$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft File: 64mHxSCv7Nwk9ByG_Gut08Fvpio.mft (raw, json) Hash identifier: DOz0RUvsEP/vWJSp+K8QSa2AhLODBUx3lQd0nGmVyFw= Subject key identifier: 71:8C:41:08:4C:77:64:A8:8B:0A:5B:5D:BA:B9:C2:11:E2:DE:6A:74 Authority key identifier: EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A Certificate issuer: /CN=A91B1C73/serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Certificate serial: B0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft Manifest number: B0 Signing time: Wed 05 Nov 2025 06:19:14 +0000 Manifest this update: Wed 05 Nov 2025 06:19:13 +0000 Manifest next update: Wed 12 Nov 2025 06:19:13 +0000 Files and hashes: 1: 64mHxSCv7Nwk9ByG_Gut08Fvpio.crl (hash: RfVpQ7uBhjoEUr4RYsVxpSkyuEvxJ2XhRkxG4Jfij/E=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:19:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 176 (0xb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1C73, serialNumber=EB8987C520AFECDC24F41C86FC6BADD3C16FA62A Validity Not Before: Nov 5 06:19:13 2025 GMT Not After : Nov 12 06:19:13 2025 GMT Subject: CN=690aec62-3000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:54:4d:7d:c2:5a:61:bf:2a:dd:27:5d:75: 15:23:b3:a0:cf:74:62:30:63:11:0c:a9:99:1b:b1: 0c:1d:60:70:b5:77:9e:10:2d:0e:c8:e4:7f:30:cd: 52:12:5e:46:42:c3:73:28:ba:2f:5c:fc:1d:b4:b0: 1d:9c:ab:bd:cc:d6:19:aa:99:f4:d1:96:3c:f5:9c: b1:10:25:ed:f7:94:8d:a2:20:50:aa:15:5e:a9:b2: f4:e6:1e:ed:0d:fb:68:b0:0a:63:31:fc:d3:b2:a9: fe:57:ff:d8:39:4e:76:00:a3:96:94:6d:2e:3f:07: f7:d5:92:a3:b2:38:7d:ce:d2:68:76:8d:0c:65:c2: fa:39:74:cb:72:40:0b:35:a0:86:59:01:fa:83:e6: b3:43:de:7f:63:50:a6:ac:39:7b:1b:5c:0c:78:c6: 4a:7f:56:b3:9b:31:65:a3:e4:b9:55:00:36:9e:e9: ac:2b:02:6c:1e:8e:38:b2:f0:38:16:51:09:13:10: 42:0d:51:81:c7:5d:3e:ed:f2:a9:d9:d9:6c:71:0e: f7:d0:dc:b3:cb:a9:40:34:17:55:29:45:aa:aa:48: 3f:cc:ca:3f:2f:ca:d8:4f:63:8b:57:c4:07:8c:67: a6:85:42:d6:72:22:6f:0d:5f:60:3b:d1:e5:af:1c: 8f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:8C:41:08:4C:77:64:A8:8B:0A:5B:5D:BA:B9:C2:11:E2:DE:6A:74 X509v3 Authority Key Identifier: keyid:EB:89:87:C5:20:AF:EC:DC:24:F4:1C:86:FC:6B:AD:D3:C1:6F:A6:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64mHxSCv7Nwk9ByG_Gut08Fvpio.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1C73/C491BA4EAC0D11EF9879926EC4F9AE02/64mHxSCv7Nwk9ByG_Gut08Fvpio.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:8b:57:86:d1:7f:f0:34:d5:b4:ff:a1:9d:67:93:df:72:54: dc:9d:07:5d:03:57:16:e6:41:5c:59:88:05:82:f1:51:9c:ed: 6a:1f:a7:d5:b1:73:cd:08:59:80:59:00:53:57:2a:03:29:eb: 0e:86:8b:ee:16:74:b9:09:6d:d6:40:b8:ea:86:6d:85:c8:ef: 24:28:f7:db:85:26:8d:9d:9b:59:66:6b:85:5e:9b:8e:f7:55: dd:0f:83:69:49:6e:39:74:f1:85:29:84:51:a8:44:1c:cc:e1: 44:00:ea:ad:d1:4c:8f:be:1b:97:fa:ed:ea:c8:30:98:0d:bb: 57:2d:a4:b7:3c:d8:33:48:80:5a:46:4f:6f:79:13:a9:fa:48: 59:e1:0e:ef:23:1b:a9:b9:ec:92:d6:e8:6e:be:65:59:c2:9c: db:4e:d5:2f:fa:d6:98:26:fe:24:66:9a:44:24:91:6e:9b:b7: e8:ff:ff:17:69:62:4f:40:c6:3b:2f:2f:12:a4:ff:83:1e:6b: f2:30:70:9e:f7:ab:d0:82:74:96:25:b5:2e:90:01:3e:a6:98: 37:8f:93:8c:65:d0:9d:2d:0d:95:e3:58:15:74:f8:72:cd:9e: 56:64:7f:a0:8e:09:37:83:a9:8e:cb:fe:7d:ae:23:da:d2:c8: ee:73:62:d5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFDNzMxMTAvBgNVBAUTKEVCODk4N0M1MjBBRkVDREMyNEY0MUM4NkZDNkJBREQz QzE2RkE2MkEwHhcNMjUxMTA1MDYxOTEzWhcNMjUxMTEyMDYxOTEzWjAYMRYwFAYD VQQDEw02OTBhZWM2Mi0zMDAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFNUTX3CWmG/Kt0nXXUVI7Ogz3RiMGMRDKmZG7EMHWBwtXeeEC0OyOR/MM1S El5GQsNzKLovXPwdtLAdnKu9zNYZqpn00ZY89ZyxECXt95SNoiBQqhVeqbL05h7t DftosApjMfzTsqn+V//YOU52AKOWlG0uPwf31ZKjsjh9ztJodo0MZcL6OXTLckAL NaCGWQH6g+azQ95/Y1CmrDl7G1wMeMZKf1azmzFlo+S5VQA2numsKwJsHo44svA4 FlEJExBCDVGBx10+7fKp2dlscQ730Nyzy6lANBdVKUWqqkg/zMo/L8rYT2OLV8QH jGemhULWciJvDV9gO9HlrxyPOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHGMQQhM d2SoiwpbXbq5whHi3mp0MB8GA1UdIwQYMBaAFOuJh8Ugr+zcJPQchvxrrdPBb6Yq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUM3My9DNDkxQkE0RUFD MEQxMUVGOTg3OTkyNkVDNEY5QUUwMi82NG1IeFNDdjdOd2s5QnlHX0d1dDA4RnZw aW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0bUh4U0N2N053azlCeUdfR3V0MDhGdnBpby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUM3My9DNDkxQkE0RUFDMEQxMUVGOTg3OTkyNkVDNEY5QUUwMi82NG1IeFNDdjdO d2s5QnlHX0d1dDA4RnZwaW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQi1eG0X/wNNW0/6GdZ5PfclTcnQddA1cW5kFcWYgFgvFRnO1qH6fV sXPNCFmAWQBTVyoDKesOhovuFnS5CW3WQLjqhm2FyO8kKPfbhSaNnZtZZmuFXpuO 91XdD4NpSW45dPGFKYRRqEQczOFEAOqt0UyPvhuX+u3qyDCYDbtXLaS3PNgzSIBa Rk9veROp+khZ4Q7vIxupueyS1uhuvmVZwpzbTtUv+taYJv4kZppEJJFum7fo//8X aWJPQMY7Ly8SpP+DHmvyMHCe96vQgnSWJbUukAE+ppg3j5OMZdCdLQ2V41gVdPhy zZ5WZH+gjgk3g6mOy/59riPa0sjuc2LV -----END CERTIFICATE-----Generated at Wed Nov 5 08:10:25 2025 by rpki-client