$ rpki-client -vvf rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft File: Znvt9oJs9x83Ba2x89T7FITwiBQ.mft (raw, json) Hash identifier: I2iSONA7pN7EGOE3TRd2ACKsOK9oBst+Ynjfbdv3cKE= Subject key identifier: 5C:91:DD:FC:0E:B6:5B:C1:49:F2:23:7B:38:39:3E:B0:1C:06:CF:23 Authority key identifier: 66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 Certificate issuer: /CN=A91DB39A/serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft Manifest number: 03B7 Signing time: Mon 03 Nov 2025 00:38:50 +0000 Manifest this update: Mon 03 Nov 2025 00:38:49 +0000 Manifest next update: Mon 10 Nov 2025 00:38:49 +0000 Files and hashes: 1: Znvt9oJs9x83Ba2x89T7FITwiBQ.crl (hash: iuJzsWOcYbJkZa5xWlnKeFWoVFRFUUS6dywI84Fhvtk=) 2: 6108822AB03C11EC918CBA0EC4F9AE02.roa (hash: 1IbCI6SUsnpFHSypZmjM58SN3Uz6QJzWDA0ZH6CaOF8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:38:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DB39A, serialNumber=667BEDF6826CF71F3705ADB1F3D4FB1484F08814 Validity Not Before: Nov 3 00:38:49 2025 GMT Not After : Nov 10 00:38:49 2025 GMT Subject: CN=6907f99a-406d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:dc:9c:4c:4a:51:8e:d1:57:bc:d7:df:ca:5c: c0:4d:32:57:be:14:bc:78:56:fe:da:7b:95:8c:62: 80:aa:0c:23:0e:7c:09:1b:d1:70:c0:87:b5:19:2d: 60:f9:31:56:4b:02:92:92:64:50:89:9c:e0:fa:ff: f3:ba:2a:70:e7:50:bf:5b:ef:1d:48:5c:b9:bd:48: 5a:9b:78:3c:ec:2a:ed:b5:25:ec:0b:ac:04:26:5a: 66:cf:d2:ce:b2:09:80:cf:e9:ad:39:1e:62:b6:4a: 18:55:6d:5f:6a:ac:db:31:1c:fa:c9:2a:1a:b5:e3: f8:12:93:98:74:f1:5c:c4:ef:d6:1a:c8:5e:d9:9f: 37:f3:ff:3c:ae:3d:4d:02:8c:94:bf:04:41:90:b2: 8c:0e:5c:75:66:ab:bc:2f:24:8e:e7:23:f0:aa:61: 21:bd:12:74:ef:dd:81:00:4c:a6:8f:00:d9:f4:27: 3d:7d:7c:b8:01:75:57:95:bf:d9:b0:ae:3b:1d:9f: 67:5e:20:2b:cc:59:41:5e:4d:d6:d9:38:7f:fc:cf: c9:90:c9:62:0c:da:43:a4:89:6a:2e:12:8a:2d:c5: ba:f9:7f:33:cf:63:1a:c2:f1:1f:2a:e3:27:48:f2: 3b:7f:4f:04:4e:c6:c6:4a:a8:e6:db:11:61:28:01: bd:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:91:DD:FC:0E:B6:5B:C1:49:F2:23:7B:38:39:3E:B0:1C:06:CF:23 X509v3 Authority Key Identifier: keyid:66:7B:ED:F6:82:6C:F7:1F:37:05:AD:B1:F3:D4:FB:14:84:F0:88:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Znvt9oJs9x83Ba2x89T7FITwiBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DB39A/E1DD5D42B03911EC953BFB0DC4F9AE02/Znvt9oJs9x83Ba2x89T7FITwiBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:41:88:f1:27:cb:24:cb:e6:61:fc:b6:fa:2a:5e:31:1e:6b: 29:96:77:b2:ee:ca:3b:69:b7:32:00:03:44:de:8a:71:0a:2e: ac:79:32:e9:53:18:08:14:28:ee:e7:22:e6:a3:ea:0f:e8:3d: 6a:8e:b1:0a:09:7d:06:16:8d:92:1d:e7:96:ee:56:ba:38:5d: cb:86:69:33:e8:26:45:3e:bf:b0:c9:c5:df:fb:7b:38:44:b0: 3f:93:ff:78:25:b6:6f:bd:d4:2c:85:b8:32:46:ef:9a:09:4a: fe:5d:f8:f8:23:0c:88:50:1e:28:45:6c:f9:0f:7d:af:98:dd: f4:b7:13:61:03:66:35:65:c8:1b:a0:08:5b:94:22:a2:27:cd: 3e:d4:1e:d6:ad:4e:9f:b9:4a:a1:63:66:d9:ce:6a:c7:1d:b4: 5f:e6:4e:d0:e0:15:6d:10:dc:76:e6:ae:26:6d:d3:0b:28:c0: 17:8b:94:52:cf:04:ec:57:40:74:88:bc:c8:ff:11:ce:18:41: d2:61:e0:74:73:9a:90:0a:25:cf:86:ec:80:26:82:01:93:e0: 34:9d:46:c8:ac:3a:36:65:2c:87:28:06:00:78:0c:87:ba:7a: 9a:c9:f9:cf:a7:3e:a6:da:a7:38:36:48:a1:86:00:8b:2d:d0: 1b:7d:19:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REIzOUExMTAvBgNVBAUTKDY2N0JFREY2ODI2Q0Y3MUYzNzA1QURCMUYzRDRGQjE0 ODRGMDg4MTQwHhcNMjUxMTAzMDAzODQ5WhcNMjUxMTEwMDAzODQ5WjAYMRYwFAYD VQQDEw02OTA3Zjk5YS00MDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr9ycTEpRjtFXvNffylzATTJXvhS8eFb+2nuVjGKAqgwjDnwJG9FwwIe1GS1g +TFWSwKSkmRQiZzg+v/zuipw51C/W+8dSFy5vUham3g87CrttSXsC6wEJlpmz9LO sgmAz+mtOR5itkoYVW1faqzbMRz6ySoateP4EpOYdPFcxO/WGshe2Z838/88rj1N AoyUvwRBkLKMDlx1Zqu8LySO5yPwqmEhvRJ0792BAEymjwDZ9Cc9fXy4AXVXlb/Z sK47HZ9nXiArzFlBXk3W2Th//M/JkMliDNpDpIlqLhKKLcW6+X8zz2MawvEfKuMn SPI7f08ETsbGSqjm2xFhKAG9AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFyR3fwO tlvBSfIjezg5PrAcBs8jMB8GA1UdIwQYMBaAFGZ77faCbPcfNwWtsfPU+xSE8IgU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQjM5QS9FMURENUQ0MkIw MzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4ODNCYTJ4ODlUN0ZJVHdp QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pudnQ5b0pzOXg4M0JhMng4OVQ3RklUd2lCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QjM5QS9FMURENUQ0MkIwMzkxMUVDOTUzQkZCMERDNEY5QUUwMi9abnZ0OW9Kczl4 ODNCYTJ4ODlUN0ZJVHdpQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYQYjxJ8sky+Zh/Lb6Kl4xHmsplney7so7abcyAANE3opxCi6seTLp UxgIFCju5yLmo+oP6D1qjrEKCX0GFo2SHeeW7la6OF3Lhmkz6CZFPr+wycXf+3s4 RLA/k/94JbZvvdQshbgyRu+aCUr+Xfj4IwyIUB4oRWz5D32vmN30txNhA2Y1Zcgb oAhblCKiJ80+1B7WrU6fuUqhY2bZzmrHHbRf5k7Q4BVtENx25q4mbdMLKMAXi5RS zwTsV0B0iLzI/xHOGEHSYeB0c5qQCiXPhuyAJoIBk+A0nUbIrDo2ZSyHKAYAeAyH unqayfnPpz6m2qc4NkihhgCLLdAbfRnh -----END CERTIFICATE-----Generated at Mon Nov 3 18:16:41 2025 by rpki-client