$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft File: 7Y9dbJv8FI96u3CMUpHThHgcYf0.mft (raw, json) Hash identifier: krPCx7AvEj0F9y19aUQM6UN/YKsyvnMAOYbjY9opnrI= Subject key identifier: 06:E6:09:F5:B8:88:6A:C9:E0:21:13:14:79:DE:E5:D7:D3:82:76:C3 Authority key identifier: ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD Certificate issuer: /CN=A91DA0AA/serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Certificate serial: 01EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft Manifest number: 01DD Signing time: Mon 03 Nov 2025 02:54:11 +0000 Manifest this update: Mon 03 Nov 2025 02:54:11 +0000 Manifest next update: Mon 10 Nov 2025 02:54:11 +0000 Files and hashes: 1: 7Y9dbJv8FI96u3CMUpHThHgcYf0.crl (hash: 0fUFFqb0GUdfZ3L0l+zYZG7CqDXKYOH3ByOzBNVIp4k=) 2: E7B6C4DA685E11EFB77BDE0CC4F9AE02.roa (hash: 2Sk6qdac85J3PHWk8OUfv3qQs5GZrJRqheFoyWeSnOE=) 3: C5AFD098167311F0916F5435C4F9AE02.roa (hash: T/t95RGiv+MhA6WaLbxmQnLnySE9uteSKwYbrk4jpmc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 495 (0x1ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA0AA, serialNumber=ED8F5D6C9BFC148F7ABB708C5291D384781C61FD Validity Not Before: Nov 3 02:54:11 2025 GMT Not After : Nov 10 02:54:11 2025 GMT Subject: CN=69081953-684e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:51:c5:db:96:45:fa:ea:d1:6a:cd:e5:c2:cd: a5:34:a1:9b:71:fb:44:f7:ff:5b:58:93:11:6c:d9: 3e:2a:4c:c2:bc:6f:fa:de:8c:6d:78:ea:e8:58:0c: 0d:aa:66:4b:5e:55:aa:df:74:08:47:6e:43:b4:e9: 9c:c3:cb:2e:e3:ee:0c:cf:40:28:e6:20:4f:1a:43: dd:31:9c:12:bd:46:4e:83:79:c3:08:6e:a1:60:dd: f0:59:7b:02:c6:25:ef:86:97:39:e1:86:96:e4:d9: 37:89:38:b1:83:cd:fd:01:f1:c1:97:57:e6:fc:f4: 06:58:bd:17:64:35:c1:6d:83:52:a4:73:b8:9d:74: cd:54:5d:25:b3:e2:e6:06:cc:73:9c:a2:cb:9a:dd: f3:3a:6e:cb:5a:4d:1c:c7:1e:79:de:8d:78:0f:fa: 1b:9e:09:10:fd:a7:28:2d:5a:0a:4b:54:02:55:e5: 76:3a:2e:3d:8c:76:76:44:00:1e:ef:3c:9d:81:86: 73:80:97:e7:da:49:c3:00:fd:c5:49:7c:13:a4:59: 0a:3e:f2:21:dd:a5:23:29:6f:b9:8e:1e:01:78:81: 43:d0:73:0b:f5:a0:f0:5c:e7:1a:b2:c0:80:9d:e9: ac:3c:56:11:9f:dd:49:e4:d8:2d:3f:a2:6e:ff:ed: 89:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E6:09:F5:B8:88:6A:C9:E0:21:13:14:79:DE:E5:D7:D3:82:76:C3 X509v3 Authority Key Identifier: keyid:ED:8F:5D:6C:9B:FC:14:8F:7A:BB:70:8C:52:91:D3:84:78:1C:61:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7Y9dbJv8FI96u3CMUpHThHgcYf0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA0AA/82BBB552003D11EE9608F147C4F9AE02/7Y9dbJv8FI96u3CMUpHThHgcYf0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3f:98:45:40:da:c1:da:b3:48:69:65:09:bf:47:e3:91:fb: 71:82:ef:54:a9:e9:80:10:27:3a:66:23:0a:06:0d:46:51:2a: dd:1c:13:ed:c7:7e:bd:d0:52:f2:18:92:07:70:6d:81:05:c4: 16:94:1f:63:99:ed:6d:f7:41:28:93:09:af:9a:e8:d9:7b:02: 45:24:55:08:58:09:07:66:96:63:05:fc:a2:c5:85:e3:13:07: 0f:6e:fd:d3:93:a9:50:28:61:f2:c4:82:45:21:57:b7:13:5c: af:26:f2:7c:c2:4e:a8:20:65:72:9e:51:87:72:b0:af:04:3a: 37:bd:f1:f8:44:b3:26:83:52:16:64:00:db:cc:99:bf:16:a3: 75:67:09:e0:52:9d:36:9e:ea:52:f8:67:b5:63:5f:5d:91:d8: d5:6f:59:f6:d3:3d:78:86:83:3f:d6:fa:c7:1c:a7:9d:58:8c: c6:ca:67:05:d1:8c:01:4a:92:35:be:77:e9:37:ff:e6:a8:2e: 92:4e:cc:dc:d6:dd:e6:be:cc:b6:3a:ef:39:3d:d8:12:e8:f0: 3f:6f:5a:6f:50:0d:98:03:11:b6:e4:74:24:ba:87:f9:05:6d: 3c:65:c6:51:14:ef:a5:59:28:e5:43:22:da:9c:40:59:46:e6: d4:91:3e:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAe8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REEwQUExMTAvBgNVBAUTKEVEOEY1RDZDOUJGQzE0OEY3QUJCNzA4QzUyOTFEMzg0 NzgxQzYxRkQwHhcNMjUxMTAzMDI1NDExWhcNMjUxMTEwMDI1NDExWjAYMRYwFAYD VQQDEw02OTA4MTk1My02ODRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1HF25ZF+urRas3lws2lNKGbcftE9/9bWJMRbNk+KkzCvG/63oxteOroWAwN qmZLXlWq33QIR25DtOmcw8su4+4Mz0Ao5iBPGkPdMZwSvUZOg3nDCG6hYN3wWXsC xiXvhpc54YaW5Nk3iTixg839AfHBl1fm/PQGWL0XZDXBbYNSpHO4nXTNVF0ls+Lm BsxznKLLmt3zOm7LWk0cxx553o14D/obngkQ/acoLVoKS1QCVeV2Oi49jHZ2RAAe 7zydgYZzgJfn2knDAP3FSXwTpFkKPvIh3aUjKW+5jh4BeIFD0HML9aDwXOcassCA nemsPFYRn91J5NgtP6Ju/+2JPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAbmCfW4 iGrJ4CETFHne5dfTgnbDMB8GA1UdIwQYMBaAFO2PXWyb/BSPertwjFKR04R4HGH9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTBBQS84MkJCQjU1MjAw M0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJOTZ1M0NNVXBIVGhIZ2NZ ZjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdZOWRiSnY4Rkk5NnUzQ01VcEhUaEhnY1lmMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTBBQS84MkJCQjU1MjAwM0QxMUVFOTYwOEYxNDdDNEY5QUUwMi83WTlkYkp2OEZJ OTZ1M0NNVXBIVGhIZ2NZZjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMP5hFQNrB2rNIaWUJv0fjkftxgu9UqemAECc6ZiMKBg1GUSrdHBPt x3690FLyGJIHcG2BBcQWlB9jme1t90EokwmvmujZewJFJFUIWAkHZpZjBfyixYXj EwcPbv3Tk6lQKGHyxIJFIVe3E1yvJvJ8wk6oIGVynlGHcrCvBDo3vfH4RLMmg1IW ZADbzJm/FqN1ZwngUp02nupS+Ge1Y19dkdjVb1n20z14hoM/1vrHHKedWIzGymcF 0YwBSpI1vnfpN//mqC6STszc1t3mvsy2Ou85PdgS6PA/b1pvUA2YAxG25HQkuof5 BW08ZcZRFO+lWSjlQyLanEBZRubUkT57 -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:47 2025 by rpki-client