$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft File: fH06qZRpRKT9iR5GspbjygcKOF4.mft (raw, json) Hash identifier: 3ivyQa/wqN6b45kqHLJR1vCDCkoIl1a9hgqqINQPqQU= Subject key identifier: 71:9E:77:8A:41:14:3B:2C:1B:E6:85:9E:AB:FF:72:D1:FF:6E:BA:02 Authority key identifier: 7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E Certificate issuer: /CN=A91FE449/serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Certificate serial: 0686 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft Manifest number: 0686 Signing time: Tue 04 Nov 2025 22:29:42 +0000 Manifest this update: Tue 04 Nov 2025 22:29:42 +0000 Manifest next update: Tue 11 Nov 2025 22:29:42 +0000 Files and hashes: 1: fH06qZRpRKT9iR5GspbjygcKOF4.crl (hash: i6Fe53Yj8353dafQRH2jxWj5eFbLWu0+CbXJVLBfUWU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1670 (0x686) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE449, serialNumber=7C7D3AA9946944A4FD891E46B296E3CA070A385E Validity Not Before: Nov 4 22:29:42 2025 GMT Not After : Nov 11 22:29:42 2025 GMT Subject: CN=690a7e56-8266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:26:7a:3a:14:0d:3c:5b:a2:54:32:f7:43:63: 54:69:1f:19:7e:2d:48:77:ed:6f:db:a1:47:cd:2f: 8c:53:33:27:58:f2:00:de:84:ce:6a:59:b2:d5:e4: 6f:96:1e:72:eb:69:d2:33:d7:68:04:f7:a0:7f:64: d9:a7:86:72:5b:2a:54:0c:3a:20:80:dd:eb:71:63: 75:ff:2e:77:54:91:a7:93:e9:14:5a:8d:10:70:ff: 7e:98:6a:4a:be:23:14:99:83:79:8f:d3:1e:78:b1: d4:e0:7f:1c:f9:ec:40:f2:1f:14:4a:5a:e3:f4:53: 1b:27:af:92:06:8f:7f:cb:6f:32:5c:b0:ee:d4:0b: f8:67:85:7e:c6:cf:f1:ff:a1:20:e8:dd:b7:4a:54: 59:15:e8:5e:9b:2f:9c:a1:11:ca:e0:23:bc:65:b2: e6:be:bd:f9:1a:86:08:3b:a6:f8:01:63:8a:2e:2e: 04:e0:e0:53:99:c4:8a:20:40:2d:0b:af:87:3b:e4: 45:6c:10:76:b8:0e:45:da:24:d0:07:c0:22:87:b0: 87:cc:88:81:b5:a4:69:cb:3d:65:c5:46:da:75:72: 5a:60:49:19:07:fd:34:ef:8b:35:e3:03:22:ac:24: bd:4b:da:d1:6e:a5:cc:3e:af:c8:5c:cb:cf:ac:8f: 9b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:9E:77:8A:41:14:3B:2C:1B:E6:85:9E:AB:FF:72:D1:FF:6E:BA:02 X509v3 Authority Key Identifier: keyid:7C:7D:3A:A9:94:69:44:A4:FD:89:1E:46:B2:96:E3:CA:07:0A:38:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fH06qZRpRKT9iR5GspbjygcKOF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE449/73CB9304910011EBAD5F7E5DC4F9AE02/fH06qZRpRKT9iR5GspbjygcKOF4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:8e:bf:cc:1a:3f:d2:d6:e3:1c:c3:9d:89:a4:fd:6a:db:76: ad:d4:a8:45:73:fa:57:21:c6:9f:75:fb:f0:f1:69:a6:c9:c6: d8:c7:f9:78:8a:43:49:aa:29:1a:9b:1c:5a:ef:61:f3:d5:ae: 34:da:ff:cb:dc:15:21:9c:2f:13:cd:ae:46:6e:ad:e6:5b:18: 0b:07:94:b6:9b:ed:90:3c:70:2e:90:e2:f9:87:e9:7f:fd:44: de:15:29:67:b4:ed:c7:92:71:b5:df:ef:12:7e:f6:f0:4f:57: a5:2e:fb:38:a8:03:17:70:6e:50:71:de:b5:41:51:2e:f0:7e: bf:1e:a9:4a:ce:6b:c1:69:5c:c3:de:95:94:23:bd:92:80:1f: 7f:5a:e9:09:1e:e5:9b:fc:86:9c:3c:58:d4:b4:07:f9:22:3d: a2:0c:88:95:b7:37:26:66:ef:1a:02:31:cb:96:99:07:94:db: 82:7f:42:99:91:74:06:11:3c:87:aa:db:dd:d4:83:70:8f:c9: cf:41:de:92:77:7e:5e:63:e7:a0:9b:56:f8:40:b5:9b:1b:70: fa:31:ac:cd:df:a1:0b:2e:ba:79:bf:97:66:25:6d:01:2b:71: 9e:a9:0c:d1:18:8a:ea:fe:1a:15:c4:cc:d9:c4:41:ef:e2:70: 17:44:8b:88 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkU0NDkxMTAvBgNVBAUTKDdDN0QzQUE5OTQ2OTQ0QTRGRDg5MUU0NkIyOTZFM0NB MDcwQTM4NUUwHhcNMjUxMTA0MjIyOTQyWhcNMjUxMTExMjIyOTQyWjAYMRYwFAYD VQQDEw02OTBhN2U1Ni04MjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvCZ6OhQNPFuiVDL3Q2NUaR8Zfi1Id+1v26FHzS+MUzMnWPIA3oTOalmy1eRv lh5y62nSM9doBPegf2TZp4ZyWypUDDoggN3rcWN1/y53VJGnk+kUWo0QcP9+mGpK viMUmYN5j9MeeLHU4H8c+exA8h8USlrj9FMbJ6+SBo9/y28yXLDu1Av4Z4V+xs/x /6Eg6N23SlRZFehemy+coRHK4CO8ZbLmvr35GoYIO6b4AWOKLi4E4OBTmcSKIEAt C6+HO+RFbBB2uA5F2iTQB8Aih7CHzIiBtaRpyz1lxUbadXJaYEkZB/0074s14wMi rCS9S9rRbqXMPq/IXMvPrI+bSwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGed4pB FDssG+aFnqv/ctH/broCMB8GA1UdIwQYMBaAFHx9OqmUaUSk/YkeRrKW48oHCjhe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRTQ0OS83M0NCOTMwNDkx MDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJLVDlpUjVHc3BianlnY0tP RjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZIMDZxWlJwUktUOWlSNUdzcGJqeWdjS09GNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQ0OS83M0NCOTMwNDkxMDAxMUVCQUQ1RjdFNURDNEY5QUUwMi9mSDA2cVpScFJL VDlpUjVHc3BianlnY0tPRjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3jr/MGj/S1uMcw52JpP1q23at1KhFc/pXIcafdfvw8WmmycbYx/l4 ikNJqikamxxa72Hz1a402v/L3BUhnC8Tza5Gbq3mWxgLB5S2m+2QPHAukOL5h+l/ /UTeFSlntO3HknG13+8SfvbwT1elLvs4qAMXcG5Qcd61QVEu8H6/HqlKzmvBaVzD 3pWUI72SgB9/WukJHuWb/IacPFjUtAf5Ij2iDIiVtzcmZu8aAjHLlpkHlNuCf0KZ kXQGETyHqtvd1INwj8nPQd6Sd35eY+egm1b4QLWbG3D6MazN36ELLrp5v5dmJW0B K3GeqQzRGIrq/hoVxMzZxEHv4nAXRIuI -----END CERTIFICATE-----Generated at Wed Nov 5 16:17:31 2025 by rpki-client