$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft File: efXtpMcOLgPpCLgYwXdY8qZpd1c.mft (raw, json) Hash identifier: HlrL85lFO7xAvUhDK0ThGHQAKBgcG05Y7SvdY3YoStk= Subject key identifier: CF:D9:DA:C0:F0:66:D0:91:FA:5B:EF:A2:7D:01:99:F7:AD:2C:34:B0 Authority key identifier: 79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 Certificate issuer: /CN=A91FEB37/serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Certificate serial: 7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft Manifest number: 7F Signing time: Mon 03 Nov 2025 06:42:31 +0000 Manifest this update: Mon 03 Nov 2025 06:42:30 +0000 Manifest next update: Mon 10 Nov 2025 06:42:30 +0000 Files and hashes: 1: efXtpMcOLgPpCLgYwXdY8qZpd1c.crl (hash: qJaOfESiTRPFN5KtQqVFxG48GFvnUqCNCxK3rU79eQw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 127 (0x7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEB37, serialNumber=79F5EDA4C70E2E03E908B818C17758F2A6697757 Validity Not Before: Nov 3 06:42:30 2025 GMT Not After : Nov 10 06:42:30 2025 GMT Subject: CN=69084ed7-6b5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fc:51:6a:0b:26:de:a1:19:d1:fe:4b:d8:8e: c7:40:65:b9:0e:c5:e8:2f:04:1b:4c:18:ac:5b:d7: 48:7c:27:b6:f6:ee:f9:6e:2a:a4:05:95:d7:42:16: 1b:d9:49:89:28:e3:70:b7:91:42:5c:3e:68:7f:d3: c0:8a:99:65:94:f4:1d:ac:44:30:78:3b:bd:8d:99: e3:03:9f:e2:4f:79:b4:fc:aa:0b:d5:b2:44:fe:15: 60:5d:c1:54:fd:b0:76:f2:a3:5b:1d:4a:0e:09:bd: 6d:1d:07:55:7c:db:eb:87:8f:f7:41:e4:c0:cf:24: 7d:a0:79:d3:e0:fa:66:6a:bc:89:17:ec:ee:0a:3a: 41:0c:ba:25:4a:d9:9d:94:14:da:07:62:69:c3:c6: 7c:23:6e:de:75:45:8f:43:57:ef:b2:6e:25:d2:cc: fe:64:1f:2c:15:96:c8:43:dd:4e:5f:22:26:ad:2d: ee:0f:89:35:02:43:30:9d:eb:95:5c:2d:c1:61:ca: a9:55:47:7b:75:7f:47:94:56:d7:8f:11:1a:d4:97: 64:a2:98:80:23:57:2a:03:6c:25:61:20:47:7d:e6: 85:56:c4:77:57:bd:d8:aa:ec:be:a1:38:9c:12:dc: 23:0d:6c:5a:e9:af:c9:eb:ea:fd:2a:bf:c1:af:dc: df:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:DA:C0:F0:66:D0:91:FA:5B:EF:A2:7D:01:99:F7:AD:2C:34:B0 X509v3 Authority Key Identifier: keyid:79:F5:ED:A4:C7:0E:2E:03:E9:08:B8:18:C1:77:58:F2:A6:69:77:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/efXtpMcOLgPpCLgYwXdY8qZpd1c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEB37/49EE2316F5F711EFB82EFD6BC4F9AE02/efXtpMcOLgPpCLgYwXdY8qZpd1c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:76:04:28:df:6f:40:ae:7b:fd:f3:7f:27:6d:90:cb:3f:47: 6d:41:43:f4:28:cf:0a:98:72:93:dd:cd:37:4b:70:be:cc:91: 66:8f:da:22:47:b7:5b:8c:c3:a4:1c:93:57:b4:d1:77:47:7d: d6:d3:fc:86:b1:09:73:17:a5:35:b0:3b:82:8d:86:43:33:3a: 4a:9b:8b:18:0d:64:d1:f2:df:79:df:7b:5b:81:5a:25:e6:4a: 42:0a:28:d4:0c:ad:4f:e0:d0:f2:b3:d7:7e:7a:18:56:12:bb: a3:68:ec:13:0b:0c:4b:f4:0f:aa:dc:4e:9c:5f:ff:6f:b0:ef: ff:f0:e5:93:50:e2:a0:45:57:6e:a4:d9:41:44:cd:c0:c8:36: 3d:1d:74:4c:b4:7e:bb:0b:b5:bb:93:05:a1:10:74:9a:63:fc: 39:e4:db:ae:82:bc:df:58:14:8b:ec:ae:51:35:c2:15:25:7c: 5d:a6:71:5f:f3:f0:1f:a3:f2:83:59:76:83:56:6a:76:3b:58: 45:02:9f:ae:b7:50:72:49:45:b8:c7:7e:c7:3a:e0:d6:58:fe: 7a:d2:bd:b8:ba:89:ce:bd:50:9c:5b:4b:0c:68:bd:c3:28:b1: 26:0a:91:37:17:d1:c2:00:56:57:d6:27:ec:a9:38:70:18:41: 2f:e3:b5:94 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBfzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RUIzNzExMC8GA1UEBRMoNzlGNUVEQTRDNzBFMkUwM0U5MDhCODE4QzE3NzU4RjJB NjY5Nzc1NzAeFw0yNTExMDMwNjQyMzBaFw0yNTExMTAwNjQyMzBaMBgxFjAUBgNV BAMTDTY5MDg0ZWQ3LTZiNWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD2/FFqCybeoRnR/kvYjsdAZbkOxegvBBtMGKxb10h8J7b27vluKqQFlddCFhvZ SYko43C3kUJcPmh/08CKmWWU9B2sRDB4O72NmeMDn+JPebT8qgvVskT+FWBdwVT9 sHbyo1sdSg4JvW0dB1V82+uHj/dB5MDPJH2gedPg+mZqvIkX7O4KOkEMuiVK2Z2U FNoHYmnDxnwjbt51RY9DV++ybiXSzP5kHywVlshD3U5fIiatLe4PiTUCQzCd65Vc LcFhyqlVR3t1f0eUVtePERrUl2SimIAjVyoDbCVhIEd95oVWxHdXvdiq7L6hOJwS 3CMNbFrpr8nr6v0qv8Gv3N/5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUz9nawPBm 0JH6W++ifQGZ960sNLAwHwYDVR0jBBgwFoAUefXtpMcOLgPpCLgYwXdY8qZpd1cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFQjM3LzQ5RUUyMzE2RjVG NzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQcENMZ1l3WGRZOHFacGQx Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZWZYdHBNY09MZ1BwQ0xnWXdYZFk4cVpwZDFjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZF QjM3LzQ5RUUyMzE2RjVGNzExRUZCODJFRkQ2QkM0RjlBRTAyL2VmWHRwTWNPTGdQ cENMZ1l3WGRZOHFacGQxYy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH12BCjfb0Cue/3zfydtkMs/R21BQ/QozwqYcpPdzTdLcL7MkWaP2iJH t1uMw6Qck1e00XdHfdbT/IaxCXMXpTWwO4KNhkMzOkqbixgNZNHy33nfe1uBWiXm SkIKKNQMrU/g0PKz1356GFYSu6No7BMLDEv0D6rcTpxf/2+w7//w5ZNQ4qBFV26k 2UFEzcDINj0ddEy0frsLtbuTBaEQdJpj/Dnk266CvN9YFIvsrlE1whUlfF2mcV/z 8B+j8oNZdoNWanY7WEUCn663UHJJRbjHfsc64NZY/nrSvbi6ic69UJxbSwxovcMo sSYKkTcX0cIAVlfWJ+ypOHAYQS/jtZQ= -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:50 2025 by rpki-client