$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft File: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json) Hash identifier: tnb0y0Hj+7NTPQB6LD1ANEco/MULYKgHvNnB6cjx8X8= Subject key identifier: FD:B5:7B:88:7B:B8:7E:41:57:F7:11:AC:55:FC:55:CA:83:30:2C:18 Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 Certificate issuer: /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Certificate serial: 0B6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft Manifest number: 0B5D Signing time: Sun 02 Nov 2025 19:10:40 +0000 Manifest this update: Sun 02 Nov 2025 19:10:39 +0000 Manifest next update: Sun 09 Nov 2025 19:10:39 +0000 Files and hashes: 1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: 57hpxp0tC7M4tNe/QaSd+j6/g1FofOuP/ZBoSZ3ncwE=) 2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: CB9T3Z9Kr+65LPAMP9ETCGEmFvpN7j5O01tRCMGo/Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2924 (0xb6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96 Validity Not Before: Nov 2 19:10:39 2025 GMT Not After : Nov 9 19:10:39 2025 GMT Subject: CN=6907acaf-d49c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:85:9b:3c:fe:da:fa:45:c9:b6:4d:1c:b2:43: 7b:7b:d7:69:1b:6a:1a:ce:72:cb:15:32:54:0a:58: 39:ab:12:64:8a:a5:93:1d:1d:92:93:02:05:1f:a8: 92:68:15:65:2c:6f:76:2b:09:a7:d5:bf:a3:51:0f: 3e:58:da:b6:7d:4a:64:38:e0:96:df:70:1b:0b:3e: a6:60:30:7f:a7:5f:6c:6a:d3:36:80:7e:1b:27:a2: 93:ce:11:2c:77:a4:0f:ea:7f:4d:77:a8:d0:19:13: f9:c1:3d:af:97:8f:35:96:93:15:f9:79:8d:b9:cd: 26:3a:6b:84:1d:1c:88:38:4c:4f:49:68:1b:1e:e5: 69:ac:4f:45:75:db:13:01:e4:67:3b:e9:b5:14:28: 9f:ed:12:6e:2e:d6:1f:39:69:7c:32:99:7c:8d:bc: 28:67:27:6b:70:e1:92:23:9a:6e:6a:96:f8:68:32: 85:a3:ac:65:8a:8a:cd:88:10:11:4d:21:20:0b:d8: 6d:f9:11:d2:a5:57:eb:dc:eb:e5:26:87:3c:17:2d: b4:61:c2:31:96:c5:37:aa:ec:2d:e9:9a:b6:e4:d2: cc:0b:93:4d:d7:3b:a4:dd:61:1c:0c:52:32:52:6e: 11:72:b5:8a:78:6b:dd:73:14:ec:14:2f:df:4f:0a: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B5:7B:88:7B:B8:7E:41:57:F7:11:AC:55:FC:55:CA:83:30:2C:18 X509v3 Authority Key Identifier: keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:83:55:ea:fc:6e:a6:f0:b0:76:1a:7d:c1:cc:9a:9c:c5:27: ad:f5:3e:8c:42:a5:8d:30:25:9d:07:dd:71:6a:11:7b:c6:61: b2:0e:f9:64:cc:24:a4:12:85:6e:45:00:44:ce:50:c9:ee:db: 53:40:00:d5:98:a0:87:10:89:10:42:b6:8b:3d:71:29:c7:93: 6a:0c:b4:6e:16:a6:a1:7d:e0:77:fe:56:d9:54:f8:88:bc:5b: b1:21:82:c1:2b:39:e2:8e:7e:44:cf:9c:c8:5e:57:ea:60:1f: 8c:3a:6e:80:86:77:45:a1:d6:30:f2:ef:00:22:9a:d3:e4:c0: 13:28:c5:5e:7a:c7:2a:f8:39:6f:d7:85:19:e1:25:de:27:fd: eb:0a:8b:fd:92:50:c0:e7:1e:85:0e:ee:fb:ef:33:d6:d6:85: 46:9b:a0:2f:c3:6f:c1:14:fc:0b:79:47:6b:da:9b:8e:a5:6e: b6:27:f9:ff:dd:b0:07:64:6a:4b:23:81:ac:b4:f9:6f:42:d6: 65:cf:8e:22:1b:9a:74:44:6a:45:ba:3d:53:d3:46:26:fe:97: ed:7d:63:55:6a:62:3e:aa:fb:92:c6:dc:05:76:8d:b0:c8:76: 72:34:36:e1:91:f6:ae:d5:94:5b:0e:a6:4f:06:b9:ae:fb:83: 18:0a:96:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC2wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkNCM0ExMTAvBgNVBAUTKEVFNUVDMzdGM0QzQkM1NzU5OUYzQzczQzUyMjI2RTdF RTA1MEJGOTYwHhcNMjUxMTAyMTkxMDM5WhcNMjUxMTA5MTkxMDM5WjAYMRYwFAYD VQQDEw02OTA3YWNhZi1kNDljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAroWbPP7a+kXJtk0cskN7e9dpG2oaznLLFTJUClg5qxJkiqWTHR2SkwIFH6iS aBVlLG92Kwmn1b+jUQ8+WNq2fUpkOOCW33AbCz6mYDB/p19satM2gH4bJ6KTzhEs d6QP6n9Nd6jQGRP5wT2vl481lpMV+XmNuc0mOmuEHRyIOExPSWgbHuVprE9FddsT AeRnO+m1FCif7RJuLtYfOWl8Mpl8jbwoZydrcOGSI5puapb4aDKFo6xliorNiBAR TSEgC9ht+RHSpVfr3OvlJoc8Fy20YcIxlsU3quwt6Zq25NLMC5NN1zuk3WEcDFIy Um4RcrWKeGvdcxTsFC/fTwoHvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP21e4h7 uH5BV/cRrFX8VcqDMCwYMB8GA1UdIwQYMBaAFO5ew389O8V1mfPHPFIibn7gUL+W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQ0IzQS85QUQ2QzVCODQ1 ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hYV1o4OGM4VWlKdWZ1QlF2 NVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdsN0RmejA3eFhXWjg4YzhVaUp1ZnVCUXY1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IzQS85QUQ2QzVCODQ1ODQxMUVBQTQ2RTc1NzFDNEY5QUUwMi83bDdEZnowN3hY V1o4OGM4VWlKdWZ1QlF2NVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvg1Xq/G6m8LB2Gn3BzJqcxSet9T6MQqWNMCWdB91xahF7xmGyDvlk zCSkEoVuRQBEzlDJ7ttTQADVmKCHEIkQQraLPXEpx5NqDLRuFqahfeB3/lbZVPiI vFuxIYLBKznijn5Ez5zIXlfqYB+MOm6AhndFodYw8u8AIprT5MATKMVeescq+Dlv 14UZ4SXeJ/3rCov9klDA5x6FDu777zPW1oVGm6Avw2/BFPwLeUdr2puOpW62J/n/ 3bAHZGpLI4GstPlvQtZlz44iG5p0RGpFuj1T00Ym/pftfWNVamI+qvuSxtwFdo2w yHZyNDbhkfau1ZRbDqZPBrmu+4MYCpYA -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:40 2025 by rpki-client