$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft File: 67tHPRcLa4MG0eFsi5UjNK3UDxA.mft (raw, json) Hash identifier: m1Brsa1YkmD4dL0likIOIMmhIV+OOnolWw/yeVEyfe4= Subject key identifier: 46:C2:84:E6:2F:C3:C3:B1:C4:2E:56:1C:9E:82:7E:47:15:61:FB:E2 Authority key identifier: EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 Certificate issuer: /CN=A91D9F5A/serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Certificate serial: 07E4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft Manifest number: 0809 Signing time: Sun 02 Nov 2025 21:11:16 +0000 Manifest this update: Sun 02 Nov 2025 21:11:15 +0000 Manifest next update: Sun 09 Nov 2025 21:11:15 +0000 Files and hashes: 1: 67tHPRcLa4MG0eFsi5UjNK3UDxA.crl (hash: 3GZkR5pm1Gjm7tW1Qz/aF9ps9fOaafiDkC+2u8qQbw8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 21:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2020 (0x7e4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D9F5A, serialNumber=EBBB473D170B6B8306D1E16C8B952334ADD40F10 Validity Not Before: Nov 2 21:11:15 2025 GMT Not After : Nov 9 21:11:15 2025 GMT Subject: CN=6907c8f4-2e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:d9:17:bc:db:f9:3d:84:51:a7:48:93:c7:43: 08:de:a4:8c:62:15:e7:53:e9:35:13:c1:bc:03:f2: 49:19:3c:dc:97:93:2f:ac:4c:29:60:bd:81:aa:d0: 8d:97:b7:0f:ee:ae:98:bb:35:52:c5:f7:cf:b8:19: f7:9f:40:c6:a2:5b:84:30:9f:b5:21:68:ca:4b:d6: 4e:c8:4f:af:1c:60:5a:91:8e:a4:cc:75:5e:2e:f8: 8b:b3:c9:e0:0d:a2:d5:11:d4:3c:9c:72:48:e2:cc: 9e:e9:e6:54:2b:4b:a1:e6:83:a0:be:5b:6a:ce:ad: 5c:03:64:3b:b5:9c:a6:3c:0d:e1:48:f8:ac:e7:e7: 37:8c:53:e6:22:4a:bb:bf:80:c3:c5:d2:19:c9:30: 05:88:ae:bf:73:1b:e7:a3:61:15:7c:e5:f8:90:8d: de:f3:2e:bf:e4:3a:6f:04:69:68:c3:7f:59:7d:d3: c6:a8:fe:c0:65:ef:c1:43:85:af:58:4f:86:d4:ca: 65:a4:ab:6d:2a:86:07:f3:87:c8:ce:60:cc:fc:62: a6:4e:69:81:c7:62:da:0a:65:13:0d:5b:56:e0:a4: 41:a1:d9:7a:19:88:19:06:67:b7:54:64:b5:71:50: 10:ea:5b:7a:ea:37:8c:51:5d:e7:ce:7a:10:f2:0f: 99:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C2:84:E6:2F:C3:C3:B1:C4:2E:56:1C:9E:82:7E:47:15:61:FB:E2 X509v3 Authority Key Identifier: keyid:EB:BB:47:3D:17:0B:6B:83:06:D1:E1:6C:8B:95:23:34:AD:D4:0F:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67tHPRcLa4MG0eFsi5UjNK3UDxA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9F5A/0898B23A11BA11EBBC1A584CC4F9AE02/67tHPRcLa4MG0eFsi5UjNK3UDxA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption d6:79:48:89:1c:9e:5b:2d:1f:93:44:e1:04:73:8f:80:b6:87: 9f:39:02:04:19:ab:54:79:60:86:3b:56:fb:6a:f0:10:40:1d: 65:43:4b:9e:4d:61:12:1b:10:03:3c:97:ea:75:17:91:5a:39: eb:a6:94:c2:d2:a9:b3:c3:42:d6:dd:ba:88:87:df:bf:f2:52: 2d:36:c5:4b:3a:c1:b4:46:45:02:22:c0:f3:15:66:d8:c6:b1: 96:d3:8e:42:a7:a7:62:68:4c:20:48:3e:5d:2e:bb:17:f7:53: 80:bc:c3:24:19:7f:fa:39:0a:07:ae:4e:94:17:a8:2e:94:0d: c8:c1:07:c7:c4:ab:6c:40:64:41:a1:80:86:8b:4a:a8:f5:18: b8:5b:10:3d:42:d8:6c:c8:b5:ff:89:70:07:7c:98:81:b0:53: f0:eb:f5:82:eb:f4:20:5d:1d:8f:ad:a8:3b:71:bf:2b:4c:43: 2e:14:9f:5c:55:81:c3:88:b1:a2:36:26:6d:c9:35:87:95:16: 07:0d:54:38:bc:db:c0:e9:3d:92:58:3b:10:bb:f0:09:03:10: 53:dd:eb:89:f3:0f:87:03:30:5c:d4:e8:33:4b:c0:85:11:7f: b1:44:2e:22:75:8e:c8:87:68:70:bc:8c:20:22:91:56:7e:ac: 27:8a:60:a1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB+QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDlGNUExMTAvBgNVBAUTKEVCQkI0NzNEMTcwQjZCODMwNkQxRTE2QzhCOTUyMzM0 QURENDBGMTAwHhcNMjUxMTAyMjExMTE1WhcNMjUxMTA5MjExMTE1WjAYMRYwFAYD VQQDEw02OTA3YzhmNC0yZTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAntkXvNv5PYRRp0iTx0MI3qSMYhXnU+k1E8G8A/JJGTzcl5MvrEwpYL2BqtCN l7cP7q6YuzVSxffPuBn3n0DGoluEMJ+1IWjKS9ZOyE+vHGBakY6kzHVeLviLs8ng DaLVEdQ8nHJI4sye6eZUK0uh5oOgvltqzq1cA2Q7tZymPA3hSPis5+c3jFPmIkq7 v4DDxdIZyTAFiK6/cxvno2EVfOX4kI3e8y6/5DpvBGlow39ZfdPGqP7AZe/BQ4Wv WE+G1MplpKttKoYH84fIzmDM/GKmTmmBx2LaCmUTDVtW4KRBodl6GYgZBme3VGS1 cVAQ6lt66jeMUV3nznoQ8g+ZQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEbChOYv w8OxxC5WHJ6CfkcVYfviMB8GA1UdIwQYMBaAFOu7Rz0XC2uDBtHhbIuVIzSt1A8Q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOUY1QS8wODk4QjIzQTEx QkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0TUcwZUZzaTVVak5LM1VE eEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3dEhQUmNMYTRNRzBlRnNpNVVqTkszVUR4QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OUY1QS8wODk4QjIzQTExQkExMUVCQkMxQTU4NENDNEY5QUUwMi82N3RIUFJjTGE0 TUcwZUZzaTVVak5LM1VEeEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDWeUiJHJ5bLR+TROEEc4+AtoefOQIEGatUeWCGO1b7avAQQB1lQ0ue TWESGxADPJfqdReRWjnrppTC0qmzw0LW3bqIh9+/8lItNsVLOsG0RkUCIsDzFWbY xrGW045Cp6diaEwgSD5dLrsX91OAvMMkGX/6OQoHrk6UF6gulA3IwQfHxKtsQGRB oYCGi0qo9Ri4WxA9QthsyLX/iXAHfJiBsFPw6/WC6/QgXR2Prag7cb8rTEMuFJ9c VYHDiLGiNiZtyTWHlRYHDVQ4vNvA6T2SWDsQu/AJAxBT3euJ8w+HAzBc1OgzS8CF EX+xRC4idY7Ih2hwvIwgIpFWfqwnimCh -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:51 2025 by rpki-client