$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft File: b2FOWP6Tat901zb1OS3tX9FrdYc.mft (raw, json) Hash identifier: Ipa5iIparqh+g6JJ3eptQVoEmwqp+9VxOaqCGIWNmQQ= Subject key identifier: 5E:84:60:87:84:7D:AF:D6:20:0F:45:F9:81:48:9D:76:C0:68:49:75 Authority key identifier: 6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 Certificate issuer: /CN=A91A9B3C/serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Certificate serial: 06A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft Manifest number: 06A4 Signing time: Sun 02 Nov 2025 22:16:32 +0000 Manifest this update: Sun 02 Nov 2025 22:16:31 +0000 Manifest next update: Sun 09 Nov 2025 22:16:31 +0000 Files and hashes: 1: b2FOWP6Tat901zb1OS3tX9FrdYc.crl (hash: 5k3DJWzdkXxTGwH7LW2rRPFSwXPWs5WOemKYinQh4OY=) 2: 00D8BE5286FC11EB8A95642DC4F9AE02.roa (hash: k0J17sE1EdNCFMHPLLouV8rIaMP7CAywUqJdG5phE9Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1705 (0x6a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9B3C, serialNumber=6F614E58FE936ADF74D736F5392DED5FD16B7587 Validity Not Before: Nov 2 22:16:31 2025 GMT Not After : Nov 9 22:16:31 2025 GMT Subject: CN=6907d83f-ae01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:0a:db:72:4c:35:7e:65:90:a2:36:cc:ff: d0:85:41:89:4b:6e:42:d9:f3:a7:5f:79:c5:02:e1: ab:32:b0:dc:7a:0e:5f:a7:6a:68:59:18:d3:f8:49: 9c:f3:2a:ce:64:95:76:1b:01:43:2f:72:ff:14:91: 0a:9c:d8:24:73:ff:9c:79:da:a1:96:94:0d:6b:fa: f5:ac:9e:3b:83:d9:0b:d1:90:35:05:fb:46:05:56: 8a:b4:e9:0a:c7:ba:08:1f:25:f4:d7:f2:c5:84:71: 92:80:be:b5:bf:9e:bd:92:a1:73:a5:a8:be:49:82: 5e:59:5a:68:57:71:01:14:0c:21:1e:77:9d:17:44: 7d:f5:4b:64:22:4a:b3:45:63:76:ba:2c:f2:76:ba: d5:b6:2a:cf:b5:cf:3c:d8:e4:a1:27:2d:0e:78:b9: a8:f3:85:4b:31:5e:d6:de:6d:da:b5:46:9e:ba:1d: 5d:cc:4a:79:ea:10:f2:35:a8:05:ea:c4:fc:d0:d6: d0:e5:64:d2:6e:7c:6e:2d:7d:ba:9c:20:e2:27:59: 7e:f9:e1:02:2f:71:b3:d3:cf:9c:66:d8:f4:0f:8d: 73:fb:cc:35:c3:64:57:51:19:75:da:13:59:73:1b: ac:0a:83:87:f7:21:8c:87:3b:15:e8:cf:7c:01:a2: 94:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:84:60:87:84:7D:AF:D6:20:0F:45:F9:81:48:9D:76:C0:68:49:75 X509v3 Authority Key Identifier: keyid:6F:61:4E:58:FE:93:6A:DF:74:D7:36:F5:39:2D:ED:5F:D1:6B:75:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b2FOWP6Tat901zb1OS3tX9FrdYc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9B3C/3F3362DA86FA11EBB3C7BB29C4F9AE02/b2FOWP6Tat901zb1OS3tX9FrdYc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:e6:e2:67:42:0e:5e:63:c1:50:d5:bf:8f:1a:0b:cb:d4:83: e0:61:bd:1a:4a:98:3d:e0:67:84:ad:c0:86:c6:1d:f6:84:5f: ba:83:cd:37:9b:1e:d8:40:cc:39:de:dc:5e:86:95:09:ae:80: 2b:a8:bb:2c:13:1a:0e:dc:80:fb:c8:31:98:e8:a0:16:15:8d: 35:97:09:b0:8d:aa:e6:3a:ee:77:35:f3:13:4b:c7:76:0e:85: e2:57:fa:7a:08:9a:2f:9e:93:b4:ca:56:e0:09:35:f0:89:79: 85:5f:a0:62:3e:3b:70:a0:15:22:59:f8:e0:6c:fe:4f:d6:94: f0:47:60:5e:97:ed:25:8e:d4:00:4c:ee:87:53:87:2c:22:f0: 84:2d:1f:29:d5:65:cb:d4:1e:bb:4f:24:18:69:c8:3f:91:b9: d7:c3:7c:de:67:73:b9:2c:80:85:82:d0:e1:8b:f0:7e:12:fd: 32:4b:75:05:94:27:c6:e1:ed:33:20:87:df:c1:bc:69:a5:86: 26:22:93:f9:7a:66:8d:dd:84:34:f2:9e:b3:5c:97:2c:68:6b: cb:84:ad:8e:98:4f:f2:cd:37:44:17:06:8a:da:c0:15:e0:d0: 8f:29:56:f1:e3:01:3a:c8:7f:5a:45:c4:c1:27:98:9d:69:5b: 94:41:cc:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBqkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTlCM0MxMTAvBgNVBAUTKDZGNjE0RTU4RkU5MzZBREY3NEQ3MzZGNTM5MkRFRDVG RDE2Qjc1ODcwHhcNMjUxMTAyMjIxNjMxWhcNMjUxMTA5MjIxNjMxWjAYMRYwFAYD VQQDEw02OTA3ZDgzZi1hZTAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxdsK23JMNX5lkKI2zP/QhUGJS25C2fOnX3nFAuGrMrDceg5fp2poWRjT+Emc 8yrOZJV2GwFDL3L/FJEKnNgkc/+cedqhlpQNa/r1rJ47g9kL0ZA1BftGBVaKtOkK x7oIHyX01/LFhHGSgL61v569kqFzpai+SYJeWVpoV3EBFAwhHnedF0R99UtkIkqz RWN2uizydrrVtirPtc882OShJy0OeLmo84VLMV7W3m3atUaeuh1dzEp56hDyNagF 6sT80NbQ5WTSbnxuLX26nCDiJ1l++eECL3Gz08+cZtj0D41z+8w1w2RXURl12hNZ cxusCoOH9yGMhzsV6M98AaKUrwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF6EYIeE fa/WIA9F+YFInXbAaEl1MB8GA1UdIwQYMBaAFG9hTlj+k2rfdNc29Tkt7V/Ra3WH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOUIzQy8zRjMzNjJEQTg2 RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0OTAxemIxT1MzdFg5RnJk WWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2IyRk9XUDZUYXQ5MDF6YjFPUzN0WDlGcmRZYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OUIzQy8zRjMzNjJEQTg2RkExMUVCQjNDN0JCMjlDNEY5QUUwMi9iMkZPV1A2VGF0 OTAxemIxT1MzdFg5RnJkWWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBB5uJnQg5eY8FQ1b+PGgvL1IPgYb0aSpg94GeErcCGxh32hF+6g803 mx7YQMw53txehpUJroArqLssExoO3ID7yDGY6KAWFY01lwmwjarmOu53NfMTS8d2 DoXiV/p6CJovnpO0ylbgCTXwiXmFX6BiPjtwoBUiWfjgbP5P1pTwR2Bel+0ljtQA TO6HU4csIvCELR8p1WXL1B67TyQYacg/kbnXw3zeZ3O5LICFgtDhi/B+Ev0yS3UF lCfG4e0zIIffwbxppYYmIpP5emaN3YQ08p6zXJcsaGvLhK2OmE/yzTdEFwaK2sAV 4NCPKVbx4wE6yH9aRcTBJ5idaVuUQcz6 -----END CERTIFICATE-----Generated at Tue Nov 4 12:41:50 2025 by rpki-client