$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft File: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json) Hash identifier: kFSs9Aan/vik6b6rbCboNwkVUAF02cPPG3Knyl3DlwI= Subject key identifier: BB:2C:21:FF:34:E1:AB:66:DE:04:44:78:E2:B1:AA:3F:5C:B3:4A:28 Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA Certificate issuer: /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft Manifest number: 0154 Signing time: Mon 03 Nov 2025 04:13:13 +0000 Manifest this update: Mon 03 Nov 2025 04:13:12 +0000 Manifest next update: Mon 10 Nov 2025 04:13:12 +0000 Files and hashes: 1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: Tji9odsc7UQx1Nr9wUsQ+r6Lt4SD/24abtkwZcyWDS0=) 2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: yzICNTcM283Dqn+31XlCHYK+SaKesuIOk3Z/S3+BpWk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA Validity Not Before: Nov 3 04:13:12 2025 GMT Not After : Nov 10 04:13:12 2025 GMT Subject: CN=69082bd8-d755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fe:02:ce:9f:c7:3c:f4:ba:cd:d2:55:cc:49: 46:92:1e:81:49:7b:d5:6c:66:b4:62:89:72:f9:2a: 78:f0:f4:22:54:55:7f:14:3c:d5:20:1b:ed:6a:2e: bb:74:8d:6b:eb:36:d8:12:8a:93:39:09:68:ca:54: 84:91:26:b5:81:4b:0c:3c:a8:ab:f9:ff:a1:6e:8c: 00:5b:f5:ad:38:3b:30:4c:4e:d9:35:3a:2e:b8:af: ef:19:79:3d:57:ff:b4:1f:53:3c:e4:1b:b9:c7:79: b5:ec:85:23:c8:29:94:f6:33:c8:35:b4:be:39:73: 9f:20:4f:18:89:01:b3:04:b9:00:be:34:53:3e:17: 7d:e3:ad:46:2f:d9:4c:8c:be:db:99:90:76:83:85: f6:1b:0e:f1:48:09:13:f3:fb:b4:6e:98:8b:d7:79: 90:d3:24:92:62:21:65:31:a6:06:13:9b:3b:8d:bf: 41:4b:c6:20:e1:7e:3b:34:6b:94:32:0a:02:c4:ff: ce:41:a9:5c:0d:89:55:8c:1a:c0:47:fd:7b:ef:3c: ee:11:68:52:d5:89:c6:69:18:a8:b0:43:86:9a:a2: 49:08:f5:22:67:ce:0e:4e:6e:12:bc:41:92:b7:8b: 8a:de:0f:e6:eb:b4:45:46:98:79:32:d4:8f:3c:ff: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:2C:21:FF:34:E1:AB:66:DE:04:44:78:E2:B1:AA:3F:5C:B3:4A:28 X509v3 Authority Key Identifier: keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4b:9d:ed:ab:d4:76:3a:8c:c1:26:c9:31:51:3c:73:ef:63:69: 55:7e:f1:ca:60:31:4c:94:3f:21:21:64:34:c8:b0:8d:5e:11: be:93:2c:33:61:d3:09:c1:07:12:b7:55:87:5e:9d:a4:f5:ff: 8c:f4:c0:c8:40:fa:65:5d:e6:e2:e2:b2:62:37:1c:03:d1:b5: a9:00:b1:1b:34:2c:82:5f:08:90:48:95:dc:c9:13:8a:dd:b2: 31:fc:e8:d4:04:98:54:41:eb:b8:c4:0e:d2:f8:0b:03:b4:98: 48:cd:48:7c:de:93:dc:6e:65:a0:a8:3b:c0:c0:78:cd:3e:83: 1a:3d:3d:52:e1:aa:d7:78:9f:8a:11:0a:5d:29:00:3f:3e:0e: 55:1f:20:2d:8b:aa:12:b0:f3:50:07:12:24:44:45:30:c4:4b: b2:55:32:c8:cd:ed:ac:00:fd:a1:ef:f7:d1:ac:73:50:4f:82: 71:c4:6a:2c:cf:7f:ad:8e:67:89:0e:18:87:15:62:3e:6b:b5: b3:66:bf:90:86:ab:4e:85:e1:2a:8e:69:35:20:81:fe:66:2b: 7f:5f:37:02:3d:77:21:28:ef:b6:11:5b:ef:e7:0b:b2:31:79: 20:d3:ce:d9:cf:3e:fd:04:b7:c4:4b:4c:9f:74:8d:c1:38:6e: 6b:ec:53:f9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKEVGMzBBMjQxNDZERjY2QjFGQTZGQkE1RDY3Njc2OUVC NjRCMzg3QUEwHhcNMjUxMTAzMDQxMzEyWhcNMjUxMTEwMDQxMzEyWjAYMRYwFAYD VQQDEw02OTA4MmJkOC1kNzU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsv4Czp/HPPS6zdJVzElGkh6BSXvVbGa0Yoly+Sp48PQiVFV/FDzVIBvtai67 dI1r6zbYEoqTOQloylSEkSa1gUsMPKir+f+hbowAW/WtODswTE7ZNTouuK/vGXk9 V/+0H1M85Bu5x3m17IUjyCmU9jPINbS+OXOfIE8YiQGzBLkAvjRTPhd9461GL9lM jL7bmZB2g4X2Gw7xSAkT8/u0bpiL13mQ0ySSYiFlMaYGE5s7jb9BS8Yg4X47NGuU MgoCxP/OQalcDYlVjBrAR/177zzuEWhS1YnGaRiosEOGmqJJCPUiZ84OTm4SvEGS t4uK3g/m67RFRph5MtSPPP8XpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLssIf80 4atm3gREeOKxqj9cs0ooMB8GA1UdIwQYMBaAFO8wokFG32ax+m+6XWdnaetks4eq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi9FMTREMUFCNEI2 QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpySDZiN3BkWjJkcDYyU3po Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzd6Q2lRVWJmWnJINmI3cGRaMmRwNjJTemg2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjNBRi9FMTREMUFCNEI2QTYxMUVFQTA0QThCMjNDNEY5QUUwMi83ekNpUVViZlpy SDZiN3BkWjJkcDYyU3poNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBLne2r1HY6jMEmyTFRPHPvY2lVfvHKYDFMlD8hIWQ0yLCNXhG+kywz YdMJwQcSt1WHXp2k9f+M9MDIQPplXebi4rJiNxwD0bWpALEbNCyCXwiQSJXcyROK 3bIx/OjUBJhUQeu4xA7S+AsDtJhIzUh83pPcbmWgqDvAwHjNPoMaPT1S4arXeJ+K EQpdKQA/Pg5VHyAti6oSsPNQBxIkREUwxEuyVTLIze2sAP2h7/fRrHNQT4JxxGos z3+tjmeJDhiHFWI+a7WzZr+QhqtOheEqjmk1IIH+Zit/XzcCPXchKO+2EVvv5wuy MXkg087Zzz79BLfES0yfdI3BOG5r7FP5 -----END CERTIFICATE-----Generated at Mon Nov 3 18:10:22 2025 by rpki-client