$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: YuEaUqONha5qA40FxgXNjGVUvQvcvnT89qupEEqsj/c= Subject key identifier: 26:C2:45:99:34:5C:91:25:C6:CF:5B:00:9F:F6:E2:A3:C0:E2:56:06 Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 0910 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 08A5 Signing time: Tue 04 Nov 2025 20:49:14 +0000 Manifest this update: Tue 04 Nov 2025 20:49:14 +0000 Manifest next update: Tue 11 Nov 2025 20:49:14 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: V2SJegMhiPXCeGlWU6PvTvTv3fPphVK4QqiU2tsylc4=) 2: 4944017C8FAF11F0B59F0948C4F9AE02.roa (hash: BwcQamXNLiosPDRZ6f2FtmfW9jpBhqektxQqopKnPY4=) 3: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 6: A709BC948FAE11F09FAE9C69C4F9AE02.roa (hash: h5BGjGSDw6jhnZlF9NOXRKNYmdB5F7XUQytmx7kt8pU=) 7: 8D5442E28A4011F093E0F94DC4F9AE02.roa (hash: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU=) 8: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:49:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2320 (0x910) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Nov 4 20:49:14 2025 GMT Not After : Nov 11 20:49:14 2025 GMT Subject: CN=690a66ca-8f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:02:1e:d1:0d:54:ac:af:f6:40:89:84:de:23: 14:cb:d0:c0:28:d2:d3:e9:62:2e:46:6f:76:ff:9d: 89:ab:ce:ed:0b:c6:aa:0b:f9:42:b8:e6:af:48:d5: 2b:5d:e4:b3:07:2e:ce:41:3a:92:93:8e:df:a9:d6: 5e:9f:bf:a6:4b:d5:b1:16:ce:3e:bc:68:bc:d7:3e: 31:ef:a6:4c:a8:73:98:1e:b0:6b:97:28:a9:9d:c9: 59:d3:93:ee:fe:74:2a:a9:54:21:6a:7d:66:31:a5: 6a:57:ea:d0:f9:6d:0d:77:09:bc:98:82:3c:ae:4a: d2:37:87:8b:a8:48:99:17:24:cd:4d:16:72:61:6d: eb:b7:02:28:04:ca:3f:80:23:cc:d6:7d:78:3c:8c: 9e:e0:c8:dc:06:98:53:d2:40:18:87:a7:47:45:3f: 89:31:e1:a2:fd:8a:d4:4b:1e:90:45:46:bf:37:08: aa:c3:bc:ea:4f:60:bf:75:ab:f7:bd:2e:8a:c2:0b: 2d:f4:6e:1c:98:ff:58:70:fd:d9:f2:fd:2b:81:64: b2:59:95:24:d7:b0:e5:04:26:3e:43:ed:6e:7e:0e: 86:92:8d:05:46:d2:e5:6b:79:99:01:e1:cd:d3:01: ab:a6:bc:b8:f9:4b:13:50:7b:c3:90:74:1c:fd:2d: 33:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:C2:45:99:34:5C:91:25:C6:CF:5B:00:9F:F6:E2:A3:C0:E2:56:06 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:25:f0:9c:7c:0c:dd:61:97:39:db:98:bb:6a:9e:bb:85:87: 84:34:c1:c4:78:37:51:d6:6b:03:b2:2d:eb:1e:9c:61:ba:d2: 80:70:87:44:45:07:e5:e2:c1:b7:27:08:8e:ff:33:16:9a:fb: b0:4a:2a:f5:a5:93:20:f1:c3:ba:b3:ee:be:7f:b2:36:c2:f5: b2:46:3c:a4:fd:51:5a:91:f5:e7:6b:e6:21:0e:4e:aa:26:c0: a4:af:6b:27:2b:f9:fc:11:d6:16:7c:e3:45:c8:16:52:e0:2c: 32:fc:44:26:f8:d4:39:61:5d:82:98:6d:66:1d:76:a7:a7:bc: a1:f8:1c:62:5d:9e:c5:54:e0:55:2d:50:93:7b:c8:85:70:ba: 64:6a:1a:77:fc:9b:79:5b:85:00:a2:86:61:50:2c:9c:73:ff: 82:54:c3:93:60:5b:df:82:a0:3c:c0:e5:cb:c8:65:eb:87:3d: f2:ad:d4:44:33:d6:fd:fb:f8:e7:a6:8e:50:06:21:ac:42:99: 41:46:00:e5:84:69:e5:f8:b2:84:99:59:ea:f3:d9:71:46:64: c6:e2:80:dd:66:4c:28:eb:97:92:e5:9f:13:37:a4:a4:e2:c4: 21:fa:61:04:fb:56:b7:86:da:26:c5:57:2c:7b:d8:06:06:92: 08:d3:e6:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUxMTA0MjA0OTE0WhcNMjUxMTExMjA0OTE0WjAYMRYwFAYD VQQDEw02OTBhNjZjYS04ZjY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnQIe0Q1UrK/2QImE3iMUy9DAKNLT6WIuRm92/52Jq87tC8aqC/lCuOavSNUr XeSzBy7OQTqSk47fqdZen7+mS9WxFs4+vGi81z4x76ZMqHOYHrBrlyipnclZ05Pu /nQqqVQhan1mMaVqV+rQ+W0Ndwm8mII8rkrSN4eLqEiZFyTNTRZyYW3rtwIoBMo/ gCPM1n14PIye4MjcBphT0kAYh6dHRT+JMeGi/YrUSx6QRUa/Nwiqw7zqT2C/dav3 vS6Kwgst9G4cmP9YcP3Z8v0rgWSyWZUk17DlBCY+Q+1ufg6Gko0FRtLla3mZAeHN 0wGrpry4+UsTUHvDkHQc/S0zPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbCRZk0 XJElxs9bAJ/24qPA4lYGMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZJfCcfAzdYZc525i7ap67hYeENMHEeDdR1msDsi3rHpxhutKAcIdE RQfl4sG3JwiO/zMWmvuwSir1pZMg8cO6s+6+f7I2wvWyRjyk/VFakfXna+YhDk6q JsCkr2snK/n8EdYWfONFyBZS4Cwy/EQm+NQ5YV2CmG1mHXanp7yh+BxiXZ7FVOBV LVCTe8iFcLpkahp3/Jt5W4UAooZhUCycc/+CVMOTYFvfgqA8wOXLyGXrhz3yrdRE M9b9+/jnpo5QBiGsQplBRgDlhGnl+LKEmVnq89lxRmTG4oDdZkwo65eS5Z8TN6Sk 4sQh+mEE+1a3htomxVcse9gGBpII0+Yu -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:28 2025 by rpki-client