$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft File: A6PIek8tglWUdvcc-u5ST_URNXk.mft (raw, json) Hash identifier: BI1j+4OElvUsKYg1/1T4GnOfis6P46M+Eb170MXiEcw= Subject key identifier: 34:65:2B:4C:A7:1B:D2:F5:C0:D7:C2:0F:D8:90:AF:F7:D2:7E:5A:78 Authority key identifier: 03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 Certificate issuer: /CN=A91A4CAD/serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Certificate serial: 0B50 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft Manifest number: 0B47 Signing time: Sun 02 Nov 2025 19:11:37 +0000 Manifest this update: Sun 02 Nov 2025 19:11:36 +0000 Manifest next update: Sun 09 Nov 2025 19:11:36 +0000 Files and hashes: 1: A6PIek8tglWUdvcc-u5ST_URNXk.crl (hash: gbQ+8Jhy0BUBY63FiVRNGtkde0AyvfE1H4NBj9+6WWU=) 2: 6553D6106C2B11EA87ED1160C4F9AE02.roa (hash: q+qDmuX1SDlNLGpbDpsIJ4dtsR3ZMPh1qGVJ0QRvta4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 19:11:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2896 (0xb50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4CAD, serialNumber=03A3C87A4F2D82559476F71CFAEE524FF5113579 Validity Not Before: Nov 2 19:11:36 2025 GMT Not After : Nov 9 19:11:36 2025 GMT Subject: CN=6907ace8-c29c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:74:d0:69:b6:71:32:37:7a:b2:59:f3:d7:a1: 76:c1:48:9a:35:13:c3:fa:87:cd:02:40:3b:e3:cd: e4:86:db:d5:30:f8:51:da:82:af:bd:25:ae:b8:80: 64:7d:9b:f7:f9:65:2c:75:8d:98:e9:6d:17:88:db: 44:32:f2:15:42:4d:ea:48:a6:f7:4f:b9:da:53:60: 4d:00:d9:73:38:a3:a5:8d:ca:57:76:3a:5a:e1:7f: df:22:4f:b8:a5:e2:71:5b:c1:27:83:6e:c4:34:20: 73:52:bb:4f:c3:69:36:83:17:83:c5:7a:3f:ad:8c: 24:7a:d2:cb:69:41:35:18:7e:07:ee:c4:45:45:31: 6c:55:7d:71:80:b0:a3:24:4c:11:9d:90:ac:dc:ab: 2a:98:0c:be:d3:20:5b:25:b7:9e:8e:d4:43:a1:29: 28:65:d6:13:47:67:c6:cc:86:93:43:50:e1:61:f3: 41:ae:d8:d4:a7:5d:b3:73:88:11:ff:4f:39:ea:67: 19:5b:7e:8b:56:8b:33:af:20:f4:61:6c:d7:c4:38: 55:bf:7a:3f:c1:e8:95:aa:a2:20:a6:8f:5b:83:0a: 6a:ce:99:a7:d1:36:7f:57:18:0b:3c:74:b8:59:b6: be:d9:68:56:4c:9c:91:3e:e9:32:39:72:ba:46:bf: c9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:65:2B:4C:A7:1B:D2:F5:C0:D7:C2:0F:D8:90:AF:F7:D2:7E:5A:78 X509v3 Authority Key Identifier: keyid:03:A3:C8:7A:4F:2D:82:55:94:76:F7:1C:FA:EE:52:4F:F5:11:35:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6PIek8tglWUdvcc-u5ST_URNXk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4CAD/9FD97A0845C311EABEF5D439C4F9AE02/A6PIek8tglWUdvcc-u5ST_URNXk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:30:58:35:a6:a5:24:30:f9:68:9f:e5:58:53:ba:e3:f7:b9: d9:28:e6:09:68:0c:61:48:9d:e2:c1:44:c8:f0:7a:07:03:4c: bf:fc:7d:b0:fe:9b:ff:3a:40:bc:0a:b7:32:db:b7:59:92:9c: e6:25:e9:0a:41:59:de:55:d7:42:2d:aa:dd:01:87:84:67:94: 06:91:a2:a7:89:ce:f1:08:5b:5b:19:ca:94:2c:dc:af:b6:97: 68:bf:98:a1:df:f9:3e:d4:29:b0:54:2b:18:a8:a8:9a:dd:4c: 0d:a7:0b:df:7a:82:63:c5:41:a9:d0:49:0c:4b:b6:02:84:f2: b4:2d:fe:c2:2a:26:bf:7a:44:fe:bd:58:76:4a:07:f8:74:e6: 41:a9:ad:55:24:6a:7d:0b:a7:97:e1:19:50:f4:32:8a:6d:79: 78:06:84:1b:00:cb:45:ef:1b:a6:b2:f5:2f:cd:eb:80:82:26: fe:d9:cb:de:e1:b5:69:17:8f:99:84:33:b3:43:e8:4f:f3:69: 0f:db:5d:25:88:92:21:ce:c5:b3:cb:d7:2b:9d:85:ab:a9:5e: 81:09:9c:8b:db:3a:d4:b4:26:59:c6:59:8a:28:8d:ed:0f:f9: 85:5d:f6:58:ec:2b:e6:01:c2:75:d0:5f:d0:f2:ba:5f:94:9b: 7f:fe:bd:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRDQUQxMTAvBgNVBAUTKDAzQTNDODdBNEYyRDgyNTU5NDc2RjcxQ0ZBRUU1MjRG RjUxMTM1NzkwHhcNMjUxMTAyMTkxMTM2WhcNMjUxMTA5MTkxMTM2WjAYMRYwFAYD VQQDEw02OTA3YWNlOC1jMjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnTQabZxMjd6slnz16F2wUiaNRPD+ofNAkA7483khtvVMPhR2oKvvSWuuIBk fZv3+WUsdY2Y6W0XiNtEMvIVQk3qSKb3T7naU2BNANlzOKOljcpXdjpa4X/fIk+4 peJxW8Eng27ENCBzUrtPw2k2gxeDxXo/rYwketLLaUE1GH4H7sRFRTFsVX1xgLCj JEwRnZCs3KsqmAy+0yBbJbeejtRDoSkoZdYTR2fGzIaTQ1DhYfNBrtjUp12zc4gR /0856mcZW36LVoszryD0YWzXxDhVv3o/weiVqqIgpo9bgwpqzpmn0TZ/VxgLPHS4 Wba+2WhWTJyRPukyOXK6Rr/JZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDRlK0yn G9L1wNfCD9iQr/fSflp4MB8GA1UdIwQYMBaAFAOjyHpPLYJVlHb3HPruUk/1ETV5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNENBRC85RkQ5N0EwODQ1 QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGdsV1VkdmNjLXU1U1RfVVJO WGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2UEllazh0Z2xXVWR2Y2MtdTVTVF9VUk5Yay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NENBRC85RkQ5N0EwODQ1QzMxMUVBQkVGNUQ0MzlDNEY5QUUwMi9BNlBJZWs4dGds V1VkdmNjLXU1U1RfVVJOWGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrMFg1pqUkMPlon+VYU7rj97nZKOYJaAxhSJ3iwUTI8HoHA0y//H2w /pv/OkC8Crcy27dZkpzmJekKQVneVddCLardAYeEZ5QGkaKnic7xCFtbGcqULNyv tpdov5ih3/k+1CmwVCsYqKia3UwNpwvfeoJjxUGp0EkMS7YChPK0Lf7CKia/ekT+ vVh2Sgf4dOZBqa1VJGp9C6eX4RlQ9DKKbXl4BoQbAMtF7xumsvUvzeuAgib+2cve 4bVpF4+ZhDOzQ+hP82kP210liJIhzsWzy9crnYWrqV6BCZyL2zrUtCZZxlmKKI3t D/mFXfZY7CvmAcJ10F/Q8rpflJt//r18 -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:26 2025 by rpki-client