$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: FxPr4R3QjdpipkoyVXT5SGYN9NIubXNvhJIUcVzh3qU= Subject key identifier: E9:38:2D:33:32:01:9F:5D:51:5E:21:FD:2C:72:48:5B:64:92:E1:3E Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03EC Signing time: Wed 05 Nov 2025 00:36:29 +0000 Manifest this update: Wed 05 Nov 2025 00:36:29 +0000 Manifest next update: Wed 12 Nov 2025 00:36:29 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: IwpcFTP5f/iL9lhsYuOTSkcKTWGWvQh2BcjHXXlHhhE=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:36:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1008 (0x3f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Nov 5 00:36:29 2025 GMT Not After : Nov 12 00:36:29 2025 GMT Subject: CN=690a9c0d-6e5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:00:d8:be:b7:d1:4d:01:81:52:4a:28:91:54: 8a:29:87:7b:de:58:7e:42:ca:57:01:d7:60:17:7a: b0:c6:57:8c:30:5c:be:25:26:b2:45:be:b1:89:95: 70:5c:38:5a:8b:48:93:3c:c6:aa:0f:b0:62:6f:ce: af:97:10:62:19:23:e4:99:29:db:ec:9b:05:32:77: 4e:55:e6:fe:55:47:f9:e9:60:95:2b:6e:b5:3a:d0: a8:a5:2e:04:82:55:5c:b7:93:44:b1:78:6b:d8:6d: b0:5f:cf:ee:1a:a4:32:64:34:17:8d:6b:30:97:17: ef:c3:e3:31:39:94:2c:8b:37:66:e7:e2:c7:4c:b9: c6:c0:38:b4:82:76:b7:8f:f0:1c:7e:87:4a:29:d6: a6:7a:66:84:21:ba:ea:0c:0e:32:2a:da:d2:ec:06: 10:80:ca:eb:3d:b7:f8:25:f9:eb:cd:c4:79:7f:ef: ac:fa:d2:f8:54:56:b8:2d:83:2c:62:55:7a:f5:88: f1:3e:9b:69:8e:2b:ef:c5:b8:36:47:d8:fe:a0:28: ae:69:11:0b:3f:67:2a:09:9a:e9:8f:c5:f1:a1:c1: 18:38:61:24:da:17:c3:10:0e:fb:5f:08:1d:a3:d4: 5c:82:9d:d7:92:c4:b2:09:31:5b:81:7d:7b:9d:6b: 15:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:38:2D:33:32:01:9F:5D:51:5E:21:FD:2C:72:48:5B:64:92:E1:3E X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6f:db:33:63:78:21:04:51:88:ca:3e:c0:2c:d1:19:a4:a9:c3: 10:7f:08:ad:90:6b:64:1f:5c:b6:78:fe:43:2f:75:71:31:73: 97:07:09:17:14:d6:02:a1:c3:b4:cf:cb:b1:6c:7b:d1:14:64: b0:de:b0:d1:f4:0a:ab:56:3b:5c:aa:46:e0:44:49:fa:90:07: 4e:e7:62:10:d9:1f:f7:de:a6:9a:2c:f6:06:47:b1:3d:d3:79: ed:9d:02:d0:d4:83:c2:ab:ff:51:28:7f:55:7e:c6:84:2c:19: 8c:d7:7f:5d:a2:79:8a:37:d5:ce:84:82:ed:0d:90:42:74:b9: 1b:2e:03:4c:55:d8:66:01:37:fe:6f:d5:e6:e0:d3:9c:52:4c: 29:0e:2a:6c:5c:1c:27:c4:c0:b9:1e:f7:c6:59:06:7c:03:39: a3:b4:b0:0a:d7:ca:a9:77:47:be:ee:ad:81:ef:af:c1:5b:e7: 79:66:19:2c:ba:f1:4e:6e:19:48:94:23:b3:a5:2e:2a:b4:05: b3:7a:2b:c0:07:48:9e:76:c6:bc:e2:73:5c:f6:33:5e:58:09: 64:0c:42:a8:ee:da:52:d7:a0:f4:1e:31:b8:e3:eb:00:0e:b6: 31:77:33:46:ac:36:44:69:3c:75:c7:87:56:04:44:33:93:0e: c6:f9:f1:fa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUxMTA1MDAzNjI5WhcNMjUxMTEyMDAzNjI5WjAYMRYwFAYD VQQDEw02OTBhOWMwZC02ZTVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuADYvrfRTQGBUkookVSKKYd73lh+QspXAddgF3qwxleMMFy+JSayRb6xiZVw XDhai0iTPMaqD7Bib86vlxBiGSPkmSnb7JsFMndOVeb+VUf56WCVK261OtCopS4E glVct5NEsXhr2G2wX8/uGqQyZDQXjWswlxfvw+MxOZQsizdm5+LHTLnGwDi0gna3 j/AcfodKKdamemaEIbrqDA4yKtrS7AYQgMrrPbf4JfnrzcR5f++s+tL4VFa4LYMs YlV69YjxPptpjivvxbg2R9j+oCiuaRELP2cqCZrpj8XxocEYOGEk2hfDEA77Xwgd o9Rcgp3XksSyCTFbgX17nWsVWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOk4LTMy AZ9dUV4h/SxySFtkkuE+MB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBv2zNjeCEEUYjKPsAs0RmkqcMQfwitkGtkH1y2eP5DL3VxMXOXBwkX FNYCocO0z8uxbHvRFGSw3rDR9AqrVjtcqkbgREn6kAdO52IQ2R/33qaaLPYGR7E9 03ntnQLQ1IPCq/9RKH9VfsaELBmM139donmKN9XOhILtDZBCdLkbLgNMVdhmATf+ b9Xm4NOcUkwpDipsXBwnxMC5HvfGWQZ8AzmjtLAK18qpd0e+7q2B76/BW+d5Zhks uvFObhlIlCOzpS4qtAWzeivAB0iedsa84nNc9jNeWAlkDEKo7tpS16D0HjG44+sA DrYxdzNGrDZEaTx1x4dWBEQzkw7G+fH6 -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:36 2025 by rpki-client