$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: xtKEJ8iRrouRTmdpewsR0VSAYi2Q10sZKOfgsqCEOW4= Subject key identifier: A0:64:A1:2A:06:84:FD:6A:78:C4:28:EA:CA:07:48:BF:38:CD:DB:00 Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 84 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 84 Signing time: Wed 05 Nov 2025 06:51:01 +0000 Manifest this update: Wed 05 Nov 2025 06:51:01 +0000 Manifest next update: Wed 12 Nov 2025 06:51:01 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: 5qqmaKMJEVsqVGCBQT/u6O/I+YeBQH0/ab0FX6cxhiA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 132 (0x84) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Nov 5 06:51:01 2025 GMT Not After : Nov 12 06:51:01 2025 GMT Subject: CN=690af3d5-5418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2c:4a:c1:54:3f:40:69:61:f2:96:52:ef:7e: 77:31:34:b5:59:89:b2:4e:4f:4f:63:ad:57:80:85: de:78:60:a1:21:fd:47:de:85:75:2c:95:79:6c:e6: aa:71:53:28:a4:80:c9:69:be:30:93:b0:65:d8:b4: f3:8b:0a:ab:2a:3a:ae:41:46:fe:91:9e:a0:20:e8: 40:1b:73:94:1e:0a:39:e1:e9:ec:ec:0c:79:0e:08: ee:ad:4e:7f:52:fd:96:2c:ea:79:96:6a:65:01:8f: ae:9f:3e:c9:53:7e:01:ae:86:7f:83:db:fc:38:8f: 25:c4:75:16:f7:49:33:db:58:92:1e:ce:7d:fc:b8: 19:1b:90:18:54:e0:83:a5:e0:45:2d:15:5d:6f:75: 09:1a:e3:e7:19:7b:9c:67:88:42:ff:c6:3d:28:c1: b1:89:cb:63:54:51:fb:64:ff:a8:f2:20:8f:2b:70: cc:79:0c:35:a6:9f:89:b9:2c:08:d3:46:39:0c:06: e1:ab:f0:18:c5:17:d1:59:65:bb:d8:d7:d8:e4:60: 99:35:56:d6:77:1f:78:29:91:38:b9:56:8a:78:a1: f8:ea:3e:27:97:dd:65:dd:52:d3:cf:61:24:a7:d2: de:e9:4b:4f:91:02:1d:d3:01:11:7f:af:b9:d1:97: 04:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:64:A1:2A:06:84:FD:6A:78:C4:28:EA:CA:07:48:BF:38:CD:DB:00 X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bc:a2:9a:10:ae:6b:f8:6d:59:76:47:20:88:8a:fb:99:2d:5d: 73:50:af:79:29:28:8d:31:95:fa:19:4b:84:60:ec:8b:14:ce: 1a:a7:10:60:39:5f:1b:b8:bc:53:8e:45:f4:72:2f:7a:f9:24: 7c:ed:4e:b4:fd:18:0c:4b:4b:0d:1f:32:fa:5c:fd:72:9c:a2: 23:d0:2e:99:8c:34:cf:e0:17:c3:42:f3:57:af:e5:ef:c7:a6: a5:12:13:3e:6f:9e:b9:f5:1e:ab:f9:35:ff:e2:f9:c9:2b:3c: d4:27:58:de:69:90:53:66:cd:90:e2:2b:5d:fa:97:28:7b:a7: b8:1b:37:29:2f:51:be:76:fc:3b:7c:38:14:b0:c3:fb:46:ee: 53:eb:96:b3:d4:1a:58:e8:f3:f9:8f:02:44:5c:44:0c:6e:fa: 30:35:9f:29:8f:08:1f:df:f2:4e:ef:58:fe:25:18:11:13:5f: 3b:e5:66:5c:03:45:ac:10:93:4c:7a:56:2e:da:d6:e1:b5:b9: f3:8b:79:30:12:dc:04:5c:dc:ba:b0:6b:57:f1:ab:2f:5b:1d: 28:13:90:b1:14:6c:f6:e2:94:36:98:55:51:1c:53:9a:16:c5: 03:61:4f:85:ca:56:e6:dc:24:c4:30:92:94:2c:f3:e4:80:11: 9d:e9:e4:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx MDg5REI1QjUwHhcNMjUxMTA1MDY1MTAxWhcNMjUxMTEyMDY1MTAxWjAYMRYwFAYD VQQDEw02OTBhZjNkNS01NDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxSxKwVQ/QGlh8pZS7353MTS1WYmyTk9PY61XgIXeeGChIf1H3oV1LJV5bOaq cVMopIDJab4wk7Bl2LTziwqrKjquQUb+kZ6gIOhAG3OUHgo54ens7Ax5DgjurU5/ Uv2WLOp5lmplAY+unz7JU34BroZ/g9v8OI8lxHUW90kz21iSHs59/LgZG5AYVOCD peBFLRVdb3UJGuPnGXucZ4hC/8Y9KMGxictjVFH7ZP+o8iCPK3DMeQw1pp+JuSwI 00Y5DAbhq/AYxRfRWWW72NfY5GCZNVbWdx94KZE4uVaKeKH46j4nl91l3VLTz2Ek p9Le6UtPkQId0wERf6+50ZcEPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKBkoSoG hP1qeMQo6soHSL84zdsAMB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK d0JGUldXa1RiekFRaWR0YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC8opoQrmv4bVl2RyCIivuZLV1zUK95KSiNMZX6GUuEYOyLFM4apxBg OV8buLxTjkX0ci96+SR87U60/RgMS0sNHzL6XP1ynKIj0C6ZjDTP4BfDQvNXr+Xv x6alEhM+b5659R6r+TX/4vnJKzzUJ1jeaZBTZs2Q4itd+pcoe6e4GzcpL1G+dvw7 fDgUsMP7Ru5T65az1BpY6PP5jwJEXEQMbvowNZ8pjwgf3/JO71j+JRgRE1875WZc A0WsEJNMelYu2tbhtbnzi3kwEtwEXNy6sGtX8asvWx0oE5CxFGz24pQ2mFVRHFOa FsUDYU+Fylbm3CTEMJKULPPkgBGd6eQp -----END CERTIFICATE-----Generated at Wed Nov 5 15:17:04 2025 by rpki-client