$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft File: CB6icKn0s2sOyJai0hSO5Ok-Xys.mft (raw, json) Hash identifier: SexELyf91dYseljj6ea75+cjakuGwiQ0TeTlu+Mk5i0= Subject key identifier: F0:73:05:1A:1F:D0:06:DF:59:9E:72:E3:48:E3:B6:ED:C6:7F:15:02 Authority key identifier: 08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B Certificate issuer: /CN=A91BB921/serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Certificate serial: 017B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft Manifest number: 0179 Signing time: Wed 05 Nov 2025 03:53:50 +0000 Manifest this update: Wed 05 Nov 2025 03:53:49 +0000 Manifest next update: Wed 12 Nov 2025 03:53:49 +0000 Files and hashes: 1: CB6icKn0s2sOyJai0hSO5Ok-Xys.crl (hash: l3FxzaP8dw+/D5XbwNzRLtVZDan3kI2ZOLs4G1Ccuas=) 2: 5A387584756311EEA256FD57C4F9AE02.roa (hash: UFjrfeuvHWS1oxtfXr6IVRfPvTnGzzV9TdVJHu2o8cI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 03:53:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 379 (0x17b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB921, serialNumber=081EA270A9F4B36B0EC896A2D2148EE4E93E5F2B Validity Not Before: Nov 5 03:53:49 2025 GMT Not After : Nov 12 03:53:49 2025 GMT Subject: CN=690aca4e-10cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:26:e9:54:e4:b3:5b:d3:92:2a:7b:dd:36: 23:3f:ab:4c:f7:83:37:a7:24:ac:02:60:0d:ab:13: 3c:fe:11:ab:00:18:2a:21:25:3d:98:45:6f:c9:c3: 3a:b3:2f:d1:71:b4:1b:66:39:5e:ee:bc:c8:c1:b5: f0:b4:10:59:aa:8f:3c:1e:8a:6d:8c:72:64:06:7d: 84:0f:43:67:68:cf:75:1e:77:ba:c6:8a:15:fb:cb: f1:dd:d5:98:50:42:a7:d5:e0:4d:66:8a:a4:cb:8e: 15:81:1c:b3:32:20:ed:fb:80:a2:09:48:b6:82:32: dd:b6:29:de:f6:a7:cf:85:95:0e:de:dc:ff:68:a4: 6c:5b:94:c5:91:56:53:3e:22:e5:02:a6:f8:4b:e0: 62:c1:35:82:c0:a2:65:fa:6d:3f:ed:ef:61:9f:5f: 63:45:97:2c:cb:c9:8e:06:32:5c:cc:07:dd:e6:e4: 56:f3:d8:e5:d5:75:b1:bd:08:c9:79:2a:ed:52:a8: b0:58:30:06:81:4c:47:64:99:44:eb:47:cd:53:ef: 71:d7:99:e8:6b:0c:3c:16:1a:8e:24:f4:ce:06:db: 35:b7:c6:a8:31:7d:6a:fc:63:ba:8e:bd:d6:d6:72: 79:7d:32:d4:85:1d:52:09:37:92:95:90:30:cf:9e: b0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:73:05:1A:1F:D0:06:DF:59:9E:72:E3:48:E3:B6:ED:C6:7F:15:02 X509v3 Authority Key Identifier: keyid:08:1E:A2:70:A9:F4:B3:6B:0E:C8:96:A2:D2:14:8E:E4:E9:3E:5F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CB6icKn0s2sOyJai0hSO5Ok-Xys.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB921/DDB8E14C756211EEBB825257C4F9AE02/CB6icKn0s2sOyJai0hSO5Ok-Xys.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:0f:de:f4:11:0e:af:86:40:85:31:ad:e8:d6:e7:c2:e0:dd: 56:b4:4f:b8:cd:bf:5f:10:95:f7:31:02:d5:64:c5:a6:37:9f: cd:27:92:3e:b8:3f:20:bf:a6:99:1f:5b:9f:c0:b1:58:51:4e: 0b:a7:03:f0:e9:a3:cb:b9:94:6d:51:9f:16:bf:06:c6:95:21: f4:5e:93:9d:e4:64:1e:8b:56:a5:28:f0:fa:c0:6f:cc:b1:2a: 97:4f:9a:0d:24:87:db:49:41:1a:27:94:6d:dd:36:d6:c7:5e: 11:2f:06:e0:53:17:16:38:d1:da:8c:5c:85:aa:0f:2f:4e:0d: b4:85:49:de:12:8e:ca:51:e7:17:1b:f6:9c:fd:17:8c:6d:30: 8d:8a:5e:82:43:13:83:b3:fe:b0:12:26:2b:bf:e8:3e:0f:ea: 0c:e7:c9:47:74:0a:96:60:13:58:de:0f:e3:8f:5d:ea:99:aa: e1:72:6f:50:b7:a9:dc:38:6b:9e:fa:b0:9a:78:7a:ba:69:8d: 88:34:b2:2e:d4:f9:f5:0e:03:28:95:8b:be:8b:b1:aa:e4:cc: cf:10:99:36:6a:1c:00:c9:74:0d:10:d4:e2:d5:d4:23:2f:21: 50:f0:fe:a7:17:17:03:e7:66:5d:85:c7:3b:45:12:ec:d1:7d: 1b:0e:65:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAXswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI5MjExMTAvBgNVBAUTKDA4MUVBMjcwQTlGNEIzNkIwRUM4OTZBMkQyMTQ4RUU0 RTkzRTVGMkIwHhcNMjUxMTA1MDM1MzQ5WhcNMjUxMTEyMDM1MzQ5WjAYMRYwFAYD VQQDEw02OTBhY2E0ZS0xMGNkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKwm6VTks1vTkip73TYjP6tM94M3pySsAmANqxM8/hGrABgqISU9mEVvycM6 sy/RcbQbZjle7rzIwbXwtBBZqo88HoptjHJkBn2ED0NnaM91Hne6xooV+8vx3dWY UEKn1eBNZoqky44VgRyzMiDt+4CiCUi2gjLdtine9qfPhZUO3tz/aKRsW5TFkVZT PiLlAqb4S+BiwTWCwKJl+m0/7e9hn19jRZcsy8mOBjJczAfd5uRW89jl1XWxvQjJ eSrtUqiwWDAGgUxHZJlE60fNU+9x15noaww8FhqOJPTOBts1t8aoMX1q/GO6jr3W 1nJ5fTLUhR1SCTeSlZAwz56wKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPBzBRof 0AbfWZ5y40jjtu3GfxUCMB8GA1UdIwQYMBaAFAgeonCp9LNrDsiWotIUjuTpPl8r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjkyMS9EREI4RTE0Qzc1 NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMyc095SmFpMGhTTzVPay1Y eXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NCNmljS24wczJzT3lKYWkwaFNPNU9rLVh5cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjkyMS9EREI4RTE0Qzc1NjIxMUVFQkI4MjUyNTdDNEY5QUUwMi9DQjZpY0tuMHMy c095SmFpMGhTTzVPay1YeXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjD970EQ6vhkCFMa3o1ufC4N1WtE+4zb9fEJX3MQLVZMWmN5/NJ5I+ uD8gv6aZH1ufwLFYUU4LpwPw6aPLuZRtUZ8WvwbGlSH0XpOd5GQei1alKPD6wG/M sSqXT5oNJIfbSUEaJ5Rt3TbWx14RLwbgUxcWONHajFyFqg8vTg20hUneEo7KUecX G/ac/ReMbTCNil6CQxODs/6wEiYrv+g+D+oM58lHdAqWYBNY3g/jj13qmarhcm9Q t6ncOGue+rCaeHq6aY2INLIu1Pn1DgMolYu+i7Gq5MzPEJk2ahwAyXQNENTi1dQj LyFQ8P6nFxcD52Zdhcc7RRLs0X0bDmVA -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:19 2025 by rpki-client