$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft File: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft (raw, json) Hash identifier: iiKwPnknmLJUA0Df5fZVy4lJBHPwxLj/Ne/x1fDbPMg= Subject key identifier: 14:66:49:03:8D:C4:B2:D2:CA:6D:8F:94:25:28:4B:92:84:8F:A1:76 Authority key identifier: D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 Certificate issuer: /CN=A91FC8B6/serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Certificate serial: 01D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft Manifest number: 01CF Signing time: Wed 05 Nov 2025 02:58:16 +0000 Manifest this update: Wed 05 Nov 2025 02:58:15 +0000 Manifest next update: Wed 12 Nov 2025 02:58:15 +0000 Files and hashes: 1: 1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl (hash: Cwpyg11EpLTUquTwA31iLzI4R67d7xrZ/Wy9ByNZ64o=) 2: 37B81F7AF64511ED8C736D76C4F9AE02.roa (hash: /U2wldHiHrPFBo2wVFsGuIVi0YglDoRZcVdncnVvj2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:58:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 467 (0x1d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC8B6, serialNumber=D6F2BAAE7A520FAA4682CADC3693660B9E1FF104 Validity Not Before: Nov 5 02:58:15 2025 GMT Not After : Nov 12 02:58:15 2025 GMT Subject: CN=690abd48-4c24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1c:e4:4b:15:3b:07:f6:52:f3:b6:de:1c:f5: 2e:0e:3f:00:7f:3c:37:0c:42:37:0a:76:1c:89:ff: df:9e:4c:94:73:3c:b2:b6:78:9c:58:a9:3a:e9:bb: f9:8a:91:fa:bf:13:7a:b1:a5:52:30:d5:ad:0d:d8: 34:49:99:b4:0c:b0:70:e8:cd:fa:96:29:cd:6a:12: 5b:01:5e:1a:c7:fe:c2:e1:c1:ea:21:f3:5f:10:89: ed:fb:2f:3d:7b:71:3d:83:32:2c:5c:8e:a9:8f:d0: c9:88:da:2e:30:1b:6d:91:89:64:ee:93:36:69:d7: b9:30:c6:af:43:28:1f:53:21:04:a1:2e:90:42:4b: 1d:8a:5b:d4:0b:7e:6e:25:20:94:fc:11:d4:de:14: fd:5b:b0:59:ea:91:f4:82:a8:e3:9e:63:11:6d:0f: fd:97:4f:fc:cf:9d:e7:8e:35:d1:13:74:60:11:34: 13:c2:62:95:ee:c6:55:03:45:d4:c2:10:73:de:cb: b9:76:ba:d1:85:b4:dd:57:eb:af:2e:6a:ca:64:47: 1b:b8:64:61:db:97:d5:4a:08:30:f7:10:db:cf:de: 9e:ab:88:c6:8a:c2:72:8b:48:02:3f:b0:a1:f6:98: 96:b7:7d:4d:7f:c8:3a:d0:7a:81:e4:62:5d:4b:26: 32:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:66:49:03:8D:C4:B2:D2:CA:6D:8F:94:25:28:4B:92:84:8F:A1:76 X509v3 Authority Key Identifier: keyid:D6:F2:BA:AE:7A:52:0F:AA:46:82:CA:DC:36:93:66:0B:9E:1F:F1:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1vK6rnpSD6pGgsrcNpNmC54f8QQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC8B6/EC622B06F63F11ED97882C72C4F9AE02/1vK6rnpSD6pGgsrcNpNmC54f8QQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:84:66:fd:df:38:92:c1:38:49:33:5d:a7:ff:20:db:8c:17: 06:99:65:51:56:b4:d7:6b:c9:40:c5:88:8b:7b:98:be:9b:f3: 6e:0a:08:dc:7a:61:8d:18:7d:e0:dd:55:39:ad:f1:57:4c:df: e0:93:fa:c6:11:52:a9:d8:ec:4a:da:5c:0d:c8:c6:50:b2:dd: d3:17:25:a7:db:2b:12:0b:f9:ca:02:6b:f5:8c:10:41:e7:b4: 30:4c:27:6c:1d:94:9a:46:36:2f:e8:86:a9:b5:87:25:65:34: 4c:76:ec:e1:b7:43:5f:d3:dc:0b:ce:7f:ad:93:4a:21:e5:a4: 61:3e:4c:8a:b0:a4:ec:3e:d6:c8:35:39:17:d5:d7:b6:09:25: 7b:d8:14:7c:78:51:46:83:c5:f4:2b:43:11:32:a5:da:92:9a: 40:cd:78:ba:4b:be:53:c9:a2:02:d3:28:c4:76:47:02:6e:a2: a3:30:6d:ff:d4:c8:c2:3f:48:4a:0d:cd:3d:29:bf:82:14:a0: af:e8:19:0d:7c:ce:d7:2a:eb:47:67:53:e9:a6:aa:f6:d8:05: b7:bb:f6:29:ce:76:e9:90:61:74:3a:9b:5f:e2:a8:8d:0f:1b: 6b:a4:10:42:cb:11:23:f0:5b:2b:5d:49:16:92:83:29:b5:8e: ea:02:e4:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM4QjYxMTAvBgNVBAUTKEQ2RjJCQUFFN0E1MjBGQUE0NjgyQ0FEQzM2OTM2NjBC OUUxRkYxMDQwHhcNMjUxMTA1MDI1ODE1WhcNMjUxMTEyMDI1ODE1WjAYMRYwFAYD VQQDEw02OTBhYmQ0OC00YzI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAphzkSxU7B/ZS87beHPUuDj8Afzw3DEI3CnYcif/fnkyUczyytnicWKk66bv5 ipH6vxN6saVSMNWtDdg0SZm0DLBw6M36linNahJbAV4ax/7C4cHqIfNfEInt+y89 e3E9gzIsXI6pj9DJiNouMBttkYlk7pM2ade5MMavQygfUyEEoS6QQksdilvUC35u JSCU/BHU3hT9W7BZ6pH0gqjjnmMRbQ/9l0/8z53njjXRE3RgETQTwmKV7sZVA0XU whBz3su5drrRhbTdV+uvLmrKZEcbuGRh25fVSggw9xDbz96eq4jGisJyi0gCP7Ch 9piWt31Nf8g60HqB5GJdSyYy3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBRmSQON xLLSym2PlCUoS5KEj6F2MB8GA1UdIwQYMBaAFNbyuq56Ug+qRoLK3DaTZgueH/EE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzhCNi9FQzYyMkIwNkY2 M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2cEdnc3JjTnBObUM1NGY4 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzF2SzZybnBTRDZwR2dzcmNOcE5tQzU0ZjhRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzhCNi9FQzYyMkIwNkY2M0YxMUVEOTc4ODJDNzJDNEY5QUUwMi8xdks2cm5wU0Q2 cEdnc3JjTnBObUM1NGY4UVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGhGb93ziSwThJM12n/yDbjBcGmWVRVrTXa8lAxYiLe5i+m/NuCgjc emGNGH3g3VU5rfFXTN/gk/rGEVKp2OxK2lwNyMZQst3TFyWn2ysSC/nKAmv1jBBB 57QwTCdsHZSaRjYv6IaptYclZTRMduzht0Nf09wLzn+tk0oh5aRhPkyKsKTsPtbI NTkX1de2CSV72BR8eFFGg8X0K0MRMqXakppAzXi6S75TyaIC0yjEdkcCbqKjMG3/ 1MjCP0hKDc09Kb+CFKCv6BkNfM7XKutHZ1Pppqr22AW3u/YpznbpkGF0Optf4qiN DxtrpBBCyxEj8FsrXUkWkoMptY7qAuQA -----END CERTIFICATE-----Generated at Wed Nov 5 07:43:21 2025 by rpki-client