$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft File: aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft (raw, json) Hash identifier: /Pj3aQJ3S2wfOnzMtCtHyo1E9vsqOJ6F2LaGg6M2kug= Subject key identifier: F9:99:0A:72:EF:E3:B1:6D:D0:15:42:62:99:0F:B4:73:43:64:D5:DB Authority key identifier: 69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 Certificate issuer: /CN=A91C8BEE/serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Certificate serial: 075F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft Manifest number: 075A Signing time: Sun 02 Nov 2025 21:38:43 +0000 Manifest this update: Sun 02 Nov 2025 21:38:42 +0000 Manifest next update: Sun 09 Nov 2025 21:38:42 +0000 Files and hashes: 1: aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl (hash: eVm5AWp6hQI1+Y0C9I4hPn+ywp1avvjJCcnOZ45RAD0=) 2: DE524D283F0511EBBB4C174FC4F9AE02.roa (hash: zWRikEivlVPteMMOfXpGEHZKMPXoa2S3XawXpPi4Aig=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1887 (0x75f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8BEE, serialNumber=6969C20B8699A48D072D4A3067CFF00D5F447C98 Validity Not Before: Nov 2 21:38:42 2025 GMT Not After : Nov 9 21:38:42 2025 GMT Subject: CN=6907cf62-6987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:1a:07:38:e9:21:42:f1:6d:2a:f4:91:36: f7:d7:2f:ac:12:03:b8:62:49:dc:7d:85:74:02:d4: 0b:12:61:e7:49:aa:96:15:57:ae:b6:43:67:44:4f: fc:2d:6b:cd:b5:d9:89:20:d6:b5:38:70:79:f1:13: bb:05:e9:7b:a7:4b:67:03:a9:6f:f1:31:9b:44:84: 29:5c:8f:8c:4f:e2:68:93:2c:2d:d0:d3:fd:e7:fa: 15:69:49:a2:55:72:dc:ea:79:c0:bc:0c:db:c6:fd: c0:4c:6c:60:6e:1f:00:82:5b:d1:37:c8:88:55:56: 33:9f:6c:ae:97:c9:b1:2c:f2:0d:e3:e9:a3:7e:01: de:52:65:a8:6e:e8:d3:fa:7d:c3:4d:bb:16:87:6d: ff:0e:a6:b6:94:97:8c:50:4e:23:f3:59:4e:12:ce: c3:e3:7a:65:9a:83:36:78:2f:74:17:cf:eb:ae:20: 04:30:ba:ad:5c:fa:72:65:d5:2b:5c:2c:16:54:5b: 58:6b:4f:79:98:cc:4a:aa:65:8a:d8:00:7a:84:c6: b4:8f:06:92:5e:44:eb:75:02:a0:d0:0b:ce:d7:14: 8b:b1:11:6f:c3:57:15:3a:1c:1a:10:16:79:f7:2c: 7b:3f:5b:5f:4c:fa:d9:b2:f3:7a:c3:fc:73:54:de: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:99:0A:72:EF:E3:B1:6D:D0:15:42:62:99:0F:B4:73:43:64:D5:DB X509v3 Authority Key Identifier: keyid:69:69:C2:0B:86:99:A4:8D:07:2D:4A:30:67:CF:F0:0D:5F:44:7C:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWnCC4aZpI0HLUowZ8_wDV9EfJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8BEE/6E0627F83F0311EBBE75B44BC4F9AE02/aWnCC4aZpI0HLUowZ8_wDV9EfJg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:29:28:e6:f1:8c:bd:c4:59:2b:9d:49:63:2f:cb:ee:0d:6e: b6:6f:ab:78:8e:e5:38:2d:e8:4f:cb:1a:1e:d2:27:f6:44:23: f0:28:b2:44:b0:e8:77:e0:06:ad:bf:8d:dd:56:ee:89:61:1f: 00:7a:9e:2d:09:10:9e:e8:54:4d:67:8d:f9:d6:5d:8d:62:59: 98:4a:28:e6:64:c3:41:d3:0a:ee:d0:9e:b2:fe:3c:d7:00:01: ed:b3:5c:84:a9:ee:c8:5a:d5:b2:77:9b:53:3d:42:4a:22:6d: 0f:ce:28:ca:b1:30:6a:06:71:90:04:41:9c:ac:b6:bf:ac:79: 13:b5:8d:f3:34:cc:af:3b:0e:32:25:4c:7d:4d:68:22:6d:17: 07:17:15:48:10:88:83:80:e5:48:81:30:fa:45:65:f8:a8:1d: 01:b4:4d:7b:ad:57:0f:9f:9e:58:e2:7f:5c:99:07:7a:83:9c: 4a:ff:50:45:42:3b:82:4f:e8:70:0c:52:53:e6:e6:d8:5f:65: 4a:22:bd:4b:2b:39:c4:63:41:86:7b:3e:19:23:1c:11:23:18: 68:6d:67:1c:f4:ba:24:d9:c5:51:de:c6:d2:11:d5:c9:60:bd: e7:49:5d:21:fd:c7:63:db:2c:0e:3c:14:d8:54:d1:3b:60:f4: 34:86:a1:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzhCRUUxMTAvBgNVBAUTKDY5NjlDMjBCODY5OUE0OEQwNzJENEEzMDY3Q0ZGMDBE NUY0NDdDOTgwHhcNMjUxMTAyMjEzODQyWhcNMjUxMTA5MjEzODQyWjAYMRYwFAYD VQQDEw02OTA3Y2Y2Mi02OTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDYaBzjpIULxbSr0kTb31y+sEgO4YkncfYV0AtQLEmHnSaqWFVeutkNnRE/8 LWvNtdmJINa1OHB58RO7Bel7p0tnA6lv8TGbRIQpXI+MT+Jokywt0NP95/oVaUmi VXLc6nnAvAzbxv3ATGxgbh8AglvRN8iIVVYzn2yul8mxLPIN4+mjfgHeUmWobujT +n3DTbsWh23/Dqa2lJeMUE4j81lOEs7D43plmoM2eC90F8/rriAEMLqtXPpyZdUr XCwWVFtYa095mMxKqmWK2AB6hMa0jwaSXkTrdQKg0AvO1xSLsRFvw1cVOhwaEBZ5 9yx7P1tfTPrZsvN6w/xzVN5oCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPmZCnLv 47Ft0BVCYpkPtHNDZNXbMB8GA1UdIwQYMBaAFGlpwguGmaSNBy1KMGfP8A1fRHyY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOEJFRS82RTA2MjdGODNG MDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJMEhMVW93Wjhfd0RWOUVm SmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FXbkNDNGFacEkwSExVb3daOF93RFY5RWZKZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OEJFRS82RTA2MjdGODNGMDMxMUVCQkU3NUI0NEJDNEY5QUUwMi9hV25DQzRhWnBJ MEhMVW93Wjhfd0RWOUVmSmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaKSjm8Yy9xFkrnUljL8vuDW62b6t4juU4LehPyxoe0if2RCPwKLJE sOh34Aatv43dVu6JYR8Aep4tCRCe6FRNZ4351l2NYlmYSijmZMNB0wru0J6y/jzX AAHts1yEqe7IWtWyd5tTPUJKIm0PzijKsTBqBnGQBEGcrLa/rHkTtY3zNMyvOw4y JUx9TWgibRcHFxVIEIiDgOVIgTD6RWX4qB0BtE17rVcPn55Y4n9cmQd6g5xK/1BF QjuCT+hwDFJT5ubYX2VKIr1LKznEY0GGez4ZIxwRIxhobWcc9Lok2cVR3sbSEdXJ YL3nSV0h/cdj2ywOPBTYVNE7YPQ0hqEo -----END CERTIFICATE-----Generated at Tue Nov 4 07:19:25 2025 by rpki-client