$ rpki-client -vvf rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft File: CgFEnq6g-yiFx_PFZO6TMac_P_k.mft (raw, json) Hash identifier: ajLWrvIf6sj38+8WnkY6bHBeyEpDLbuRYIsza27IIaY= Subject key identifier: 86:FE:C4:33:D9:8A:AA:C3:87:A2:7C:A2:25:77:7C:AD:FB:87:B9:49 Authority key identifier: 0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 Certificate issuer: /CN=A91567D5/serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft Manifest number: 02F6 Signing time: Mon 03 Nov 2025 02:25:46 +0000 Manifest this update: Mon 03 Nov 2025 02:25:46 +0000 Manifest next update: Mon 10 Nov 2025 02:25:46 +0000 Files and hashes: 1: CgFEnq6g-yiFx_PFZO6TMac_P_k.crl (hash: 3kqfY6sbWVfUSpC/SJVAD5NfASA1p9yrz95V8GLU7HQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:25:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91567D5, serialNumber=0A01449EAEA0FB2885C7F3C564EE9331A73F3FF9 Validity Not Before: Nov 3 02:25:46 2025 GMT Not After : Nov 10 02:25:46 2025 GMT Subject: CN=690812aa-6f8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b8:9c:31:07:27:4e:36:6e:85:8d:a8:82:c2: bd:90:e9:7c:fc:a2:44:03:ed:de:f3:8b:bd:ff:2d: 69:ea:e2:9d:53:bc:2b:15:31:14:85:50:65:e8:ce: ad:fa:9e:58:fe:46:a4:ab:a0:a1:29:b7:e6:45:e5: 82:de:a0:61:a9:49:d8:9e:98:ba:78:87:bd:92:b5: 76:1a:1d:c5:91:34:d8:25:b8:b5:c1:04:39:00:51: e6:bf:a5:da:e1:62:8c:57:cb:8d:9b:77:aa:f8:67: 15:02:ec:73:d2:39:39:cb:41:a7:c7:fe:1c:75:74: 14:52:38:a5:11:09:0d:f1:dd:a0:51:4d:c2:26:25: a3:37:e9:30:4d:7e:65:51:88:24:13:6e:08:d9:9a: ce:54:83:90:97:8b:1d:59:f8:fa:b8:87:f1:48:f4: 12:02:1a:89:23:d7:44:93:4c:de:95:6c:60:60:25: 59:82:7e:ed:38:2e:a3:a3:04:64:4c:4e:ae:e8:03: 5e:c7:fa:2e:e3:4a:2f:f4:42:23:fb:d3:fb:d6:92: 7b:e0:15:80:55:f5:2e:fd:05:75:fc:2e:98:29:9e: cf:38:d5:82:67:cb:fd:8d:d4:99:11:da:ac:d9:c9: 44:e9:67:f2:2f:4e:a4:d0:64:63:1a:6f:ab:db:d0: 07:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:FE:C4:33:D9:8A:AA:C3:87:A2:7C:A2:25:77:7C:AD:FB:87:B9:49 X509v3 Authority Key Identifier: keyid:0A:01:44:9E:AE:A0:FB:28:85:C7:F3:C5:64:EE:93:31:A7:3F:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CgFEnq6g-yiFx_PFZO6TMac_P_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91567D5/DEFCA452B41B11EDB6C8DD67C4F9AE02/CgFEnq6g-yiFx_PFZO6TMac_P_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:a3:5c:a3:a0:2d:12:31:6b:fb:bb:6c:b3:ec:47:80:b7:eb: 9d:ba:6e:dc:fe:3a:5f:40:85:b9:34:f5:f2:0b:8a:af:14:3e: 85:34:95:6b:b2:21:82:47:43:fc:07:f6:55:46:a8:ee:2a:21: 0c:f1:85:25:93:0d:b9:2d:8f:d4:a6:ec:d9:2b:a0:07:f5:43: 3f:1b:53:2f:47:97:b0:ab:35:b5:50:c2:ab:b3:8b:c9:d1:05: 63:da:51:0e:42:41:d0:a2:1f:1e:b2:6b:af:02:c7:b3:fc:aa: b7:4e:64:28:cf:0f:43:cc:c7:cc:fb:97:23:60:f0:22:19:15: 89:2a:ab:3b:43:01:16:d6:57:02:5b:0b:83:73:0b:6e:88:d4: ca:fc:23:b5:d7:85:12:a3:8c:8a:c6:51:44:34:27:fc:9f:6a: f2:81:06:f6:da:e1:e2:a3:40:df:e6:b2:53:1d:b0:ec:6c:d6: c5:5e:a0:8b:bf:3c:16:f3:53:40:04:7e:c7:fe:76:8f:84:28: 24:a2:98:08:41:75:a9:27:09:c5:07:1d:26:5a:95:aa:bc:61: 4d:9f:27:61:80:7c:31:7f:e3:30:94:3f:ba:cb:f5:aa:c6:e4: 23:ce:64:a4:3d:ed:1f:33:a0:3b:04:dd:9d:91:86:1a:86:67: 9e:af:a1:6d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY3RDUxMTAvBgNVBAUTKDBBMDE0NDlFQUVBMEZCMjg4NUM3RjNDNTY0RUU5MzMx QTczRjNGRjkwHhcNMjUxMTAzMDIyNTQ2WhcNMjUxMTEwMDIyNTQ2WjAYMRYwFAYD VQQDEw02OTA4MTJhYS02ZjhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArLicMQcnTjZuhY2ogsK9kOl8/KJEA+3e84u9/y1p6uKdU7wrFTEUhVBl6M6t +p5Y/kakq6ChKbfmReWC3qBhqUnYnpi6eIe9krV2Gh3FkTTYJbi1wQQ5AFHmv6Xa 4WKMV8uNm3eq+GcVAuxz0jk5y0Gnx/4cdXQUUjilEQkN8d2gUU3CJiWjN+kwTX5l UYgkE24I2ZrOVIOQl4sdWfj6uIfxSPQSAhqJI9dEk0zelWxgYCVZgn7tOC6jowRk TE6u6ANex/ou40ov9EIj+9P71pJ74BWAVfUu/QV1/C6YKZ7PONWCZ8v9jdSZEdqs 2clE6WfyL06k0GRjGm+r29AHJQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIb+xDPZ iqrDh6J8oiV3fK37h7lJMB8GA1UdIwQYMBaAFAoBRJ6uoPsohcfzxWTukzGnPz/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjdENS9ERUZDQTQ1MkI0 MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15aUZ4X1BGWk82VE1hY19Q X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NnRkVucTZnLXlpRnhfUEZaTzZUTWFjX1Bfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NjdENS9ERUZDQTQ1MkI0MUIxMUVEQjZDOERENjdDNEY5QUUwMi9DZ0ZFbnE2Zy15 aUZ4X1BGWk82VE1hY19QX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBio1yjoC0SMWv7u2yz7EeAt+udum7c/jpfQIW5NPXyC4qvFD6FNJVr siGCR0P8B/ZVRqjuKiEM8YUlkw25LY/UpuzZK6AH9UM/G1MvR5ewqzW1UMKrs4vJ 0QVj2lEOQkHQoh8esmuvAsez/Kq3TmQozw9DzMfM+5cjYPAiGRWJKqs7QwEW1lcC WwuDcwtuiNTK/CO114USo4yKxlFENCf8n2rygQb22uHio0Df5rJTHbDsbNbFXqCL vzwW81NABH7H/naPhCgkopgIQXWpJwnFBx0mWpWqvGFNnydhgHwxf+MwlD+6y/Wq xuQjzmSkPe0fM6A7BN2dkYYahmeer6Ft -----END CERTIFICATE-----Generated at Tue Nov 4 01:03:51 2025 by rpki-client