$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft File: 755Sv59IZcr4eHrZXObeT2R2hA0.mft (raw, json) Hash identifier: AG5V9vAI9nb5KJR5jTbWwyLeCKfAmFH5kiw6rNtMQ+E= Subject key identifier: 87:63:E8:90:5C:A2:84:F3:6A:6B:E5:1B:42:30:B8:7A:BB:2A:D5:FF Authority key identifier: EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D Certificate issuer: /CN=A91FCA4B/serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft Manifest number: 0AD4 Signing time: Tue 04 Nov 2025 19:32:21 +0000 Manifest this update: Tue 04 Nov 2025 19:32:21 +0000 Manifest next update: Tue 11 Nov 2025 19:32:21 +0000 Files and hashes: 1: 755Sv59IZcr4eHrZXObeT2R2hA0.crl (hash: 3qv/NUwWlVnHKKHOe2cFaSEuf3Sl4Ck/hf8LACH6Nqk=) 2: 9E1721445CFB11EAA377D527C4F9AE02.roa (hash: 8T6x03P3VxlYlJgx3O2lmpxNAgzgSpRVJPK28hDgG2A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCA4B, serialNumber=EF9E52BF9F4865CAF8787AD95CE6DE4F6476840D Validity Not Before: Nov 4 19:32:21 2025 GMT Not After : Nov 11 19:32:21 2025 GMT Subject: CN=690a54c5-426c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:58:60:5c:81:d3:8e:0c:94:db:2b:bc:d1:c3: 2f:6e:73:e4:6a:60:de:a2:0f:2c:70:2e:20:eb:42: a5:a5:87:5e:83:53:8c:83:23:7e:ef:a2:25:7c:3e: a6:6c:31:8b:57:83:35:78:2e:da:c6:72:6c:43:6d: 1f:6c:8a:f1:f9:ef:84:f3:e0:28:b2:4a:61:b8:43: f7:e3:4a:46:30:3b:85:3b:9d:48:e2:7f:6c:67:68: 1d:c2:2a:67:98:a5:ee:bb:a8:a6:d6:d3:7d:78:23: 43:d3:b0:7c:a9:ed:a1:89:0c:d1:45:08:2a:31:f5: be:e7:7c:0a:a3:9f:4e:76:00:e7:ca:07:18:0a:23: 5e:42:21:cf:31:0f:8e:55:b4:e8:39:e9:51:3e:7c: 5c:97:66:12:02:58:5b:15:f7:b2:a2:c5:38:1b:0a: e3:3c:41:62:30:76:90:ad:6d:37:0f:7a:da:f3:85: 09:5f:3d:52:1b:c9:35:3d:38:05:ff:84:8d:fd:64: b9:04:68:5a:d8:83:d8:9b:e0:3d:fb:4a:7a:e7:4c: 0f:59:6c:8c:2b:17:e7:f6:a9:04:08:9e:a0:32:1b: 90:e4:ba:86:66:68:3b:a2:5a:58:a0:da:d2:13:8b: 18:89:59:1d:ff:a3:97:01:47:5e:78:46:00:a7:86: 1a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:63:E8:90:5C:A2:84:F3:6A:6B:E5:1B:42:30:B8:7A:BB:2A:D5:FF X509v3 Authority Key Identifier: keyid:EF:9E:52:BF:9F:48:65:CA:F8:78:7A:D9:5C:E6:DE:4F:64:76:84:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/755Sv59IZcr4eHrZXObeT2R2hA0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCA4B/6E64C4105CEC11EAA6B6E878C4F9AE02/755Sv59IZcr4eHrZXObeT2R2hA0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 17:09:e0:4f:b5:dd:12:00:b8:bd:bb:dc:97:83:d8:7d:f7:0d: 08:91:05:c2:f0:09:7e:1f:cc:91:f4:40:ef:ee:89:dc:17:73: 19:52:37:4f:49:ed:bb:97:09:90:e8:7c:9d:8c:c5:80:1a:1d: 6b:04:ed:75:4f:04:ef:98:4b:33:c7:9b:bc:b0:f1:e9:14:0e: 36:dc:e2:40:61:55:9b:e2:0f:bc:63:d9:ff:a6:93:56:94:7d: ef:6d:b6:57:58:13:6d:3b:9a:0a:50:23:eb:7e:e4:4c:e9:f0: a2:17:2f:03:4b:0e:fe:6a:d0:ec:96:30:ba:0a:eb:c0:2d:c2: 38:3e:18:14:aa:33:9e:45:db:4b:8e:35:6b:a5:d1:44:3e:c6: b6:f3:da:06:f2:61:9c:ac:de:a6:ee:b3:52:ce:91:4e:0a:3e: 2b:87:ec:38:df:d7:e1:95:cd:9f:cc:dc:0a:0a:cc:3f:b7:91: 29:9a:47:8e:05:24:1a:ef:af:56:5e:e4:36:c5:89:6d:8b:10: 33:d5:65:b4:cc:a0:96:24:23:71:98:24:16:49:c7:31:6c:c3: 36:42:21:83:b5:33:2d:f1:5e:ce:3a:79:90:f0:7a:25:c6:f7: 2f:3d:14:44:62:ed:a8:4b:01:75:99:c2:ef:ef:30:36:e1:b9: 96:7a:fe:fc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBNEIxMTAvBgNVBAUTKEVGOUU1MkJGOUY0ODY1Q0FGODc4N0FEOTVDRTZERTRG NjQ3Njg0MEQwHhcNMjUxMTA0MTkzMjIxWhcNMjUxMTExMTkzMjIxWjAYMRYwFAYD VQQDEw02OTBhNTRjNS00MjZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAulhgXIHTjgyU2yu80cMvbnPkamDeog8scC4g60KlpYdeg1OMgyN+76IlfD6m bDGLV4M1eC7axnJsQ20fbIrx+e+E8+AoskphuEP340pGMDuFO51I4n9sZ2gdwipn mKXuu6im1tN9eCND07B8qe2hiQzRRQgqMfW+53wKo59OdgDnygcYCiNeQiHPMQ+O VbToOelRPnxcl2YSAlhbFfeyosU4GwrjPEFiMHaQrW03D3ra84UJXz1SG8k1PTgF /4SN/WS5BGha2IPYm+A9+0p650wPWWyMKxfn9qkECJ6gMhuQ5LqGZmg7olpYoNrS E4sYiVkd/6OXAUdeeEYAp4YaWQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIdj6JBc ooTzamvlG0IwuHq7KtX/MB8GA1UdIwQYMBaAFO+eUr+fSGXK+Hh62Vzm3k9kdoQN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0E0Qi82RTY0QzQxMDVD RUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpjcjRlSHJaWE9iZVQyUjJo QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc1NVN2NTlJWmNyNGVIclpYT2JlVDJSMmhBMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0E0Qi82RTY0QzQxMDVDRUMxMUVBQTZCNkU4NzhDNEY5QUUwMi83NTVTdjU5SVpj cjRlSHJaWE9iZVQyUjJoQTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAXCeBPtd0SALi9u9yXg9h99w0IkQXC8Al+H8yR9EDv7oncF3MZUjdP Se27lwmQ6HydjMWAGh1rBO11TwTvmEszx5u8sPHpFA423OJAYVWb4g+8Y9n/ppNW lH3vbbZXWBNtO5oKUCPrfuRM6fCiFy8DSw7+atDsljC6CuvALcI4PhgUqjOeRdtL jjVrpdFEPsa289oG8mGcrN6m7rNSzpFOCj4rh+w439fhlc2fzNwKCsw/t5EpmkeO BSQa769WXuQ2xYltixAz1WW0zKCWJCNxmCQWSccxbMM2QiGDtTMt8V7OOnmQ8Hol xvcvPRREYu2oSwF1mcLv7zA24bmWev78 -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:29 2025 by rpki-client