$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft File: exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft (raw, json) Hash identifier: iomVC2LIHb53/bUDQVQtbKjs8XngKc0ueM5YwXsjDXM= Subject key identifier: 0A:FF:C6:BF:56:7B:75:AA:BE:71:DC:E5:DA:B3:58:05:61:70:C3:40 Authority key identifier: 7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B Certificate issuer: /CN=A91D1C02/serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Certificate serial: 03F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft Manifest number: 03F2 Signing time: Wed 05 Nov 2025 00:35:32 +0000 Manifest this update: Wed 05 Nov 2025 00:35:31 +0000 Manifest next update: Wed 12 Nov 2025 00:35:31 +0000 Files and hashes: 1: exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl (hash: TMA5qRZpXm3u5OoEusRHuVwLuz2PTKLIC8OxPSQy6n0=) 2: 964EB3D49A5F11EC9124627BC4F9AE02.roa (hash: 8YnQugqr595jhqZisXArYlRiOGH/9vz6hBQ33+FTmLg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:35:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1017 (0x3f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1C02, serialNumber=7B19C5AE35AED83AFA60463B5F3C0A6036E4FF9B Validity Not Before: Nov 5 00:35:31 2025 GMT Not After : Nov 12 00:35:31 2025 GMT Subject: CN=690a9bd4-aae7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e8:1d:48:b7:be:81:d1:fb:73:dc:65:a7:7e: 2a:fc:2e:d5:d7:34:45:36:18:4a:43:b7:61:8d:cf: 29:9e:5e:5e:fc:27:f1:75:b2:66:a2:4d:d9:e6:4a: 2b:54:ac:65:98:c4:a2:fc:f7:0f:f6:8f:6b:bf:5f: b9:67:bb:d4:09:d8:ec:d8:7c:7b:9e:67:ff:40:40: 41:e5:22:50:7e:9b:68:78:ae:a8:a2:36:83:fd:fa: 87:f9:40:37:88:8f:9f:e6:cf:02:f9:cc:c7:50:06: 12:74:b5:bf:5f:87:9d:6c:3c:5e:47:bd:f3:87:ae: fd:85:e8:14:0a:bc:e7:b2:a7:f2:c8:3d:36:7d:f8: fc:c0:9a:01:e9:ac:16:26:c7:a9:a0:cb:95:18:c8: 27:69:c7:f0:28:ef:e0:a5:46:0a:68:0c:12:3a:fc: 70:e4:78:d6:44:3f:b3:fe:56:e7:52:00:53:de:be: cb:ed:a5:4d:fa:90:49:6d:15:20:80:69:6d:71:05: 92:23:91:df:09:8d:fc:aa:15:d1:00:6f:c3:3f:bd: 7e:a8:f6:43:b5:30:4e:23:a5:fb:62:80:6a:ad:63: 8a:87:a0:25:b7:34:3b:7e:1f:d0:1d:87:c2:2c:3f: cd:21:81:44:b0:4c:0e:6d:47:f1:ab:f1:f1:58:a3: 05:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:FF:C6:BF:56:7B:75:AA:BE:71:DC:E5:DA:B3:58:05:61:70:C3:40 X509v3 Authority Key Identifier: keyid:7B:19:C5:AE:35:AE:D8:3A:FA:60:46:3B:5F:3C:0A:60:36:E4:FF:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exnFrjWu2Dr6YEY7XzwKYDbk_5s.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1C02/BD7F2F569A0011EC836BC958C4F9AE02/exnFrjWu2Dr6YEY7XzwKYDbk_5s.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:78:bc:ba:7e:ad:8c:af:2a:f6:d5:10:ca:ed:86:b7:71: bc:72:0c:ef:49:f6:95:e7:6e:d9:84:f4:48:5d:8a:20:ee:88: 4a:68:9b:e4:4f:17:4c:92:81:91:13:62:d0:02:ea:dd:9c:a0: 59:26:4c:79:45:0a:4c:08:4f:c3:90:85:14:1c:df:d3:a4:e2: d2:7c:aa:bf:f0:d1:1b:b8:37:0d:3c:8e:84:2b:a3:4e:ce:a1: f0:6b:48:5e:b0:02:ec:df:13:d9:d8:8b:bf:74:f3:82:28:b5: 04:d3:2c:83:ac:16:1d:53:69:e4:7e:93:0e:ee:1b:7a:32:0d: 6a:e7:75:99:f8:f4:ec:20:67:6f:4d:54:f0:71:a9:f0:75:25: dd:9c:b5:b3:af:78:96:e4:1a:ab:08:7a:f8:14:2b:cb:da:cd: dc:37:43:73:72:ab:59:cc:8d:af:2d:f2:8d:9b:40:3f:bc:ae: a4:19:26:04:56:23:d6:5e:55:44:b4:69:6e:9d:79:02:4a:e4: 4d:83:32:f9:35:c3:9a:38:c2:a8:63:95:07:f5:c1:9b:d0:5b: 3f:0a:95:51:ca:b2:4c:7e:ed:26:39:c4:48:d9:50:30:0e:01: 73:d7:9d:1f:1e:fa:cd:24:0e:f3:6f:bc:8c:70:eb:07:1e:1c: 02:f6:2c:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDFDMDIxMTAvBgNVBAUTKDdCMTlDNUFFMzVBRUQ4M0FGQTYwNDYzQjVGM0MwQTYw MzZFNEZGOUIwHhcNMjUxMTA1MDAzNTMxWhcNMjUxMTEyMDAzNTMxWjAYMRYwFAYD VQQDEw02OTBhOWJkNC1hYWU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3+gdSLe+gdH7c9xlp34q/C7V1zRFNhhKQ7dhjc8pnl5e/CfxdbJmok3Z5kor VKxlmMSi/PcP9o9rv1+5Z7vUCdjs2Hx7nmf/QEBB5SJQfptoeK6oojaD/fqH+UA3 iI+f5s8C+czHUAYSdLW/X4edbDxeR73zh679hegUCrznsqfyyD02ffj8wJoB6awW JsepoMuVGMgnacfwKO/gpUYKaAwSOvxw5HjWRD+z/lbnUgBT3r7L7aVN+pBJbRUg gGltcQWSI5HfCY38qhXRAG/DP71+qPZDtTBOI6X7YoBqrWOKh6AltzQ7fh/QHYfC LD/NIYFEsEwObUfxq/HxWKMFowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAr/xr9W e3WqvnHc5dqzWAVhcMNAMB8GA1UdIwQYMBaAFHsZxa41rtg6+mBGO188CmA25P+b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMUMwMi9CRDdGMkY1NjlB MDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJEcjZZRVk3WHp3S1lEYmtf NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2V4bkZyald1MkRyNllFWTdYendLWURia181cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MUMwMi9CRDdGMkY1NjlBMDAxMUVDODM2QkM5NThDNEY5QUUwMi9leG5GcmpXdTJE cjZZRVk3WHp3S1lEYmtfNXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYwni8un6tjK8q9tUQyu2Gt3G8cgzvSfaV527ZhPRIXYog7ohKaJvk TxdMkoGRE2LQAurdnKBZJkx5RQpMCE/DkIUUHN/TpOLSfKq/8NEbuDcNPI6EK6NO zqHwa0hesALs3xPZ2Iu/dPOCKLUE0yyDrBYdU2nkfpMO7ht6Mg1q53WZ+PTsIGdv TVTwcanwdSXdnLWzr3iW5BqrCHr4FCvL2s3cN0NzcqtZzI2vLfKNm0A/vK6kGSYE ViPWXlVEtGlunXkCSuRNgzL5NcOaOMKoY5UH9cGb0Fs/CpVRyrJMfu0mOcRI2VAw DgFz150fHvrNJA7zb7yMcOsHHhwC9iwd -----END CERTIFICATE-----Generated at Wed Nov 5 16:39:38 2025 by rpki-client