$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: FZOkccsHAxJRVaAE55M7JNGHNE3An8Zvlu7C5t7Ndn4= Subject key identifier: 2D:CB:9D:4E:EC:28:BE:39:FD:5A:8B:0B:05:9F:F0:0D:E9:BA:13:76 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D70 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0D68 Signing time: Tue 04 Nov 2025 18:03:23 +0000 Manifest this update: Tue 04 Nov 2025 18:03:22 +0000 Manifest next update: Tue 11 Nov 2025 18:03:22 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: 5GHtytQv3HwlWDF4heTaZd2jTGBQvyWY7T24zZ2nsC8=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: j4ZSWs9Zu9eXGBGyTwHuQZ3Okk0YlAH6B7JO+kTYGo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3440 (0xd70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: Nov 4 18:03:22 2025 GMT Not After : Nov 11 18:03:22 2025 GMT Subject: CN=690a3feb-d786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:24:76:7f:14:b5:b6:02:de:f3:a8:65:08: 4e:7f:dd:16:e6:b7:d5:09:81:13:71:a9:44:8f:2e: 90:f2:fb:f7:fd:ff:80:dc:b6:60:69:24:5c:62:8f: f8:3a:e1:45:32:7a:c1:f8:9a:89:3a:be:59:45:51: 24:08:d9:97:30:74:9d:23:6a:5c:27:b3:e2:66:be: 56:92:de:31:56:8b:4a:78:e5:f2:b1:f9:1e:d5:0b: 78:43:8d:ac:9e:c7:24:33:92:4c:e0:ca:df:0d:49: 14:fe:94:4d:8e:b2:82:9c:8b:9b:0d:fe:d5:87:bd: 1a:36:89:15:78:77:26:36:20:5e:69:4d:a8:06:0b: ac:19:37:7f:b9:41:26:b1:b3:d7:25:66:75:4f:a0: 1b:88:37:35:59:11:25:27:d8:07:0f:65:6b:0b:96: 80:33:e0:3c:fa:ed:36:91:cd:b5:48:b8:15:82:4e: 4c:d2:51:10:39:fe:96:88:70:02:eb:68:85:f0:5c: 22:30:0c:b2:f0:a3:1b:c9:ef:13:ab:1d:d8:04:6e: 2b:b9:9d:c8:a0:0b:a7:cc:38:f6:ff:1d:de:bd:41: 09:fc:40:96:42:a7:f5:ef:1a:0e:19:4c:26:10:49: 2f:ef:13:fe:23:0f:6a:49:4b:5a:71:35:ac:af:29: 6f:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CB:9D:4E:EC:28:BE:39:FD:5A:8B:0B:05:9F:F0:0D:E9:BA:13:76 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:de:98:02:c1:6b:c7:2b:2f:20:ec:fd:14:a2:b8:b1:60:3e: 81:41:2e:83:ea:ac:8d:37:f1:0e:0a:6f:3b:5f:79:07:38:e9: 26:f0:7e:8d:a5:ca:87:9f:e1:f5:fc:1b:bd:6e:98:c0:21:70: 0c:47:18:bd:e7:34:e4:de:47:6a:01:74:82:b5:41:ef:92:5b: 8e:7d:c5:46:e8:7d:f3:82:a0:75:a9:f2:f6:fe:b8:73:b5:ab: 06:e1:02:35:a1:27:da:74:ae:36:d4:7c:d3:9d:91:0a:d6:a7: d3:4f:0d:fd:6a:3f:21:52:4b:b4:18:9b:24:52:45:91:fb:78: ce:e9:b0:da:44:c6:ca:bb:ee:7f:87:d0:d3:c5:c8:4f:e2:5a: eb:5c:87:88:e8:c1:a7:28:ac:4a:8b:69:b8:40:bc:b9:b4:db: 53:e5:9c:59:ee:2c:c6:ee:15:0d:8a:09:5d:3c:5a:b6:4d:e2: 5a:f7:b1:73:98:29:60:12:d9:fa:bb:27:00:9d:1e:39:8e:fb: 09:da:be:17:dd:67:80:12:4b:7f:29:be:6e:16:58:cf:3f:64: fb:df:d9:91:15:b6:ea:ff:94:c1:a4:3e:98:f7:48:32:df:40: 51:02:ad:74:f2:df:af:8e:cf:2d:ed:74:fc:80:30:2f:8e:41: 75:63:95:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUxMTA0MTgwMzIyWhcNMjUxMTExMTgwMzIyWjAYMRYwFAYD VQQDEw02OTBhM2ZlYi1kNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqlwkdn8UtbYC3vOoZQhOf90W5rfVCYETcalEjy6Q8vv3/f+A3LZgaSRcYo/4 OuFFMnrB+JqJOr5ZRVEkCNmXMHSdI2pcJ7PiZr5Wkt4xVotKeOXysfke1Qt4Q42s nsckM5JM4MrfDUkU/pRNjrKCnIubDf7Vh70aNokVeHcmNiBeaU2oBgusGTd/uUEm sbPXJWZ1T6AbiDc1WRElJ9gHD2VrC5aAM+A8+u02kc21SLgVgk5M0lEQOf6WiHAC 62iF8FwiMAyy8KMbye8Tqx3YBG4ruZ3IoAunzDj2/x3evUEJ/ECWQqf17xoOGUwm EEkv7xP+Iw9qSUtacTWsrylv7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC3LnU7s KL45/VqLCwWf8A3puhN2MB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj3pgCwWvHKy8g7P0UorixYD6BQS6D6qyNN/EOCm87X3kHOOkm8H6N pcqHn+H1/Bu9bpjAIXAMRxi95zTk3kdqAXSCtUHvkluOfcVG6H3zgqB1qfL2/rhz tasG4QI1oSfadK421HzTnZEK1qfTTw39aj8hUku0GJskUkWR+3jO6bDaRMbKu+5/ h9DTxchP4lrrXIeI6MGnKKxKi2m4QLy5tNtT5ZxZ7izG7hUNigldPFq2TeJa97Fz mClgEtn6uycAnR45jvsJ2r4X3WeAEkt/Kb5uFljPP2T739mRFbbq/5TBpD6Y90gy 30BRAq108t+vjs8t7XT8gDAvjkF1Y5UJ -----END CERTIFICATE-----Generated at Wed Nov 5 22:15:22 2025 by rpki-client