$ rpki-client -vvf rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft File: t9PrYcwCjDi_0_eigPNpBGhlWwY.mft (raw, json) Hash identifier: jJR8LGOc1AhXDm9pyY6P+WvVU+yEnMzh/73q0zN4VzE= Subject key identifier: B7:92:D0:0E:63:A2:46:B3:95:42:D3:CB:54:78:FB:28:56:57:6A:5F Authority key identifier: B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 Certificate issuer: /CN=A91FED7C/serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Certificate serial: 0980 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft Manifest number: 097A Signing time: Tue 04 Nov 2025 20:11:02 +0000 Manifest this update: Tue 04 Nov 2025 20:11:01 +0000 Manifest next update: Tue 11 Nov 2025 20:11:01 +0000 Files and hashes: 1: t9PrYcwCjDi_0_eigPNpBGhlWwY.crl (hash: t3my30fExKD1PtUu6iXUZu2AkXbrMwLWs5x0wM0GM2g=) 2: E5DA330E9FF411EABA55D530C4F9AE02.roa (hash: CHvHnzrsNRtyF0f1bsjGZNNk/7bOq09fS+B9V5tsdBI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2432 (0x980) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FED7C, serialNumber=B7D3EB61CC028C38BFD3F7A280F3690468655B06 Validity Not Before: Nov 4 20:11:01 2025 GMT Not After : Nov 11 20:11:01 2025 GMT Subject: CN=690a5dd6-b404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:4e:6e:7d:93:f1:eb:78:bb:26:46:96:c8: 11:a7:7f:bd:fa:44:4b:77:a1:99:b7:75:4d:57:36: 11:52:cc:69:2d:2b:fc:78:65:b8:a5:be:04:2f:cd: 70:dd:e9:ea:04:c2:7a:e4:27:38:41:17:4e:89:0f: ed:01:3c:a3:7e:f0:ce:d5:34:fa:ca:f3:fc:ca:88: 51:2c:28:7e:57:27:c4:88:ea:20:cf:55:5f:bf:df: fa:73:01:bd:01:68:43:d8:56:6c:22:a1:a8:78:e3: 76:6e:03:2e:7a:c1:33:49:bc:21:89:55:9e:35:e2: a2:bd:30:12:c0:2b:a9:bf:c5:7a:c6:e8:b3:72:61: 8e:26:6c:10:72:a5:c9:c2:2d:fb:56:c6:f9:d5:18: f3:25:dc:7b:50:16:89:4b:94:fa:c3:56:3d:9c:62: 95:1a:bd:36:bb:8f:14:54:d1:18:67:dd:02:c8:e6: 9b:42:fa:2f:c3:40:0e:78:7f:98:14:ff:c1:46:ed: 43:39:f4:1a:11:21:48:4b:d0:9f:e8:f6:f0:a1:cf: d5:40:82:1b:4f:1e:8e:ab:04:6c:84:8b:50:21:53: 9a:66:d0:5d:d5:8c:22:eb:07:a7:b5:eb:35:06:24: 37:74:52:6a:74:30:d5:59:7f:c9:56:c8:2d:00:44: ce:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:92:D0:0E:63:A2:46:B3:95:42:D3:CB:54:78:FB:28:56:57:6A:5F X509v3 Authority Key Identifier: keyid:B7:D3:EB:61:CC:02:8C:38:BF:D3:F7:A2:80:F3:69:04:68:65:5B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t9PrYcwCjDi_0_eigPNpBGhlWwY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FED7C/FFD3B3FE9FF211EA8DB2672CC4F9AE02/t9PrYcwCjDi_0_eigPNpBGhlWwY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f6:26:41:0d:80:a3:a5:13:4c:3f:ec:ac:77:ec:3c:1f:fd: 52:2c:f1:2f:e7:83:44:82:34:c5:8e:49:8d:40:40:a3:d5:bd: b3:3c:61:20:d8:95:e0:29:e0:d1:6c:51:83:e5:72:4c:b5:80: 1e:fb:0c:d5:24:c2:a2:fa:75:62:ab:6c:5f:fe:0d:82:f8:49: b5:cc:84:8e:b7:ff:e0:0e:fd:57:0c:f8:55:ef:ec:1a:ec:cc: f7:fa:68:6b:71:ef:4a:78:c0:e1:26:29:bf:a9:4b:cd:e0:19: 35:68:b2:04:ed:4a:e6:4f:b3:b5:f7:2c:40:4e:7b:6f:95:46: 6a:f7:98:a0:74:54:3e:60:4d:7d:84:ea:e5:09:2b:1d:f2:46: 0e:4f:eb:e0:99:9d:a4:84:58:6c:97:5d:83:ae:61:bc:1b:35: 42:06:cb:b1:2c:85:ce:0e:b4:d7:c7:5c:db:bf:89:6a:ab:57: 56:9c:20:b0:52:c2:4f:f9:be:03:fb:dd:bd:50:c2:8f:87:34: 3f:63:6c:51:23:84:fa:98:50:e3:f6:35:f3:41:f7:03:8b:0f: 76:a1:b5:e3:db:49:90:9d:60:53:01:94:cf:e6:9b:74:ee:d3: a8:d3:7a:87:0b:22:e2:1c:94:e6:6b:97:5e:ae:a3:28:f3:94: 97:f2:43:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVEN0MxMTAvBgNVBAUTKEI3RDNFQjYxQ0MwMjhDMzhCRkQzRjdBMjgwRjM2OTA0 Njg2NTVCMDYwHhcNMjUxMTA0MjAxMTAxWhcNMjUxMTExMjAxMTAxWjAYMRYwFAYD VQQDEw02OTBhNWRkNi1iNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2/lObn2T8et4uyZGlsgRp3+9+kRLd6GZt3VNVzYRUsxpLSv8eGW4pb4EL81w 3enqBMJ65Cc4QRdOiQ/tATyjfvDO1TT6yvP8yohRLCh+VyfEiOogz1Vfv9/6cwG9 AWhD2FZsIqGoeON2bgMuesEzSbwhiVWeNeKivTASwCupv8V6xuizcmGOJmwQcqXJ wi37Vsb51RjzJdx7UBaJS5T6w1Y9nGKVGr02u48UVNEYZ90CyOabQvovw0AOeH+Y FP/BRu1DOfQaESFIS9Cf6Pbwoc/VQIIbTx6OqwRshItQIVOaZtBd1Ywi6wentes1 BiQ3dFJqdDDVWX/JVsgtAETOLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLeS0A5j okazlULTy1R4+yhWV2pfMB8GA1UdIwQYMBaAFLfT62HMAow4v9P3ooDzaQRoZVsG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUQ3Qy9GRkQzQjNGRTlG RjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pEaV8wX2VpZ1BOcEJHaGxX d1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q5UHJZY3dDakRpXzBfZWlnUE5wQkdobFd3WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RUQ3Qy9GRkQzQjNGRTlGRjIxMUVBOERCMjY3MkNDNEY5QUUwMi90OVByWWN3Q2pE aV8wX2VpZ1BOcEJHaGxXd1kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB69iZBDYCjpRNMP+ysd+w8H/1SLPEv54NEgjTFjkmNQECj1b2zPGEg 2JXgKeDRbFGD5XJMtYAe+wzVJMKi+nViq2xf/g2C+Em1zISOt//gDv1XDPhV7+wa 7Mz3+mhrce9KeMDhJim/qUvN4Bk1aLIE7UrmT7O19yxATntvlUZq95igdFQ+YE19 hOrlCSsd8kYOT+vgmZ2khFhsl12DrmG8GzVCBsuxLIXODrTXx1zbv4lqq1dWnCCw UsJP+b4D+929UMKPhzQ/Y2xRI4T6mFDj9jXzQfcDiw92obXj20mQnWBTAZTP5pt0 7tOo03qHCyLiHJTma5derqMo85SX8kMq -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:36 2025 by rpki-client