$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft File: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft (raw, json) Hash identifier: koKyOmbnKv2ckQuHPt6EDNLnBGMMCxJp+TE1WFJsA8Y= Subject key identifier: 21:EA:FD:DD:FF:C9:2E:71:6A:E4:DF:7F:5D:BC:14:6A:6F:46:8F:E9 Authority key identifier: 53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 Certificate issuer: /CN=A91F3AF8/serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Certificate serial: 0806 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft Manifest number: 07FA Signing time: Sun 02 Nov 2025 20:59:17 +0000 Manifest this update: Sun 02 Nov 2025 20:59:17 +0000 Manifest next update: Sun 09 Nov 2025 20:59:17 +0000 Files and hashes: 1: Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl (hash: Zfsufj2j7gXEaCDluie6n7iaPWI2LwIQbn7VXQeIArQ=) 2: 3791632A030011EB909C3244C4F9AE02.roa (hash: dB3zmsBTd89CRpUWBbCoSsuPQSrK3XC84t7uk9x1cA8=) 3: CC08667A7A6011EB9BC9937BC4F9AE02.roa (hash: Z/3rZQtnqfOwNEnHVO1+ydXZ5JjAuPVHRMvibrG3oIc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 20:59:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2054 (0x806) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3AF8, serialNumber=530D29ADC0FB1CF2837D39BB86343486C1C71682 Validity Not Before: Nov 2 20:59:17 2025 GMT Not After : Nov 9 20:59:17 2025 GMT Subject: CN=6907c625-fbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:97:6b:e9:4e:d7:f7:9f:38:88:a3:fe:e4:43: b7:48:2e:f3:d8:f2:67:16:79:df:cd:e4:fa:40:f4: e3:42:5a:ae:5a:b3:e3:e3:21:79:4f:69:84:fe:06: cd:0c:33:3b:d8:43:60:57:23:5c:a3:b9:51:3e:3c: ed:9d:9c:90:03:f4:98:c0:ed:e4:30:3d:ae:66:28: a7:03:02:db:9b:b5:37:f3:cd:ca:9c:fa:15:06:ee: 1b:2b:3f:f8:25:7c:5b:41:14:32:b4:e0:00:d4:a1: d9:19:be:73:4d:c0:af:aa:ab:fa:3c:ac:50:86:00: 86:e4:da:5b:4b:c5:ee:89:46:70:4e:79:79:37:78: 34:f9:39:9f:51:a4:b0:90:9f:38:25:4a:14:9a:87: 4a:aa:3d:fd:aa:27:22:34:bf:29:70:66:59:a9:73: 42:a5:ec:3f:6a:c2:58:95:26:3c:e7:26:90:1a:b9: 6c:21:1c:bd:75:f5:93:80:e6:d7:a3:31:a6:12:a5: 9f:9b:a2:03:e5:3b:4d:a7:c8:05:3e:77:42:be:c9: 3e:a2:6b:60:a9:fe:27:5f:f4:9e:59:c7:b3:1f:b3: ba:70:db:71:f7:20:93:ae:35:c6:ec:54:a3:c5:38: ba:b2:6e:77:4b:84:fc:4f:33:4a:14:9b:fd:53:18: fe:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EA:FD:DD:FF:C9:2E:71:6A:E4:DF:7F:5D:BC:14:6A:6F:46:8F:E9 X509v3 Authority Key Identifier: keyid:53:0D:29:AD:C0:FB:1C:F2:83:7D:39:BB:86:34:34:86:C1:C7:16:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3AF8/48297FEE02FE11EBB706643EC4F9AE02/Uw0prcD7HPKDfTm7hjQ0hsHHFoI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3f:bc:df:30:49:61:72:58:66:eb:08:96:a9:94:ad:7d:48:38: 0d:9f:74:f7:81:21:5b:79:1f:fb:b8:c3:8a:18:fc:be:ee:0d: cf:d6:92:24:85:a0:02:90:e6:ff:f0:b8:38:4b:46:66:69:63: de:b0:a5:43:00:6a:17:a1:51:bb:ad:28:35:a7:21:39:0d:e6: 0d:0f:38:be:d5:c4:f3:71:26:43:1b:dc:b1:9d:bd:3c:65:ff: fb:51:3b:9c:14:ba:d5:73:39:fb:a8:d0:c6:97:73:46:56:ef: fc:2b:e2:06:bf:1d:48:49:d9:f5:5b:f0:2b:30:70:2d:9b:b9: b2:2d:b3:ea:78:49:45:ad:e7:d8:51:5a:25:01:34:13:3c:41: a0:78:af:fc:b4:1e:83:74:e0:f0:c1:9c:8d:0c:d3:9c:2c:31: 88:2e:9b:47:e5:6c:7e:1b:a1:49:59:71:8f:8c:92:e7:52:22: f4:3a:6b:00:ab:0c:8b:9f:2e:8d:60:5d:8f:f8:03:0b:9b:7a: a7:6b:0a:24:01:74:8e:fd:51:36:1c:85:88:d8:51:3f:19:45: 0d:f5:14:12:65:c0:cf:55:74:85:a0:b8:21:46:e2:96:10:ad: 76:6e:f8:a2:58:c9:26:d9:17:26:29:02:b8:a7:ff:d1:4d:3b: 16:c8:5b:7b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCAYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjNBRjgxMTAvBgNVBAUTKDUzMEQyOUFEQzBGQjFDRjI4MzdEMzlCQjg2MzQzNDg2 QzFDNzE2ODIwHhcNMjUxMTAyMjA1OTE3WhcNMjUxMTA5MjA1OTE3WjAYMRYwFAYD VQQDEw02OTA3YzYyNS1mYmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqpdr6U7X9584iKP+5EO3SC7z2PJnFnnfzeT6QPTjQlquWrPj4yF5T2mE/gbN DDM72ENgVyNco7lRPjztnZyQA/SYwO3kMD2uZiinAwLbm7U3883KnPoVBu4bKz/4 JXxbQRQytOAA1KHZGb5zTcCvqqv6PKxQhgCG5NpbS8XuiUZwTnl5N3g0+TmfUaSw kJ84JUoUmodKqj39qiciNL8pcGZZqXNCpew/asJYlSY85yaQGrlsIRy9dfWTgObX ozGmEqWfm6ID5TtNp8gFPndCvsk+omtgqf4nX/SeWcezH7O6cNtx9yCTrjXG7FSj xTi6sm53S4T8TzNKFJv9Uxj+/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCHq/d3/ yS5xauTff128FGpvRo/pMB8GA1UdIwQYMBaAFFMNKa3A+xzyg305u4Y0NIbBxxaC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGM0FGOC80ODI5N0ZFRTAy RkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQS0RmVG03aGpRMGhzSEhG b0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V3MHByY0Q3SFBLRGZUbTdoalEwaHNISEZvSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0FGOC80ODI5N0ZFRTAyRkUxMUVCQjcwNjY0M0VDNEY5QUUwMi9VdzBwcmNEN0hQ S0RmVG03aGpRMGhzSEhGb0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA/vN8wSWFyWGbrCJaplK19SDgNn3T3gSFbeR/7uMOKGPy+7g3P1pIk haACkOb/8Lg4S0ZmaWPesKVDAGoXoVG7rSg1pyE5DeYNDzi+1cTzcSZDG9yxnb08 Zf/7UTucFLrVczn7qNDGl3NGVu/8K+IGvx1ISdn1W/ArMHAtm7myLbPqeElFrefY UVolATQTPEGgeK/8tB6DdODwwZyNDNOcLDGILptH5Wx+G6FJWXGPjJLnUiL0OmsA qwyLny6NYF2P+AMLm3qnawokAXSO/VE2HIWI2FE/GUUN9RQSZcDPVXSFoLghRuKW EK12bviiWMkm2RcmKQK4p//RTTsWyFt7 -----END CERTIFICATE-----Generated at Mon Nov 3 18:18:00 2025 by rpki-client