$ rpki-client -vvf rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft File: povAkQ-DHeyBilCjIUX3Q1XOY8A.mft (raw, json) Hash identifier: Rz6wEFNHxP6JTJx4F/X4Anki3iLOrkEHBOFggV46PAE= Subject key identifier: F1:7F:EE:F7:8C:D2:34:67:46:D5:58:96:F0:C9:E7:6B:B8:8B:EE:1C Authority key identifier: A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 Certificate issuer: /CN=A919B6FC/serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Certificate serial: 0683 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft Manifest number: 067C Signing time: Tue 04 Nov 2025 22:34:55 +0000 Manifest this update: Tue 04 Nov 2025 22:34:55 +0000 Manifest next update: Tue 11 Nov 2025 22:34:55 +0000 Files and hashes: 1: povAkQ-DHeyBilCjIUX3Q1XOY8A.crl (hash: 7R/4amplmyR6gNMG/7bCfpEmpJitae40JcV10nz+PW4=) 2: 7CEDB29645AB11F0B5F06B1EC4F9AE02.roa (hash: SOend745Ty2THQMalNwJuy4Bzbzq44VzFyWqGOXgtig=) 3: 61C842F4467A11F08609BD71C4F9AE02.roa (hash: CN7R3hh6U/a3moc9IYNNpKBkUBMAltkFsKNKJ/Ee7QI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1667 (0x683) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919B6FC, serialNumber=A68BC0910F831DEC818A50A32145F74355CE63C0 Validity Not Before: Nov 4 22:34:55 2025 GMT Not After : Nov 11 22:34:55 2025 GMT Subject: CN=690a7f8f-a361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:7d:84:8f:79:8a:51:2c:6f:64:69:ed:c8: 80:fb:70:1c:e0:8f:d9:5d:0a:32:11:2a:03:88:a0: 6a:12:b4:53:f0:bb:d4:b9:0f:c0:5d:ba:63:9c:f0: b8:bc:30:4c:d4:3a:37:80:f6:9a:16:47:79:26:89: 96:35:1c:d4:8f:fa:ce:21:ad:c3:fd:50:46:89:56: 5a:e3:17:66:e6:d0:20:35:b6:a2:44:e1:fc:dd:78: 94:18:be:66:dd:13:a1:8d:51:f5:95:7e:f1:90:32: 68:84:4c:55:1c:61:15:e7:cb:d4:91:f5:96:91:4b: 90:42:39:3d:9b:7a:57:92:24:3b:2e:58:45:cf:e7: f2:ac:ae:d7:ff:69:51:5b:2a:b4:9b:e9:3b:9e:f2: 2d:75:07:62:d4:5c:26:0c:da:3a:91:4e:94:0c:65: b7:93:ce:39:bc:4a:5a:76:37:84:fa:76:a5:4b:32: b8:06:cf:c8:10:38:b7:1d:29:54:c6:71:87:06:3f: 9c:82:b1:84:31:13:ba:2b:c3:26:7c:7d:47:d3:3a: b4:70:61:db:5f:9e:0f:d0:9e:d4:3a:bd:6d:24:2c: af:bc:4f:4e:f1:22:90:a8:13:53:56:a3:41:2b:ed: 43:22:9e:ac:ba:01:15:bd:2d:df:fb:b0:8c:6c:7a: 73:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:7F:EE:F7:8C:D2:34:67:46:D5:58:96:F0:C9:E7:6B:B8:8B:EE:1C X509v3 Authority Key Identifier: keyid:A6:8B:C0:91:0F:83:1D:EC:81:8A:50:A3:21:45:F7:43:55:CE:63:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/povAkQ-DHeyBilCjIUX3Q1XOY8A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919B6FC/8892CC4A983911EBA1409960C4F9AE02/povAkQ-DHeyBilCjIUX3Q1XOY8A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:87:67:9c:5e:e7:04:1e:3d:2e:93:b5:86:56:3d:51:4d:1f: b9:da:7b:eb:89:08:df:d6:81:09:04:fa:ed:73:a4:da:08:02: 0c:26:c9:59:9a:52:c1:8d:d6:44:4f:80:dd:a8:21:4b:7f:78: 14:d0:5e:da:03:d1:d7:e4:40:f4:a8:63:42:f3:a0:df:9b:79: a7:ce:06:83:4f:28:00:1a:5d:ac:9b:33:71:3b:6e:62:97:06: 1f:cd:b5:79:83:ec:32:51:5a:30:dc:6f:a1:48:8e:cd:f1:80: 15:f2:ec:38:24:a7:55:cf:ca:a8:73:df:08:b9:dc:fb:03:59: cd:c5:9c:6e:8f:44:90:79:1d:b4:c0:92:f4:15:bb:02:eb:ab: 77:0b:b0:03:ce:b4:a3:ea:6f:ec:26:64:71:ef:aa:91:98:55: de:ab:d6:b5:fd:e9:1b:89:f7:0c:ac:40:6e:0d:0c:15:e7:c9: 47:e7:87:9c:27:46:08:93:e1:e0:72:93:5a:75:21:81:b5:56: 63:c7:c6:68:26:a9:34:30:b2:40:2d:6b:98:03:b3:7d:a2:b9: e6:ad:cf:38:bd:80:42:5b:07:0a:da:c1:c2:41:68:d6:c2:d7: 84:93:36:8b:82:10:98:39:dc:dc:5b:98:d4:b3:dc:fb:d7:4c: 6b:9d:5d:13 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUI2RkMxMTAvBgNVBAUTKEE2OEJDMDkxMEY4MzFERUM4MThBNTBBMzIxNDVGNzQz NTVDRTYzQzAwHhcNMjUxMTA0MjIzNDU1WhcNMjUxMTExMjIzNDU1WjAYMRYwFAYD VQQDEw02OTBhN2Y4Zi1hMzYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dV9hI95ilEsb2Rp7ciA+3Ac4I/ZXQoyESoDiKBqErRT8LvUuQ/AXbpjnPC4 vDBM1Do3gPaaFkd5JomWNRzUj/rOIa3D/VBGiVZa4xdm5tAgNbaiROH83XiUGL5m 3ROhjVH1lX7xkDJohExVHGEV58vUkfWWkUuQQjk9m3pXkiQ7LlhFz+fyrK7X/2lR Wyq0m+k7nvItdQdi1FwmDNo6kU6UDGW3k845vEpadjeE+nalSzK4Bs/IEDi3HSlU xnGHBj+cgrGEMRO6K8MmfH1H0zq0cGHbX54P0J7UOr1tJCyvvE9O8SKQqBNTVqNB K+1DIp6sugEVvS3f+7CMbHpz3wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPF/7veM 0jRnRtVYlvDJ52u4i+4cMB8GA1UdIwQYMBaAFKaLwJEPgx3sgYpQoyFF90NVzmPA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QjZGQy84ODkyQ0M0QTk4 MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhleUJpbENqSVVYM1ExWE9Z OEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BvdkFrUS1ESGV5QmlsQ2pJVVgzUTFYT1k4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QjZGQy84ODkyQ0M0QTk4MzkxMUVCQTE0MDk5NjBDNEY5QUUwMi9wb3ZBa1EtREhl eUJpbENqSVVYM1ExWE9ZOEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYh2ecXucEHj0uk7WGVj1RTR+52nvriQjf1oEJBPrtc6TaCAIMJslZ mlLBjdZET4DdqCFLf3gU0F7aA9HX5ED0qGNC86Dfm3mnzgaDTygAGl2smzNxO25i lwYfzbV5g+wyUVow3G+hSI7N8YAV8uw4JKdVz8qoc98Iudz7A1nNxZxuj0SQeR20 wJL0FbsC66t3C7ADzrSj6m/sJmRx76qRmFXeq9a1/ekbifcMrEBuDQwV58lH54ec J0YIk+HgcpNadSGBtVZjx8ZoJqk0MLJALWuYA7N9ornmrc84vYBCWwcK2sHCQWjW wteEkzaLghCYOdzcW5jUs9z710xrnV0T -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:58 2025 by rpki-client