$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft File: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft (raw, json) Hash identifier: adTdN8DMksD4myniBYbX9mnfWTdt38ZiepzQ1scS9O4= Subject key identifier: 21:4E:6C:FF:E3:A2:FA:9A:DA:26:22:C2:E1:B8:46:A8:BF:4D:1E:82 Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 021F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft Manifest number: 0215 Signing time: Mon 03 Nov 2025 02:15:00 +0000 Manifest this update: Mon 03 Nov 2025 02:15:00 +0000 Manifest next update: Mon 10 Nov 2025 02:15:00 +0000 Files and hashes: 1: J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl (hash: JDe1aAKgIk+Pbv41ouk9/yDhA5z/HnHbWKAaG5XGpS4=) 2: F04A74EC90C511EDA07C3025C4F9AE02.roa (hash: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA=) 3: 63CC2AA80FEE11EEBCC6AE50C4F9AE02.roa (hash: cOb2KOzEfKEZcsNXW8uSYWT5P5sqT/oMWjbiB66z740=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:14:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 543 (0x21f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Nov 3 02:15:00 2025 GMT Not After : Nov 10 02:15:00 2025 GMT Subject: CN=69081024-68bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:7a:c8:3a:2c:9a:ca:98:3e:ea:92:03:bc: 38:78:f3:97:c1:e6:cb:fd:44:12:24:20:8f:e1:1f: 7f:3f:34:e2:b2:c2:77:e2:a4:ad:ef:30:f7:9b:4d: c7:2e:65:5e:ff:32:3e:62:32:e8:6c:2a:a6:15:8c: 90:3b:70:c0:a4:b8:3c:ff:4a:52:07:87:28:2c:d6: 2c:be:4e:58:b4:dc:56:46:9a:16:a0:5f:e5:e1:68: 8d:a2:a4:63:ce:91:86:0c:be:02:1a:e4:54:1b:db: 97:ad:21:2b:02:c4:52:ac:0d:99:f5:6d:0a:6f:db: 7f:48:dc:83:e3:eb:0d:3c:60:af:69:6e:b3:9a:88: 64:e9:95:ee:d6:02:ba:b3:18:ae:19:82:3f:35:f0: 4a:ae:18:d7:32:13:5e:19:12:2c:ab:c3:1c:01:40: 91:26:01:e3:48:1d:90:47:dd:02:ec:c3:05:ab:7d: 7f:60:40:c3:a1:d3:7f:24:36:0d:11:ad:04:76:29: 09:3e:49:95:71:ec:21:10:29:39:a8:71:fa:26:90: 00:c4:30:e9:d4:66:82:f7:bb:20:c1:46:43:ba:5f: 4d:4e:7b:f8:87:12:79:56:d6:cc:4d:9f:79:27:ad: 7a:4a:5a:31:e5:46:95:5b:76:01:c6:65:4a:ac:85: 00:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4E:6C:FF:E3:A2:FA:9A:DA:26:22:C2:E1:B8:46:A8:BF:4D:1E:82 X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:00:29:fa:18:f8:25:39:5d:8d:63:94:d1:0f:c5:71:ea:ee: 02:b1:97:7f:65:7f:5d:23:43:9f:8e:e6:5b:ac:48:b4:b3:50: 7c:d8:ca:b2:fc:fe:56:92:14:44:87:47:51:b8:10:87:df:f7: ee:6e:be:de:ce:e1:93:e4:73:6a:e0:1d:c0:8d:e2:20:7c:30: 73:a6:65:21:19:f4:fe:3f:6a:29:70:49:d1:53:4a:ce:01:08: 0e:12:78:2e:20:00:73:6c:88:fb:6c:72:06:57:26:6e:49:55: cb:52:48:13:ba:18:67:65:0a:04:1c:d3:37:83:92:d8:be:d3: 17:e8:fc:d8:a4:fa:e0:64:6f:5c:7d:83:ff:2c:15:9c:2e:c3: 7e:2e:3a:57:10:00:d2:a2:32:a4:4d:cd:eb:29:59:0e:a1:61: 8d:9b:5b:a1:93:14:eb:dc:86:4f:4d:94:c1:c3:99:04:c9:af: 58:77:83:81:5e:89:78:66:d3:47:b8:05:0a:99:cb:15:f1:1a: e9:dd:63:02:b4:6c:68:80:ce:8c:c6:8a:f9:86:e0:21:fa:43: e2:c8:ed:c3:fe:1b:f4:f8:60:21:c8:17:55:52:22:91:b3:8e: 39:ec:18:b4:77:ff:f8:6f:d0:8a:ea:7a:73:38:da:c7:a0:36: 46:97:06:e2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUxMTAzMDIxNTAwWhcNMjUxMTEwMDIxNTAwWjAYMRYwFAYD VQQDEw02OTA4MTAyNC02OGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx4d6yDosmsqYPuqSA7w4ePOXwebL/UQSJCCP4R9/PzTissJ34qSt7zD3m03H LmVe/zI+YjLobCqmFYyQO3DApLg8/0pSB4coLNYsvk5YtNxWRpoWoF/l4WiNoqRj zpGGDL4CGuRUG9uXrSErAsRSrA2Z9W0Kb9t/SNyD4+sNPGCvaW6zmohk6ZXu1gK6 sxiuGYI/NfBKrhjXMhNeGRIsq8McAUCRJgHjSB2QR90C7MMFq31/YEDDodN/JDYN Ea0EdikJPkmVcewhECk5qHH6JpAAxDDp1GaC97sgwUZDul9NTnv4hxJ5VtbMTZ95 J616Slox5UaVW3YBxmVKrIUA9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCFObP/j ovqa2iYiwuG4Rqi/TR6CMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDY5Ni9ENkExMUM0QTkwQkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQ YndQc0hnWWYzVXc3bTBsLVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtACn6GPglOV2NY5TRD8Vx6u4CsZd/ZX9dI0OfjuZbrEi0s1B82Mqy /P5WkhREh0dRuBCH3/fubr7ezuGT5HNq4B3AjeIgfDBzpmUhGfT+P2opcEnRU0rO AQgOEnguIABzbIj7bHIGVyZuSVXLUkgTuhhnZQoEHNM3g5LYvtMX6PzYpPrgZG9c fYP/LBWcLsN+LjpXEADSojKkTc3rKVkOoWGNm1uhkxTr3IZPTZTBw5kEya9Yd4OB Xol4ZtNHuAUKmcsV8Rrp3WMCtGxogM6Mxor5huAh+kPiyO3D/hv0+GAhyBdVUiKR s4457Bi0d//4b9CK6npzONrHoDZGlwbi -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:33 2025 by rpki-client