$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft File: Ar6z5iH6umNCHtP4hPonC80zHXc.mft (raw, json) Hash identifier: zpe6Th5ZCeSTKUg7djXL+VNYNnIS5Op9rMboasXOxK0= Subject key identifier: 01:B1:E2:1A:74:3D:4C:98:37:7E:30:5E:44:68:7B:C8:D9:03:C5:A5 Authority key identifier: 02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 Certificate issuer: /CN=A91C0E5D/serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Certificate serial: 0699 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft Manifest number: 068F Signing time: Sun 02 Nov 2025 22:24:18 +0000 Manifest this update: Sun 02 Nov 2025 22:24:17 +0000 Manifest next update: Sun 09 Nov 2025 22:24:17 +0000 Files and hashes: 1: Ar6z5iH6umNCHtP4hPonC80zHXc.crl (hash: FIXG33+kjNmBKza9secAPh8CbaM7Amx6GtE8Dnu8Za8=) 2: C34EB9A6C28311EB9370913FC4F9AE02.roa (hash: Al61RmIvimM1KwvJGrf39fcF1DIlgNVctNk1tZ67VR0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1689 (0x699) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E5D, serialNumber=02BEB3E621FABA63421ED3F884FA270BCD331D77 Validity Not Before: Nov 2 22:24:17 2025 GMT Not After : Nov 9 22:24:17 2025 GMT Subject: CN=6907da11-16e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ea:15:45:55:46:e1:8e:49:6b:93:4c:79:77: c5:ad:af:ff:9f:c7:c0:bc:89:38:81:0f:b7:35:fc: a8:74:0a:9c:c4:8e:ba:3a:42:2b:1f:64:13:5a:dd: f3:9a:ba:55:d1:72:80:8f:98:ad:a7:e2:60:cb:94: 2b:11:8f:ee:53:96:c0:7b:f6:e1:e5:50:72:f7:9e: 10:73:95:d9:03:b4:9d:d4:24:fb:65:e0:2a:c4:a6: c4:ab:0e:22:b8:41:90:f6:bb:a9:96:e0:b9:a4:8b: de:6c:c0:b2:52:67:d9:ed:81:8d:4f:26:1e:3a:d2: f3:7e:a7:3f:ab:0a:b9:16:b7:15:ed:dd:de:53:a2: b4:98:35:3e:2d:b3:51:91:cf:98:36:08:35:ca:6c: 0b:2e:0a:f3:9d:cc:39:17:87:68:c7:30:a6:61:5b: 8d:e4:7a:68:70:30:37:b1:d2:bc:6b:74:35:b4:26: 7d:37:be:b5:58:d9:7a:a9:2c:b1:64:fb:e9:e3:f3: 32:94:19:f4:7f:2b:36:c4:e4:aa:b7:f1:a8:e4:24: 39:80:9a:24:4a:1c:fc:a0:5b:54:ff:83:22:33:d4: ef:8b:27:84:15:2c:7b:1f:d7:29:01:69:f2:e6:98: 4a:5c:a0:02:3e:fc:15:d6:cf:b7:bc:6c:c6:f8:20: ac:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B1:E2:1A:74:3D:4C:98:37:7E:30:5E:44:68:7B:C8:D9:03:C5:A5 X509v3 Authority Key Identifier: keyid:02:BE:B3:E6:21:FA:BA:63:42:1E:D3:F8:84:FA:27:0B:CD:33:1D:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ar6z5iH6umNCHtP4hPonC80zHXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E5D/0D0FFBDC91D711EB86FA3426C4F9AE02/Ar6z5iH6umNCHtP4hPonC80zHXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e7:85:71:83:15:46:9f:e1:f8:2f:dd:76:f9:b7:57:a0:a5: 8f:a8:0a:02:3e:08:82:ef:81:de:8a:f9:dd:da:c4:c9:9e:d6: 31:e2:25:78:e7:2d:18:8f:5a:25:48:ec:6f:69:00:6a:f6:66: c0:43:83:b5:1f:77:57:bd:16:a6:d1:91:d2:99:7c:f8:eb:2d: 50:d9:0d:81:f6:32:0f:42:e2:09:c0:bb:a8:98:9d:08:17:c0: ed:c7:f5:46:0c:f1:88:54:70:be:cd:73:34:46:2c:59:61:d9: 2c:27:6e:ce:80:b2:46:2c:a4:8d:97:a3:64:26:12:99:e0:ab: d4:c4:c4:0e:75:bd:0d:14:e9:95:a8:4c:77:ca:56:98:0b:a3: 7e:7e:c2:90:d3:cc:3f:23:9f:48:3c:7f:ac:d0:cc:c4:1e:8b: a8:8c:3f:04:2a:29:08:87:96:fd:85:9f:2a:79:96:db:df:74: 7a:f9:04:62:d7:51:d8:fe:69:fe:00:66:df:b7:7b:9c:b3:64: 93:02:74:98:ea:6f:ba:14:52:6e:05:f6:e0:56:bc:53:97:02: a5:99:f6:da:da:9f:60:d5:7f:92:ea:d8:32:53:ec:28:28:cd: 8f:8e:3c:93:e0:25:6a:30:d8:a7:0f:4c:2f:3e:5f:eb:cd:0b: 33:90:66:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBpkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNUQxMTAvBgNVBAUTKDAyQkVCM0U2MjFGQUJBNjM0MjFFRDNGODg0RkEyNzBC Q0QzMzFENzcwHhcNMjUxMTAyMjIyNDE3WhcNMjUxMTA5MjIyNDE3WjAYMRYwFAYD VQQDEw02OTA3ZGExMS0xNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn+oVRVVG4Y5Ja5NMeXfFra//n8fAvIk4gQ+3NfyodAqcxI66OkIrH2QTWt3z mrpV0XKAj5itp+Jgy5QrEY/uU5bAe/bh5VBy954Qc5XZA7Sd1CT7ZeAqxKbEqw4i uEGQ9rupluC5pIvebMCyUmfZ7YGNTyYeOtLzfqc/qwq5FrcV7d3eU6K0mDU+LbNR kc+YNgg1ymwLLgrzncw5F4doxzCmYVuN5HpocDA3sdK8a3Q1tCZ9N761WNl6qSyx ZPvp4/MylBn0fys2xOSqt/Go5CQ5gJokShz8oFtU/4MiM9TviyeEFSx7H9cpAWny 5phKXKACPvwV1s+3vGzG+CCsAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGx4hp0 PUyYN34wXkRoe8jZA8WlMB8GA1UdIwQYMBaAFAK+s+Yh+rpjQh7T+IT6JwvNMx13 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU1RC8wRDBGRkJEQzkx RDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVtTkNIdFA0aFBvbkM4MHpI WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FyNno1aUg2dW1OQ0h0UDRoUG9uQzgwekhYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU1RC8wRDBGRkJEQzkxRDcxMUVCODZGQTM0MjZDNEY5QUUwMi9BcjZ6NWlINnVt TkNIdFA0aFBvbkM4MHpIWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCc54VxgxVGn+H4L912+bdXoKWPqAoCPgiC74Heivnd2sTJntYx4iV4 5y0Yj1olSOxvaQBq9mbAQ4O1H3dXvRam0ZHSmXz46y1Q2Q2B9jIPQuIJwLuomJ0I F8Dtx/VGDPGIVHC+zXM0RixZYdksJ27OgLJGLKSNl6NkJhKZ4KvUxMQOdb0NFOmV qEx3ylaYC6N+fsKQ08w/I59IPH+s0MzEHouojD8EKikIh5b9hZ8qeZbb33R6+QRi 11HY/mn+AGbft3ucs2STAnSY6m+6FFJuBfbgVrxTlwKlmfba2p9g1X+S6tgyU+wo KM2PjjyT4CVqMNinD0wvPl/rzQszkGZe -----END CERTIFICATE-----Generated at Tue Nov 4 07:18:49 2025 by rpki-client