$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: M686YPQisjrUy5HrYE0vLUNbHYBwzzClFgPGucCqJI4= Subject key identifier: 89:87:FD:1F:D3:A3:8D:A4:98:C5:63:12:DB:4A:66:E8:1E:63:DD:A6 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 066D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 0669 Signing time: Sun 02 Nov 2025 22:32:57 +0000 Manifest this update: Sun 02 Nov 2025 22:32:56 +0000 Manifest next update: Sun 09 Nov 2025 22:32:56 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: xD4Renx0Mjze6Uca3HfRmGeHQuy/AtZES1lZZdvquAo=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1645 (0x66d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Nov 2 22:32:56 2025 GMT Not After : Nov 9 22:32:56 2025 GMT Subject: CN=6907dc18-0e03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:f4:cb:f3:a8:26:43:65:da:a3:eb:27:f5: d3:40:2f:06:c4:56:44:e3:1c:99:2c:bb:50:6b:9f: 8d:bb:a6:ec:74:5e:21:f1:c9:4e:d4:92:15:bf:28: fd:85:74:36:f5:ca:10:0c:d7:49:96:ad:eb:1c:5e: 26:ef:1d:52:cb:f5:f6:82:d1:27:f8:43:30:b2:29: 1b:f8:e6:5e:b7:3a:e5:8b:e8:f0:3e:0d:78:de:27: 30:24:aa:d0:56:7a:80:50:ec:e6:00:a7:db:ca:f9: 01:5c:f5:90:a1:b8:4f:82:6c:b6:9f:3d:a5:d2:86: b2:91:cc:c3:d5:04:c9:ce:3c:dd:50:f9:f7:a9:b5: a1:64:20:e1:39:58:f2:13:e8:fa:26:ee:66:83:25: 8a:f2:ca:3a:d4:e3:f7:e4:8b:ad:b7:f5:51:b9:4d: c7:42:13:b7:32:cd:ee:da:21:ee:fa:b9:1c:70:e3: 6c:e9:d1:72:da:f6:37:2d:7a:08:05:1c:dc:63:18: 7e:37:0b:70:ce:69:c4:ee:e7:53:04:b1:61:4e:e3: 86:3a:0b:af:99:26:7b:2a:6b:ab:ef:2f:e0:d0:c0: b5:e8:6c:0d:e2:cd:61:c0:3a:14:0e:a7:ae:4a:34: c5:88:9e:f0:03:47:1a:5b:09:18:73:78:79:de:20: 3a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:87:FD:1F:D3:A3:8D:A4:98:C5:63:12:DB:4A:66:E8:1E:63:DD:A6 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 82:40:f9:49:17:a3:04:1a:dc:74:8c:49:6a:d7:5f:a7:86:f4: c7:b2:f4:4f:43:35:b1:64:83:79:f4:34:e7:aa:08:64:21:c6: 8a:1d:81:c5:88:2a:a7:2b:5a:13:5d:99:68:a0:0c:35:fb:a0: 7e:8a:30:a0:b9:13:77:85:46:03:05:a1:5e:18:71:dd:4f:66: 6f:7d:95:d7:ad:01:4e:91:a9:cb:8d:1e:47:2e:b3:fd:ce:35: 52:3e:c5:41:27:60:1f:0b:51:83:03:d4:30:a4:fd:7a:ed:be: e1:f3:7c:19:2a:b7:02:ca:d1:c1:ee:7f:c6:28:4b:cb:a4:f9: 9c:2d:6d:28:cd:47:9c:77:ec:d1:14:73:33:59:14:8b:6e:89: df:ec:ce:81:b0:4d:95:7d:56:0d:b2:6f:9f:8c:35:ca:73:69: c9:3f:b0:13:1e:ee:26:8c:52:16:c6:a2:73:ba:d9:db:82:37: 29:99:c2:fd:30:14:c1:2c:f0:a3:50:49:7d:22:e3:ce:55:83: 2b:21:3b:a5:96:a6:21:99:1f:9d:a9:da:27:ca:ed:01:6f:ea: b3:78:e0:56:71:8b:16:b1:47:18:ad:83:8f:7e:96:15:5c:b2: 46:f1:92:e4:53:d0:47:dc:a0:3e:9b:b6:33:bd:eb:96:50:31: b9:68:96:73 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUxMTAyMjIzMjU2WhcNMjUxMTA5MjIzMjU2WjAYMRYwFAYD VQQDEw02OTA3ZGMxOC0wZTAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPH0y/OoJkNl2qPrJ/XTQC8GxFZE4xyZLLtQa5+Nu6bsdF4h8clO1JIVvyj9 hXQ29coQDNdJlq3rHF4m7x1Sy/X2gtEn+EMwsikb+OZetzrli+jwPg143icwJKrQ VnqAUOzmAKfbyvkBXPWQobhPgmy2nz2l0oaykczD1QTJzjzdUPn3qbWhZCDhOVjy E+j6Ju5mgyWK8so61OP35Iutt/VRuU3HQhO3Ms3u2iHu+rkccONs6dFy2vY3LXoI BRzcYxh+NwtwzmnE7udTBLFhTuOGOguvmSZ7Kmur7y/g0MC16GwN4s1hwDoUDqeu SjTFiJ7wA0caWwkYc3h53iA6NQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFImH/R/T o42kmMVjEttKZugeY92mMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCCQPlJF6MEGtx0jElq11+nhvTHsvRPQzWxZIN59DTnqghkIcaKHYHF iCqnK1oTXZlooAw1+6B+ijCguRN3hUYDBaFeGHHdT2ZvfZXXrQFOkanLjR5HLrP9 zjVSPsVBJ2AfC1GDA9QwpP167b7h83wZKrcCytHB7n/GKEvLpPmcLW0ozUecd+zR FHMzWRSLbonf7M6BsE2VfVYNsm+fjDXKc2nJP7ATHu4mjFIWxqJzutnbgjcpmcL9 MBTBLPCjUEl9IuPOVYMrITullqYhmR+dqdonyu0Bb+qzeOBWcYsWsUcYrYOPfpYV XLJG8ZLkU9BH3KA+m7YzveuWUDG5aJZz -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:04 2025 by rpki-client