$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft File: _CT1OQdHh-zqsAwkJgbCvWiBmg0.mft (raw, json) Hash identifier: E/ROL0NycSWa13MwAe6MqSaIPzdx6xiwdV62s0AowR8= Subject key identifier: 17:69:DC:00:EF:3D:BB:AB:F0:07:3C:7D:8B:1F:EF:4B:F5:B0:F6:9A Authority key identifier: FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D Certificate issuer: /CN=A91A9CBB/serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft Manifest number: 6C Signing time: Wed 05 Nov 2025 07:09:47 +0000 Manifest this update: Wed 05 Nov 2025 07:09:46 +0000 Manifest next update: Wed 12 Nov 2025 07:09:46 +0000 Files and hashes: 1: _CT1OQdHh-zqsAwkJgbCvWiBmg0.crl (hash: c+98odXiRumeGZDOGZoRqsAavtn4X0i/rXDDoC7WrI8=) 2: 947AB09E459C11F0BF881335C4F9AE02.roa (hash: ZL0Aa2llI8aydVHlIy2x+gVqsBcKLbop2xFjrlC+Qtw=) 3: 2A8C8F02198E11F09D302145C4F9AE02.roa (hash: pkFF5f+Vaat+aJOayMibpTMU9Wp7Q864DQvUc24s624=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:09:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9CBB, serialNumber=FC24F539074787ECEAB00C242606C2BD68819A0D Validity Not Before: Nov 5 07:09:46 2025 GMT Not After : Nov 12 07:09:46 2025 GMT Subject: CN=690af83b-9bc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:83:34:c1:f5:25:3b:56:ff:23:ce:74:cd: eb:bb:8b:94:68:d9:87:d0:f0:8a:c3:cb:85:7c:dc: f9:bc:a9:03:94:8e:fb:08:6f:bf:d5:f1:5d:91:95: f8:21:87:b2:b7:d3:9f:2a:78:1a:bd:74:64:89:94: ad:11:be:20:79:dd:e3:d1:5d:31:86:45:c3:a3:e8: c5:80:fc:ed:be:1d:9f:4f:09:56:c3:d6:0f:75:57: 87:d3:ff:64:9e:1b:40:9f:b3:f7:9f:2c:28:c8:ce: fa:7e:96:31:ae:30:d8:3e:fb:29:c6:fd:50:a8:5c: 61:82:14:fd:2e:c5:b5:b7:67:9d:ac:74:6e:7c:55: e4:bf:12:75:b4:b2:38:38:61:82:17:57:de:e5:41: de:0d:f2:a8:9a:05:a1:ef:c8:1a:69:da:6e:cf:47: cb:3e:14:95:f4:87:be:99:7a:3d:4f:7f:9a:de:8b: 88:6c:d8:1f:04:69:0f:79:35:12:fd:75:a3:66:52: 9c:5c:3c:40:49:2f:2c:ee:e9:81:96:c1:6c:9f:7a: a0:94:8c:b6:44:fa:56:8c:4e:84:10:47:44:75:85: 36:4e:da:d2:f1:d3:ab:20:8d:63:51:30:a2:a0:ef: 03:fd:30:20:ee:4b:5b:49:36:b3:37:d8:18:6e:ee: 55:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:69:DC:00:EF:3D:BB:AB:F0:07:3C:7D:8B:1F:EF:4B:F5:B0:F6:9A X509v3 Authority Key Identifier: keyid:FC:24:F5:39:07:47:87:EC:EA:B0:0C:24:26:06:C2:BD:68:81:9A:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_CT1OQdHh-zqsAwkJgbCvWiBmg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9CBB/D53BD14615B111F0A2774A09C4F9AE02/_CT1OQdHh-zqsAwkJgbCvWiBmg0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 90:ae:d8:fd:05:8f:dd:c1:42:c5:87:72:e9:c5:1f:36:f5:92: be:92:83:ae:8e:66:5d:1a:e1:86:48:8b:fd:c9:60:ae:be:41: ae:03:1c:5a:87:1c:3b:c5:6b:a4:aa:b8:eb:4d:ce:2d:70:64: a0:96:3b:0b:16:81:40:cd:c4:16:32:61:a3:2b:b7:1b:9d:77: 32:1f:1c:d1:97:9a:8d:bc:89:c0:95:e9:f5:ed:5f:7c:9f:8a: 6a:28:69:8c:ca:8d:d9:5e:14:4d:03:80:12:25:7f:86:17:0d: 3b:b0:a6:69:ff:5e:2e:7f:23:f5:d1:0e:c0:03:65:ac:b6:f6: e3:30:70:91:25:34:e7:f3:d2:d3:e5:84:c3:b5:9f:cd:d6:fa: 80:73:6d:e4:fe:a5:c0:80:4c:52:65:a8:a8:0f:c4:c8:a0:47: 2f:81:27:0a:e9:a7:ea:67:ee:54:ce:f8:a1:06:a7:38:aa:97: a6:52:e4:fb:3e:bd:fe:8b:64:14:93:32:9f:f8:b9:1c:c2:c7: 9d:56:e0:7a:f5:e0:1c:5a:54:32:1e:38:2f:44:65:d1:c8:86: 33:99:87:05:08:0b:91:5e:7c:af:6d:41:0c:7c:af:e5:70:bb: 63:2d:0d:8f:33:aa:0d:6d:d6:a6:7f:5c:59:f4:d0:88:e1:5a: c0:47:0b:ab -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OUNCQjExMC8GA1UEBRMoRkMyNEY1MzkwNzQ3ODdFQ0VBQjAwQzI0MjYwNkMyQkQ2 ODgxOUEwRDAeFw0yNTExMDUwNzA5NDZaFw0yNTExMTIwNzA5NDZaMBgxFjAUBgNV BAMTDTY5MGFmODNiLTliYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRF4M0wfUlO1b/I850zeu7i5Ro2YfQ8IrDy4V83Pm8qQOUjvsIb7/V8V2Rlfgh h7K3058qeBq9dGSJlK0RviB53ePRXTGGRcOj6MWA/O2+HZ9PCVbD1g91V4fT/2Se G0Cfs/efLCjIzvp+ljGuMNg++ynG/VCoXGGCFP0uxbW3Z52sdG58VeS/EnW0sjg4 YYIXV97lQd4N8qiaBaHvyBpp2m7PR8s+FJX0h76Zej1Pf5rei4hs2B8EaQ95NRL9 daNmUpxcPEBJLyzu6YGWwWyfeqCUjLZE+laMToQQR0R1hTZO2tLx06sgjWNRMKKg 7wP9MCDuS1tJNrM32Bhu7lX/AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUF2ncAO89 u6vwBzx9ix/vS/Ww9powHwYDVR0jBBgwFoAU/CT1OQdHh+zqsAwkJgbCvWiBmg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5Q0JCL0Q1M0JEMTQ2MTVC MTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16cXNBd2tKZ2JDdldpQm1n MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvX0NUMU9RZEhoLXpxc0F3a0pnYkN2V2lCbWcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 Q0JCL0Q1M0JEMTQ2MTVCMTExRjBBMjc3NEEwOUM0RjlBRTAyL19DVDFPUWRIaC16 cXNBd2tKZ2JDdldpQm1nMC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJCu2P0Fj93BQsWHcunFHzb1kr6Sg66OZl0a4YZIi/3JYK6+Qa4DHFqH HDvFa6SquOtNzi1wZKCWOwsWgUDNxBYyYaMrtxuddzIfHNGXmo28icCV6fXtX3yf imooaYzKjdleFE0DgBIlf4YXDTuwpmn/Xi5/I/XRDsADZay29uMwcJElNOfz0tPl hMO1n83W+oBzbeT+pcCATFJlqKgPxMigRy+BJwrpp+pn7lTO+KEGpziql6ZS5Ps+ vf6LZBSTMp/4uRzCx51W4Hr14BxaVDIeOC9EZdHIhjOZhwUIC5FefK9tQQx8r+Vw u2MtDY8zqg1t1qZ/XFn00IjhWsBHC6s= -----END CERTIFICATE-----Generated at Wed Nov 5 10:28:37 2025 by rpki-client