$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft File: ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft (raw, json) Hash identifier: QTTWzMUEdwjjrR5htG7JvqiudqtEGKa76OLTVICwikk= Subject key identifier: DE:EF:17:08:30:52:20:DB:87:3B:20:E4:96:DB:B9:1B:A9:F1:4C:23 Authority key identifier: 6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 Certificate issuer: /CN=A91D4E45/serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Certificate serial: 06C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft Manifest number: 06BD Signing time: Sun 02 Nov 2025 22:09:31 +0000 Manifest this update: Sun 02 Nov 2025 22:09:30 +0000 Manifest next update: Sun 09 Nov 2025 22:09:30 +0000 Files and hashes: 1: ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl (hash: QC0TusFszByrED8+bFTWSvz4QsYzm9shqo1Y6BC3dMw=) 2: 1B25BF167FE111EBB6C0941AC4F9AE02.roa (hash: 2hOid2u5TsPs2BD6knP6FFumSUPv3Pl24PKpE2g7tdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1734 (0x6c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4E45, serialNumber=6ABFEFC83419116EF34AF3A5A7FF48DE03BE8332 Validity Not Before: Nov 2 22:09:30 2025 GMT Not After : Nov 9 22:09:30 2025 GMT Subject: CN=6907d69b-70c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1a:0e:65:7a:c0:31:ff:20:f9:76:03:49:ab: de:4a:1b:2c:ed:e6:4c:78:5b:45:7d:c9:56:dd:52: 14:c0:f9:18:14:95:2e:3f:11:d5:51:38:7a:bd:82: ae:ce:eb:3d:d8:8a:f4:1a:75:2e:c4:c7:7a:9d:14: 30:9d:d1:73:28:92:5e:37:1b:ea:51:9f:63:30:7d: 87:b0:2e:40:5b:91:c8:1c:13:60:d0:78:08:bd:6a: f6:58:00:db:42:da:9d:8a:a8:69:80:c7:b5:c3:42: 0f:95:a1:55:20:16:cb:f5:f1:6b:83:33:9d:2e:16: 3a:a2:6c:33:6f:a0:6f:b9:f7:d8:49:83:df:88:6f: 38:60:d7:e4:f5:7e:76:11:b2:17:24:f8:6b:22:d1: 51:8a:bc:b5:5f:19:4e:c1:31:13:d4:8d:d7:90:35: 41:e6:84:91:0e:aa:ae:5b:78:0b:1a:65:b4:82:c6: 55:18:80:56:33:71:bc:f6:90:09:ae:07:2f:86:3d: 92:a9:fa:e7:c0:9e:c0:4d:6f:ab:19:29:4a:22:4a: dd:7b:74:ad:d4:12:23:0c:32:64:aa:2b:4f:51:f2: 5f:b9:f9:f8:35:00:af:f7:cb:e5:dc:48:2a:b0:bb: a3:76:8a:e7:2d:c3:cb:93:68:b4:e6:ae:a4:2c:21: 06:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EF:17:08:30:52:20:DB:87:3B:20:E4:96:DB:B9:1B:A9:F1:4C:23 X509v3 Authority Key Identifier: keyid:6A:BF:EF:C8:34:19:11:6E:F3:4A:F3:A5:A7:FF:48:DE:03:BE:83:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ar_vyDQZEW7zSvOlp_9I3gO-gzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4E45/F8F1C1947FDE11EBA188CF14C4F9AE02/ar_vyDQZEW7zSvOlp_9I3gO-gzI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:e1:0c:49:00:c2:aa:c9:98:7f:67:8e:45:56:ea:84:95:41: 31:bd:dd:35:e1:b8:53:de:b5:7c:92:55:eb:57:dd:d0:2e:23: 1e:80:7c:70:2f:65:1c:47:ad:db:14:a6:ea:a3:d7:74:a7:e2: 64:c7:cf:db:fe:b9:47:ce:d0:1a:f0:b7:7d:0d:82:37:24:c4: 9d:d5:d9:45:4f:e8:6c:af:73:91:31:74:d7:96:de:cd:68:2f: 39:97:1c:b8:93:4c:24:e0:35:26:0c:e7:c1:d7:83:4e:64:28: 52:5b:6e:65:da:29:5b:a4:17:c1:87:db:09:72:92:a7:1e:ef: 91:26:1b:27:2d:e4:d9:c6:19:ca:ec:4e:48:7f:63:91:07:2f: 8d:aa:14:0b:6d:97:fa:2c:52:32:28:fe:f1:67:1c:6c:5c:96: 48:b7:63:59:16:1b:e8:fb:f0:a8:da:ab:e6:e1:8c:dc:c7:e4: 50:5a:ab:cd:de:16:d4:bd:dd:2c:44:34:a0:b1:5c:6d:e9:2e: e6:d3:9f:35:09:bc:e1:dc:02:c6:2a:88:3c:a2:82:7c:67:1f: f4:77:28:e6:be:44:5e:b5:69:55:87:5a:d7:79:cb:74:61:bf: a3:62:ec:5c:3a:e1:fe:27:49:d4:f5:b4:f4:6d:59:37:36:a6: 4e:88:8a:0a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBsYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRFNDUxMTAvBgNVBAUTKDZBQkZFRkM4MzQxOTExNkVGMzRBRjNBNUE3RkY0OERF MDNCRTgzMzIwHhcNMjUxMTAyMjIwOTMwWhcNMjUxMTA5MjIwOTMwWjAYMRYwFAYD VQQDEw02OTA3ZDY5Yi03MGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthoOZXrAMf8g+XYDSaveShss7eZMeFtFfclW3VIUwPkYFJUuPxHVUTh6vYKu zus92Ir0GnUuxMd6nRQwndFzKJJeNxvqUZ9jMH2HsC5AW5HIHBNg0HgIvWr2WADb QtqdiqhpgMe1w0IPlaFVIBbL9fFrgzOdLhY6omwzb6BvuffYSYPfiG84YNfk9X52 EbIXJPhrItFRiry1XxlOwTET1I3XkDVB5oSRDqquW3gLGmW0gsZVGIBWM3G89pAJ rgcvhj2SqfrnwJ7ATW+rGSlKIkrde3St1BIjDDJkqitPUfJfufn4NQCv98vl3Egq sLujdornLcPLk2i05q6kLCEG/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN7vFwgw UiDbhzsg5JbbuRup8UwjMB8GA1UdIwQYMBaAFGq/78g0GRFu80rzpaf/SN4DvoMy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEU0NS9GOEYxQzE5NDdG REUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVXN3pTdk9scF85STNnTy1n ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FyX3Z5RFFaRVc3elN2T2xwXzlJM2dPLWd6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NEU0NS9GOEYxQzE5NDdGREUxMUVCQTE4OENGMTRDNEY5QUUwMi9hcl92eURRWkVX N3pTdk9scF85STNnTy1nekkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB14QxJAMKqyZh/Z45FVuqElUExvd014bhT3rV8klXrV93QLiMegHxw L2UcR63bFKbqo9d0p+Jkx8/b/rlHztAa8Ld9DYI3JMSd1dlFT+hsr3ORMXTXlt7N aC85lxy4k0wk4DUmDOfB14NOZChSW25l2ilbpBfBh9sJcpKnHu+RJhsnLeTZxhnK 7E5If2ORBy+NqhQLbZf6LFIyKP7xZxxsXJZIt2NZFhvo+/Co2qvm4Yzcx+RQWqvN 3hbUvd0sRDSgsVxt6S7m0581Cbzh3ALGKog8ooJ8Zx/0dyjmvkRetWlVh1rXect0 Yb+jYuxcOuH+J0nU9bT0bVk3NqZOiIoK -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:34 2025 by rpki-client