$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft File: v7abwiV2uVe6tf8za36DWNy3Cio.mft (raw, json) Hash identifier: JfyJHQnzjN0Z5HUd4e/NrDSet0nWrCUbnQJYUE5C3as= Subject key identifier: 9D:D1:79:35:06:66:AB:3D:BD:71:F1:85:77:03:25:A2:94:9E:1F:F5 Authority key identifier: BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A Certificate issuer: /CN=A91D5BFB/serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Certificate serial: 221C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft Manifest number: 21FB Signing time: Sun 02 Nov 2025 15:54:08 +0000 Manifest this update: Sun 02 Nov 2025 15:54:08 +0000 Manifest next update: Sun 09 Nov 2025 15:54:08 +0000 Files and hashes: 1: v7abwiV2uVe6tf8za36DWNy3Cio.crl (hash: RnTaZZ3dIlfpxs7gdszLKchWzBIkDheT515MrvE5eds=) 2: 6D2F20B6ECEB11EE960F5531C4F9AE02.roa (hash: VxYl4qfB1zjkRKmgSxnmRNT6jpcxz/oQeuf18i1PilE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:54:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8732 (0x221c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BFB, serialNumber=BFB69BC22576B957BAB5FF336B7E8358DCB70A2A Validity Not Before: Nov 2 15:54:08 2025 GMT Not After : Nov 9 15:54:08 2025 GMT Subject: CN=69077ea0-15a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d0:7b:46:61:21:be:ba:d8:a5:9d:3d:6c:a3: 02:dc:eb:77:09:72:ad:f4:82:60:e8:49:1b:eb:30: 6c:98:82:cc:46:98:a4:16:45:74:c3:e1:dc:06:37: 38:78:c1:66:be:29:fc:9d:88:46:a6:15:bc:e4:a6: c9:a4:1f:f2:fb:b9:9d:95:45:8e:1e:10:9c:e4:aa: f1:91:6e:d9:9f:34:22:7f:d7:e7:7b:7d:0d:b1:1e: 7c:2a:ac:9f:d3:50:76:97:f0:86:94:db:5e:30:d3: 57:2e:e2:7d:4c:b7:f2:7e:a6:60:70:d6:c4:46:af: 68:8b:8b:04:66:5a:1e:29:7a:e3:bc:a4:98:5e:07: 63:de:67:2a:29:d8:23:c4:5b:d4:e4:70:0d:dc:f8: 5f:d9:71:cf:c7:da:ea:90:ca:47:22:b8:ba:f2:c9: 4d:1e:fd:db:a6:3e:29:8f:aa:92:f0:86:dd:11:8b: 57:b8:bf:1b:4a:19:ed:8e:c8:e2:04:ba:34:38:77: e5:4f:9a:48:0a:b9:4d:7d:53:81:9b:64:1b:1b:9f: a7:a1:21:63:ba:03:63:6e:1b:a4:dc:f0:e7:6f:72: 91:0a:75:c5:0d:35:6a:1c:a0:fc:64:91:0f:86:b6: 92:04:94:d4:e2:fd:2d:34:c0:fc:85:39:66:c1:10: e0:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D1:79:35:06:66:AB:3D:BD:71:F1:85:77:03:25:A2:94:9E:1F:F5 X509v3 Authority Key Identifier: keyid:BF:B6:9B:C2:25:76:B9:57:BA:B5:FF:33:6B:7E:83:58:DC:B7:0A:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v7abwiV2uVe6tf8za36DWNy3Cio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BFB/DF2E013ED9FB11E584D11A76C4F9AE02/v7abwiV2uVe6tf8za36DWNy3Cio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:8c:0d:ba:83:a0:fa:39:8d:31:ba:a2:a5:69:ed:6f:a4:3f: d2:5f:5a:bf:5b:66:85:f5:8b:91:e3:3f:20:7b:c0:8d:39:43: 1b:e6:ec:53:39:fe:84:7f:40:a6:18:2f:83:6b:3e:88:a9:b2: 76:55:e8:8b:4f:c6:16:79:ff:39:1f:e5:0a:64:2e:90:02:ac: b7:5f:d5:e7:70:b7:29:06:d6:7c:b2:63:4a:41:a2:6a:a9:8d: 51:8e:d7:51:6f:89:4d:59:31:b8:76:7b:d9:f8:e8:4a:48:eb: 83:2c:20:52:e0:be:f4:3b:8f:fa:14:b0:c8:9c:7f:dc:b8:62: 5d:e6:7e:81:0d:51:f5:f5:ef:20:cd:29:64:ce:9c:3f:e1:cf: d4:29:f9:6b:76:f5:e2:44:0b:38:af:0c:d5:68:4f:0e:a1:bc: 8f:0a:62:a0:45:e0:96:7e:5f:81:9b:c4:35:c3:a0:e7:34:62: e5:05:33:b0:24:ac:f7:85:d2:cb:50:17:11:7f:ea:72:81:98: 73:11:80:8f:b1:16:b6:b9:53:97:f3:71:c9:96:b0:42:1a:15: 72:77:6c:8a:f2:15:70:9a:f0:32:12:f0:ec:4f:ed:c0:d2:1c: 22:83:f5:bd:91:de:21:7b:e1:92:db:dc:96:fd:4b:b9:95:3e: ec:8d:20:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIhwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCRkIxMTAvBgNVBAUTKEJGQjY5QkMyMjU3NkI5NTdCQUI1RkYzMzZCN0U4MzU4 RENCNzBBMkEwHhcNMjUxMTAyMTU1NDA4WhcNMjUxMTA5MTU1NDA4WjAYMRYwFAYD VQQDEw02OTA3N2VhMC0xNWEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzNB7RmEhvrrYpZ09bKMC3Ot3CXKt9IJg6Ekb6zBsmILMRpikFkV0w+HcBjc4 eMFmvin8nYhGphW85KbJpB/y+7mdlUWOHhCc5KrxkW7ZnzQif9fne30NsR58Kqyf 01B2l/CGlNteMNNXLuJ9TLfyfqZgcNbERq9oi4sEZloeKXrjvKSYXgdj3mcqKdgj xFvU5HAN3Phf2XHPx9rqkMpHIri68slNHv3bpj4pj6qS8IbdEYtXuL8bShntjsji BLo0OHflT5pICrlNfVOBm2QbG5+noSFjugNjbhuk3PDnb3KRCnXFDTVqHKD8ZJEP hraSBJTU4v0tNMD8hTlmwRDgswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3ReTUG Zqs9vXHxhXcDJaKUnh/1MB8GA1UdIwQYMBaAFL+2m8IldrlXurX/M2t+g1jctwoq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJGQi9ERjJFMDEzRUQ5 RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVWZTZ0Zjh6YTM2RFdOeTND aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y3YWJ3aVYydVZlNnRmOHphMzZEV055M0Npby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NUJGQi9ERjJFMDEzRUQ5RkIxMUU1ODREMTFBNzZDNEY5QUUwMi92N2Fid2lWMnVW ZTZ0Zjh6YTM2RFdOeTNDaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCljA26g6D6OY0xuqKlae1vpD/SX1q/W2aF9YuR4z8ge8CNOUMb5uxT Of6Ef0CmGC+Daz6IqbJ2VeiLT8YWef85H+UKZC6QAqy3X9XncLcpBtZ8smNKQaJq qY1RjtdRb4lNWTG4dnvZ+OhKSOuDLCBS4L70O4/6FLDInH/cuGJd5n6BDVH19e8g zSlkzpw/4c/UKflrdvXiRAs4rwzVaE8OobyPCmKgReCWfl+Bm8Q1w6DnNGLlBTOw JKz3hdLLUBcRf+pygZhzEYCPsRa2uVOX83HJlrBCGhVyd2yK8hVwmvAyEvDsT+3A 0hwig/W9kd4he+GS29yW/Uu5lT7sjSAg -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:12 2025 by rpki-client