$ rpki-client -vvf rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft File: F19zLkbbq-mqcYHfg8cm729vW8I.mft (raw, json) Hash identifier: sGY4pmaIGdyvWDqzSTVoPS1tje/YWxMtrpKIfUg2DWg= Subject key identifier: A0:67:0A:40:3B:70:F4:17:94:FD:0D:03:78:85:AA:D8:F2:20:54:7A Authority key identifier: 17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 Certificate issuer: /CN=A91F680E/serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Certificate serial: 0437 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft Manifest number: 0433 Signing time: Wed 05 Nov 2025 00:22:27 +0000 Manifest this update: Wed 05 Nov 2025 00:22:26 +0000 Manifest next update: Wed 12 Nov 2025 00:22:26 +0000 Files and hashes: 1: F19zLkbbq-mqcYHfg8cm729vW8I.crl (hash: TcySd8FWI312uC8qEwX9DZCxXLEJmAMbmBFLUJWeCrE=) 2: 76FA00E87EE811EC8D796C6EC4F9AE02.roa (hash: wgDb1KnVQWBoZ1T5BXpX71TMMnESBtSdKYU93dImmgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1079 (0x437) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F680E, serialNumber=175F732E46DBABE9AA7181DF83C726EF6F6F5BC2 Validity Not Before: Nov 5 00:22:26 2025 GMT Not After : Nov 12 00:22:26 2025 GMT Subject: CN=690a98c2-8369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:e1:cb:75:1c:7b:9d:bc:dd:7e:1f:63:bb: f2:d1:df:5c:7b:66:34:be:92:22:1e:d3:9f:0c:6c: 17:7f:59:8a:30:1e:dc:c8:90:8f:14:2f:7d:92:6a: da:96:3f:ca:ce:8f:ee:b6:16:8a:c4:3d:79:ca:72: 33:35:8f:72:c9:34:39:47:33:f5:c1:08:8c:81:80: 3a:15:bf:c4:c1:b2:64:68:ee:b1:68:ce:1c:45:e0: 48:f8:c5:e4:23:9c:3f:4a:c1:4c:8b:1e:ad:ea:3d: 74:72:ae:51:41:bd:4d:b2:0e:a1:03:96:5a:49:36: bc:e3:94:1d:62:60:33:43:e9:a8:7a:aa:fa:38:95: 77:e2:0e:15:8a:36:f5:b3:b3:58:4e:fd:00:d9:4d: e3:92:37:99:c0:a1:f3:3d:15:8e:e6:a7:0f:c8:1c: 3a:d1:f7:e0:0c:c1:29:dc:d0:12:33:5a:99:e9:6b: f9:64:6f:5c:2d:4c:07:e2:b5:1c:eb:a5:00:77:c7: cd:a5:ac:25:48:9f:6d:8d:2a:ba:40:6d:43:ce:11: f4:77:71:c7:7d:92:f4:7c:90:91:21:96:c1:48:9a: 2e:de:bf:5b:32:46:f4:90:e2:84:dd:11:0b:6b:f0: 06:e5:1a:70:14:84:64:21:fe:e9:87:a0:fa:b4:56: bb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:67:0A:40:3B:70:F4:17:94:FD:0D:03:78:85:AA:D8:F2:20:54:7A X509v3 Authority Key Identifier: keyid:17:5F:73:2E:46:DB:AB:E9:AA:71:81:DF:83:C7:26:EF:6F:6F:5B:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F19zLkbbq-mqcYHfg8cm729vW8I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F680E/D6F7BAD87EE511EC94EB5D6CC4F9AE02/F19zLkbbq-mqcYHfg8cm729vW8I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:68:f6:00:75:c8:70:00:37:bb:f6:a7:0d:23:f1:98:7b:11: 4f:d3:e7:2a:fc:b3:69:c7:75:db:2d:35:12:58:2e:4f:39:af: a6:2a:08:20:1d:57:e2:5d:b5:76:b2:fb:95:f9:f0:86:41:ab: 6e:65:60:7f:26:22:38:44:a4:9d:0f:cc:ba:ed:9a:68:cc:f8: eb:9d:77:0e:a8:75:41:d2:d9:77:e3:7d:f2:d4:8b:fa:a6:32: 90:27:d2:17:e7:a3:44:1a:4b:10:53:2d:cc:d1:f6:ba:a2:9c: 73:f1:ce:4e:8e:7c:7e:c6:9c:66:2a:07:b3:69:f4:bc:f4:be: df:f7:f3:6d:76:11:1d:32:a6:d1:28:d1:28:92:a0:96:1f:30: e7:79:86:fd:b3:e0:f0:df:05:40:be:81:fd:ba:6c:0d:37:02: dd:61:db:30:1e:da:07:7a:e0:50:78:ea:fe:c2:2e:5d:97:86: ea:31:6e:70:76:e2:de:85:5e:12:e1:da:3d:15:ec:00:21:20: 71:14:8c:59:40:c5:33:7f:48:bd:27:cc:52:fb:aa:b3:84:b6: db:ce:67:53:e5:a6:ee:0c:88:bd:e0:68:fb:29:47:ea:38:a5: db:9b:98:04:ec:b9:6f:ca:14:59:a6:2e:60:67:d4:cf:a5:e5: 56:a8:a8:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY4MEUxMTAvBgNVBAUTKDE3NUY3MzJFNDZEQkFCRTlBQTcxODFERjgzQzcyNkVG NkY2RjVCQzIwHhcNMjUxMTA1MDAyMjI2WhcNMjUxMTEyMDAyMjI2WjAYMRYwFAYD VQQDEw02OTBhOThjMi04MzY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1nDhy3Uce5283X4fY7vy0d9ce2Y0vpIiHtOfDGwXf1mKMB7cyJCPFC99kmra lj/Kzo/uthaKxD15ynIzNY9yyTQ5RzP1wQiMgYA6Fb/EwbJkaO6xaM4cReBI+MXk I5w/SsFMix6t6j10cq5RQb1Nsg6hA5ZaSTa845QdYmAzQ+moeqr6OJV34g4Vijb1 s7NYTv0A2U3jkjeZwKHzPRWO5qcPyBw60ffgDMEp3NASM1qZ6Wv5ZG9cLUwH4rUc 66UAd8fNpawlSJ9tjSq6QG1DzhH0d3HHfZL0fJCRIZbBSJou3r9bMkb0kOKE3REL a/AG5RpwFIRkIf7ph6D6tFa7ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBnCkA7 cPQXlP0NA3iFqtjyIFR6MB8GA1UdIwQYMBaAFBdfcy5G26vpqnGB34PHJu9vb1vC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjgwRS9ENkY3QkFEODdF RTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEtbXFjWUhmZzhjbTcyOXZX OEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YxOXpMa2JicS1tcWNZSGZnOGNtNzI5dlc4SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NjgwRS9ENkY3QkFEODdFRTUxMUVDOTRFQjVENkNDNEY5QUUwMi9GMTl6TGtiYnEt bXFjWUhmZzhjbTcyOXZXOEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0aPYAdchwADe79qcNI/GYexFP0+cq/LNpx3XbLTUSWC5POa+mKggg HVfiXbV2svuV+fCGQatuZWB/JiI4RKSdD8y67ZpozPjrnXcOqHVB0tl3433y1Iv6 pjKQJ9IX56NEGksQUy3M0fa6opxz8c5Ojnx+xpxmKgezafS89L7f9/NtdhEdMqbR KNEokqCWHzDneYb9s+Dw3wVAvoH9umwNNwLdYdswHtoHeuBQeOr+wi5dl4bqMW5w duLehV4S4do9FewAISBxFIxZQMUzf0i9J8xS+6qzhLbbzmdT5abuDIi94Gj7KUfq OKXbm5gE7LlvyhRZpi5gZ9TPpeVWqKgK -----END CERTIFICATE-----Generated at Wed Nov 5 07:58:34 2025 by rpki-client