$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: AXCZNErWeb57XvoTox5ysCmNPhBcUD1/r6LxK9+4AKs= Subject key identifier: 51:20:48:31:8B:04:48:74:C9:45:DF:31:BC:DF:D3:5C:F0:22:2D:A7 Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 153B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 152B Signing time: Tue 04 Nov 2025 16:54:25 +0000 Manifest this update: Tue 04 Nov 2025 16:54:25 +0000 Manifest next update: Tue 11 Nov 2025 16:54:25 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: +h5h04+TpISdW+Svr+Ambi2IMxiRQoyc/Ve+aDf+uOE=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: CwtP2gwbfApArQJr3Z1hu1rrmy4N399m/4TAvngzADE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:54:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5435 (0x153b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: Nov 4 16:54:25 2025 GMT Not After : Nov 11 16:54:25 2025 GMT Subject: CN=690a2fc1-6e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:bc:5b:4d:1f:b4:3f:2f:33:9b:2c:ee:d7:94: 4b:53:f1:3d:58:35:7f:55:be:2f:27:91:63:0d:35: 21:ff:d3:16:38:a4:1f:fe:7b:74:5f:56:e9:52:91: 65:2a:61:bd:2c:03:ad:22:03:e5:a3:d0:d0:2c:80: 59:ce:19:9b:fc:4c:1c:af:b9:82:c6:8b:72:e3:ca: f8:78:69:79:b4:23:1b:53:fc:18:ac:76:af:80:fb: a3:0e:a7:15:a4:21:37:81:a7:80:68:94:2a:dc:d7: 9b:95:74:01:a0:43:53:94:1e:ec:d9:2d:19:9b:19: 4e:ec:9f:da:0a:db:37:d3:ca:e3:07:ee:ab:08:6e: 18:fc:59:9c:2d:e5:15:48:ce:0d:2b:12:66:99:d8: c0:b2:38:a6:1d:ee:10:f9:48:de:c8:52:6b:aa:2a: 35:3c:60:93:c9:a1:b3:dc:50:9f:ed:3b:5c:36:25: 63:6f:3b:6d:25:2e:91:9e:71:6d:af:e3:e0:c7:95: a6:37:53:ae:6d:c5:db:f9:52:15:1c:63:ca:eb:b5: d7:30:98:8c:d5:57:d6:b9:3d:cf:ce:ba:07:00:66: 29:07:88:70:32:c2:da:db:ad:e1:b7:7e:03:32:f1: 3f:45:a3:fe:ff:b7:b3:00:17:f0:e6:d7:60:69:10: b9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:48:31:8B:04:48:74:C9:45:DF:31:BC:DF:D3:5C:F0:22:2D:A7 X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:ac:d4:c1:d6:18:6b:2f:88:a0:c1:32:96:6c:e0:33:50:66: 9d:9a:6a:61:b3:27:c2:86:91:22:4d:4e:6b:90:77:d4:6f:75: 20:53:3e:b3:6f:55:43:0d:41:47:e4:f3:d4:43:aa:d8:57:1f: ea:ed:e1:19:2b:cf:fa:37:89:f4:e9:a4:61:07:c3:56:c0:15: 86:5b:51:3e:17:82:a4:f6:48:33:64:e5:77:f5:4a:7d:55:95: 4e:7c:ca:6b:b8:63:b2:5d:77:7d:f7:3b:7b:4f:35:34:8c:32: 6e:58:e7:24:68:ba:76:1b:91:77:b8:90:37:63:52:17:ae:3d: 29:86:f9:d8:99:3f:42:9e:84:50:09:9e:73:63:f1:dd:37:17: 51:ea:57:b7:43:9c:dd:ee:80:4f:a3:c3:33:c0:3c:1c:fe:c3: 5d:13:e8:b8:e8:4f:5c:cc:ef:6a:a9:32:53:1c:2b:4b:2c:5f: a9:95:25:0b:8d:ac:2e:1e:b0:51:c3:aa:90:fa:41:df:2d:69: f5:52:b7:1b:6a:4a:90:16:97:bc:db:51:50:0c:30:a9:9f:c2: 5d:48:ae:9e:d7:92:92:4d:c0:c5:5c:fc:4f:73:e3:b7:c2:51: eb:5f:c1:51:fb:f2:65:12:87:f9:67:f9:ac:c5:e9:7e:00:5f: 41:94:24:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjUxMTA0MTY1NDI1WhcNMjUxMTExMTY1NDI1WjAYMRYwFAYD VQQDEw02OTBhMmZjMS02ZTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAybxbTR+0Py8zmyzu15RLU/E9WDV/Vb4vJ5FjDTUh/9MWOKQf/nt0X1bpUpFl KmG9LAOtIgPlo9DQLIBZzhmb/Ewcr7mCxoty48r4eGl5tCMbU/wYrHavgPujDqcV pCE3gaeAaJQq3NeblXQBoENTlB7s2S0ZmxlO7J/aCts308rjB+6rCG4Y/FmcLeUV SM4NKxJmmdjAsjimHe4Q+UjeyFJrqio1PGCTyaGz3FCf7TtcNiVjbzttJS6RnnFt r+Pgx5WmN1OubcXb+VIVHGPK67XXMJiM1VfWuT3PzroHAGYpB4hwMsLa263ht34D MvE/RaP+/7ezABfw5tdgaRC5/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFEgSDGL BEh0yUXfMbzf01zwIi2nMB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCorNTB1hhrL4igwTKWbOAzUGadmmphsyfChpEiTU5rkHfUb3UgUz6z b1VDDUFH5PPUQ6rYVx/q7eEZK8/6N4n06aRhB8NWwBWGW1E+F4Kk9kgzZOV39Up9 VZVOfMpruGOyXXd99zt7TzU0jDJuWOckaLp2G5F3uJA3Y1IXrj0phvnYmT9CnoRQ CZ5zY/HdNxdR6le3Q5zd7oBPo8MzwDwc/sNdE+i46E9czO9qqTJTHCtLLF+plSUL jawuHrBRw6qQ+kHfLWn1UrcbakqQFpe821FQDDCpn8JdSK6e15KSTcDFXPxPc+O3 wlHrX8FR+/JlEof5Z/msxel+AF9BlCTZ -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:08 2025 by rpki-client