$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: qOKZab+jzG42u7/qp9qTSICa3n75OHfheHF6XEgaOlY= Subject key identifier: 5A:02:21:1D:47:95:09:8E:B5:6C:38:64:BE:41:8B:D4:8B:7B:68:09 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: D0 Signing time: Mon 03 Nov 2025 05:44:04 +0000 Manifest this update: Mon 03 Nov 2025 05:44:04 +0000 Manifest next update: Mon 10 Nov 2025 05:44:04 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: LEKcGVDSudvuC6t6vTelXUawk6d9LNb+awBcxGza59E=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: FpNZ3HLo1o4b1YUw3bp5mGEZMF3ekFVbByklPwI6twE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Nov 3 05:44:04 2025 GMT Not After : Nov 10 05:44:04 2025 GMT Subject: CN=69084124-e3f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6d:24:b1:0c:4d:3b:68:7e:02:95:bf:0a:48: 08:29:63:ba:8d:c6:1d:6d:08:1c:dd:fa:3f:d4:54: 48:b8:27:f0:92:62:79:89:14:85:73:23:19:b7:cc: 5a:be:90:22:61:6d:55:1b:d9:0d:6a:08:cf:3c:db: 08:c3:3f:f2:1b:bc:6d:44:8f:c1:67:1d:f1:f1:41: 22:86:dd:40:27:38:9b:42:0c:3f:52:72:ac:8d:93: 58:ff:ad:82:63:dc:b9:97:75:8b:03:81:9b:10:fd: dc:f2:43:6a:a1:07:e4:c1:03:23:04:55:4f:b1:d0: 93:64:b6:c9:ed:cc:95:de:e4:48:13:a4:fe:42:52: 5f:ab:eb:0c:98:f3:f1:1d:7b:63:7f:ca:ea:0a:3e: a4:11:3b:1c:1f:b4:b2:81:92:62:d7:c2:16:f2:81: ca:fc:69:d9:b9:28:70:9f:6c:67:49:a7:89:c3:b6: 88:63:31:1a:28:04:4f:8c:55:9b:d7:3a:57:ed:e6: 1d:54:86:2d:8f:8f:ac:f2:72:5e:4e:19:82:a6:e9: bf:d9:4b:2f:01:bc:bf:7a:93:71:e8:d0:2b:d4:a9: dd:39:7f:96:0f:99:e1:bc:2d:a5:0c:45:43:0c:17: 60:80:07:d3:d9:cb:ae:09:b4:4e:3b:07:8f:c8:a9: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:02:21:1D:47:95:09:8E:B5:6C:38:64:BE:41:8B:D4:8B:7B:68:09 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 80:a7:53:ee:09:5d:88:03:57:05:1c:c4:24:0f:bd:43:ba:45: e7:4e:8a:62:da:36:db:4a:ef:94:fb:5f:6b:c2:1e:bd:92:9f: d3:b1:b7:b8:35:4b:53:09:dc:5f:68:16:e0:ff:23:89:73:5d: 21:fe:13:df:ae:0d:4c:08:7f:7d:7e:c5:0b:86:52:c1:b7:dd: 65:71:50:f4:06:db:35:f5:47:09:de:90:0e:47:d0:71:33:e5: ec:8a:9b:48:ff:f1:c4:95:09:bd:7b:82:11:44:fc:8c:fe:30: 91:4b:16:3f:ab:91:40:35:41:21:95:57:91:20:75:7d:69:a0: 77:b5:c2:c9:8b:e0:98:ac:35:ba:5b:8a:69:01:6f:c6:26:d2: 12:14:84:13:40:52:2a:96:93:94:96:7f:93:3d:77:6d:63:21: 28:06:d5:25:3b:23:f2:6b:d2:08:7c:17:7f:ca:ef:2d:b6:82: c9:69:b5:32:d8:e4:de:c5:a2:0b:69:12:76:11:93:51:f2:82: f6:9d:06:81:65:73:12:8b:3d:e7:ee:14:f4:17:9b:28:c4:fb: 5d:c3:f6:0c:ed:ba:b6:9d:3f:9b:db:dd:66:10:db:f6:ac:1f: e9:ed:77:e1:28:47:f4:f8:d6:c2:e7:08:cc:f3:db:cb:20:15: 52:83:26:3c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUxMTAzMDU0NDA0WhcNMjUxMTEwMDU0NDA0WjAYMRYwFAYD VQQDEw02OTA4NDEyNC1lM2Y2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyW0ksQxNO2h+ApW/CkgIKWO6jcYdbQgc3fo/1FRIuCfwkmJ5iRSFcyMZt8xa vpAiYW1VG9kNagjPPNsIwz/yG7xtRI/BZx3x8UEiht1AJzibQgw/UnKsjZNY/62C Y9y5l3WLA4GbEP3c8kNqoQfkwQMjBFVPsdCTZLbJ7cyV3uRIE6T+QlJfq+sMmPPx HXtjf8rqCj6kETscH7SygZJi18IW8oHK/GnZuShwn2xnSaeJw7aIYzEaKARPjFWb 1zpX7eYdVIYtj4+s8nJeThmCpum/2UsvAby/epNx6NAr1KndOX+WD5nhvC2lDEVD DBdggAfT2cuuCbROOwePyKkZ0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFoCIR1H lQmOtWw4ZL5Bi9SLe2gJMB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCAp1PuCV2IA1cFHMQkD71DukXnTopi2jbbSu+U+19rwh69kp/Tsbe4 NUtTCdxfaBbg/yOJc10h/hPfrg1MCH99fsULhlLBt91lcVD0Bts19UcJ3pAOR9Bx M+XsiptI//HElQm9e4IRRPyM/jCRSxY/q5FANUEhlVeRIHV9aaB3tcLJi+CYrDW6 W4ppAW/GJtISFIQTQFIqlpOUln+TPXdtYyEoBtUlOyPya9IIfBd/yu8ttoLJabUy 2OTexaILaRJ2EZNR8oL2nQaBZXMSiz3n7hT0F5soxPtdw/YM7bq2nT+b291mENv2 rB/p7XfhKEf0+NbC5wjM89vLIBVSgyY8 -----END CERTIFICATE-----Generated at Wed Nov 5 05:18:20 2025 by rpki-client