$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: ME8ZLc4UF+w4IIObMV3pHv5hKgPlfT+4bRaZaQXZMKA= Subject key identifier: 5E:35:BD:2D:D0:1F:A8:19:3F:94:4C:E6:3B:9D:A2:C9:26:D2:95:58 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 1525 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 151A Signing time: Tue 04 Nov 2025 16:54:39 +0000 Manifest this update: Tue 04 Nov 2025 16:54:39 +0000 Manifest next update: Tue 11 Nov 2025 16:54:39 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: zesGvAaW5fAe15gDHZzKV4K+wl1k8+o30hprZ1n3AsY=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5413 (0x1525) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Nov 4 16:54:39 2025 GMT Not After : Nov 11 16:54:39 2025 GMT Subject: CN=690a2fcf-e9bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:28:75:31:03:3e:30:95:2b:19:af:4b:39:9f: 47:9f:af:17:ac:66:60:7b:97:06:05:b9:bf:6b:3f: 50:9b:0f:bb:0b:dc:4a:1b:a7:e1:09:b3:fc:50:be: 10:f5:f8:e8:ae:b1:38:10:5a:b0:61:e2:99:dd:c1: 43:56:63:43:d9:08:be:8a:2c:8c:41:db:b0:2d:50: 96:6c:8e:b0:a1:b2:90:20:fd:de:50:5e:a7:99:be: 9e:4c:d9:90:56:10:a2:4a:63:2e:1a:fc:95:a6:e4: dc:ba:7d:a1:1d:93:03:21:cf:e8:81:8a:ac:4d:3a: 0f:82:d9:5a:83:80:48:c2:b3:9c:2d:1e:78:d2:da: 0b:f8:3b:00:13:c7:ce:d9:de:39:b4:d8:2b:46:bb: 7a:61:02:8d:36:df:f6:a7:bd:81:1a:88:c4:3b:e8: bb:be:ff:33:d5:7a:b7:02:07:c8:9e:f8:f4:0c:48: 8a:ca:ce:e9:f3:2e:10:6e:6a:26:e1:5c:21:0f:4f: 86:99:0a:78:37:13:16:a6:b8:86:e2:e6:13:dc:5b: 1b:00:a3:c7:e4:dc:68:0c:54:fd:cd:0c:23:c3:d9: be:92:41:94:bb:56:fb:49:76:13:39:24:8b:7d:3f: 95:94:f9:f6:a8:2c:8d:71:b8:c5:3e:a6:4e:39:b3: ef:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:35:BD:2D:D0:1F:A8:19:3F:94:4C:E6:3B:9D:A2:C9:26:D2:95:58 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:1c:f1:6b:fc:bc:43:2e:9c:ad:d7:ae:08:fb:8d:a6:05:96: 9a:db:01:68:24:d9:3c:c4:f1:a3:08:92:10:35:48:4c:15:79: 1b:38:87:d3:22:57:8e:0c:e3:11:f1:de:75:8c:11:b7:c4:df: b7:97:81:45:f4:53:99:3c:1b:49:6b:36:f2:bb:ab:96:5d:9d: c5:30:95:45:c4:be:c2:74:6f:cb:22:8e:4a:ff:99:38:14:7f: 56:32:92:bc:d3:a6:c1:80:43:af:ac:20:67:fd:cf:a0:2b:8f: 30:74:03:99:0b:31:77:12:49:71:dc:12:a5:d2:b7:79:ea:68: d1:36:ad:1e:a0:c2:f1:c4:90:b7:12:df:1b:45:f9:e1:47:f6: 52:23:77:19:61:aa:3e:c3:89:1f:04:61:50:de:82:a5:93:ce: 3e:8a:61:fe:9c:6b:ea:de:c2:91:c3:7a:e9:32:d1:5f:2d:76: 7d:6f:bb:1c:b0:86:6f:60:5e:25:db:44:92:8b:67:9d:d1:d5: 5c:d9:bd:87:2a:96:4c:83:88:37:44:71:e9:af:01:74:92:f8: 6d:b4:f5:21:83:58:c1:9d:3e:f6:dd:48:cf:44:d2:7d:f6:29: 9d:f2:d3:c6:65:27:5a:da:46:cb:cf:48:93:53:21:6e:d9:8b: b4:67:ef:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUxMTA0MTY1NDM5WhcNMjUxMTExMTY1NDM5WjAYMRYwFAYD VQQDEw02OTBhMmZjZi1lOWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3yh1MQM+MJUrGa9LOZ9Hn68XrGZge5cGBbm/az9Qmw+7C9xKG6fhCbP8UL4Q 9fjorrE4EFqwYeKZ3cFDVmND2Qi+iiyMQduwLVCWbI6wobKQIP3eUF6nmb6eTNmQ VhCiSmMuGvyVpuTcun2hHZMDIc/ogYqsTToPgtlag4BIwrOcLR540toL+DsAE8fO 2d45tNgrRrt6YQKNNt/2p72BGojEO+i7vv8z1Xq3AgfInvj0DEiKys7p8y4Qbmom 4VwhD0+GmQp4NxMWpriG4uYT3FsbAKPH5NxoDFT9zQwjw9m+kkGUu1b7SXYTOSSL fT+VlPn2qCyNcbjFPqZOObPvIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF41vS3Q H6gZP5RM5judoskm0pVYMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsHPFr/LxDLpyt164I+42mBZaa2wFoJNk8xPGjCJIQNUhMFXkbOIfT IleODOMR8d51jBG3xN+3l4FF9FOZPBtJazbyu6uWXZ3FMJVFxL7CdG/LIo5K/5k4 FH9WMpK806bBgEOvrCBn/c+gK48wdAOZCzF3Eklx3BKl0rd56mjRNq0eoMLxxJC3 Et8bRfnhR/ZSI3cZYao+w4kfBGFQ3oKlk84+imH+nGvq3sKRw3rpMtFfLXZ9b7sc sIZvYF4l20SSi2ed0dVc2b2HKpZMg4g3RHHprwF0kvhttPUhg1jBnT723UjPRNJ9 9imd8tPGZSda2kbLz0iTUyFu2Yu0Z+9j -----END CERTIFICATE-----Generated at Wed Nov 5 13:26:17 2025 by rpki-client