$ rpki-client -vvf rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft File: CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft (raw, json) Hash identifier: JV3af3F1CjhOSLdsJNZVTtjxGMytEk7Dd62/6STg+fM= Subject key identifier: CE:3D:41:E6:7D:AD:93:70:C0:F2:3E:E6:61:72:93:9E:5D:A1:DE:5F Authority key identifier: 0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F Certificate issuer: /CN=A91B13DA/serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft Manifest number: 65 Signing time: Wed 05 Nov 2025 07:14:27 +0000 Manifest this update: Wed 05 Nov 2025 07:14:27 +0000 Manifest next update: Wed 12 Nov 2025 07:14:27 +0000 Files and hashes: 1: CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl (hash: 3yQl1Ov2LH1aKLaD1GV805GnFPgO+VnzVCGwz3Dzlxo=) 2: E70C7B4620F611F09993632FC4F9AE02.roa (hash: 3DawsxjCSxaO9Yqtl+Go5xRwWPPzE2NpLIfRRBuYg5c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:14:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B13DA, serialNumber=0A46AE2FAFCCC7ADDEF272C702AB5FFABDCCAA4F Validity Not Before: Nov 5 07:14:27 2025 GMT Not After : Nov 12 07:14:27 2025 GMT Subject: CN=690af953-8b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:52:2c:a7:bd:81:f4:c5:72:cc:d4:46:df:b1: 9b:14:1e:44:85:09:63:0c:9b:da:f7:be:e8:59:49: ef:4c:f9:d5:64:22:c6:16:5d:19:b4:31:0f:cf:25: 90:9b:ca:f9:ba:55:75:fe:53:31:35:5a:4d:3e:cf: 86:23:6d:86:18:f1:e6:b3:70:1f:92:e0:9b:79:6e: d1:d1:f7:88:56:4b:99:be:a3:2e:38:8c:ee:fa:a3: 32:cf:30:02:64:6d:ee:ef:f6:0d:96:2c:05:2a:04: 6b:a3:19:83:1d:e9:0f:0e:27:93:07:37:68:51:1b: 66:45:44:93:3b:4d:cf:00:a9:ac:df:ad:15:d7:ba: 2f:a6:6f:c2:58:f6:04:2d:f3:eb:24:a9:9e:c9:89: 0b:6f:c3:72:cf:24:c3:4c:48:25:56:a6:8e:22:1f: dd:e3:48:c6:ee:ff:99:45:45:ab:6e:ab:98:6e:3d: 33:3d:97:2f:53:4c:a3:6b:43:9e:d6:b1:6e:3b:cc: 9f:36:60:3d:33:94:a3:a3:68:9d:ef:80:e8:99:f7: c2:1f:4c:40:01:f5:d9:d3:c6:9d:64:76:d2:b7:9e: 55:7d:17:1a:ad:6d:e4:aa:f5:2f:31:ec:f1:27:d7: 0d:3c:77:91:bd:ea:61:ca:37:1e:44:53:4d:61:1b: fb:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:41:E6:7D:AD:93:70:C0:F2:3E:E6:61:72:93:9E:5D:A1:DE:5F X509v3 Authority Key Identifier: keyid:0A:46:AE:2F:AF:CC:C7:AD:DE:F2:72:C7:02:AB:5F:FA:BD:CC:AA:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CkauL6_Mx63e8nLHAqtf-r3Mqk8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B13DA/2EACAE2820F511F095B65182C4F9AE02/CkauL6_Mx63e8nLHAqtf-r3Mqk8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:0b:f9:6e:f7:ad:5d:6e:3b:08:d6:c2:45:e0:c0:6b:88:97: 81:6a:ec:ef:55:60:88:f8:e1:5c:a9:d8:c4:2b:33:3c:e3:5c: 06:a4:f9:5a:c9:9a:db:b2:14:4d:ef:fd:6d:c1:4a:74:fe:5b: c0:25:2b:52:5d:26:36:dd:5e:b5:31:c9:29:45:04:1b:48:47: d0:ee:72:55:54:25:3a:0f:80:9d:2f:33:5d:6b:0e:16:aa:62: 0f:6e:63:86:82:8b:32:82:d7:2d:a2:f3:aa:ce:35:ed:f7:e4: e4:24:bf:45:81:0d:fd:43:32:22:38:17:a3:60:2f:cf:ae:0f: 5c:6b:bf:10:71:ef:b6:5b:50:de:08:e4:8e:94:ba:2d:e2:e8: 21:11:cf:52:98:19:5e:c6:d9:89:75:a1:6e:08:ec:e3:f2:28: c1:df:f0:10:a0:34:ba:4d:24:0b:62:38:5f:1a:8d:3c:92:de: 6b:0f:11:f7:f4:c4:18:88:c0:55:a9:db:8a:c0:10:b5:ab:4b: a7:f7:4f:fe:55:97:91:3f:77:6f:81:42:bf:2c:39:ef:2e:5e: fc:e4:5a:c2:6f:b5:cb:e2:2a:5f:3b:e5:95:64:b8:db:1c:ae: fa:b1:a6:01:ba:46:b7:a1:1d:9d:ea:a0:72:13:84:64:75:19: 31:8a:5b:29 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTNEQTExMC8GA1UEBRMoMEE0NkFFMkZBRkNDQzdBRERFRjI3MkM3MDJBQjVGRkFC RENDQUE0RjAeFw0yNTExMDUwNzE0MjdaFw0yNTExMTIwNzE0MjdaMBgxFjAUBgNV BAMTDTY5MGFmOTUzLThiMTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDrUiynvYH0xXLM1EbfsZsUHkSFCWMMm9r3vuhZSe9M+dVkIsYWXRm0MQ/PJZCb yvm6VXX+UzE1Wk0+z4YjbYYY8eazcB+S4Jt5btHR94hWS5m+oy44jO76ozLPMAJk be7v9g2WLAUqBGujGYMd6Q8OJ5MHN2hRG2ZFRJM7Tc8AqazfrRXXui+mb8JY9gQt 8+skqZ7JiQtvw3LPJMNMSCVWpo4iH93jSMbu/5lFRatuq5huPTM9ly9TTKNrQ57W sW47zJ82YD0zlKOjaJ3vgOiZ98IfTEAB9dnTxp1kdtK3nlV9FxqtbeSq9S8x7PEn 1w08d5G96mHKNx5EU01hG/sxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzj1B5n2t k3DA8j7mYXKTnl2h3l8wHwYDVR0jBBgwFoAUCkauL6/Mx63e8nLHAqtf+r3Mqk8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxM0RBLzJFQUNBRTI4MjBG NTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYzZThuTEhBcXRmLXIzTXFr OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQ2thdUw2X014NjNlOG5MSEFxdGYtcjNNcWs4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIx M0RBLzJFQUNBRTI4MjBGNTExRjA5NUI2NTE4MkM0RjlBRTAyL0NrYXVMNl9NeDYz ZThuTEhBcXRmLXIzTXFrOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABUL+W73rV1uOwjWwkXgwGuIl4Fq7O9VYIj44Vyp2MQrMzzjXAak+VrJ mtuyFE3v/W3BSnT+W8AlK1JdJjbdXrUxySlFBBtIR9DuclVUJToPgJ0vM11rDhaq Yg9uY4aCizKC1y2i86rONe335OQkv0WBDf1DMiI4F6NgL8+uD1xrvxBx77ZbUN4I 5I6Uui3i6CERz1KYGV7G2Yl1oW4I7OPyKMHf8BCgNLpNJAtiOF8ajTyS3msPEff0 xBiIwFWp24rAELWrS6f3T/5Vl5E/d2+BQr8sOe8uXvzkWsJvtcviKl875ZVkuNsc rvqxpgG6RrehHZ3qoHIThGR1GTGKWyk= -----END CERTIFICATE-----Generated at Wed Nov 5 18:19:11 2025 by rpki-client