$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft File: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft (raw, json) Hash identifier: t6Mde0nwsr7UFk8mxlOlly1VmhBQK7kCUYB1RV7yO+U= Subject key identifier: 5F:10:30:18:78:8E:4B:9E:53:3A:88:29:BE:E7:7C:C5:10:BB:9D:F1 Authority key identifier: EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 Certificate issuer: /CN=A91EF17A/serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Certificate serial: F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft Manifest number: F6 Signing time: Wed 05 Nov 2025 05:21:48 +0000 Manifest this update: Wed 05 Nov 2025 05:21:47 +0000 Manifest next update: Wed 12 Nov 2025 05:21:47 +0000 Files and hashes: 1: 7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl (hash: zgIbeOz3V4DLsQNIBbz1ETRix8A4st2oIUZCdoiIzVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:21:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 246 (0xf6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=EC09EA5C63CCF644D2B26FBACD5F2D5CA55F15A4 Validity Not Before: Nov 5 05:21:47 2025 GMT Not After : Nov 12 05:21:47 2025 GMT Subject: CN=690adeec-561d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:3f:4a:a3:41:9d:ff:fe:08:14:28:38:17:6e: 63:fc:30:b9:65:0d:15:36:c5:22:88:a1:14:55:1d: d1:2f:c0:5a:96:39:c2:0b:18:81:97:82:c4:10:9b: fa:51:d0:84:32:d4:13:b2:03:0a:65:b7:da:c7:d6: ca:84:bf:77:17:f9:bd:46:63:95:8d:95:4b:0b:f7: 00:a2:77:49:e4:c1:85:a6:37:96:cc:9f:53:17:67: a0:7b:80:75:f3:11:16:56:b0:3c:d2:9e:80:ec:f4: 35:e7:28:8f:86:e6:d0:e6:21:bb:43:66:34:37:da: 79:bd:6b:76:34:fb:87:1e:f5:28:ee:3b:29:69:83: 34:1d:29:cd:4b:02:6b:e6:2f:bd:96:f4:9d:eb:5b: c2:b2:8c:f2:f5:e8:ea:be:c3:54:11:60:a7:52:12: 51:ca:8c:e5:17:15:de:a7:88:4f:34:49:8e:a5:21: 6e:70:aa:d6:58:b7:de:3c:ab:b9:3f:2d:b4:e0:49: d7:dc:8f:5a:05:0a:44:1f:fa:3d:da:08:6f:19:07: 7c:ca:2b:b4:8a:71:15:bc:68:fd:96:6e:39:b8:08: a2:8a:1c:88:3c:2d:8f:92:e2:58:b2:9b:6d:e0:47: aa:6d:88:53:17:c5:6b:a7:31:d1:69:94:55:8c:3c: d5:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:10:30:18:78:8E:4B:9E:53:3A:88:29:BE:E7:7C:C5:10:BB:9D:F1 X509v3 Authority Key Identifier: keyid:EC:09:EA:5C:63:CC:F6:44:D2:B2:6F:BA:CD:5F:2D:5C:A5:5F:15:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/7CC2EFC03F5D11EF8BF7860EC4F9AE02/7AnqXGPM9kTSsm-6zV8tXKVfFaQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:a2:a9:26:33:93:50:b6:af:ff:e8:73:ae:9f:01:5a:ac:48: 14:1d:7d:42:19:0b:7e:18:1f:f7:83:04:e1:e8:b4:c2:a6:16: 88:2c:52:71:a2:71:03:cd:a8:f3:e3:0c:d8:f3:3d:2c:34:a4: 27:92:48:28:8a:ee:67:7f:2a:98:f7:05:51:37:26:a4:21:ec: 4b:c6:03:8c:a3:0e:f2:f5:a9:86:d4:84:de:6e:19:ce:0e:cd: b5:dc:93:97:39:21:1b:21:ec:e5:e1:29:57:04:14:9d:3b:80: a3:ab:67:0d:56:80:1e:95:95:6e:c4:fe:35:56:46:e1:cb:43: 3a:11:6e:68:39:dd:43:5d:b7:5e:3b:12:73:0d:e3:21:70:6a: d5:f5:19:8e:48:da:b5:7b:f3:c6:47:f5:aa:66:6e:7f:5e:f2: a3:fb:8b:d1:36:a8:a3:6b:07:f3:6f:d2:07:11:f3:49:8f:4e: 09:23:9e:9b:40:0b:c7:6c:e3:61:02:68:e0:3c:f7:fc:5f:86: 9d:bc:9b:5b:65:4b:24:90:20:4a:e1:d3:14:31:45:4b:b0:3e: 7e:ad:45:06:5d:68:a9:3b:94:93:fa:3a:a9:fd:de:f9:4b:f9: d4:83:75:b3:b4:c8:7a:9e:2a:e7:79:54:0f:05:65:db:f0:40: 12:4c:2d:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEVDMDlFQTVDNjNDQ0Y2NDREMkIyNkZCQUNENUYyRDVD QTU1RjE1QTQwHhcNMjUxMTA1MDUyMTQ3WhcNMjUxMTEyMDUyMTQ3WjAYMRYwFAYD VQQDEw02OTBhZGVlYy01NjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoD9Ko0Gd//4IFCg4F25j/DC5ZQ0VNsUiiKEUVR3RL8BaljnCCxiBl4LEEJv6 UdCEMtQTsgMKZbfax9bKhL93F/m9RmOVjZVLC/cAondJ5MGFpjeWzJ9TF2ege4B1 8xEWVrA80p6A7PQ15yiPhubQ5iG7Q2Y0N9p5vWt2NPuHHvUo7jspaYM0HSnNSwJr 5i+9lvSd61vCsozy9ejqvsNUEWCnUhJRyozlFxXep4hPNEmOpSFucKrWWLfePKu5 Py204EnX3I9aBQpEH/o92ghvGQd8yiu0inEVvGj9lm45uAiiihyIPC2PkuJYsptt 4EeqbYhTF8VrpzHRaZRVjDzVnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF8QMBh4 jkueUzqIKb7nfMUQu53xMB8GA1UdIwQYMBaAFOwJ6lxjzPZE0rJvus1fLVylXxWk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83Q0MyRUZDMDNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlrVFNzbS02elY4dFhLVmZG YVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdBbnFYR1BNOWtUU3NtLTZ6Vjh0WEtWZkZhUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RjE3QS83Q0MyRUZDMDNGNUQxMUVGOEJGNzg2MEVDNEY5QUUwMi83QW5xWEdQTTlr VFNzbS02elY4dFhLVmZGYVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBloqkmM5NQtq//6HOunwFarEgUHX1CGQt+GB/3gwTh6LTCphaILFJx onEDzajz4wzY8z0sNKQnkkgoiu5nfyqY9wVRNyakIexLxgOMow7y9amG1ITebhnO Ds213JOXOSEbIezl4SlXBBSdO4Cjq2cNVoAelZVuxP41Vkbhy0M6EW5oOd1DXbde OxJzDeMhcGrV9RmOSNq1e/PGR/WqZm5/XvKj+4vRNqijawfzb9IHEfNJj04JI56b QAvHbONhAmjgPPf8X4advJtbZUskkCBK4dMUMUVLsD5+rUUGXWipO5ST+jqp/d75 S/nUg3WztMh6nirneVQPBWXb8EASTC2T -----END CERTIFICATE-----Generated at Wed Nov 5 16:30:04 2025 by rpki-client