$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft File: apjAwIy9NBmpCCuGDSm_qXL98qc.mft (raw, json) Hash identifier: 24xAKhsKn1zOUb5V+SnE5pbO+23Wavdt5AaLsv8vuQw= Subject key identifier: 6C:37:BD:E2:AD:2B:BB:75:6E:0A:4E:DA:02:F2:84:91:5C:97:3E:DB Authority key identifier: 6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 Certificate issuer: /CN=A91A2BD6/serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Certificate serial: 047E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft Manifest number: 047A Signing time: Wed 05 Nov 2025 00:12:55 +0000 Manifest this update: Wed 05 Nov 2025 00:12:55 +0000 Manifest next update: Wed 12 Nov 2025 00:12:55 +0000 Files and hashes: 1: apjAwIy9NBmpCCuGDSm_qXL98qc.crl (hash: wiElPYXc/tlbVleKOO/tjJf+nn6Tv4LLL4W1Ap38ntw=) 2: 61B3CBDC631911ECAE6AA33DC4F9AE02.roa (hash: /+PqdcGfeQGq1JSsbPZ7utBGw8SAzSRzzxhLFAim1J0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:12:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1150 (0x47e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2BD6, serialNumber=6A98C0C08CBD3419A9082B860D29BFA972FDF2A7 Validity Not Before: Nov 5 00:12:55 2025 GMT Not After : Nov 12 00:12:55 2025 GMT Subject: CN=690a9687-bada Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a7:2c:63:f7:a3:df:11:24:9a:14:9d:b3:7a: 3f:63:b7:6d:a7:21:f1:38:f5:b9:b3:35:eb:de:f7: ef:dc:66:43:4a:58:c8:92:06:5a:b3:dc:ec:88:73: 40:14:84:5a:96:8d:e0:aa:52:7a:32:c5:e7:ef:45: 7b:1d:32:8a:40:57:fd:d4:42:24:ba:58:0f:05:31: c0:83:c1:af:66:2f:33:c7:22:bc:64:27:49:de:76: a6:40:e6:22:bf:29:49:65:2a:97:be:ad:ad:1e:a7: c4:09:5c:fd:06:83:1b:cf:de:49:b7:5a:60:08:b9: d7:d5:53:eb:13:9a:b6:4b:7f:9f:e4:9d:3c:6f:9d: 7e:ad:ce:b5:28:23:7d:f2:cd:e6:9e:7b:b2:3b:bf: ff:ce:53:69:80:1f:d9:cc:17:26:0e:d1:d6:fa:d3: 5b:b2:cd:b0:47:5f:d1:94:44:17:13:6d:13:41:c3: da:8d:f8:f9:1a:eb:6a:0d:fb:65:ab:e2:0f:4a:e6: 25:f2:ae:e5:45:31:43:e9:d2:5d:51:5c:c6:ed:b2: 38:17:1c:52:ad:b6:93:47:20:15:eb:7e:b0:0f:a0: 22:70:c5:56:38:4e:82:72:5b:1c:4c:b0:66:ad:32: 33:a1:04:c9:c4:88:9c:15:7b:d3:b3:29:a7:a1:04: a7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:37:BD:E2:AD:2B:BB:75:6E:0A:4E:DA:02:F2:84:91:5C:97:3E:DB X509v3 Authority Key Identifier: keyid:6A:98:C0:C0:8C:BD:34:19:A9:08:2B:86:0D:29:BF:A9:72:FD:F2:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/apjAwIy9NBmpCCuGDSm_qXL98qc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2BD6/9C585DB0631511ECBA536969C4F9AE02/apjAwIy9NBmpCCuGDSm_qXL98qc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:ba:03:63:5f:f9:ee:a9:45:33:6f:2e:03:38:35:66:be:cb: 4d:8d:5b:f1:91:5f:43:05:79:29:b2:4d:51:4f:ed:4b:eb:a3: 61:ea:fb:da:04:07:9f:80:7d:fe:c9:ef:a8:fa:ee:3f:6c:4e: b6:19:43:e5:d9:e8:08:48:32:ff:4c:83:3a:32:9a:a4:60:ff: 00:13:d0:f4:a8:0c:06:c0:fc:08:d8:a1:9b:91:a9:e1:d2:c4: e2:70:b8:65:25:8b:13:0f:80:2e:3c:73:b4:c0:18:9e:49:fb: e8:9d:bb:b4:92:e6:10:fb:91:4a:6c:1f:93:93:72:0a:3b:38: 0d:cd:05:fe:26:73:35:7a:41:a8:ee:6e:23:ee:96:9b:1a:76: d3:60:4f:58:b1:49:83:b0:de:74:9b:7a:f5:8e:c7:a5:59:b7: 78:60:16:08:f4:fb:74:ac:ef:81:f4:da:09:b7:f1:c0:95:ba: 08:52:d0:b2:94:e9:85:e3:e2:41:2f:94:88:21:ba:ae:cf:00: 12:51:78:e0:6f:2c:4c:79:6b:74:3b:48:17:8b:04:bd:30:68: 50:21:d2:3f:a0:a0:e9:f5:11:d1:9d:d8:06:a0:d9:8a:1a:3c: c4:cd:89:0e:62:30:9a:0c:c3:a5:02:4d:6d:7c:1e:34:f7:bd: 28:8c:72:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBH4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJCRDYxMTAvBgNVBAUTKDZBOThDMEMwOENCRDM0MTlBOTA4MkI4NjBEMjlCRkE5 NzJGREYyQTcwHhcNMjUxMTA1MDAxMjU1WhcNMjUxMTEyMDAxMjU1WjAYMRYwFAYD VQQDEw02OTBhOTY4Ny1iYWRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA16csY/ej3xEkmhSds3o/Y7dtpyHxOPW5szXr3vfv3GZDSljIkgZas9zsiHNA FIRalo3gqlJ6MsXn70V7HTKKQFf91EIkulgPBTHAg8GvZi8zxyK8ZCdJ3namQOYi vylJZSqXvq2tHqfECVz9BoMbz95Jt1pgCLnX1VPrE5q2S3+f5J08b51+rc61KCN9 8s3mnnuyO7//zlNpgB/ZzBcmDtHW+tNbss2wR1/RlEQXE20TQcPajfj5GutqDftl q+IPSuYl8q7lRTFD6dJdUVzG7bI4FxxSrbaTRyAV636wD6AicMVWOE6CclscTLBm rTIzoQTJxIicFXvTsymnoQSn6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGw3veKt K7t1bgpO2gLyhJFclz7bMB8GA1UdIwQYMBaAFGqYwMCMvTQZqQgrhg0pv6ly/fKn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkJENi85QzU4NURCMDYz MTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5CbXBDQ3VHRFNtX3FYTDk4 cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FwakF3SXk5TkJtcENDdUdEU21fcVhMOThxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MkJENi85QzU4NURCMDYzMTUxMUVDQkE1MzY5NjlDNEY5QUUwMi9hcGpBd0l5OU5C bXBDQ3VHRFNtX3FYTDk4cWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGugNjX/nuqUUzby4DODVmvstNjVvxkV9DBXkpsk1RT+1L66Nh6vva BAefgH3+ye+o+u4/bE62GUPl2egISDL/TIM6MpqkYP8AE9D0qAwGwPwI2KGbkanh 0sTicLhlJYsTD4AuPHO0wBieSfvonbu0kuYQ+5FKbB+Tk3IKOzgNzQX+JnM1ekGo 7m4j7pabGnbTYE9YsUmDsN50m3r1jselWbd4YBYI9Pt0rO+B9NoJt/HAlboIUtCy lOmF4+JBL5SIIbquzwASUXjgbyxMeWt0O0gXiwS9MGhQIdI/oKDp9RHRndgGoNmK GjzEzYkOYjCaDMOlAk1tfB40970ojHJU -----END CERTIFICATE-----Generated at Wed Nov 5 06:52:45 2025 by rpki-client