$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft File: 7FY9v-LzmMjp-xn590IytrVKpuo.mft (raw, json) Hash identifier: A+7bKSBMUkM5yoFZXoIsegzN0TX2Mp/FfRliOYL3Gzk= Subject key identifier: 9F:9D:DE:5B:79:21:D0:F8:46:04:FE:71:2A:75:E8:04:29:AE:A7:EB Authority key identifier: EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA Certificate issuer: /CN=A91E8632/serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Certificate serial: 1B54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft Manifest number: 1B2B Signing time: Sun 02 Nov 2025 16:18:24 +0000 Manifest this update: Sun 02 Nov 2025 16:18:24 +0000 Manifest next update: Sun 09 Nov 2025 16:18:24 +0000 Files and hashes: 1: 7FY9v-LzmMjp-xn590IytrVKpuo.crl (hash: h4lxstEXEyHDtKdxgNcZ5kAglnGQAVXp3OghhjRUD+k=) 2: 6290CEFA3E3611F0BC85B94CC4F9AE02.roa (hash: LOoxZWeDgU2+wusXufQ94pg+OOkfT8j3WfNTQznwf90=) 3: F8ED87B8FCE811EC9E4E3A4DC4F9AE02.roa (hash: LUrVRFHpHNZiTqSy0L8SOTOMfbUQlb1OEo2uN/0dmZA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6996 (0x1b54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8632, serialNumber=EC563DBFE2F398C8E9FB19F9F74232B6B54AA6EA Validity Not Before: Nov 2 16:18:24 2025 GMT Not After : Nov 9 16:18:24 2025 GMT Subject: CN=69078450-7574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:66:96:98:ea:e3:12:a5:84:ef:d4:b9:14:74: f3:9a:4d:ac:20:46:63:f8:ce:42:6e:83:8d:60:7a: da:21:51:ab:11:78:1d:9a:7b:9e:7d:e9:60:b8:31: a6:9b:18:7b:65:ce:aa:df:cb:6c:2c:d0:26:89:2f: c4:0c:b5:25:f7:3d:de:b4:e2:93:d2:78:18:c1:cd: d1:20:ff:04:69:5d:22:e2:cc:1c:c3:3a:3a:76:b7: 95:c4:65:38:5c:77:2b:9c:dc:fe:bc:57:31:b7:8b: 1c:e8:5d:46:f4:fd:7c:94:23:4e:e4:46:3b:e2:7f: 7c:fb:a2:19:6e:b7:d7:51:4d:a8:b3:cb:32:07:8c: 83:10:91:9b:aa:d7:35:1d:1a:1b:ef:9b:11:4c:b7: 95:8a:6f:d3:f8:ed:70:59:dd:49:22:4c:09:ff:02: 04:22:44:2d:a7:68:d0:46:bb:fc:10:43:7a:c0:f6: d4:37:0a:10:4b:50:61:84:80:06:f0:83:f7:ed:cf: 9c:08:50:41:f5:31:cc:52:7a:57:2a:b3:30:20:04: 35:6f:0f:84:f6:36:92:34:44:8b:e8:37:62:b5:d0: 5a:fa:90:d9:f7:d8:fe:7c:eb:10:0f:32:bf:b1:de: 9b:5b:4f:fe:d7:99:51:06:8c:d8:a3:0d:c9:0d:b8: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:9D:DE:5B:79:21:D0:F8:46:04:FE:71:2A:75:E8:04:29:AE:A7:EB X509v3 Authority Key Identifier: keyid:EC:56:3D:BF:E2:F3:98:C8:E9:FB:19:F9:F7:42:32:B6:B5:4A:A6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7FY9v-LzmMjp-xn590IytrVKpuo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8632/05CE44EA2E5E11E7BAC88B69C4F9AE02/7FY9v-LzmMjp-xn590IytrVKpuo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:7d:a6:78:63:7d:f8:19:fb:b2:05:49:fa:f0:f9:d2:58:63: 28:dd:59:55:e4:1c:49:a3:a6:c5:d2:b9:27:e7:1c:61:58:05: 70:ac:de:33:a9:9f:85:0b:dd:a2:44:bb:fb:01:e2:7b:c9:93: fc:f5:62:9f:c5:0c:f5:3a:ec:e9:0c:08:62:07:2d:9b:0b:ec: 9e:04:fe:bd:27:68:3b:6e:4c:39:fa:a4:59:f0:6c:11:ff:16: 59:8a:d0:21:6e:8c:10:17:ca:a3:4c:8a:5d:97:63:3d:2d:26: 73:3d:c8:9f:4e:ee:73:b3:71:9c:55:4c:c6:0b:60:28:35:f3: 21:22:c7:c4:6c:74:3e:2f:8e:c0:f3:bc:13:20:82:ac:dc:08: 63:5d:25:c1:1e:05:0b:67:d9:dd:67:48:fc:95:c0:25:f2:e5: 93:d6:fb:b8:dd:22:34:85:d2:31:00:e0:f4:a5:b1:d1:f4:72: 6b:ef:d7:28:ab:79:4a:86:73:5c:73:38:cb:8a:c5:41:cc:30: 99:9d:25:93:93:c9:dc:1d:e8:e8:00:31:ba:c8:d5:2f:84:4b: 6f:26:7e:21:3b:a5:61:d6:90:3f:3e:d5:66:c4:06:47:91:cb: 40:32:00:71:f1:04:3d:ec:f2:39:a4:ed:3d:e2:dc:78:27:9b: 25:c9:6f:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICG1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg2MzIxMTAvBgNVBAUTKEVDNTYzREJGRTJGMzk4QzhFOUZCMTlGOUY3NDIzMkI2 QjU0QUE2RUEwHhcNMjUxMTAyMTYxODI0WhcNMjUxMTA5MTYxODI0WjAYMRYwFAYD VQQDEw02OTA3ODQ1MC03NTc0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvWaWmOrjEqWE79S5FHTzmk2sIEZj+M5CboONYHraIVGrEXgdmnuefelguDGm mxh7Zc6q38tsLNAmiS/EDLUl9z3etOKT0ngYwc3RIP8EaV0i4swcwzo6dreVxGU4 XHcrnNz+vFcxt4sc6F1G9P18lCNO5EY74n98+6IZbrfXUU2os8syB4yDEJGbqtc1 HRob75sRTLeVim/T+O1wWd1JIkwJ/wIEIkQtp2jQRrv8EEN6wPbUNwoQS1BhhIAG 8IP37c+cCFBB9THMUnpXKrMwIAQ1bw+E9jaSNESL6DditdBa+pDZ99j+fOsQDzK/ sd6bW0/+15lRBozYow3JDbgS0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+d3lt5 IdD4RgT+cSp16AQprqfrMB8GA1UdIwQYMBaAFOxWPb/i85jI6fsZ+fdCMra1Sqbq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODYzMi8wNUNFNDRFQTJF NUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1NanAteG41OTBJeXRyVktw dW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdGWTl2LUx6bU1qcC14bjU5MEl5dHJWS3B1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODYzMi8wNUNFNDRFQTJFNUUxMUU3QkFDODhCNjlDNEY5QUUwMi83Rlk5di1Mem1N anAteG41OTBJeXRyVktwdW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBDfaZ4Y334GfuyBUn68PnSWGMo3VlV5BxJo6bF0rkn5xxhWAVwrN4z qZ+FC92iRLv7AeJ7yZP89WKfxQz1OuzpDAhiBy2bC+yeBP69J2g7bkw5+qRZ8GwR /xZZitAhbowQF8qjTIpdl2M9LSZzPcifTu5zs3GcVUzGC2AoNfMhIsfEbHQ+L47A 87wTIIKs3AhjXSXBHgULZ9ndZ0j8lcAl8uWT1vu43SI0hdIxAOD0pbHR9HJr79co q3lKhnNcczjLisVBzDCZnSWTk8ncHejoADG6yNUvhEtvJn4hO6Vh1pA/PtVmxAZH kctAMgBx8QQ97PI5pO094tx4J5slyW+L -----END CERTIFICATE-----Generated at Tue Nov 4 08:30:15 2025 by rpki-client