz0HqGIGKK8BSXIiMB8GA1UdIwQYMBaAFHywYwctLkiSWYYUrVurU+Her/cB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOTk0Ri9BQUZEMTRFQ0U1 QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNKSlpoaFN0VzZ0VDRkNnY5 d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZMQmpCeTB1U0pKWmhoU3RXNnRUNGQ2djl3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OTk0Ri9BQUZEMTRFQ0U1QTIxMUVBODlBMzYwNkRDNEY5QUUwMi9mTEJqQnkwdVNK SlpoaFN0VzZ0VDRkNnY5d0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNKCNHmB+XW6DYjbJu1lpX9XQCHyRVUw0C1faek1ydgrJ0y3e1Jp8F xLJUzDtqTzOUsYTiEVF9R772Cd02XnfJz8SckO6n+Pif24opA9JvTnCPLeZ2BTOy ggLf0T+CEM/uJyX0PuRxnIh+hruf9iZH9WNEwbhuOAuqI6BePuBPMBGOMr1iafWA swcxRvZBzKco7r7RuoMz/lJ4Z7PuI6TNxWz8tWrVS6eOedxsKGmiaUVWESoLuv04 eSGz0JdPVqIetXOQ3JKhtxrNY9QaPMAW+o4EFOpnowjuShTHvW9iMZItdILsQCNE QoJty2nhsBuJTMu8w2LYXGsMPbR2o8nm -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:39 2025 by rpki-client