$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: hhYDqv2SDdUS4PhhHVUaa1tWdMCFrYaC1wQmuPWSsak= Subject key identifier: 36:DE:AF:A2:45:0C:A5:1A:4C:06:B6:44:48:97:E9:62:6F:6B:F9:07 Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 0513 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 050C Signing time: Sun 02 Nov 2025 23:37:04 +0000 Manifest this update: Sun 02 Nov 2025 23:37:03 +0000 Manifest next update: Sun 09 Nov 2025 23:37:03 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: /zTgA2lLpVxp7NWiOnY6WxXpi8lfe0towo1ZR/7FXv4=) 2: E11714EE89E711F0B91AE62DC4F9AE02.roa (hash: wDRLIHrvxrqmI7nnU4ubgr079aqianE5n+pmFlnwcnU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 23:37:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1299 (0x513) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Nov 2 23:37:03 2025 GMT Not After : Nov 9 23:37:03 2025 GMT Subject: CN=6907eb20-176f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:dd:e7:69:22:3a:c8:19:21:ac:c7:5a:c9: 67:c0:24:df:22:e7:18:bb:5c:bf:fd:e0:a0:c1:9e: e0:b6:b5:5a:7f:2c:a7:e6:1b:28:28:67:31:95:41: c5:a7:45:9b:7e:47:9a:a3:16:61:89:c0:0b:78:1d: 1e:98:9a:67:d4:fa:0a:f6:2d:b9:92:56:23:e6:b8: 2e:6b:67:28:02:f7:af:ec:84:84:34:ff:d8:aa:53: 44:6c:0d:17:dc:07:0b:47:9d:02:3a:49:8d:1d:71: 51:b5:35:9c:89:4d:34:27:5c:66:bd:56:2d:cc:b6: c0:41:dc:61:fb:3e:f6:f3:86:d9:cd:7a:31:f9:42: c8:a4:37:f3:71:71:bf:59:26:62:93:02:a3:cf:0e: 5f:ab:b3:b7:70:dd:53:98:7e:f8:20:d9:a0:d8:cd: 28:fa:37:47:3a:70:dd:87:6f:71:c0:61:04:18:9a: d3:bd:2b:7e:95:72:a4:69:98:ea:d7:76:3e:51:ba: 3c:28:9a:40:2d:59:26:ca:28:9b:f0:ff:45:06:bf: 06:99:0d:07:b3:7b:76:c5:57:6e:67:2f:28:f3:f8: 04:a9:fd:dd:61:ab:4f:d4:63:b5:c9:7d:09:c6:e7: 5f:24:0b:bb:06:fd:25:76:ad:90:a5:21:02:ba:84: e5:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:AF:A2:45:0C:A5:1A:4C:06:B6:44:48:97:E9:62:6F:6B:F9:07 X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:88:90:31:b0:0d:9a:19:e7:76:e6:1f:d1:94:e8:58:ef:df: c4:a2:47:b8:e3:66:a8:b5:dc:5e:b9:03:f8:3f:90:25:1c:35: d4:73:60:1b:43:c2:cf:e8:44:15:6e:f6:95:aa:1d:df:7c:bc: 80:d6:6f:58:aa:92:fb:d8:b9:2e:f2:9c:7e:18:da:6a:d3:4d: 23:57:bf:d9:96:8f:13:95:fd:d8:56:08:24:f3:77:d8:73:e3: 1c:1f:7d:d7:69:84:19:dc:aa:b6:ca:4d:37:5c:d7:c0:16:85: d0:e2:74:81:3a:df:ba:17:c2:68:87:25:08:3f:12:23:cd:6b: 8a:0b:41:52:a3:c0:b1:9d:a0:c3:0a:39:2f:71:9f:8a:36:6b: 6c:fd:16:55:45:2d:be:01:ae:6d:ff:b5:e4:89:e8:2e:29:f1: f6:6a:7e:c3:88:29:fc:9c:a1:9e:0e:dd:8d:b4:d2:68:6a:51: 5a:e6:05:35:ff:a7:66:af:b6:d3:50:21:a5:85:8c:33:b0:16: 93:75:49:74:9e:84:53:3e:8d:fc:9d:86:81:6c:c9:82:81:2d: 58:51:75:14:82:ef:e4:bf:d0:72:f0:07:8e:49:35:0b:f3:c9: f5:e9:88:44:b6:c0:80:ab:ec:8e:95:da:cd:0b:1f:10:3e:be: d7:b3:ec:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBRMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUxMTAyMjMzNzAzWhcNMjUxMTA5MjMzNzAzWjAYMRYwFAYD VQQDEw02OTA3ZWIyMC0xNzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVXd52kiOsgZIazHWslnwCTfIucYu1y//eCgwZ7gtrVafyyn5hsoKGcxlUHF p0WbfkeaoxZhicALeB0emJpn1PoK9i25klYj5rgua2coAvev7ISENP/YqlNEbA0X 3AcLR50COkmNHXFRtTWciU00J1xmvVYtzLbAQdxh+z7284bZzXox+ULIpDfzcXG/ WSZikwKjzw5fq7O3cN1TmH74INmg2M0o+jdHOnDdh29xwGEEGJrTvSt+lXKkaZjq 13Y+Ubo8KJpALVkmyiib8P9FBr8GmQ0Hs3t2xVduZy8o8/gEqf3dYatP1GO1yX0J xudfJAu7Bv0ldq2QpSECuoTldQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDber6JF DKUaTAa2REiX6WJva/kHMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBziJAxsA2aGed25h/RlOhY79/Eoke442aotdxeuQP4P5AlHDXUc2Ab Q8LP6EQVbvaVqh3ffLyA1m9YqpL72Lku8px+GNpq000jV7/Zlo8Tlf3YVggk83fY c+McH33XaYQZ3Kq2yk03XNfAFoXQ4nSBOt+6F8JohyUIPxIjzWuKC0FSo8CxnaDD CjkvcZ+KNmts/RZVRS2+Aa5t/7XkieguKfH2an7DiCn8nKGeDt2NtNJoalFa5gU1 /6dmr7bTUCGlhYwzsBaTdUl0noRTPo38nYaBbMmCgS1YUXUUgu/kv9By8AeOSTUL 88n16YhEtsCAq+yOldrNCx8QPr7Xs+x5 -----END CERTIFICATE-----Generated at Tue Nov 4 16:31:07 2025 by rpki-client