$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft File: h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json) Hash identifier: pG3eTugHoKJUkW2Grq0du4Ozb+mR4nCzjbZYfB2X9SY= Subject key identifier: 8C:8C:A8:CF:09:C6:2D:4E:9E:1E:B3:C3:C5:37:E6:66:E3:1B:A5:65 Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F Certificate issuer: /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Certificate serial: 07A5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft Manifest number: 0795 Signing time: Sun 02 Nov 2025 21:29:48 +0000 Manifest this update: Sun 02 Nov 2025 21:29:47 +0000 Manifest next update: Sun 09 Nov 2025 21:29:47 +0000 Files and hashes: 1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: RNvObZprYOKo2bN6HQgZ45lPpzz8pH4+k7Y2b/EtOuc=) 2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: zk34LWbv4bQiMskRqGHmUZeHGe9ThXpt5J1yxmeAi1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:29:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1957 (0x7a5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Validity Not Before: Nov 2 21:29:47 2025 GMT Not After : Nov 9 21:29:47 2025 GMT Subject: CN=6907cd4b-21ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ba:2c:b2:5d:ea:79:a6:48:37:1b:69:42:14: 93:46:b8:9a:7b:52:a2:ac:1a:9c:c4:8a:56:fc:6e: 58:12:e4:3b:ed:6e:d5:52:56:94:44:b8:a6:7b:48: a5:51:21:f7:5e:76:36:6e:79:a1:98:98:60:16:62: 0a:74:ce:aa:7f:dc:e2:1d:1f:2a:ef:2c:5e:78:6d: 00:9b:a0:25:89:c3:be:21:6e:fb:c9:a5:b6:f6:2a: b7:e9:90:b5:a5:f8:fd:cc:b2:cd:69:eb:40:f3:a2: 3d:7f:f4:69:80:10:b2:39:6b:ad:cf:46:bd:21:de: 1e:43:6f:37:7e:c4:28:86:e6:31:b8:58:51:72:bb: d7:1a:8d:86:4a:f8:1c:31:ea:4e:f9:a3:9b:78:83: 7b:12:bd:17:00:d0:4d:ae:3a:0f:16:78:5f:57:1a: 14:04:a9:f2:82:93:86:00:a2:fd:16:e3:10:dc:5f: 1b:7c:b0:e0:40:5f:f9:07:29:96:b3:b6:bf:ea:5c: ef:39:8e:6f:b8:ea:40:de:48:69:cd:a9:a7:59:f1: cc:8a:97:f6:e5:bc:67:10:48:bd:c7:5b:ff:c6:71: 09:db:00:5c:79:c5:9b:96:1b:97:38:2b:73:aa:ca: f8:b6:28:1a:59:94:b4:b8:cd:ed:13:0e:8a:4b:e8: 3c:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:8C:A8:CF:09:C6:2D:4E:9E:1E:B3:C3:C5:37:E6:66:E3:1B:A5:65 X509v3 Authority Key Identifier: keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:8c:4e:ab:db:86:b7:49:c4:f1:d0:48:35:f5:16:24:ba:ed: 64:34:7e:a8:c8:78:65:9a:8d:51:6a:05:04:36:f5:5c:3a:90: 19:34:61:5a:12:40:0d:b8:27:de:53:34:7a:dd:19:03:28:64: fd:41:4d:c6:80:dd:c5:38:f6:f0:90:76:38:b1:b0:1e:6a:db: 94:f6:8a:ad:f6:be:f3:8e:3a:71:f8:9c:84:bb:f6:15:f7:45: ad:b6:1f:48:ad:d1:1f:03:f9:bf:8e:5d:15:3a:a3:66:0c:a3: 4c:de:35:00:c4:d4:55:ba:71:b4:92:d5:1d:6c:52:43:5e:b7: 15:0a:21:6f:b5:a8:ee:0f:52:00:df:c4:f9:2c:95:65:7d:7c: 3f:b7:96:7f:f5:54:b9:07:74:14:68:e2:ae:36:32:6c:0c:3b: 10:e6:67:f1:5c:d5:78:56:4a:a5:de:5f:c1:2d:10:40:49:d8: e5:ab:af:bf:0b:2e:c3:f9:f6:4d:a7:e1:71:a6:c2:0c:36:60: d3:d2:f8:b5:40:59:01:b1:d9:6a:62:09:ab:d9:8c:78:4f:12: e7:88:f4:78:d6:d3:c7:63:75:62:79:78:77:7a:61:de:f7:f3: 77:78:40:06:99:0c:f7:e3:8c:56:7c:47:21:2e:6a:3f:28:cc: 40:b8:bd:ba -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0MkYxMTAvBgNVBAUTKDg3QTU1MDYxQjc1RjFEQzJDNUM1QkI4N0QyODk4RTgz MzA3RDg3MEYwHhcNMjUxMTAyMjEyOTQ3WhcNMjUxMTA5MjEyOTQ3WjAYMRYwFAYD VQQDEw02OTA3Y2Q0Yi0yMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbossl3qeaZINxtpQhSTRriae1KirBqcxIpW/G5YEuQ77W7VUlaURLime0il USH3XnY2bnmhmJhgFmIKdM6qf9ziHR8q7yxeeG0Am6AlicO+IW77yaW29iq36ZC1 pfj9zLLNaetA86I9f/RpgBCyOWutz0a9Id4eQ283fsQohuYxuFhRcrvXGo2GSvgc MepO+aObeIN7Er0XANBNrjoPFnhfVxoUBKnygpOGAKL9FuMQ3F8bfLDgQF/5BymW s7a/6lzvOY5vuOpA3khpzamnWfHMipf25bxnEEi9x1v/xnEJ2wBcecWblhuXOCtz qsr4tigaWZS0uM3tEw6KS+g8cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIyMqM8J xi1Onh6zw8U35mbjG6VlMB8GA1UdIwQYMBaAFIelUGG3Xx3CxcW7h9KJjoMwfYcP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQyRi9DOEJBMDFCQzJF MkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhjTEZ4YnVIMG9tT2d6Qjlo dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2VlFZYmRmSGNMRnhidUgwb21PZ3pCOWh3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQyRi9DOEJBMDFCQzJFMkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhj TEZ4YnVIMG9tT2d6QjlodzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHjE6r24a3ScTx0Eg19RYkuu1kNH6oyHhlmo1RagUENvVcOpAZNGFa EkANuCfeUzR63RkDKGT9QU3GgN3FOPbwkHY4sbAeatuU9oqt9r7zjjpx+JyEu/YV 90Wtth9IrdEfA/m/jl0VOqNmDKNM3jUAxNRVunG0ktUdbFJDXrcVCiFvtajuD1IA 38T5LJVlfXw/t5Z/9VS5B3QUaOKuNjJsDDsQ5mfxXNV4Vkql3l/BLRBASdjlq6+/ Cy7D+fZNp+FxpsIMNmDT0vi1QFkBsdlqYgmr2Yx4TxLniPR41tPHY3VieXh3emHe 9/N3eEAGmQz344xWfEchLmo/KMxAuL26 -----END CERTIFICATE-----Generated at Tue Nov 4 15:54:15 2025 by rpki-client