$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: 1H4YTiXrKZT9vewTG5Sw97QXpX+qKsVpDpt+rGif+ms= Subject key identifier: 2A:F1:CE:73:F4:A7:09:BA:73:46:72:AE:7C:F8:BE:E5:A2:C8:D9:A1 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 73 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 73 Signing time: Wed 05 Nov 2025 07:05:26 +0000 Manifest this update: Wed 05 Nov 2025 07:05:25 +0000 Manifest next update: Wed 12 Nov 2025 07:05:25 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: hItrQ43W+gvu+X0jfZdzMGrDIkopCDAkU8WymvvdQqo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:05:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Nov 5 07:05:25 2025 GMT Not After : Nov 12 07:05:25 2025 GMT Subject: CN=690af735-5b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:d7:98:1c:83:9a:31:ca:90:81:4f:6e:90:b6: 1a:03:8d:a4:55:40:b9:af:71:71:e3:77:2a:a1:e5: 1d:57:ab:fc:ed:5c:0d:91:e1:11:b4:66:0f:51:1b: ab:b0:b8:a4:11:15:9f:74:5b:a2:b0:69:52:bc:fc: 56:dd:a8:25:0a:a4:b0:7d:9e:1a:6f:5c:21:3e:77: 06:66:52:be:33:33:e1:c1:5f:77:2b:10:0c:c1:d1: 4c:d1:18:e8:1c:8d:59:b8:02:1c:34:da:9e:ba:ac: e6:68:b4:1f:f6:4d:db:40:c2:75:6c:84:37:e1:af: 7c:60:8c:c9:ab:41:7c:48:2d:36:1e:aa:b3:f7:20: 71:5a:d6:9a:a7:d0:c7:a8:67:72:f2:8c:b9:9a:45: f6:a2:79:68:f7:a7:60:b7:dc:e8:3f:b6:73:fc:e5: 18:3a:69:22:4f:31:2d:25:7a:44:e6:26:37:f2:9d: b5:bb:b1:af:bd:69:91:93:65:f1:da:a7:20:f5:04: 19:22:4a:38:e6:36:df:d0:39:35:a0:e3:52:6c:72: 40:18:a8:a2:c7:21:c3:99:3f:15:5f:61:90:cb:27: 23:d7:6a:0b:79:c1:3a:40:4f:94:fa:77:4a:c5:5a: 22:37:ff:fa:cc:7a:fa:c5:31:8a:c8:00:15:31:6b: 83:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F1:CE:73:F4:A7:09:BA:73:46:72:AE:7C:F8:BE:E5:A2:C8:D9:A1 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:69:24:23:dd:2f:68:20:4d:f9:71:36:93:52:a8:09:7e:99: 90:54:38:1a:84:99:de:94:82:e7:7b:a0:88:37:b5:10:93:7c: d9:6c:02:6b:a3:da:38:b6:48:74:7a:b0:43:e1:e7:f4:24:0b: 3c:e9:69:5c:75:2e:e1:45:43:23:c5:70:aa:c9:73:de:7b:8f: 20:86:37:a7:c6:0f:fe:f4:a7:94:41:3c:84:85:5d:81:f9:a9: 31:f7:75:e4:ab:a1:62:c7:e3:80:aa:de:65:14:e3:a7:68:07: fe:96:df:2f:2f:75:a1:1a:c2:93:14:56:90:37:f9:b7:89:30: c2:29:72:f7:1a:1c:75:50:37:f6:cd:96:81:a3:39:7f:a7:c4: 6a:dd:4e:5a:19:38:b0:a1:7d:c8:af:4c:12:70:55:fd:dc:48: 8b:10:ec:4d:7f:57:33:a9:46:ea:b1:23:20:6b:d2:04:d3:64: c7:b9:8b:39:7f:b9:76:da:c1:1d:0b:51:6c:39:6e:bc:8a:0e: 32:f3:4e:aa:41:3c:50:d5:99:0b:f8:5e:70:ed:41:a3:94:38: f9:e0:99:64:68:d8:2b:86:ff:21:9b:c7:66:22:af:4c:45:c3: c7:4e:65:89:ce:fc:2e:5c:50:c3:8e:a8:c6:d8:40:52:17:d2: 36:98:36:1a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTExMDUwNzA1MjVaFw0yNTExMTIwNzA1MjVaMBgxFjAUBgNV BAMTDTY5MGFmNzM1LTViMDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC515gcg5oxypCBT26QthoDjaRVQLmvcXHjdyqh5R1Xq/ztXA2R4RG0Zg9RG6uw uKQRFZ90W6KwaVK8/FbdqCUKpLB9nhpvXCE+dwZmUr4zM+HBX3crEAzB0UzRGOgc jVm4Ahw02p66rOZotB/2TdtAwnVshDfhr3xgjMmrQXxILTYeqrP3IHFa1pqn0Meo Z3LyjLmaRfaieWj3p2C33Og/tnP85Rg6aSJPMS0lekTmJjfynbW7sa+9aZGTZfHa pyD1BBkiSjjmNt/QOTWg41JsckAYqKLHIcOZPxVfYZDLJyPXagt5wTpAT5T6d0rF WiI3//rMevrFMYrIABUxa4MbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKvHOc/Sn CbpzRnKufPi+5aLI2aEwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKZpJCPdL2ggTflxNpNSqAl+mZBUOBqEmd6Ugud7oIg3tRCTfNlsAmuj 2ji2SHR6sEPh5/QkCzzpaVx1LuFFQyPFcKrJc957jyCGN6fGD/70p5RBPISFXYH5 qTH3deSroWLH44Cq3mUU46doB/6W3y8vdaEawpMUVpA3+beJMMIpcvcaHHVQN/bN loGjOX+nxGrdTloZOLChfcivTBJwVf3cSIsQ7E1/VzOpRuqxIyBr0gTTZMe5izl/ uXbawR0LUWw5bryKDjLzTqpBPFDVmQv4XnDtQaOUOPngmWRo2CuG/yGbx2Yir0xF w8dOZYnO/C5cUMOOqMbYQFIX0jaYNho= -----END CERTIFICATE-----Generated at Wed Nov 5 10:29:25 2025 by rpki-client