$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft File: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft (raw, json) Hash identifier: /LhWUjFVji3pPpNxlsOXvwBqIjGy/4uwM6TarKMopfM= Subject key identifier: A9:CF:D8:79:F3:D9:ED:07:57:8A:14:F4:B5:30:DA:5A:16:01:B5:E3 Authority key identifier: 51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E Certificate issuer: /CN=A91B9AF0/serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Certificate serial: 0743 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft Manifest number: 22EF Signing time: Sun 02 Nov 2025 15:51:33 +0000 Manifest this update: Sun 02 Nov 2025 15:51:33 +0000 Manifest next update: Sun 09 Nov 2025 15:51:33 +0000 Files and hashes: 1: USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl (hash: tptKnQTkoYHLj51f9T09mXDE2zR6Asja5ONboz6guJE=) 2: CCC98C06516B11EBB8942876C4F9AE02.roa (hash: EOijIMpue8j+JsXPaQlOMQIyK4EuQ1zrbUshrZGRCsQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1859 (0x743) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B9AF0, serialNumber=512619DE0C1D1BB3E577994EE0C5FF30D491CD0E Validity Not Before: Nov 2 15:51:33 2025 GMT Not After : Nov 9 15:51:33 2025 GMT Subject: CN=69077e05-be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:99:8a:54:eb:ba:4c:79:38:04:75:10:b5:a5: fa:43:15:cd:0b:a2:96:1e:5e:ab:6e:79:24:fd:ba: f4:66:89:16:b9:4c:af:ea:65:a9:b2:64:50:2c:af: 97:ca:f7:c0:58:4e:bb:10:74:4f:e4:3f:d0:22:f6: 40:35:9c:d7:2a:1c:73:fc:e8:2b:9a:63:7a:ad:f0: b7:85:d0:b5:ee:c5:45:38:53:72:9b:8b:88:86:bd: 28:c2:98:09:66:6e:37:ae:4d:93:ae:bd:a9:18:70: 1f:18:4e:c5:2c:d0:a5:94:f7:80:f3:e5:28:29:27: 1a:a1:bf:93:49:68:3f:2b:3c:c9:eb:da:a3:de:0a: 18:3c:af:06:d2:5c:ea:a7:90:3b:4a:c7:05:cd:43: 87:1d:b0:83:4c:73:51:e7:ac:90:e6:3e:18:0b:f3: 26:86:6e:3a:f0:60:50:36:67:da:7e:d1:b5:7e:a5: cf:dd:ff:d3:d5:48:15:2c:9c:ef:1e:b8:86:24:ab: f7:ff:ef:6f:c7:27:da:e1:36:c8:95:4f:67:e1:2e: 08:75:05:98:83:2c:74:96:a0:cb:be:e4:2f:6a:5f: a0:c9:9b:b3:55:da:0f:6f:a6:bc:c7:ef:47:24:ee: 2e:36:91:06:de:bc:66:f9:63:5e:e8:1f:ce:24:86: 68:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:CF:D8:79:F3:D9:ED:07:57:8A:14:F4:B5:30:DA:5A:16:01:B5:E3 X509v3 Authority Key Identifier: keyid:51:26:19:DE:0C:1D:1B:B3:E5:77:99:4E:E0:C5:FF:30:D4:91:CD:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9AF0/F162DA4E9F9711E59488860FC4F9AE02/USYZ3gwdG7Pld5lO4MX_MNSRzQ4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:42:8c:be:a5:72:82:d9:21:5f:37:d0:73:75:d3:d1:c8:f6: d9:2d:26:d6:09:a0:c7:53:fa:b3:87:2a:cb:23:f0:b3:b0:bf: 20:76:48:71:85:1f:d3:fa:76:fe:29:b8:db:82:a6:11:13:bd: 41:e7:1c:af:3d:e3:d3:1c:4d:d5:b1:4d:93:04:b6:5c:55:ca: 26:eb:a4:52:20:da:75:8d:a5:9b:10:5b:56:33:db:49:cc:a0: fe:2d:37:89:d9:94:7e:b6:0f:b8:de:0c:27:5a:c3:2b:19:14: 11:08:dd:b9:84:80:eb:b0:f7:5c:88:d3:92:fe:f0:a2:9f:35: 38:fb:ab:7c:6b:55:a1:fb:d0:28:29:a3:8d:c1:87:b7:c8:a6: e0:31:3c:cc:8f:f4:97:b4:51:72:68:d4:39:80:a4:22:84:1b: ed:94:e5:c5:ae:4f:af:dd:74:c6:ab:04:72:08:56:02:f8:61: 29:af:4b:39:6e:ee:fe:d4:a7:95:67:8b:ee:12:a7:03:00:bc: fb:4b:97:ed:98:6d:dd:8c:4c:f2:8e:1a:37:d7:b9:57:02:0f: 29:a7:95:ba:d7:ac:62:4d:c7:56:f6:a4:25:e9:bc:f2:4a:95: c8:88:83:0c:3c:1b:ec:41:3f:79:1a:03:57:22:41:71:06:cd: a2:ed:73:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB0MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjlBRjAxMTAvBgNVBAUTKDUxMjYxOURFMEMxRDFCQjNFNTc3OTk0RUUwQzVGRjMw RDQ5MUNEMEUwHhcNMjUxMTAyMTU1MTMzWhcNMjUxMTA5MTU1MTMzWjAYMRYwFAYD VQQDEw02OTA3N2UwNS1iZTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyJmKVOu6THk4BHUQtaX6QxXNC6KWHl6rbnkk/br0ZokWuUyv6mWpsmRQLK+X yvfAWE67EHRP5D/QIvZANZzXKhxz/OgrmmN6rfC3hdC17sVFOFNym4uIhr0owpgJ Zm43rk2Trr2pGHAfGE7FLNCllPeA8+UoKScaob+TSWg/KzzJ69qj3goYPK8G0lzq p5A7SscFzUOHHbCDTHNR56yQ5j4YC/Mmhm468GBQNmfaftG1fqXP3f/T1UgVLJzv HriGJKv3/+9vxyfa4TbIlU9n4S4IdQWYgyx0lqDLvuQval+gyZuzVdoPb6a8x+9H JO4uNpEG3rxm+WNe6B/OJIZoJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKnP2Hnz 2e0HV4oU9LUw2loWAbXjMB8GA1UdIwQYMBaAFFEmGd4MHRuz5XeZTuDF/zDUkc0O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCOUFGMC9GMTYyREE0RTlG OTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3UGxkNWxPNE1YX01OU1J6 UTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VTWVozZ3dkRzdQbGQ1bE80TVhfTU5TUnpRNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OUFGMC9GMTYyREE0RTlGOTcxMUU1OTQ4ODg2MEZDNEY5QUUwMi9VU1laM2d3ZEc3 UGxkNWxPNE1YX01OU1J6UTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhQoy+pXKC2SFfN9BzddPRyPbZLSbWCaDHU/qzhyrLI/CzsL8gdkhx hR/T+nb+KbjbgqYRE71B5xyvPePTHE3VsU2TBLZcVcom66RSINp1jaWbEFtWM9tJ zKD+LTeJ2ZR+tg+43gwnWsMrGRQRCN25hIDrsPdciNOS/vCinzU4+6t8a1Wh+9Ao KaONwYe3yKbgMTzMj/SXtFFyaNQ5gKQihBvtlOXFrk+v3XTGqwRyCFYC+GEpr0s5 bu7+1KeVZ4vuEqcDALz7S5ftmG3djEzyjho317lXAg8pp5W616xiTcdW9qQl6bzy SpXIiIMMPBvsQT95GgNXIkFxBs2i7XPn -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:29 2025 by rpki-client