$ rpki-client -vvf rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft File: sumTicSsA0jYrsh1t0aJ0E5wyDo.mft (raw, json) Hash identifier: yc/XZcWZOlPKSm1IAOKkN8BgkMxku+k/lbcOwd5mL8U= Subject key identifier: D5:93:0B:DE:11:72:14:9F:63:68:7E:93:44:C8:5B:29:4D:38:6B:28 Authority key identifier: B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A Certificate issuer: /CN=A91E77A1/serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Certificate serial: 07D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft Manifest number: 07C9 Signing time: Sun 02 Nov 2025 21:15:18 +0000 Manifest this update: Sun 02 Nov 2025 21:15:18 +0000 Manifest next update: Sun 09 Nov 2025 21:15:18 +0000 Files and hashes: 1: sumTicSsA0jYrsh1t0aJ0E5wyDo.crl (hash: HLFbj1AIFbn9vFbWultczyghj/+Trvz3bE1MPkHCxEY=) 2: 4F7AD592169311EB89C20F1DC4F9AE02.roa (hash: 1PaL5t22VHHOGdbUhH+qGnaUlXQ1MvnbAc80idZHNIM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:15:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2001 (0x7d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E77A1, serialNumber=B2E99389C4AC0348D8AEC875B74689D04E70C83A Validity Not Before: Nov 2 21:15:18 2025 GMT Not After : Nov 9 21:15:18 2025 GMT Subject: CN=6907c9e6-03ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fa:41:96:fe:40:81:2d:64:48:d0:12:a4:65: 1d:46:b9:49:ca:8f:cc:2c:95:ac:cb:04:a2:e3:b4: 06:c1:03:bc:77:13:1e:0e:43:6e:9f:ae:46:e4:06: 52:74:24:65:70:78:c7:1a:86:92:e2:16:71:f8:57: bd:ce:85:bd:fa:f8:ec:d6:a7:bd:5d:e4:ac:05:8a: 59:f1:dd:67:bb:93:6b:12:70:fe:76:f9:11:2a:36: e1:84:25:a5:8f:9d:a2:07:a5:b1:a3:cd:2d:d8:ad: 23:f7:27:9a:6b:54:1f:bd:00:1c:9f:d6:e3:c4:d7: 4d:3e:66:9f:61:b7:e0:45:a9:c9:82:b9:02:e2:f3: ea:e8:b6:a6:41:00:7c:d2:b7:fd:4f:cd:1f:6e:09: 96:c8:e1:22:41:53:72:60:45:f2:bf:c9:6b:c2:db: 26:7d:fe:a1:dc:5a:50:01:43:d7:76:42:7e:1f:71: a1:2b:f4:cb:44:d3:3a:06:28:e0:b9:a6:cf:3b:9a: ff:e4:4d:e7:cf:af:4f:a0:4e:b8:44:4e:bf:aa:16: 0f:9d:ad:3f:b7:6c:46:13:a8:6b:99:d8:92:7f:15: 51:2d:c8:ab:41:a3:c4:f5:25:ba:7e:ae:99:66:7c: 22:c7:9c:66:4d:eb:35:ff:2a:5b:6c:39:a3:84:50: df:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:93:0B:DE:11:72:14:9F:63:68:7E:93:44:C8:5B:29:4D:38:6B:28 X509v3 Authority Key Identifier: keyid:B2:E9:93:89:C4:AC:03:48:D8:AE:C8:75:B7:46:89:D0:4E:70:C8:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sumTicSsA0jYrsh1t0aJ0E5wyDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E77A1/B5C27A8C169111EBAAB3041BC4F9AE02/sumTicSsA0jYrsh1t0aJ0E5wyDo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:ab:26:6a:46:d2:ff:e3:b5:b7:e8:24:43:e2:ef:7f:45:cb: f3:13:b0:31:55:18:23:d1:a9:37:a6:d7:a6:6c:f7:0c:d4:d1: aa:20:df:b4:75:17:42:12:cd:01:de:61:28:f6:25:84:21:4a: 29:34:40:f0:1d:46:e8:a6:f5:2a:4d:5c:d3:2e:88:a4:01:e1: f4:23:50:f4:c3:d4:50:a5:56:80:d4:e2:a4:10:8b:71:24:25: 76:88:80:5c:76:a0:ef:1d:d1:b7:bf:33:80:80:ef:29:99:04: 60:6a:bd:5e:1f:8c:e9:cb:bc:4a:1f:57:fe:1b:d0:b1:29:b1: 93:5e:f0:4f:8f:29:14:58:43:65:a9:67:be:c8:0d:5f:a4:1a: db:95:39:cc:81:f2:20:35:68:5b:a4:7f:67:69:e6:7e:9e:19: 64:12:c9:6c:76:19:03:e1:24:4a:46:f9:81:40:f9:ad:1c:cf: d9:96:88:bd:d7:7e:0c:67:7e:fa:0a:d8:9e:6b:c1:61:d7:9d: 94:23:9f:37:ff:3c:33:ca:1c:55:76:bd:c4:df:2a:15:ba:1d: 7f:a2:94:61:b9:01:b2:c9:1f:7b:c4:53:2e:71:85:5c:3a:0b: 25:72:af:b3:96:1b:e4:eb:7c:83:65:a9:2a:3f:0d:98:cc:12: 1e:de:04:be -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3QTExMTAvBgNVBAUTKEIyRTk5Mzg5QzRBQzAzNDhEOEFFQzg3NUI3NDY4OUQw NEU3MEM4M0EwHhcNMjUxMTAyMjExNTE4WhcNMjUxMTA5MjExNTE4WjAYMRYwFAYD VQQDEw02OTA3YzllNi0wM2ZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5fpBlv5AgS1kSNASpGUdRrlJyo/MLJWsywSi47QGwQO8dxMeDkNun65G5AZS dCRlcHjHGoaS4hZx+Fe9zoW9+vjs1qe9XeSsBYpZ8d1nu5NrEnD+dvkRKjbhhCWl j52iB6Wxo80t2K0j9yeaa1QfvQAcn9bjxNdNPmafYbfgRanJgrkC4vPq6LamQQB8 0rf9T80fbgmWyOEiQVNyYEXyv8lrwtsmff6h3FpQAUPXdkJ+H3GhK/TLRNM6Bijg uabPO5r/5E3nz69PoE64RE6/qhYPna0/t2xGE6hrmdiSfxVRLcirQaPE9SW6fq6Z Znwix5xmTes1/ypbbDmjhFDfSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNWTC94R chSfY2h+k0TIWylNOGsoMB8GA1UdIwQYMBaAFLLpk4nErANI2K7IdbdGidBOcMg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzdBMS9CNUMyN0E4QzE2 OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ewallyc2gxdDBhSjBFNXd5 RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3N1bVRpY1NzQTBqWXJzaDF0MGFKMEU1d3lEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NzdBMS9CNUMyN0E4QzE2OTExMUVCQUFCMzA0MUJDNEY5QUUwMi9zdW1UaWNTc0Ew allyc2gxdDBhSjBFNXd5RG8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhqyZqRtL/47W36CRD4u9/RcvzE7AxVRgj0ak3ptembPcM1NGqIN+0 dRdCEs0B3mEo9iWEIUopNEDwHUbopvUqTVzTLoikAeH0I1D0w9RQpVaA1OKkEItx JCV2iIBcdqDvHdG3vzOAgO8pmQRgar1eH4zpy7xKH1f+G9CxKbGTXvBPjykUWENl qWe+yA1fpBrblTnMgfIgNWhbpH9naeZ+nhlkEslsdhkD4SRKRvmBQPmtHM/Zloi9 134MZ376Ctiea8Fh152UI583/zwzyhxVdr3E3yoVuh1/opRhuQGyyR97xFMucYVc Ogslcq+zlhvk63yDZakqPw2YzBIe3gS+ -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:10 2025 by rpki-client