$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json) Hash identifier: QO5LKQXth+zdHkqhZmu8uDspze7DqNBsN+6qFNR0WUk= Subject key identifier: BA:9E:D2:E3:6A:47:CB:69:D6:C7:39:22:A4:81:AA:A3:F1:3C:F1:66 Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft Manifest number: 35 Signing time: Mon 03 Nov 2025 07:36:54 +0000 Manifest this update: Mon 03 Nov 2025 07:36:54 +0000 Manifest next update: Mon 10 Nov 2025 07:36:54 +0000 Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: jOELqGKxxTQa+emXbLyk3oT+352ZYc+J4vpGp3DzDGc=) 2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Validity Not Before: Nov 3 07:36:54 2025 GMT Not After : Nov 10 07:36:54 2025 GMT Subject: CN=69085b96-da1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:02:2a:49:2e:c3:12:18:1e:a5:ca:fc:84:ec: f4:c8:ed:eb:9e:cf:95:95:f2:c5:ce:28:6a:d0:5f: ac:6e:1a:0c:57:04:21:61:8d:df:9a:6b:82:72:6e: c9:c5:df:28:68:d4:0a:cd:e5:43:65:74:56:d3:30: 93:99:ca:0e:73:c6:40:1a:a9:3f:97:ef:52:21:23: 4b:f9:59:25:43:a8:42:84:02:81:70:46:fa:f2:82: 70:9e:76:ba:3a:19:30:10:c9:57:7f:94:6e:dc:78: 8b:98:4a:fc:71:ce:42:5f:fb:a6:7a:d3:e0:cc:57: a2:97:11:32:66:cf:aa:6c:08:bf:d8:c8:38:bc:b5: 31:52:d2:c1:33:5e:e0:ba:bd:fc:69:c8:81:2c:4a: 62:ad:8e:07:ff:5b:71:0c:ee:27:89:e1:64:3f:e2: aa:96:0d:39:65:6b:c3:bc:69:fb:be:d0:8d:ec:14: 19:83:9d:e7:46:c2:1b:fb:4d:ff:e2:05:2b:81:38: df:4d:50:e8:49:ca:75:e5:77:95:e7:1d:38:9a:78: 16:b1:31:5e:19:44:3d:b4:63:43:1c:6b:e8:e3:c0: f6:9c:37:d2:e2:0e:f5:3e:1e:f1:41:41:25:0a:fa: f9:be:f9:59:3e:3b:4f:d8:f0:e3:a4:7c:65:9e:71: 52:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:9E:D2:E3:6A:47:CB:69:D6:C7:39:22:A4:81:AA:A3:F1:3C:F1:66 X509v3 Authority Key Identifier: keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:fb:f5:51:a7:ae:ff:2d:81:27:62:b8:f7:4e:73:2d:b9:61: 5d:f8:96:4b:44:18:79:49:64:ee:aa:e9:4a:9b:2d:b3:71:ce: 71:db:e6:70:e9:9f:03:f6:d0:aa:e3:39:b1:35:94:a9:85:f6: ec:77:69:5d:54:1e:fe:fc:de:be:61:58:62:71:11:9b:f5:e5: af:e2:64:66:99:48:56:e8:65:ba:15:b0:a1:cc:a1:41:5b:60: bb:d5:24:a0:e5:b6:4b:46:a6:94:d2:e2:1e:3c:4a:a3:0e:cf: 79:19:eb:f3:ad:04:6f:8c:11:3c:85:08:5b:51:4b:8c:d1:b3: dd:a6:a1:91:80:89:9b:48:ec:1f:f3:f7:dd:eb:7d:93:53:a9: 8b:ef:b1:58:84:43:f6:1d:e3:ab:aa:80:7b:71:08:71:74:5d: bb:1b:2e:be:23:0f:3b:19:54:26:2e:48:36:40:e7:df:9c:b2: 85:f9:ca:ff:ac:81:12:f2:f7:38:38:9c:d5:9a:f7:32:00:b1: e2:44:1f:e9:77:ca:75:e5:4c:8b:b8:b4:a1:93:c9:28:33:85: 74:a0:90:d5:6f:e3:61:c5:bc:43:1e:43:7f:29:0e:15:fe:9e: 70:ba:6e:8c:1a:2c:3d:aa:d3:6d:14:c6:a9:1f:86:d7:04:00: 46:02:51:59 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4 MDk3NkQ1QjAeFw0yNTExMDMwNzM2NTRaFw0yNTExMTAwNzM2NTRaMBgxFjAUBgNV BAMTDTY5MDg1Yjk2LWRhMWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2AipJLsMSGB6lyvyE7PTI7euez5WV8sXOKGrQX6xuGgxXBCFhjd+aa4JybsnF 3yho1ArN5UNldFbTMJOZyg5zxkAaqT+X71IhI0v5WSVDqEKEAoFwRvrygnCedro6 GTAQyVd/lG7ceIuYSvxxzkJf+6Z60+DMV6KXETJmz6psCL/YyDi8tTFS0sEzXuC6 vfxpyIEsSmKtjgf/W3EM7ieJ4WQ/4qqWDTlla8O8afu+0I3sFBmDnedGwhv7Tf/i BSuBON9NUOhJynXld5XnHTiaeBaxMV4ZRD20Y0Mca+jjwPacN9LiDvU+HvFBQSUK +vm++Vk+O0/Y8OOkfGWecVK5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUup7S42pH y2nWxzkipIGqo/E88WYwHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2Lzg4MTJGQkU0NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxt eGZsQUEtb21tVm9DWGJWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMH79VGnrv8tgSdiuPdOcy25YV34lktEGHlJZO6q6UqbLbNxznHb5nDp nwP20KrjObE1lKmF9ux3aV1UHv783r5hWGJxEZv15a/iZGaZSFboZboVsKHMoUFb YLvVJKDltktGppTS4h48SqMOz3kZ6/OtBG+METyFCFtRS4zRs92moZGAiZtI7B/z 993rfZNTqYvvsViEQ/Yd46uqgHtxCHF0XbsbLr4jDzsZVCYuSDZA59+csoX5yv+s gRLy9zg4nNWa9zIAseJEH+l3ynXlTIu4tKGTySgzhXSgkNVv42HFvEMeQ38pDhX+ nnC6bowaLD2q020UxqkfhtcEAEYCUVk= -----END CERTIFICATE-----Generated at Wed Nov 5 06:31:59 2025 by rpki-client