$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft File: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft (raw, json) Hash identifier: ZzqFPgTVa1IlI8mHjPKE9Ot83wEehrLsY/pgJUtWSVs= Subject key identifier: 4E:B0:1E:87:0F:40:D8:FE:0C:F9:CC:B2:3F:C2:80:DA:7D:F2:45:93 Authority key identifier: ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 Certificate issuer: /CN=A91C8236/serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Certificate serial: 0B33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft Manifest number: 0B17 Signing time: Tue 04 Nov 2025 19:27:13 +0000 Manifest this update: Tue 04 Nov 2025 19:27:13 +0000 Manifest next update: Tue 11 Nov 2025 19:27:13 +0000 Files and hashes: 1: 7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl (hash: QGStWO4trFGa4ehRC1WGw+HtQFcbrxNlC1dR2Nu2U4c=) 2: 4D56512423F411F0A37D240FC4F9AE02.roa (hash: DR5F6HRqYYMo1uwv7ihEplZzpoKgREyzR6TXxsIOhyI=) 3: B5D3426854F111ED85A7AC66C4F9AE02.roa (hash: AlDXjMzrluQLs6V85p5i3jcfN6x00fmAUpJ1+5KxZR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:27:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2867 (0xb33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8236, serialNumber=ED85EF77343C55412B06A53C2A4E20767AD12F25 Validity Not Before: Nov 4 19:27:13 2025 GMT Not After : Nov 11 19:27:13 2025 GMT Subject: CN=690a5391-ac75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1d:92:d0:2c:44:42:4c:22:8f:87:e8:5b:7b: db:36:a8:0c:b4:8e:be:ea:ae:63:22:2b:56:96:97: 4b:0a:c6:88:ed:e5:83:df:dc:61:db:e2:a1:20:ca: 51:e5:f1:21:8e:62:9a:85:ca:f9:95:be:6f:05:30: 3b:a3:27:35:bc:0f:ae:b0:b8:86:37:56:f5:ec:e9: a3:ee:22:66:75:43:4b:15:b5:46:ef:6f:57:d8:aa: a0:db:f8:a8:9b:2a:6f:7f:d5:bc:f5:6c:bf:a9:e5: 6f:bd:36:bc:7f:38:6b:0f:a7:0b:01:1a:7b:cf:e6: 1f:3b:40:e9:a2:1b:1c:ef:23:e2:64:04:9d:4d:89: f5:6b:f1:3a:16:8f:03:c5:87:5d:c6:a3:f0:d2:92: 75:d6:7d:8d:4b:37:1d:c1:57:3e:94:da:b2:64:30: 70:41:40:d4:ed:e0:9e:4a:f3:da:16:01:78:2e:53: 0b:79:71:f5:b6:ec:c6:33:56:b2:d2:b5:98:ec:65: c6:05:22:a4:b6:03:a4:ee:16:88:c9:66:bd:ae:83: d4:d2:60:7a:57:13:a3:f4:3a:f0:6e:7b:8a:b3:d2: 5b:7f:a7:ac:e6:5b:72:e5:1d:a4:16:d2:92:27:60: e3:ae:2d:b6:ca:a8:0d:8d:cd:6b:54:da:fd:67:ac: b6:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B0:1E:87:0F:40:D8:FE:0C:F9:CC:B2:3F:C2:80:DA:7D:F2:45:93 X509v3 Authority Key Identifier: keyid:ED:85:EF:77:34:3C:55:41:2B:06:A5:3C:2A:4E:20:76:7A:D1:2F:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8236/D428796E532711EA8C57E37AC4F9AE02/7YXvdzQ8VUErBqU8Kk4gdnrRLyU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:9c:52:7e:49:70:9a:bf:cf:0c:be:c3:e8:35:d6:1a:4b:db: 2d:d2:36:73:74:7e:95:b0:3b:02:23:8b:6e:c0:4b:4d:5e:06: 91:d1:ab:5b:f8:0f:00:7b:3b:bb:0b:6b:f3:39:5a:1a:60:51: d3:13:52:d1:5a:97:a8:d0:8a:a8:1d:6b:99:33:97:48:e1:70: 3e:ea:a9:b6:fa:cc:41:7d:66:2d:52:5d:27:a5:98:6a:41:bc: b7:01:16:0a:6f:a3:c4:25:c3:80:e9:54:18:c6:ff:1a:04:95: 31:0e:6d:9c:0b:3d:6f:30:5b:20:8c:7a:96:9c:c5:2d:2f:d5: 41:f4:80:b7:30:e7:12:a5:ec:20:a4:3e:e6:fb:4e:66:2e:2e: 3f:f3:5c:21:15:0d:9c:0f:70:5b:ae:b3:46:47:2b:fe:9a:51: 39:83:7b:94:9d:e9:64:70:c4:24:08:12:ec:48:94:c0:e2:37: d9:bd:75:c9:3f:19:92:aa:f5:22:8e:bf:34:90:78:51:4b:5f: 12:6a:e9:04:50:25:53:c2:26:04:f3:4b:76:e5:b4:81:f7:2d: 44:44:74:0c:e3:9d:bc:3b:76:59:5b:0f:41:cd:ed:25:47:2b: 14:2c:a8:f8:8c:11:63:df:56:47:f0:af:d4:e6:81:94:59:10: 93:3a:6d:52 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCzMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgyMzYxMTAvBgNVBAUTKEVEODVFRjc3MzQzQzU1NDEyQjA2QTUzQzJBNEUyMDc2 N0FEMTJGMjUwHhcNMjUxMTA0MTkyNzEzWhcNMjUxMTExMTkyNzEzWjAYMRYwFAYD VQQDEw02OTBhNTM5MS1hYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuB2S0CxEQkwij4foW3vbNqgMtI6+6q5jIitWlpdLCsaI7eWD39xh2+KhIMpR 5fEhjmKahcr5lb5vBTA7oyc1vA+usLiGN1b17Omj7iJmdUNLFbVG729X2Kqg2/io mypvf9W89Wy/qeVvvTa8fzhrD6cLARp7z+YfO0Dpohsc7yPiZASdTYn1a/E6Fo8D xYddxqPw0pJ11n2NSzcdwVc+lNqyZDBwQUDU7eCeSvPaFgF4LlMLeXH1tuzGM1ay 0rWY7GXGBSKktgOk7haIyWa9roPU0mB6VxOj9DrwbnuKs9Jbf6es5lty5R2kFtKS J2Djri22yqgNjc1rVNr9Z6y2ewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE6wHocP QNj+DPnMsj/CgNp98kWTMB8GA1UdIwQYMBaAFO2F73c0PFVBKwalPCpOIHZ60S8l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODIzNi9ENDI4Nzk2RTUz MjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZVRXJCcVU4S2s0Z2RuclJM eVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZWHZkelE4VlVFckJxVThLazRnZG5yUkx5VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODIzNi9ENDI4Nzk2RTUzMjcxMUVBOEM1N0UzN0FDNEY5QUUwMi83WVh2ZHpROFZV RXJCcVU4S2s0Z2RuclJMeVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPnFJ+SXCav88MvsPoNdYaS9st0jZzdH6VsDsCI4tuwEtNXgaR0atb +A8Aezu7C2vzOVoaYFHTE1LRWpeo0IqoHWuZM5dI4XA+6qm2+sxBfWYtUl0npZhq Qby3ARYKb6PEJcOA6VQYxv8aBJUxDm2cCz1vMFsgjHqWnMUtL9VB9IC3MOcSpewg pD7m+05mLi4/81whFQ2cD3BbrrNGRyv+mlE5g3uUnelkcMQkCBLsSJTA4jfZvXXJ PxmSqvUijr80kHhRS18SaukEUCVTwiYE80t25bSB9y1ERHQM4528O3ZZWw9Bze0l RysULKj4jBFj31ZH8K/U5oGUWRCTOm1S -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:39 2025 by rpki-client