$ rpki-client -vvf rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft File: w6UehON4f7CMUozMNLwYCAgTXv4.mft (raw, json) Hash identifier: Mo8G3i7XM1aQSyrjxPbrhpUm2/+kv8sYuxArPZwrNZk= Subject key identifier: 78:3D:9A:97:4B:C1:48:72:23:5A:81:F4:C4:2A:75:CF:62:37:E4:DD Authority key identifier: C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE Certificate issuer: /CN=A91971CB/serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Certificate serial: 350E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft Manifest number: 34F6 Signing time: Tue 04 Nov 2025 15:15:31 +0000 Manifest this update: Tue 04 Nov 2025 15:15:31 +0000 Manifest next update: Tue 11 Nov 2025 15:15:31 +0000 Files and hashes: 1: w6UehON4f7CMUozMNLwYCAgTXv4.crl (hash: hIcoAVWpKo2zKb3JcXlx8USuCevgFNmKiV0GGpCOBp0=) 2: B20C8966F0A011EBAAC0FE77C4F9AE02.roa (hash: jqlRAPGaEdmIwhXKVlJXO3tWNtos7YAe+HUzS0naVT0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13582 (0x350e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91971CB, serialNumber=C3A51E84E3787FB08C528CCC34BC180808135EFE Validity Not Before: Nov 4 15:15:31 2025 GMT Not After : Nov 11 15:15:31 2025 GMT Subject: CN=690a1893-321d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b3:b2:90:50:9b:d7:b7:eb:8c:73:a2:c5:bb: b9:73:e0:c8:06:65:66:f0:3e:d7:09:13:7e:0c:a0: ce:b7:23:fa:11:d0:4f:60:ed:76:49:53:4b:73:f0: 69:7e:f7:66:74:28:9a:53:61:40:de:23:60:c5:7d: 42:a6:16:06:b2:d1:4f:66:d7:c7:80:8e:d2:c9:74: 9f:b3:2f:f2:f1:7e:38:90:22:93:04:0f:37:9d:7e: 39:73:9b:81:9c:2a:ed:c6:83:a8:8c:1b:58:c2:a7: 46:18:82:76:54:be:f6:68:d8:00:2a:57:90:34:ba: 15:fe:40:bb:f7:65:16:c0:e6:80:37:f7:08:e6:0d: b8:fa:a4:fb:57:24:37:ce:b6:ec:2c:a2:96:92:27: cd:27:68:22:8c:ed:67:19:06:5e:c0:c7:f1:d9:fe: 63:ca:71:38:59:f2:4f:f6:df:47:b1:a8:1a:20:f8: 44:5d:c5:5d:1a:7a:7e:eb:c3:08:44:2e:e9:a9:71: 64:78:63:92:96:9e:17:b1:b1:06:50:a8:52:86:20: 3f:26:e7:aa:82:33:0f:df:22:ac:04:9f:c2:52:01: ba:14:a2:2d:9e:46:14:14:9b:9e:fd:63:cf:d7:63: 45:66:d8:19:e5:ca:6b:1a:e6:6f:4d:b8:91:0d:4d: a2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:3D:9A:97:4B:C1:48:72:23:5A:81:F4:C4:2A:75:CF:62:37:E4:DD X509v3 Authority Key Identifier: keyid:C3:A5:1E:84:E3:78:7F:B0:8C:52:8C:CC:34:BC:18:08:08:13:5E:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w6UehON4f7CMUozMNLwYCAgTXv4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91971CB/118035E01DA711E29AAA92A008B02CD2/w6UehON4f7CMUozMNLwYCAgTXv4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cf:b0:84:8c:3f:5f:16:61:ad:2f:fc:dc:1e:b0:85:ce:ab:e9: 0a:69:40:fc:cf:7e:9e:7a:ab:ae:c0:00:9a:5a:f1:79:db:0b: 75:8a:d4:11:52:53:b4:71:63:f2:81:9f:6f:0d:d5:0d:23:c8: 7e:76:79:94:ac:97:8c:9d:88:53:60:39:d8:cc:59:ca:68:26: 68:84:89:b8:b2:25:d2:b2:7d:6d:98:be:88:b9:aa:80:34:cf: 61:c0:30:a2:ce:92:7c:6d:7e:1b:93:9e:a7:4b:b7:11:13:27: 89:01:a2:fc:ef:25:cf:fa:c9:89:e4:bb:6f:dd:0a:85:5c:04: b3:ad:e6:75:a6:e5:6c:ec:86:ef:f6:11:49:9a:25:a4:14:f3: 7c:e2:a8:04:2e:93:6b:c3:2b:26:10:1d:6e:4f:99:07:e7:27: 1f:46:8e:53:e3:78:6b:76:e7:70:f7:66:47:9e:b3:d8:b8:e3: 76:4f:eb:11:39:2a:0f:f5:83:5a:de:49:f7:31:23:c9:ad:0e: bd:c5:83:14:54:2f:5f:3d:82:69:a8:b7:2e:7e:16:a4:e4:5b: 12:d3:49:ed:1a:cc:41:ab:32:55:d3:d6:af:2d:3a:3e:5a:ac: 73:1e:7c:d8:a8:2d:79:8d:c6:65:62:5a:26:e3:19:65:a6:8a: 92:09:0c:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxQ0IxMTAvBgNVBAUTKEMzQTUxRTg0RTM3ODdGQjA4QzUyOENDQzM0QkMxODA4 MDgxMzVFRkUwHhcNMjUxMTA0MTUxNTMxWhcNMjUxMTExMTUxNTMxWjAYMRYwFAYD VQQDEw02OTBhMTg5My0zMjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtbOykFCb17frjHOixbu5c+DIBmVm8D7XCRN+DKDOtyP6EdBPYO12SVNLc/Bp fvdmdCiaU2FA3iNgxX1CphYGstFPZtfHgI7SyXSfsy/y8X44kCKTBA83nX45c5uB nCrtxoOojBtYwqdGGIJ2VL72aNgAKleQNLoV/kC792UWwOaAN/cI5g24+qT7VyQ3 zrbsLKKWkifNJ2gijO1nGQZewMfx2f5jynE4WfJP9t9HsagaIPhEXcVdGnp+68MI RC7pqXFkeGOSlp4XsbEGUKhShiA/JueqgjMP3yKsBJ/CUgG6FKItnkYUFJue/WPP 12NFZtgZ5cprGuZvTbiRDU2ipwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHg9mpdL wUhyI1qB9MQqdc9iN+TdMB8GA1UdIwQYMBaAFMOlHoTjeH+wjFKMzDS8GAgIE17+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzFDQi8xMTgwMzVFMDFE QTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3Q01Vb3pNTkx3WUNBZ1RY djQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3c2VWVoT040ZjdDTVVvek1OTHdZQ0FnVFh2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzFDQi8xMTgwMzVFMDFEQTcxMUUyOUFBQTkyQTAwOEIwMkNEMi93NlVlaE9ONGY3 Q01Vb3pNTkx3WUNBZ1RYdjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDPsISMP18WYa0v/NwesIXOq+kKaUD8z36eequuwACaWvF52wt1itQR UlO0cWPygZ9vDdUNI8h+dnmUrJeMnYhTYDnYzFnKaCZohIm4siXSsn1tmL6IuaqA NM9hwDCizpJ8bX4bk56nS7cREyeJAaL87yXP+smJ5Ltv3QqFXASzreZ1puVs7Ibv 9hFJmiWkFPN84qgELpNrwysmEB1uT5kH5ycfRo5T43hrdudw92ZHnrPYuON2T+sR OSoP9YNa3kn3MSPJrQ69xYMUVC9fPYJpqLcufhak5FsS00ntGsxBqzJV09avLTo+ WqxzHnzYqC15jcZlYlom4xllpoqSCQy4 -----END CERTIFICATE-----Generated at Wed Nov 5 21:10:35 2025 by rpki-client