$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft File: 62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json) Hash identifier: 7QRLpLIDdq0AUjK7VITP3HfDmZN/rsjPmJO7KJxZxDA= Subject key identifier: 47:8E:40:E1:19:9F:D4:67:FF:7C:9E:E0:56:5E:B3:C9:20:81:1D:2B Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 Certificate issuer: /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Certificate serial: 34FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft Manifest number: 34E9 Signing time: Sun 02 Nov 2025 14:50:37 +0000 Manifest this update: Sun 02 Nov 2025 14:50:36 +0000 Manifest next update: Sun 09 Nov 2025 14:50:36 +0000 Files and hashes: 1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: ZdYHO9pXx1diHhFUx8uiZ+RbJc6Puds9cMR4lTuf3iU=) 2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: 6l+okkOVayeN3r7Oa8ISbsZRxypv5sX/p1C5qPHUzI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:50:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13563 (0x34fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90 Validity Not Before: Nov 2 14:50:36 2025 GMT Not After : Nov 9 14:50:36 2025 GMT Subject: CN=69076fbc-fba9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:d5:12:05:92:19:47:89:03:fb:ad:04:77:6a: 92:95:d9:0b:a0:af:fc:7c:0f:e5:8f:a5:b9:ad:46: d4:46:09:9a:56:3c:dd:26:3e:a5:bc:ad:dd:8b:10: 07:26:ce:d0:ad:15:46:24:c0:95:a8:da:e1:81:ba: 5b:29:c3:2e:39:c5:e6:78:44:19:a8:89:b3:72:39: 06:5b:53:c9:4b:fc:e1:11:51:bf:c9:3b:24:04:1b: 02:85:b0:bb:6c:71:ff:d0:2f:08:7b:5b:6b:23:92: 9c:23:48:fe:9b:9b:ea:90:c9:d8:75:52:8b:35:dd: 77:5b:d2:30:b7:50:d9:1b:0b:66:fa:94:84:3f:a0: aa:4c:28:fa:8b:a5:24:4e:5f:09:22:eb:97:90:a6: 8e:23:4f:43:08:8c:ec:76:ab:d5:65:84:d7:a6:62: e7:4a:1e:fc:6c:a8:c5:0b:33:8b:4c:52:9b:14:0d: 83:94:63:68:d0:83:86:bf:60:32:54:fe:e4:aa:b1: 24:00:d2:86:e5:44:7c:b0:52:29:84:a8:7f:d6:59: af:6e:29:95:ae:29:dd:54:0a:d0:4c:1e:5f:29:37: ff:0a:02:1b:6a:ca:90:97:7f:23:c2:8d:8f:14:35: d2:45:a0:5a:b1:d9:9d:af:ad:a3:2b:82:04:3e:1e: b9:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:8E:40:E1:19:9F:D4:67:FF:7C:9E:E0:56:5E:B3:C9:20:81:1D:2B X509v3 Authority Key Identifier: keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:41:cd:16:cf:a8:d7:d4:ff:31:1f:c8:ad:6a:9c:4c:c3:bd: 78:b8:09:e7:e9:54:0c:ea:df:48:1c:bd:99:68:76:16:04:da: b5:cd:bb:8b:80:b3:f8:39:43:87:b9:67:f5:53:55:a9:12:33: 1e:96:c6:1a:8f:07:19:61:0d:82:7d:ef:e8:a8:26:4f:26:dc: 63:51:f4:63:e3:3f:56:f5:05:50:0a:64:91:1a:47:e0:85:86: 62:0b:56:1e:4a:11:35:37:a0:ad:13:18:61:44:e4:0c:e9:71: 1e:6f:cf:6f:64:c3:7b:dd:d3:1d:30:fe:b5:8c:ee:92:2e:74: 76:11:a3:a3:54:a1:d6:f0:ef:56:bb:25:54:8b:bb:0f:85:8e: 37:ac:1f:43:3d:98:1e:b0:a2:46:41:57:88:f2:d0:8d:b7:2e: 7c:a1:0e:09:49:4a:60:44:70:e7:bc:41:d3:1f:28:d5:4c:64: 3f:2a:0a:4f:65:ee:6e:25:29:46:17:d0:72:b3:77:07:de:dc: e5:19:54:f1:76:68:1f:9a:bc:34:88:6b:1d:5e:89:be:22:0d: ac:70:21:78:fa:d0:ad:a3:13:cf:f8:d7:8e:0a:b2:cb:0a:bd: 54:cb:e6:e2:3d:89:c5:92:49:66:98:7b:57:57:66:c0:16:de: 63:a0:75:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4NjYxMTAvBgNVBAUTKEVCNjgwQjdERTRDNEExQjQ0M0FCRDc5OUJBRjUyNDlE RDRCMEVBOTAwHhcNMjUxMTAyMTQ1MDM2WhcNMjUxMTA5MTQ1MDM2WjAYMRYwFAYD VQQDEw02OTA3NmZiYy1mYmE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1dUSBZIZR4kD+60Ed2qSldkLoK/8fA/lj6W5rUbURgmaVjzdJj6lvK3dixAH Js7QrRVGJMCVqNrhgbpbKcMuOcXmeEQZqImzcjkGW1PJS/zhEVG/yTskBBsChbC7 bHH/0C8Ie1trI5KcI0j+m5vqkMnYdVKLNd13W9Iwt1DZGwtm+pSEP6CqTCj6i6Uk Tl8JIuuXkKaOI09DCIzsdqvVZYTXpmLnSh78bKjFCzOLTFKbFA2DlGNo0IOGv2Ay VP7kqrEkANKG5UR8sFIphKh/1lmvbimVrindVArQTB5fKTf/CgIbasqQl38jwo2P FDXSRaBasdmdr62jK4IEPh65pwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeOQOEZ n9Rn/3ye4FZes8kggR0rMB8GA1UdIwQYMBaAFOtoC33kxKG0Q6vXmbr1JJ3UsOqQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzg2Ni82QTBERjlCQTFE OTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9iUkRxOWVadXZVa25kU3c2 cEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYyZ0xmZVRFb2JSRHE5ZVp1dlVrbmRTdzZwQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Qzg2Ni82QTBERjlCQTFEOTYxMUUyQjdCNTA1N0YwOEIwMkNEMi82MmdMZmVURW9i UkRxOWVadXZVa25kU3c2cEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhQc0Wz6jX1P8xH8itapxMw714uAnn6VQM6t9IHL2ZaHYWBNq1zbuL gLP4OUOHuWf1U1WpEjMelsYajwcZYQ2Cfe/oqCZPJtxjUfRj4z9W9QVQCmSRGkfg hYZiC1YeShE1N6CtExhhROQM6XEeb89vZMN73dMdMP61jO6SLnR2EaOjVKHW8O9W uyVUi7sPhY43rB9DPZgesKJGQVeI8tCNty58oQ4JSUpgRHDnvEHTHyjVTGQ/KgpP Ze5uJSlGF9Bys3cH3tzlGVTxdmgfmrw0iGsdXom+Ig2scCF4+tCtoxPP+NeOCrLL Cr1Uy+biPYnFkklmmHtXV2bAFt5joHWm -----END CERTIFICATE-----Generated at Mon Nov 3 18:15:14 2025 by rpki-client