$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft File: 60yRrrkBmKp9PHgiHY4Ytwdd77k.mft (raw, json) Hash identifier: YfGGg6yztaeYBQAJvsmnH695CdGhHPyLBCvYWstNa48= Subject key identifier: 0E:67:85:67:F2:F9:EB:76:E8:FC:F0:D4:CF:C2:A1:A2:FD:06:28:47 Authority key identifier: EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9 Certificate issuer: /CN=A91D0F0F/serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9 Certificate serial: 3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft Manifest number: 3D Signing time: Mon 03 Nov 2025 07:28:45 +0000 Manifest this update: Mon 03 Nov 2025 07:28:44 +0000 Manifest next update: Mon 10 Nov 2025 07:28:44 +0000 Files and hashes: 1: 60yRrrkBmKp9PHgiHY4Ytwdd77k.crl (hash: /E+lu3/+qphvV1ttCCb+9+Id5NZ/Eq832dN/X1H78Dk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61 (0x3d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0F0F, serialNumber=EB4C91AEB90198AA7D3C78221D8E18B7075DEFB9 Validity Not Before: Nov 3 07:28:44 2025 GMT Not After : Nov 10 07:28:44 2025 GMT Subject: CN=690859ac-b511 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:da:c0:3d:fe:86:8c:5d:68:72:d1:2b:b4:87: fd:47:37:27:7b:b5:b3:f9:21:51:ae:2f:8d:e0:73: b8:93:53:50:1e:7f:db:d4:ad:3f:94:79:d5:ce:6f: 8e:e1:c5:0f:5c:56:d0:06:77:57:29:d7:68:94:56: 52:19:2b:03:8b:ee:03:2f:c3:75:44:b6:84:99:3c: 1c:a7:b9:09:dd:70:8d:67:88:e1:f8:e6:12:81:7a: 7c:e8:12:f7:93:8e:eb:4a:09:d5:de:60:8d:67:16: 7f:88:7d:40:1c:67:04:57:31:88:34:24:1d:4b:25: 18:14:f6:a8:94:81:8e:dd:a7:5a:72:1f:9a:ad:57: 0c:54:c1:53:87:e7:ef:74:04:f1:ce:35:17:80:47: 82:8a:e6:80:16:d7:9a:23:ae:67:c1:8f:bc:dd:fc: 65:c1:85:3e:0c:50:fd:ae:5c:9f:f6:ab:af:c6:f8: 53:37:e7:89:52:84:6c:3a:0c:38:83:02:53:3a:72: db:ee:2e:00:84:0a:0d:89:5f:7c:c7:3d:9c:c4:84: 30:ba:d7:91:65:e6:cd:05:cc:2c:d9:cf:3f:44:f2: 69:fe:7a:5b:fa:ec:21:ce:f0:b1:fb:02:1f:90:e9: 06:d3:e5:96:a4:6a:21:c6:2a:02:94:db:ad:c3:d0: 35:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:67:85:67:F2:F9:EB:76:E8:FC:F0:D4:CF:C2:A1:A2:FD:06:28:47 X509v3 Authority Key Identifier: keyid:EB:4C:91:AE:B9:01:98:AA:7D:3C:78:22:1D:8E:18:B7:07:5D:EF:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/60yRrrkBmKp9PHgiHY4Ytwdd77k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0F0F/52DFFC9E5DE711F0A867914EC4F9AE02/60yRrrkBmKp9PHgiHY4Ytwdd77k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:71:d1:43:d4:2b:5e:7e:04:c0:41:35:cc:d2:56:42:0b:9e: 80:9e:71:7a:72:8b:73:fe:69:23:1f:c7:1c:c5:66:76:61:db: 1d:9c:68:64:c5:a3:0c:f3:05:1e:e0:e1:9c:6d:0b:dd:64:cb: fb:df:86:3e:7e:0c:be:f9:2b:41:0f:8e:cc:bc:4a:d8:06:dd: b8:09:c5:6f:cc:45:19:a2:0b:db:20:39:d1:f2:d4:95:e9:1b: 77:a2:b8:7a:f3:11:45:e0:62:be:57:26:56:38:d3:eb:15:d5: 55:80:38:d6:73:c4:a5:52:af:b5:71:c2:3a:ca:cf:b1:0f:cf: f8:e5:ed:12:9f:83:ae:2f:0a:8a:ef:56:cd:73:56:0d:a4:d1: d9:55:33:33:a3:6b:15:51:a4:ab:6a:e9:fd:60:96:78:bb:a6: 77:cf:31:df:b0:f3:84:e7:dc:aa:6a:64:40:13:57:59:77:bd: 28:50:e1:c7:14:0d:40:bb:7f:16:ed:5e:ba:ef:ce:b3:a9:80: 8b:3d:07:9c:08:92:e8:e8:00:86:93:f3:ab:34:5e:7b:5f:c3: 32:9e:25:8e:4f:84:34:63:cd:b0:31:0b:2b:14:b4:01:fa:a0: aa:d0:d2:f6:6c:84:09:4e:f1:de:66:5a:77:27:d5:a3:fd:7c: fa:c2:02:12 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MEYwRjExMC8GA1UEBRMoRUI0QzkxQUVCOTAxOThBQTdEM0M3ODIyMUQ4RTE4Qjcw NzVERUZCOTAeFw0yNTExMDMwNzI4NDRaFw0yNTExMTAwNzI4NDRaMBgxFjAUBgNV BAMTDTY5MDg1OWFjLWI1MTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ2sA9/oaMXWhy0Su0h/1HNyd7tbP5IVGuL43gc7iTU1Aef9vUrT+UedXOb47h xQ9cVtAGd1cp12iUVlIZKwOL7gMvw3VEtoSZPBynuQndcI1niOH45hKBenzoEveT jutKCdXeYI1nFn+IfUAcZwRXMYg0JB1LJRgU9qiUgY7dp1pyH5qtVwxUwVOH5+90 BPHONReAR4KK5oAW15ojrmfBj7zd/GXBhT4MUP2uXJ/2q6/G+FM354lShGw6DDiD AlM6ctvuLgCECg2JX3zHPZzEhDC615Fl5s0FzCzZzz9E8mn+elv67CHO8LH7Ah+Q 6QbT5ZakaiHGKgKU263D0DW1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDmeFZ/L5 63bo/PDUz8Khov0GKEcwHwYDVR0jBBgwFoAU60yRrrkBmKp9PHgiHY4Ytwdd77kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwRjBGLzUyREZGQzlFNURF NzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtwOVBIZ2lIWTRZdHdkZDc3 ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNjB5UnJya0JtS3A5UEhnaUhZNFl0d2RkNzdrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQw RjBGLzUyREZGQzlFNURFNzExRjBBODY3OTE0RUM0RjlBRTAyLzYweVJycmtCbUtw OVBIZ2lIWTRZdHdkZDc3ay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABVx0UPUK15+BMBBNczSVkILnoCecXpyi3P+aSMfxxzFZnZh2x2caGTF owzzBR7g4ZxtC91ky/vfhj5+DL75K0EPjsy8StgG3bgJxW/MRRmiC9sgOdHy1JXp G3eiuHrzEUXgYr5XJlY40+sV1VWAONZzxKVSr7VxwjrKz7EPz/jl7RKfg64vCorv Vs1zVg2k0dlVMzOjaxVRpKtq6f1glni7pnfPMd+w84Tn3KpqZEATV1l3vShQ4ccU DUC7fxbtXrrvzrOpgIs9B5wIkujoAIaT86s0XntfwzKeJY5PhDRjzbAxCysUtAH6 oKrQ0vZshAlO8d5mWncn1aP9fPrCAhI= -----END CERTIFICATE-----Generated at Tue Nov 4 18:53:21 2025 by rpki-client