$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft File: 7wIl-Rz-Rn8TvZHmyaG536c7sew.mft (raw, json) Hash identifier: 9uCcSyVlbLWEn1RoDI1r0SrldJfVFy9knKC9wFhHlT0= Subject key identifier: B2:06:6D:95:48:63:8A:C4:6A:60:2A:8C:38:BF:C1:4D:E5:2B:41:6C Authority key identifier: EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC Certificate issuer: /CN=A91BA9F2/serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Certificate serial: 29 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft Manifest number: 28 Signing time: Mon 03 Nov 2025 07:41:39 +0000 Manifest this update: Mon 03 Nov 2025 07:41:39 +0000 Manifest next update: Mon 10 Nov 2025 07:41:39 +0000 Files and hashes: 1: 7wIl-Rz-Rn8TvZHmyaG536c7sew.crl (hash: QrCe1txhknl4CuY+g99hQaaaWjKzQKosvrHNLPGg2tk=) 2: D57991447D8E11F09BE2EB75C4F9AE02.roa (hash: au2fE5QZV4wi2bNW1k3MSZSx8H26Znmq3AG3Io7itYQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41 (0x29) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9F2, serialNumber=EF0225F91CFE467F13BD91E6C9A1B9DFA73BB1EC Validity Not Before: Nov 3 07:41:39 2025 GMT Not After : Nov 10 07:41:39 2025 GMT Subject: CN=69085cb3-181b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:82:12:a0:0b:1b:a0:9c:c6:04:3a:15:30:6a: 29:6a:58:b9:ae:e5:f1:45:68:75:2c:dc:80:80:b3: 25:ee:54:45:15:4b:a7:ab:b7:e1:12:f1:cf:d9:5f: 6e:d9:ed:6e:bd:66:0d:04:a6:76:51:a8:49:8f:99: 7d:e8:dc:12:fb:0d:2a:f3:d5:dd:48:27:6d:de:d7: 24:63:a2:78:a9:e2:66:4e:21:a2:17:cc:c3:19:95: 29:d4:96:e5:33:81:38:34:b0:79:66:c7:64:89:63: 8a:15:c6:47:4e:c9:12:d9:9a:40:e5:6a:e6:72:17: 13:a1:e0:60:46:de:3e:62:dc:cc:91:68:a7:86:84: a8:00:b3:af:23:21:7f:2d:38:8b:92:a3:19:02:1a: a7:6c:b9:59:93:d3:38:87:6d:08:73:a8:72:cc:f1: b5:a6:9b:4f:3a:bf:a9:3b:16:9e:af:66:cf:19:57: f9:71:4c:76:50:d1:bd:b0:e6:d0:b3:90:8f:2d:eb: 88:1c:f8:b5:eb:ac:62:f4:26:c5:ab:29:cd:5b:02: 20:e7:b4:89:41:05:61:54:b7:07:36:c9:b1:fe:2e: 16:03:06:43:8a:da:66:35:23:c6:65:f5:53:5d:45: 20:b7:68:a6:39:2b:c7:57:34:07:1a:a7:5d:dd:73: 67:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:06:6D:95:48:63:8A:C4:6A:60:2A:8C:38:BF:C1:4D:E5:2B:41:6C X509v3 Authority Key Identifier: keyid:EF:02:25:F9:1C:FE:46:7F:13:BD:91:E6:C9:A1:B9:DF:A7:3B:B1:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7wIl-Rz-Rn8TvZHmyaG536c7sew.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9F2/0C781FD07D8A11F0AAFBA181C4F9AE02/7wIl-Rz-Rn8TvZHmyaG536c7sew.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:39:91:16:85:3d:e4:21:2f:f9:50:fa:ed:31:73:ac:51:48: 2e:11:03:9c:69:26:80:80:19:37:ae:c8:f3:0f:f3:a5:f6:bc: f9:9c:a0:c0:b1:85:b1:fe:53:31:3a:61:6e:ce:04:80:97:2e: bd:f2:4b:67:bd:4f:cd:ee:29:57:4a:48:5c:0d:70:e6:a3:3a: 90:32:2c:0d:58:db:69:8c:e8:54:85:ae:6a:70:a9:a3:e8:6f: a9:fb:55:74:e6:68:48:72:88:6f:d4:4f:97:1c:12:a3:57:b0: ab:fe:4f:60:7a:94:f8:3a:59:a7:c2:52:ba:2a:06:13:a1:ca: 24:da:ce:1f:16:c8:c0:9f:80:9a:a4:d7:ba:14:ae:2a:0b:93: 74:d4:7a:e2:68:8c:f2:9f:79:19:a3:78:7f:40:f2:ca:62:74: e7:09:1e:74:06:37:d8:a3:c5:af:c8:22:bc:14:0f:b7:ae:4f: 8b:34:8a:e2:1d:46:c7:12:df:16:f3:0b:d6:bb:db:89:23:93: 19:7a:07:a7:60:79:55:24:30:d3:f4:ae:7b:1b:0c:8e:7a:8f: 4b:70:d5:66:f0:79:e6:2d:dd:25:2b:b0:79:f3:42:c0:b4:7e: 2c:ab:5b:c7:3e:5e:08:0d:5c:78:50:bd:f6:55:74:aa:30:2e: 8a:f5:69:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTlGMjExMC8GA1UEBRMoRUYwMjI1RjkxQ0ZFNDY3RjEzQkQ5MUU2QzlBMUI5REZB NzNCQjFFQzAeFw0yNTExMDMwNzQxMzlaFw0yNTExMTAwNzQxMzlaMBgxFjAUBgNV BAMTDTY5MDg1Y2IzLTE4MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDzghKgCxugnMYEOhUwailqWLmu5fFFaHUs3ICAsyXuVEUVS6ert+ES8c/ZX27Z 7W69Zg0EpnZRqEmPmX3o3BL7DSrz1d1IJ23e1yRjonip4mZOIaIXzMMZlSnUluUz gTg0sHlmx2SJY4oVxkdOyRLZmkDlauZyFxOh4GBG3j5i3MyRaKeGhKgAs68jIX8t OIuSoxkCGqdsuVmT0ziHbQhzqHLM8bWmm086v6k7Fp6vZs8ZV/lxTHZQ0b2w5tCz kI8t64gc+LXrrGL0JsWrKc1bAiDntIlBBWFUtwc2ybH+LhYDBkOK2mY1I8Zl9VNd RSC3aKY5K8dXNAcap13dc2fLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsgZtlUhj isRqYCqMOL/BTeUrQWwwHwYDVR0jBBgwFoAU7wIl+Rz+Rn8TvZHmyaG536c7seww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBOUYyLzBDNzgxRkQwN0Q4 QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44VHZaSG15YUc1MzZjN3Nl dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvN3dJbC1Sei1SbjhUdlpIbXlhRzUzNmM3c2V3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJB OUYyLzBDNzgxRkQwN0Q4QTExRjBBQUZCQTE4MUM0RjlBRTAyLzd3SWwtUnotUm44 VHZaSG15YUc1MzZjN3Nldy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAg5kRaFPeQhL/lQ+u0xc6xRSC4RA5xpJoCAGTeuyPMP86X2vPmcoMCx hbH+UzE6YW7OBICXLr3yS2e9T83uKVdKSFwNcOajOpAyLA1Y22mM6FSFrmpwqaPo b6n7VXTmaEhyiG/UT5ccEqNXsKv+T2B6lPg6WafCUroqBhOhyiTazh8WyMCfgJqk 17oUrioLk3TUeuJojPKfeRmjeH9A8spidOcJHnQGN9ijxa/IIrwUD7euT4s0iuId RscS3xbzC9a724kjkxl6B6dgeVUkMNP0rnsbDI56j0tw1WbweeYt3SUrsHnzQsC0 fiyrW8c+XggNXHhQvfZVdKowLor1af4= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:46 2025 by rpki-client