$ rpki-client -vvf rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft File: RxkmQvqTOGbRd55eOPq_Vscx-6c.mft (raw, json) Hash identifier: w1zzRmLf3nbVQBswTY2ncwax60ticM39lRVZvKTTKL8= Subject key identifier: B2:18:49:9A:9D:A6:40:54:BA:08:25:9A:60:71:DA:A6:09:57:F6:33 Authority key identifier: 47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 Certificate issuer: /CN=A91284F0/serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Certificate serial: 0A6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft Manifest number: 0A69 Signing time: Tue 04 Nov 2025 19:43:45 +0000 Manifest this update: Tue 04 Nov 2025 19:43:44 +0000 Manifest next update: Tue 11 Nov 2025 19:43:44 +0000 Files and hashes: 1: RxkmQvqTOGbRd55eOPq_Vscx-6c.crl (hash: UG1XbaHWiLNs3uBzhxjp183nkvVWhWSD8mRNV+hGG2k=) 2: 426DB414718E11EA9F6FA85CC4F9AE02.roa (hash: L7du7ZJlcmB2nN0ANGTgn5PQ8EaqXu+Bk+I6VvNhSKQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2671 (0xa6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91284F0, serialNumber=47192642FA933866D1779E5E38FABF56C731FBA7 Validity Not Before: Nov 4 19:43:44 2025 GMT Not After : Nov 11 19:43:44 2025 GMT Subject: CN=690a5770-ee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6a:3f:6c:02:41:b9:8e:a9:66:e9:1c:72:2b: 0e:1d:c3:a9:a4:41:9d:66:82:aa:6e:ea:32:1c:a1: 30:d5:cf:b3:4f:25:d1:65:4c:ca:3c:6c:3b:f5:a6: c6:b9:e9:3f:32:ca:be:f3:40:1d:7f:7d:cb:de:11: 89:f2:f3:8b:66:64:b3:ba:4e:17:e5:f2:80:3f:6a: a5:a0:54:ef:03:9c:61:b3:24:bd:3a:74:46:fa:f6: cd:e0:4b:d9:8f:77:40:d8:a0:53:3e:a0:28:c9:41: b0:76:46:ee:58:bb:81:d6:6d:ac:74:05:b5:35:82: ed:7d:38:6b:9d:57:c2:68:12:b1:4b:6d:70:b9:32: cb:40:3c:2e:77:a3:81:c7:a9:17:cc:ba:87:51:dc: 50:1b:d3:fe:c8:2f:0b:06:67:b1:e7:25:d7:b5:4d: 65:e7:df:22:93:ae:c9:d7:bb:74:cd:e9:95:f9:7e: 52:9f:e0:21:57:98:ca:1b:b8:b6:ad:1b:41:d9:01: 2d:77:d5:5d:19:79:a3:c4:28:51:7a:fd:57:3c:0d: 09:ea:a0:79:75:30:cb:dd:64:a1:85:0e:8b:dc:83: ac:5e:80:b0:39:ab:9f:a8:57:21:4f:ad:41:28:b5: b5:bf:9b:74:87:31:7a:0a:82:1e:f8:53:06:f3:85: 7f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:18:49:9A:9D:A6:40:54:BA:08:25:9A:60:71:DA:A6:09:57:F6:33 X509v3 Authority Key Identifier: keyid:47:19:26:42:FA:93:38:66:D1:77:9E:5E:38:FA:BF:56:C7:31:FB:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RxkmQvqTOGbRd55eOPq_Vscx-6c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91284F0/46E67B30718D11EAAF92815BC4F9AE02/RxkmQvqTOGbRd55eOPq_Vscx-6c.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:40:71:33:e8:b9:45:4e:09:46:99:bf:e0:e1:38:0e:95: 29:67:8e:9c:83:7f:1b:01:45:16:e4:e8:c3:be:74:bf:1d:56: 1f:53:b6:8b:92:fc:cd:20:0b:d4:6a:2c:75:b3:2b:10:3b:e7: 64:df:3b:04:9a:d5:e9:cf:77:cf:6d:03:55:88:a1:0c:fa:58: ed:05:25:1f:ee:a4:36:20:27:fc:80:29:cf:70:b7:95:35:70: 0b:f9:0a:7a:7d:0c:f2:11:4f:40:bf:fe:70:ed:95:ef:77:79: c5:e3:ec:0f:a8:f6:4c:0d:1f:be:f3:c5:f6:47:a6:ec:d9:d7: c4:3e:e0:6a:1e:d6:4c:67:0e:07:a6:ac:84:60:d7:50:bd:89: e5:d9:ed:4e:81:11:23:f4:64:34:13:7e:41:0a:ff:4c:26:42: d4:aa:e4:11:f1:bd:e5:95:f9:3c:6e:1b:83:79:79:3f:8c:91: 10:e7:15:e9:94:dd:41:bf:8c:fd:99:c0:bb:12:67:98:4d:38: 0f:77:c7:23:d1:07:d7:ab:37:1b:53:2d:6f:87:c6:30:d6:5f: 2c:34:52:9c:51:44:78:4b:ae:b0:af:5d:d1:fa:ab:c6:30:3d: 8b:f2:b1:9f:e5:eb:d7:b8:81:d5:44:1c:fb:47:08:bb:6b:6b: ec:7a:2f:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCm8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mjg0RjAxMTAvBgNVBAUTKDQ3MTkyNjQyRkE5MzM4NjZEMTc3OUU1RTM4RkFCRjU2 QzczMUZCQTcwHhcNMjUxMTA0MTk0MzQ0WhcNMjUxMTExMTk0MzQ0WjAYMRYwFAYD VQQDEw02OTBhNTc3MC1lZTBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Wo/bAJBuY6pZukccisOHcOppEGdZoKqbuoyHKEw1c+zTyXRZUzKPGw79abG uek/Msq+80Adf33L3hGJ8vOLZmSzuk4X5fKAP2qloFTvA5xhsyS9OnRG+vbN4EvZ j3dA2KBTPqAoyUGwdkbuWLuB1m2sdAW1NYLtfThrnVfCaBKxS21wuTLLQDwud6OB x6kXzLqHUdxQG9P+yC8LBmex5yXXtU1l598ik67J17t0zemV+X5Sn+AhV5jKG7i2 rRtB2QEtd9VdGXmjxChRev1XPA0J6qB5dTDL3WShhQ6L3IOsXoCwOaufqFchT61B KLW1v5t0hzF6CoIe+FMG84V/mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLIYSZqd pkBUugglmmBx2qYJV/YzMB8GA1UdIwQYMBaAFEcZJkL6kzhm0XeeXjj6v1bHMfun MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODRGMC80NkU2N0IzMDcx OEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9HYlJkNTVlT1BxX1ZzY3gt NmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1J4a21RdnFUT0diUmQ1NWVPUHFfVnNjeC02Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy ODRGMC80NkU2N0IzMDcxOEQxMUVBQUY5MjgxNUJDNEY5QUUwMi9SeGttUXZxVE9H YlJkNTVlT1BxX1ZzY3gtNmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBW3EBxM+i5RU4JRpm/4OE4DpUpZ46cg38bAUUW5OjDvnS/HVYfU7aL kvzNIAvUaix1sysQO+dk3zsEmtXpz3fPbQNViKEM+ljtBSUf7qQ2ICf8gCnPcLeV NXAL+Qp6fQzyEU9Av/5w7ZXvd3nF4+wPqPZMDR++88X2R6bs2dfEPuBqHtZMZw4H pqyEYNdQvYnl2e1OgREj9GQ0E35BCv9MJkLUquQR8b3llfk8bhuDeXk/jJEQ5xXp lN1Bv4z9mcC7EmeYTTgPd8cj0QfXqzcbUy1vh8Yw1l8sNFKcUUR4S66wr13R+qvG MD2L8rGf5evXuIHVRBz7Rwi7a2vsei82 -----END CERTIFICATE-----Generated at Wed Nov 5 05:46:04 2025 by rpki-client