$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: cGXvysNL9dv/pWhxwtL22eo8+S4UcObpWgLaPEtqRh8= Subject key identifier: 15:4A:78:8B:76:0B:E3:66:91:13:2E:2D:F4:AC:08:82:77:F5:32:AC Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03EF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03EB Signing time: Mon 03 Nov 2025 00:28:44 +0000 Manifest this update: Mon 03 Nov 2025 00:28:44 +0000 Manifest next update: Mon 10 Nov 2025 00:28:44 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: TzL7irTPxYiSnSxIYmmahE4EDZbuU1TZTsf/enQy84M=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:28:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1007 (0x3ef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Nov 3 00:28:44 2025 GMT Not After : Nov 10 00:28:44 2025 GMT Subject: CN=6907f73c-f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e2:5f:88:bc:be:4c:3e:e5:b1:77:eb:92:de: 97:6e:12:f6:ff:eb:df:ae:82:4f:c0:29:4c:7c:e9: a9:e3:e1:48:6e:1c:d1:ad:2b:20:2a:aa:af:e3:87: b5:88:6f:fa:d6:11:1c:eb:3c:f1:3a:ad:cb:ba:1c: 20:ea:e2:30:38:c3:4b:e6:06:0d:e2:83:0f:a8:71: e3:89:14:8c:57:4a:71:93:fe:93:58:a8:c1:16:8e: 99:82:da:6d:4b:07:b3:84:87:17:ab:fd:ce:ab:dc: 5e:9a:7f:06:61:a0:32:1d:32:a7:7e:6d:80:cc:79: 48:92:2d:67:8e:0c:c6:40:1d:4e:f2:0c:58:16:f5: 8c:94:08:6e:0e:ba:95:60:39:28:2d:03:c5:1a:76: 4c:2d:63:9c:dd:db:a3:99:f2:8b:b7:89:40:88:48: d7:b9:26:a5:d0:f0:b8:dc:89:8d:bd:71:3c:a4:20: 0b:be:d1:c0:cb:32:dc:f7:6c:1d:c1:1d:ec:ac:14: 14:2f:d7:c0:5c:59:49:19:65:40:10:c0:b5:78:c5: d2:c3:7c:8a:bb:5c:30:19:8e:bb:c5:93:ae:9d:08: b7:f4:56:9b:d0:83:a9:54:b7:52:1a:63:52:dd:49: 8a:1b:c3:d8:82:bf:04:1a:5b:f0:2c:4a:b7:3c:38: 37:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:78:8B:76:0B:E3:66:91:13:2E:2D:F4:AC:08:82:77:F5:32:AC X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c5:2d:bc:43:50:ff:ac:c3:f5:85:83:65:cb:2f:a6:5e:79: 34:c7:3f:13:e9:2b:b6:98:6d:53:29:b3:71:95:e8:d2:62:a3: c0:fb:7f:94:18:47:c0:9a:c5:17:fc:63:0e:68:3b:e6:ff:48: 43:59:76:83:4d:d9:36:e4:1b:5a:35:f3:e9:c9:b8:28:3d:8d: 45:56:29:02:18:7a:83:9a:d5:54:ca:14:43:40:df:d0:6a:91: f2:13:d0:86:86:90:7f:d7:d3:da:3b:21:1e:69:ba:00:09:fa: 0b:ed:36:8e:d6:85:4e:22:81:e9:68:63:43:fb:e3:33:6d:b0: d8:ab:b6:cd:ed:d6:cf:24:d1:62:8a:21:15:4c:bf:19:1b:f7: 4d:05:7f:d0:5e:a4:79:c9:37:ca:85:65:0c:8b:21:24:20:5b: 27:6c:c8:0f:f7:87:c6:cd:63:52:91:0d:c1:75:6c:6b:ca:d9: d4:87:76:bc:63:f1:6f:96:cf:74:ce:a6:bb:72:63:9a:04:28: d5:ca:5e:5f:55:3b:dc:22:41:00:90:e5:3a:a6:c6:de:5b:f1: 2d:ff:38:23:a7:c8:1e:f7:36:f4:12:2d:3d:f3:ca:7e:24:e4: c9:9c:84:10:32:a9:23:60:44:3e:4c:3c:33:6b:4b:1b:cd:b3: 78:de:5d:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA+8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUxMTAzMDAyODQ0WhcNMjUxMTEwMDAyODQ0WjAYMRYwFAYD VQQDEw02OTA3ZjczYy1mOTU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuJfiLy+TD7lsXfrkt6XbhL2/+vfroJPwClMfOmp4+FIbhzRrSsgKqqv44e1 iG/61hEc6zzxOq3Luhwg6uIwOMNL5gYN4oMPqHHjiRSMV0pxk/6TWKjBFo6Zgtpt SwezhIcXq/3Oq9xemn8GYaAyHTKnfm2AzHlIki1njgzGQB1O8gxYFvWMlAhuDrqV YDkoLQPFGnZMLWOc3dujmfKLt4lAiEjXuSal0PC43ImNvXE8pCALvtHAyzLc92wd wR3srBQUL9fAXFlJGWVAEMC1eMXSw3yKu1wwGY67xZOunQi39Fab0IOpVLdSGmNS 3UmKG8PYgr8EGlvwLEq3PDg3bQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBVKeIt2 C+NmkRMuLfSsCIJ39TKsMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBdxS28Q1D/rMP1hYNlyy+mXnk0xz8T6Su2mG1TKbNxlejSYqPA+3+U GEfAmsUX/GMOaDvm/0hDWXaDTdk25BtaNfPpybgoPY1FVikCGHqDmtVUyhRDQN/Q apHyE9CGhpB/19PaOyEeaboACfoL7TaO1oVOIoHpaGND++MzbbDYq7bN7dbPJNFi iiEVTL8ZG/dNBX/QXqR5yTfKhWUMiyEkIFsnbMgP94fGzWNSkQ3BdWxrytnUh3a8 Y/Fvls90zqa7cmOaBCjVyl5fVTvcIkEAkOU6psbeW/Et/zgjp8ge9zb0Ei0988p+ JOTJnIQQMqkjYEQ+TDwza0sbzbN43l1x -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:08 2025 by rpki-client