$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: 41najWzVTfekuZL+XWCLDw+OoN2x8JG7RlxpE28bFBM= Subject key identifier: EC:48:1E:FE:68:C7:04:B2:29:16:2B:1B:DF:72:73:D1:F6:38:26:A4 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 080B Signing time: Tue 04 Nov 2025 21:17:53 +0000 Manifest this update: Tue 04 Nov 2025 21:17:52 +0000 Manifest next update: Tue 11 Nov 2025 21:17:52 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: X9uBGOZgPKFfgVUc/l5zJ79vxJghDD7U/e250R6EDrg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:17:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2021 (0x7e5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Nov 4 21:17:52 2025 GMT Not After : Nov 11 21:17:52 2025 GMT Subject: CN=690a6d80-def3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:6b:29:af:10:d2:ab:56:ee:d7:c3:3c:1f:85: b1:32:20:6b:e3:53:72:db:da:e0:52:28:ce:b6:d8: 8c:3d:e8:5a:ac:b3:f4:e7:c4:70:26:cb:d2:01:52: 39:44:f4:61:ad:9c:87:58:cb:40:ab:3c:d1:0c:05: 53:96:45:c3:1b:53:a8:76:50:80:21:47:e2:3c:b2: 58:ed:5c:7d:66:d6:80:33:04:cb:94:01:b1:35:80: 95:03:9f:1b:1b:de:3c:93:17:7a:e1:5b:80:36:82: b3:fc:68:40:81:e0:2d:2b:62:7b:69:29:65:15:de: 35:ee:01:04:b8:53:ac:9f:cc:ed:d6:da:95:8d:3f: 20:38:a4:66:45:a8:78:98:ba:eb:a8:56:eb:58:40: 6a:2d:06:a7:96:32:86:8f:c0:de:81:d4:32:94:30: 61:bf:d7:8e:cd:85:55:a5:fc:a0:30:ad:52:98:e3: 83:04:8b:2c:99:cd:b1:c7:2d:0f:8e:17:b4:aa:2d: 59:a5:73:e5:ea:61:c6:b1:98:83:34:3c:1b:72:fe: 2d:7f:a4:45:3c:2b:be:3c:3e:dd:11:a3:c4:96:c9: 29:0c:2f:c9:68:02:cb:f7:ca:a4:cf:ed:69:8c:3e: 3f:fa:79:35:d4:ce:15:1c:fc:aa:ac:bf:48:b0:97: c6:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:48:1E:FE:68:C7:04:B2:29:16:2B:1B:DF:72:73:D1:F6:38:26:A4 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:00:b1:58:43:38:23:34:b0:08:b4:84:71:8c:d7:53:70:b6: 88:cd:29:7b:dc:40:9c:f1:e1:16:7d:cb:0b:c5:a4:c2:fd:1e: b3:9a:46:bb:86:d9:dd:7b:91:84:bd:5c:34:37:a9:a3:dc:70: 82:1b:56:86:2c:b3:c5:8e:dd:08:e7:2b:07:b0:3e:af:af:81: 5b:1d:21:05:04:80:a4:6f:80:8a:80:ea:96:31:d1:71:e4:b6: 27:76:81:29:8b:b8:5c:c1:5f:cd:6a:b6:fd:de:87:4e:41:8d: 89:e4:4a:0a:e3:87:03:1f:08:8a:31:f5:11:bb:20:19:3c:f7: cd:6e:b2:a3:26:2e:af:28:ca:50:20:5e:33:d0:96:cf:d1:bd: 06:fb:f7:17:70:da:85:6d:13:3a:40:36:4c:42:80:ad:ad:c3: 14:db:20:d0:c9:82:ce:a9:a6:78:bb:00:0b:59:8a:f0:94:6d: 07:f3:29:c7:d8:52:58:62:31:7e:c3:9a:75:16:2a:f9:82:e6: d1:a9:04:8a:d9:17:b8:2f:b0:61:0b:a4:5f:0e:a7:7a:be:97: f4:dc:75:9e:76:76:f5:02:df:c8:ac:32:5e:98:2f:2e:e1:41: 76:5f:63:fd:99:99:0e:0d:c7:03:08:ab:cd:00:6a:c7:87:37: 99:e9:04:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUxMTA0MjExNzUyWhcNMjUxMTExMjExNzUyWjAYMRYwFAYD VQQDEw02OTBhNmQ4MC1kZWYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GsprxDSq1bu18M8H4WxMiBr41Ny29rgUijOttiMPeharLP058RwJsvSAVI5 RPRhrZyHWMtAqzzRDAVTlkXDG1OodlCAIUfiPLJY7Vx9ZtaAMwTLlAGxNYCVA58b G948kxd64VuANoKz/GhAgeAtK2J7aSllFd417gEEuFOsn8zt1tqVjT8gOKRmRah4 mLrrqFbrWEBqLQanljKGj8DegdQylDBhv9eOzYVVpfygMK1SmOODBIssmc2xxy0P jhe0qi1ZpXPl6mHGsZiDNDwbcv4tf6RFPCu+PD7dEaPElskpDC/JaALL98qkz+1p jD4/+nk11M4VHPyqrL9IsJfG2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOxIHv5o xwSyKRYrG99yc9H2OCakMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuALFYQzgjNLAItIRxjNdTcLaIzSl73ECc8eEWfcsLxaTC/R6zmka7 htnde5GEvVw0N6mj3HCCG1aGLLPFjt0I5ysHsD6vr4FbHSEFBICkb4CKgOqWMdFx 5LYndoEpi7hcwV/Narb93odOQY2J5EoK44cDHwiKMfURuyAZPPfNbrKjJi6vKMpQ IF4z0JbP0b0G+/cXcNqFbRM6QDZMQoCtrcMU2yDQyYLOqaZ4uwALWYrwlG0H8ynH 2FJYYjF+w5p1Fir5gubRqQSK2Re4L7BhC6RfDqd6vpf03HWednb1At/IrDJemC8u 4UF2X2P9mZkODccDCKvNAGrHhzeZ6QQU -----END CERTIFICATE-----Generated at Wed Nov 5 12:23:02 2025 by rpki-client