$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft File: _j6YxMGnkStakW0WM0d4xKt6ZTA.mft (raw, json) Hash identifier: VpL2YMSS/Z8wM8ySETNMFQAmNGzpHmaNFXdcKa0bbps= Subject key identifier: A6:05:24:7D:49:E5:0D:B4:2E:26:3B:12:CC:A5:C4:EB:BE:AB:6F:0D Authority key identifier: FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 Certificate issuer: /CN=A91A0D9C/serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Certificate serial: 153A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft Manifest number: 152A Signing time: Sun 02 Nov 2025 16:48:39 +0000 Manifest this update: Sun 02 Nov 2025 16:48:39 +0000 Manifest next update: Sun 09 Nov 2025 16:48:39 +0000 Files and hashes: 1: _j6YxMGnkStakW0WM0d4xKt6ZTA.crl (hash: f9PYBtRyjB8Go3JYk4w0KOasOsT1ctkYCh2uQehESfg=) 2: 95DDE9D6909A11EF94AF3B26C4F9AE02.roa (hash: CwtP2gwbfApArQJr3Z1hu1rrmy4N399m/4TAvngzADE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5434 (0x153a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0D9C, serialNumber=FE3E98C4C1A7912B5A916D16334778C4AB7A6530 Validity Not Before: Nov 2 16:48:39 2025 GMT Not After : Nov 9 16:48:39 2025 GMT Subject: CN=69078b67-cc92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:a1:0b:51:80:ab:67:2f:0e:92:78:b6:df:4e: f2:c6:2f:f2:e8:6f:3d:7c:e4:69:91:0f:e1:37:42: 9e:e1:f8:cd:bb:3e:32:ea:32:f6:83:51:3f:b4:79: dd:05:33:18:94:c6:7a:da:20:1b:b5:0d:38:ab:fa: 7b:ba:ee:d8:4f:e0:e9:3f:ef:a1:46:74:3d:f0:35: 96:f4:33:b0:20:ac:02:29:49:11:51:5c:ee:d3:c2: a2:bf:8d:36:fd:5a:0a:76:28:e6:75:0d:a0:69:1c: 8b:ea:8f:f7:67:ac:8b:a8:9d:ef:12:2a:de:4c:9a: 70:63:ac:c7:88:ae:4b:77:20:8f:0b:ad:50:5a:ea: 00:b6:39:1c:78:ed:f1:05:83:e4:5f:90:c8:ec:dd: 2b:e1:14:33:01:94:1d:62:05:1e:a3:dc:5f:ee:fa: b2:df:82:b8:6e:c7:1b:00:64:95:7d:59:29:53:27: c5:94:81:f0:40:43:8b:d0:25:34:0a:74:55:58:d6: b2:78:9b:ef:ca:e8:47:bb:10:81:fd:60:e0:2c:88: 15:5f:e7:dc:c8:28:a0:3b:6e:d3:27:ec:2d:ed:ff: be:a9:a7:36:b1:7f:37:8b:76:9b:7b:fa:b8:d0:e0: 6d:8c:5b:bd:c4:62:e5:df:0c:60:47:93:52:cc:aa: 27:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:05:24:7D:49:E5:0D:B4:2E:26:3B:12:CC:A5:C4:EB:BE:AB:6F:0D X509v3 Authority Key Identifier: keyid:FE:3E:98:C4:C1:A7:91:2B:5A:91:6D:16:33:47:78:C4:AB:7A:65:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_j6YxMGnkStakW0WM0d4xKt6ZTA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0D9C/9E28300657A811E8B4AC0877C4F9AE02/_j6YxMGnkStakW0WM0d4xKt6ZTA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:c6:f9:f2:6a:36:7e:b5:69:85:41:5e:0f:51:9b:c2:43:8a: 71:2e:4c:83:b3:51:4b:9c:9e:77:87:c9:ee:a0:b1:1f:87:e6: 9d:60:08:6a:c7:9d:bb:57:9f:2b:35:97:63:83:3d:60:b2:c8: e7:de:33:77:0f:23:be:eb:7d:15:ee:e8:3a:19:e7:2b:aa:bb: c0:e3:bd:97:f7:2c:6f:ca:5a:7f:24:11:6f:46:5c:58:c2:86: ab:e9:ce:88:14:84:78:fb:2c:00:d4:27:5d:f3:34:f0:63:cf: e7:d6:c9:52:67:22:37:2f:63:3a:44:0b:70:ad:79:16:0f:e4: 34:53:97:e4:f9:f5:c6:09:3a:b1:78:10:f9:30:f2:1b:55:6f: 70:52:9f:c4:c9:ec:9d:77:23:dc:84:59:bf:eb:29:cd:64:59: ac:03:48:c0:eb:0b:eb:7f:a5:f1:d6:22:49:c3:47:a8:61:21: 3f:20:e7:ee:75:09:b5:3f:f4:29:08:77:36:d9:52:ed:7b:08: 65:c6:fc:22:6d:0d:ab:98:24:be:ad:35:fc:4d:89:56:27:69: 5c:66:39:59:31:fe:90:70:3e:6a:5c:ca:07:0e:22:ff:2d:b4: 2c:ef:e0:05:f5:20:9f:22:6c:dc:b1:28:dc:40:73:61:1e:77: 68:b8:a0:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFTowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBEOUMxMTAvBgNVBAUTKEZFM0U5OEM0QzFBNzkxMkI1QTkxNkQxNjMzNDc3OEM0 QUI3QTY1MzAwHhcNMjUxMTAyMTY0ODM5WhcNMjUxMTA5MTY0ODM5WjAYMRYwFAYD VQQDEw02OTA3OGI2Ny1jYzkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4qELUYCrZy8Okni2307yxi/y6G89fORpkQ/hN0Ke4fjNuz4y6jL2g1E/tHnd BTMYlMZ62iAbtQ04q/p7uu7YT+DpP++hRnQ98DWW9DOwIKwCKUkRUVzu08Kiv402 /VoKdijmdQ2gaRyL6o/3Z6yLqJ3vEireTJpwY6zHiK5LdyCPC61QWuoAtjkceO3x BYPkX5DI7N0r4RQzAZQdYgUeo9xf7vqy34K4bscbAGSVfVkpUyfFlIHwQEOL0CU0 CnRVWNayeJvvyuhHuxCB/WDgLIgVX+fcyCigO27TJ+wt7f++qac2sX83i3abe/q4 0OBtjFu9xGLl3wxgR5NSzKonLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKYFJH1J 5Q20LiY7EsylxOu+q28NMB8GA1UdIwQYMBaAFP4+mMTBp5ErWpFtFjNHeMSremUw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEQ5Qy85RTI4MzAwNjU3 QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtTdGFrVzBXTTBkNHhLdDZa VEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qNll4TUdua1N0YWtXMFdNMGQ0eEt0NlpUQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MEQ5Qy85RTI4MzAwNjU3QTgxMUU4QjRBQzA4NzdDNEY5QUUwMi9fajZZeE1HbmtT dGFrVzBXTTBkNHhLdDZaVEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCXxvnyajZ+tWmFQV4PUZvCQ4pxLkyDs1FLnJ53h8nuoLEfh+adYAhq x527V58rNZdjgz1gssjn3jN3DyO+630V7ug6GecrqrvA472X9yxvylp/JBFvRlxY woar6c6IFIR4+ywA1Cdd8zTwY8/n1slSZyI3L2M6RAtwrXkWD+Q0U5fk+fXGCTqx eBD5MPIbVW9wUp/EyeyddyPchFm/6ynNZFmsA0jA6wvrf6Xx1iJJw0eoYSE/IOfu dQm1P/QpCHc22VLtewhlxvwibQ2rmCS+rTX8TYlWJ2lcZjlZMf6QcD5qXMoHDiL/ LbQs7+AF9SCfImzcsSjcQHNhHndouKCh -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:39 2025 by rpki-client