$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft File: 72Z43AzrNBQcZKGKskv4bKsvvTU.mft (raw, json) Hash identifier: yWM3aU3wuVDVFaDv3lqjfb9Vry8iLGFzF59BvTFfVjI= Subject key identifier: 2B:9A:77:B1:BD:AF:D3:DC:D5:27:53:2C:80:97:43:7B:FF:F0:42:0E Authority key identifier: EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 Certificate issuer: /CN=A91BAE34/serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Certificate serial: 0504 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft Manifest number: 04F9 Signing time: Mon 27 Oct 2025 00:42:51 +0000 Manifest this update: Mon 27 Oct 2025 00:42:50 +0000 Manifest next update: Mon 03 Nov 2025 00:42:50 +0000 Files and hashes: 1: 72Z43AzrNBQcZKGKskv4bKsvvTU.crl (hash: a1ba8+W8Veq7KPKm9piD2pGJevCYdezaF1R5TdtkM5M=) 2: 7AAFF88446BA11ECB8463B6AC4F9AE02.roa (hash: 99qqJ/9zYRnGxyVxwuHlA7p9+YSeHXLL4eIfJ57Oqyk=) 3: DCEF2F3CFFD611EFA348445FC4F9AE02.roa (hash: itQJmN/dVP+mV48MgGkgS4f24QJYRTaFn3QelUYBhJw=) 4: EEBE377430C411ECBC8D1E20C4F9AE02.roa (hash: gELAt9yiLPHGU77JxUo41MHMLLX1cjc6sNjKaC37Byk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Nov 2025 00:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1284 (0x504) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE34, serialNumber=EF6678DC0CEB34141C64A18AB24BF86CAB2FBD35 Validity Not Before: Oct 27 00:42:50 2025 GMT Not After : Nov 3 00:42:50 2025 GMT Subject: CN=68fec00b-0847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:89:76:2c:3f:b1:a9:2d:1a:52:84:86:dd: ff:c7:d5:2a:d7:9a:f9:2a:cf:68:42:18:1b:8d:19: 03:b1:ea:5b:d1:01:8c:1f:93:be:70:b5:47:86:ac: 3b:23:42:6c:00:19:3b:b4:9b:6e:0c:5e:44:2d:13: d4:90:39:c9:99:52:09:20:99:33:74:cd:46:1c:14: 95:bf:22:fe:43:8e:47:39:c0:42:83:f9:d7:ed:0c: 3f:35:af:f3:03:08:ec:7b:06:4e:d2:ad:1b:55:4c: 51:b9:9e:84:26:85:e3:5b:49:e4:16:44:5d:39:48: 94:d8:b0:8a:99:0c:e1:1b:af:fc:ab:e9:f2:10:3a: 34:51:88:54:24:af:90:7e:91:9c:e1:30:c2:01:1c: 33:e0:e0:c3:e3:cd:0f:a1:d2:8e:ed:dd:f1:a5:20: a0:43:d8:3a:ce:36:60:c7:e4:c3:23:2d:bd:b9:21: 66:db:86:cd:70:ba:b1:94:c9:e1:80:af:0f:34:71: 1b:7e:de:a7:bb:ee:d3:56:07:b5:2c:58:3b:bb:b3: 42:6d:30:38:93:37:f1:f1:bf:0e:70:c6:84:47:fd: ff:fa:ba:8e:a3:69:82:24:6d:f8:bd:db:89:9c:71: fe:ea:5f:52:2b:f2:a8:1f:89:4d:26:44:d9:28:6b: 0a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:9A:77:B1:BD:AF:D3:DC:D5:27:53:2C:80:97:43:7B:FF:F0:42:0E X509v3 Authority Key Identifier: keyid:EF:66:78:DC:0C:EB:34:14:1C:64:A1:8A:B2:4B:F8:6C:AB:2F:BD:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Z43AzrNBQcZKGKskv4bKsvvTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE34/4BEFBECA30C211EC91A1701DC4F9AE02/72Z43AzrNBQcZKGKskv4bKsvvTU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:48:f3:37:86:de:04:b1:45:8b:65:2f:96:ae:a3:55:7b:ab: 73:62:e1:b0:db:be:de:3a:3d:18:ab:b9:65:e9:0d:3f:bd:e4: 60:d5:9c:13:dd:cf:b9:a7:d9:77:8c:41:18:f9:49:e9:45:d0: 0d:5d:96:d7:f1:ee:1e:14:cc:52:98:ac:0a:70:8b:f2:6a:9d: 3e:e6:ec:d1:a8:af:a3:da:4a:e2:85:e2:68:d6:b1:91:dc:dd: ca:b8:24:a0:09:e0:f2:29:b4:e6:15:b1:25:64:30:d3:49:ae: b8:bf:70:2b:d8:cd:1d:f4:c1:7f:55:af:90:89:a7:31:f2:5a: c2:64:2b:13:07:4f:2c:cd:43:1e:e5:89:55:22:c3:b7:86:94: dc:e5:d8:d5:84:2b:7a:e9:be:d1:78:e0:20:89:6b:37:29:a6: a1:2d:fc:1f:02:a3:39:7f:34:72:ab:03:3c:81:d6:7f:88:4c: 7b:95:01:73:e8:40:7f:d4:27:4b:ce:f4:15:af:5a:a1:69:c0: 08:0f:b5:4e:28:4f:60:2d:9b:fb:a9:c1:59:3d:a6:39:d3:78: 9b:c0:4c:8a:ff:15:bc:08:1e:8d:0e:37:a5:e6:3d:e6:fd:04: a8:64:f9:61:c8:e6:9e:77:20:4d:9b:90:f3:0a:cf:f3:36:6a: cc:d7:09:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBQQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMzQxMTAvBgNVBAUTKEVGNjY3OERDMENFQjM0MTQxQzY0QTE4QUIyNEJGODZD QUIyRkJEMzUwHhcNMjUxMDI3MDA0MjUwWhcNMjUxMTAzMDA0MjUwWjAYMRYwFAYD VQQDEw02OGZlYzAwYi0wODQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1quJdiw/saktGlKEht3/x9Uq15r5Ks9oQhgbjRkDsepb0QGMH5O+cLVHhqw7 I0JsABk7tJtuDF5ELRPUkDnJmVIJIJkzdM1GHBSVvyL+Q45HOcBCg/nX7Qw/Na/z AwjsewZO0q0bVUxRuZ6EJoXjW0nkFkRdOUiU2LCKmQzhG6/8q+nyEDo0UYhUJK+Q fpGc4TDCARwz4ODD480PodKO7d3xpSCgQ9g6zjZgx+TDIy29uSFm24bNcLqxlMnh gK8PNHEbft6nu+7TVge1LFg7u7NCbTA4kzfx8b8OcMaER/3/+rqOo2mCJG34vduJ nHH+6l9SK/KoH4lNJkTZKGsKawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCuad7G9 r9Pc1SdTLICXQ3v/8EIOMB8GA1UdIwQYMBaAFO9meNwM6zQUHGShirJL+GyrL701 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUzNC80QkVGQkVDQTMw QzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5CUWNaS0dLc2t2NGJLc3Z2 VFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyWjQzQXpyTkJRY1pLR0tza3Y0YktzdnZUVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QUUzNC80QkVGQkVDQTMwQzIxMUVDOTFBMTcwMURDNEY5QUUwMi83Mlo0M0F6ck5C UWNaS0dLc2t2NGJLc3Z2VFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9SPM3ht4EsUWLZS+WrqNVe6tzYuGw277eOj0Yq7ll6Q0/veRg1ZwT 3c+5p9l3jEEY+UnpRdANXZbX8e4eFMxSmKwKcIvyap0+5uzRqK+j2kriheJo1rGR 3N3KuCSgCeDyKbTmFbElZDDTSa64v3Ar2M0d9MF/Va+Qiacx8lrCZCsTB08szUMe 5YlVIsO3hpTc5djVhCt66b7ReOAgiWs3KaahLfwfAqM5fzRyqwM8gdZ/iEx7lQFz 6EB/1CdLzvQVr1qhacAID7VOKE9gLZv7qcFZPaY503ibwEyK/xW8CB6NDjel5j3m /QSoZPlhyOaedyBNm5DzCs/zNmrM1wlT -----END CERTIFICATE-----Generated at Tue Oct 28 12:57:47 2025 by rpki-client