$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft File: SGy4Fr46XgPLcncpiKDeDqlyzao.mft (raw, json) Hash identifier: E8KlceQLOvXD0NQR2FGtM8cuT6wFXo7dl/mW0NUwEW8= Subject key identifier: A3:10:C7:17:12:FE:A6:53:2D:BF:1C:E9:B8:13:44:D6:99:BA:F8:66 Authority key identifier: 48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA Certificate issuer: /CN=A91FC25F/serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Certificate serial: 11 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft Manifest number: 10 Signing time: Mon 03 Nov 2025 07:56:10 +0000 Manifest this update: Mon 03 Nov 2025 07:56:10 +0000 Manifest next update: Mon 10 Nov 2025 07:56:10 +0000 Files and hashes: 1: SGy4Fr46XgPLcncpiKDeDqlyzao.crl (hash: kfEgeISD6c7cJPMbfZmbSPU1B2zBG7y8V7fmhTe2VzY=) 2: 4AF261A4A27811F0898CD81DC4F9AE02.roa (hash: gfhnOPzDyM+Fg9J0TvNJzwIQWU3jT5AWtZ4rTSQDxgE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:56:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17 (0x11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC25F, serialNumber=486CB816BE3A5E03CB72772988A0DE0EA972CDAA Validity Not Before: Nov 3 07:56:10 2025 GMT Not After : Nov 10 07:56:10 2025 GMT Subject: CN=6908601a-bc04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:71:bb:99:b6:dc:af:eb:bc:b5:0f:70:8a: 65:31:70:47:7b:cb:77:da:e5:b7:86:e7:87:84:50: 2e:28:35:2f:2e:55:cd:6e:25:91:96:db:d5:bc:ed: 8a:b9:60:21:71:86:2e:e3:76:3d:33:a9:97:98:fa: a0:47:2a:36:04:15:89:18:f6:7e:a1:d2:f7:28:89: 59:a2:15:27:c4:db:84:2a:b5:fb:b3:0e:16:b1:42: 1f:f4:de:c6:81:f2:49:b5:16:42:d0:f6:30:08:83: 30:3b:27:bb:d0:cf:79:09:12:0c:5a:d1:40:cb:e2: f2:25:a8:57:0d:f6:35:b3:a0:15:b6:2d:2f:2c:6f: 81:78:bc:34:b8:89:b7:f3:b2:3a:d5:74:13:19:63: 89:75:f9:1a:85:3e:d3:3e:64:f4:d2:39:5e:66:9f: 1b:33:3d:80:a0:58:0e:b8:55:03:4a:68:49:8b:6f: 4b:a9:fa:4c:c4:58:3a:76:b2:02:ae:ae:41:c1:b9: 5f:4e:6f:aa:e2:85:b1:26:65:e0:b9:5c:61:80:e0: a0:5e:4a:19:5f:54:b3:4c:39:ec:cf:9f:41:a8:da: 2b:17:c7:81:54:83:1f:1f:a2:af:87:04:1d:12:3b: 9a:54:01:a5:2d:80:3e:9a:1b:c9:97:75:b7:1c:ca: bf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:10:C7:17:12:FE:A6:53:2D:BF:1C:E9:B8:13:44:D6:99:BA:F8:66 X509v3 Authority Key Identifier: keyid:48:6C:B8:16:BE:3A:5E:03:CB:72:77:29:88:A0:DE:0E:A9:72:CD:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGy4Fr46XgPLcncpiKDeDqlyzao.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC25F/FC1FBE92A27611F0AF63281BC4F9AE02/SGy4Fr46XgPLcncpiKDeDqlyzao.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:46:7f:5c:f4:cd:dc:63:fb:7e:2a:5b:7e:15:a8:fe:54:cf: dd:ee:13:33:98:67:fa:3f:71:9c:d7:d2:9e:6f:4e:a8:40:62: 20:32:63:29:1d:8e:b4:e8:2a:9c:0d:fd:67:ee:29:eb:b1:5a: 2c:15:f2:d6:39:2a:76:f9:1d:c3:27:d5:ae:74:cb:2c:3f:4f: a1:c7:26:c6:d8:ac:ce:72:ac:f8:e6:50:e1:f8:d0:1d:f9:e7: f7:e4:10:c0:83:82:0a:34:c6:ac:00:24:ae:ee:4a:da:f5:ab: cc:3c:2d:67:8e:dd:4f:4d:7b:13:b8:00:5d:6b:dd:8b:d2:a1: da:ce:1c:6f:3c:9f:9d:d3:78:97:af:b7:20:de:82:fb:b4:89: 77:a1:fc:f9:aa:7e:64:91:c7:94:af:f2:d5:b5:af:e5:87:3b: 21:0b:6d:41:37:6f:69:4f:4b:00:0f:ae:29:ca:d0:a7:80:a0: cd:3c:91:ac:b3:e8:1a:b5:9d:6a:73:d4:f6:aa:12:b2:96:5e: d1:ef:cc:82:03:a6:c0:7d:d4:72:2a:08:8a:7b:23:76:ca:16: f4:5f:44:eb:09:fb:12:b5:a6:c6:d3:62:8d:4f:a4:2d:80:32: 20:b5:32:02:b6:e7:75:2e:61:72:22:04:0e:a6:1a:88:41:ab: a8:20:0c:10 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBETANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QzI1RjExMC8GA1UEBRMoNDg2Q0I4MTZCRTNBNUUwM0NCNzI3NzI5ODhBMERFMEVB OTcyQ0RBQTAeFw0yNTExMDMwNzU2MTBaFw0yNTExMTAwNzU2MTBaMBgxFjAUBgNV BAMTDTY5MDg2MDFhLWJjMDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDIrHG7mbbcr+u8tQ9wimUxcEd7y3fa5beG54eEUC4oNS8uVc1uJZGW29W87Yq5 YCFxhi7jdj0zqZeY+qBHKjYEFYkY9n6h0vcoiVmiFSfE24QqtfuzDhaxQh/03saB 8km1FkLQ9jAIgzA7J7vQz3kJEgxa0UDL4vIlqFcN9jWzoBW2LS8sb4F4vDS4ibfz sjrVdBMZY4l1+RqFPtM+ZPTSOV5mnxszPYCgWA64VQNKaEmLb0up+kzEWDp2sgKu rkHBuV9Ob6rihbEmZeC5XGGA4KBeShlfVLNMOezPn0Go2isXx4FUgx8foq+HBB0S O5pUAaUtgD6aG8mXdbccyr9HAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUoxDHFxL+ plMtvxzpuBNE1pm6+GYwHwYDVR0jBBgwFoAUSGy4Fr46XgPLcncpiKDeDqlyzaow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZDMjVGL0ZDMUZCRTkyQTI3 NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQTGNuY3BpS0RlRHFseXph by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvU0d5NEZyNDZYZ1BMY25jcGlLRGVEcWx5emFvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZD MjVGL0ZDMUZCRTkyQTI3NjExRjBBRjYzMjgxQkM0RjlBRTAyL1NHeTRGcjQ2WGdQ TGNuY3BpS0RlRHFseXphby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABpGf1z0zdxj+34qW34VqP5Uz93uEzOYZ/o/cZzX0p5vTqhAYiAyYykd jrToKpwN/WfuKeuxWiwV8tY5Knb5HcMn1a50yyw/T6HHJsbYrM5yrPjmUOH40B35 5/fkEMCDggo0xqwAJK7uStr1q8w8LWeO3U9NexO4AF1r3YvSodrOHG88n53TeJev tyDegvu0iXeh/PmqfmSRx5Sv8tW1r+WHOyELbUE3b2lPSwAPrinK0KeAoM08kayz 6Bq1nWpz1PaqErKWXtHvzIIDpsB91HIqCIp7I3bKFvRfROsJ+xK1psbTYo1PpC2A MiC1MgK253UuYXIiBA6mGohBq6ggDBA= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:56 2025 by rpki-client