$ rpki-client -vvf rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft File: 1H75KB4xQx3ljjR8aX45vydCkRk.mft (raw, json) Hash identifier: g5xLweOFGEeUOGNMGrSOw8qpZMqvs0Bn+Ubh6bQST7M= Subject key identifier: D6:05:DE:A3:B3:AF:C6:F7:41:55:24:09:33:F3:29:AF:BE:9C:CC:80 Authority key identifier: D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19 Certificate issuer: /CN=A91612FE/serialNumber=D47EF9281E31431DE58E347C697E39BF27429119 Certificate serial: B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft Manifest number: B6 Signing time: Wed 05 Nov 2025 06:14:07 +0000 Manifest this update: Wed 05 Nov 2025 06:14:06 +0000 Manifest next update: Wed 12 Nov 2025 06:14:06 +0000 Files and hashes: 1: 1H75KB4xQx3ljjR8aX45vydCkRk.crl (hash: GF1TypEiZQkfkPK+YHHnbEh89R0tAzf9wgNNh33EShM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 182 (0xb6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91612FE, serialNumber=D47EF9281E31431DE58E347C697E39BF27429119 Validity Not Before: Nov 5 06:14:06 2025 GMT Not After : Nov 12 06:14:06 2025 GMT Subject: CN=690aeb2f-68b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:40:a8:5a:3a:19:a2:54:a5:22:34:9d:53:9f: c3:14:7b:dc:45:02:cf:9e:8b:fb:1a:6e:48:5c:06: 6b:d5:f9:a8:b7:ab:cf:05:83:08:b5:af:bb:e6:81: 9a:b7:2f:f3:58:66:d6:ef:1a:a2:c2:d2:90:b5:f3: cf:1a:1c:b6:94:5e:a4:90:37:fb:53:0d:ed:e2:db: 29:44:fd:ba:9f:7c:ea:e5:16:07:26:f6:2d:4f:df: 06:c0:14:a8:ba:78:d5:a4:72:a7:e9:5d:b4:3b:2d: 94:55:d1:94:de:c0:46:0c:49:b3:a8:ce:d5:90:89: 87:7b:79:5f:8c:7a:71:cb:3e:4d:18:d4:ea:af:c0: 9e:83:7f:38:73:09:84:87:98:88:46:34:f9:58:3b: 69:95:ba:7d:d7:37:9c:c2:e8:f0:54:52:a6:b1:42: f4:45:9e:c6:0a:32:d7:2e:34:0b:3b:67:bc:44:3e: 84:23:78:0c:e3:5b:ef:bf:14:22:1c:ca:ba:a5:a6: 82:1a:f0:04:0f:12:b5:fa:a8:be:fa:43:5a:3c:e2: 8f:ba:71:a8:e5:47:fa:6b:83:66:51:33:37:96:ae: 9b:0e:6b:e7:cf:45:e5:10:4d:9a:1a:15:3d:ce:cc: ee:d6:5f:11:e4:2a:4b:55:c6:ea:1a:00:79:aa:d8: bf:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:05:DE:A3:B3:AF:C6:F7:41:55:24:09:33:F3:29:AF:BE:9C:CC:80 X509v3 Authority Key Identifier: keyid:D4:7E:F9:28:1E:31:43:1D:E5:8E:34:7C:69:7E:39:BF:27:42:91:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1H75KB4xQx3ljjR8aX45vydCkRk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91612FE/491D694CA25511EFB2CA782AC4F9AE02/1H75KB4xQx3ljjR8aX45vydCkRk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:b1:66:4b:bd:70:4a:08:91:f8:66:10:c6:5a:b1:9c:b7:a7: 2a:55:99:da:72:43:87:8a:74:08:c2:60:a0:4a:17:04:84:a7: 7c:90:ff:79:8b:6b:bf:8a:ce:e8:91:8a:43:ed:2f:c7:0d:1b: f9:66:b4:bc:e5:4f:dd:5d:c7:ba:01:87:f2:8a:58:44:fc:f5: 84:b0:b2:7f:d5:5b:6d:82:f7:38:b3:fd:6a:fd:f9:f6:d4:de: 01:54:4a:98:6e:b4:c2:c3:4a:37:de:0c:fa:1f:12:99:a6:42: 40:67:28:82:03:17:5e:d4:e2:ff:46:a0:f7:90:87:c5:7b:c6: a1:7a:16:1a:42:c7:59:4d:0a:9b:d2:51:b7:0d:40:16:01:4d: ba:22:d0:58:6e:80:13:bf:7b:60:2f:49:e7:d8:0e:d5:38:f1: d4:59:49:3f:95:78:49:4b:6e:83:50:d9:55:ec:6e:95:d2:a4: 4f:b8:a9:18:44:cc:68:ac:52:9b:8d:f9:a8:fc:b5:5b:bd:f8: 5b:41:08:4e:6b:68:dd:65:6b:e5:bd:26:3e:38:3d:3b:72:84: 74:c4:05:1a:17:e0:18:65:03:2b:28:21:58:13:74:c7:4a:e3: 26:42:a8:73:ac:38:7b:e4:0e:93:14:fd:cc:36:ac:1b:73:76: bf:bc:5e:74 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjEyRkUxMTAvBgNVBAUTKEQ0N0VGOTI4MUUzMTQzMURFNThFMzQ3QzY5N0UzOUJG Mjc0MjkxMTkwHhcNMjUxMTA1MDYxNDA2WhcNMjUxMTEyMDYxNDA2WjAYMRYwFAYD VQQDEw02OTBhZWIyZi02OGIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5UCoWjoZolSlIjSdU5/DFHvcRQLPnov7Gm5IXAZr1fmot6vPBYMIta+75oGa ty/zWGbW7xqiwtKQtfPPGhy2lF6kkDf7Uw3t4tspRP26n3zq5RYHJvYtT98GwBSo unjVpHKn6V20Oy2UVdGU3sBGDEmzqM7VkImHe3lfjHpxyz5NGNTqr8Ceg384cwmE h5iIRjT5WDtplbp91zecwujwVFKmsUL0RZ7GCjLXLjQLO2e8RD6EI3gM41vvvxQi HMq6paaCGvAEDxK1+qi++kNaPOKPunGo5Uf6a4NmUTM3lq6bDmvnz0XlEE2aGhU9 zszu1l8R5CpLVcbqGgB5qti/QwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNYF3qOz r8b3QVUkCTPzKa++nMyAMB8GA1UdIwQYMBaAFNR++SgeMUMd5Y40fGl+Ob8nQpEZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTJGRS80OTFENjk0Q0Ey NTUxMUVGQjJDQTc4MkFDNEY5QUUwMi8xSDc1S0I0eFF4M2xqalI4YVg0NXZ5ZENr UmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzFINzVLQjR4UXgzbGpqUjhhWDQ1dnlkQ2tSay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MTJGRS80OTFENjk0Q0EyNTUxMUVGQjJDQTc4MkFDNEY5QUUwMi8xSDc1S0I0eFF4 M2xqalI4YVg0NXZ5ZENrUmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBsWZLvXBKCJH4ZhDGWrGct6cqVZnackOHinQIwmCgShcEhKd8kP95 i2u/is7okYpD7S/HDRv5ZrS85U/dXce6AYfyilhE/PWEsLJ/1Vttgvc4s/1q/fn2 1N4BVEqYbrTCw0o33gz6HxKZpkJAZyiCAxde1OL/RqD3kIfFe8ahehYaQsdZTQqb 0lG3DUAWAU26ItBYboATv3tgL0nn2A7VOPHUWUk/lXhJS26DUNlV7G6V0qRPuKkY RMxorFKbjfmo/LVbvfhbQQhOa2jdZWvlvSY+OD07coR0xAUaF+AYZQMrKCFYE3TH SuMmQqhzrDh75A6TFP3MNqwbc3a/vF50 -----END CERTIFICATE-----Generated at Wed Nov 5 21:15:49 2025 by rpki-client