$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft File: 67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json) Hash identifier: vT+U3qOxFCEqRx9tTtX9doOwHyH0KBcjcwZ8bYipDA4= Subject key identifier: 13:26:32:F9:CE:A8:04:4E:02:70:53:5C:66:49:3D:CD:41:04:00:C6 Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 Certificate issuer: /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft Manifest number: 0239 Signing time: Mon 03 Nov 2025 01:48:09 +0000 Manifest this update: Mon 03 Nov 2025 01:48:08 +0000 Manifest next update: Mon 10 Nov 2025 01:48:08 +0000 Files and hashes: 1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: am43yY34LcbYDtXk41OaTLF1JrjXbyogoNAPHGP+QUI=) 2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: T+4lg8d9jLKTS/9QxB/dn+qV3gmWtO4Nms49RgwAEAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755 Validity Not Before: Nov 3 01:48:08 2025 GMT Not After : Nov 10 01:48:08 2025 GMT Subject: CN=690809d9-fb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:83:de:31:48:c5:a1:dc:98:38:3e:52:0e:9b: e8:bb:f5:4f:5d:a1:a1:e6:59:01:86:d9:7c:e8:15: 35:a1:e4:fe:0b:c4:00:04:fc:5d:02:55:82:80:e6: b2:c2:07:46:9f:c7:a9:d8:e6:37:81:38:53:7c:c5: ea:c4:34:e8:08:0f:4f:ad:00:9a:d8:a4:21:36:bb: fc:75:a6:f2:0e:55:0f:ed:c9:da:3b:5a:af:e8:18: 3d:e1:b3:0a:cd:a3:6f:1c:17:f5:9a:c1:98:11:a4: fa:e5:05:80:db:1a:24:ef:b5:16:e9:a1:d6:0e:a4: f9:3f:07:70:dd:91:31:32:35:7b:d2:98:87:c2:81: 6d:13:22:0a:8d:91:ae:3d:27:1c:bb:79:6d:70:a3: e7:0c:41:c2:63:55:02:55:6c:b5:3c:8f:68:22:b7: 60:ae:ac:e4:90:38:a3:90:81:9b:8d:a7:b7:cd:19: 1b:eb:71:5e:36:1c:f0:b3:af:48:fd:4d:f4:94:01: 17:de:b8:96:af:9c:f4:9d:da:03:cc:79:34:20:7b: 3b:ce:3f:fb:32:fc:db:4a:9a:cd:53:ab:f8:23:16: 1c:74:9e:8a:8e:39:3e:f2:25:95:3e:83:98:c6:22: 76:d3:4a:d8:2b:7f:4a:f2:26:43:ad:36:f4:2c:5b: fe:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:26:32:F9:CE:A8:04:4E:02:70:53:5C:66:49:3D:CD:41:04:00:C6 X509v3 Authority Key Identifier: keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:f4:ff:27:26:c6:b4:1c:b3:d0:20:a7:e6:8f:98:6b:17:82: 80:a1:01:1b:f7:10:72:ef:0f:26:c2:41:49:f2:db:fb:ab:f6: 53:d5:8e:99:91:38:bc:9e:c7:db:a5:02:4d:27:22:a0:1f:43: bb:6b:96:18:9f:f0:35:0d:fe:3d:e7:c8:31:09:8e:85:a7:e0: 91:78:17:9b:6f:a8:ae:72:12:b8:5c:91:a9:91:e7:ba:b5:13: d5:ad:90:58:43:91:39:c7:29:84:60:25:d2:d9:58:7d:41:06: b2:a4:cc:32:b4:5f:83:d9:c1:c7:05:48:04:59:d0:11:12:79: 33:9f:35:30:82:fa:27:d0:80:99:c5:8e:f2:64:ca:c7:6a:81: 00:aa:b5:32:ba:da:8e:3d:0b:ea:14:26:e9:51:fc:45:be:e1: 70:0f:08:5a:81:a2:15:18:e3:00:8f:82:a3:d3:53:49:54:f2: 88:34:6b:d9:b8:d9:a9:16:a2:4d:21:10:a9:bb:8b:97:64:95: 26:3e:37:c5:95:a1:da:62:48:d8:3a:37:25:01:e1:ce:89:48: 88:7c:ba:59:2b:ff:9a:72:80:33:03:0c:3f:35:ae:ed:e2:38: eb:4c:fc:2c:3e:1f:8b:18:5c:8e:ab:8d:a1:e1:c6:55:5d:1b: 91:19:d8:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REM4QzgxMTAvBgNVBAUTKEVCQjU2RUY1QTQzRDFFNTZCOEFFNkMzNUVGREY5MDZB Qjg1RDI3NTUwHhcNMjUxMTAzMDE0ODA4WhcNMjUxMTEwMDE0ODA4WjAYMRYwFAYD VQQDEw02OTA4MDlkOS1mYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14PeMUjFodyYOD5SDpvou/VPXaGh5lkBhtl86BU1oeT+C8QABPxdAlWCgOay wgdGn8ep2OY3gThTfMXqxDToCA9PrQCa2KQhNrv8dabyDlUP7cnaO1qv6Bg94bMK zaNvHBf1msGYEaT65QWA2xok77UW6aHWDqT5Pwdw3ZExMjV70piHwoFtEyIKjZGu PSccu3ltcKPnDEHCY1UCVWy1PI9oIrdgrqzkkDijkIGbjae3zRkb63FeNhzws69I /U30lAEX3riWr5z0ndoDzHk0IHs7zj/7MvzbSprNU6v4IxYcdJ6Kjjk+8iWVPoOY xiJ200rYK39K8iZDrTb0LFv+4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBMmMvnO qAROAnBTXGZJPc1BBADGMB8GA1UdIwQYMBaAFOu1bvWkPR5WuK5sNe/fkGq4XSdV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzhDOC85OTQ1RkRBNDUw M0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhsYTRybXcxNzktUWFyaGRK MVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY3VnU5YVE5SGxhNHJtdzE3OS1RYXJoZEoxVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QzhDOC85OTQ1RkRBNDUwM0YxMUVEQjI1REY2NkFDNEY5QUUwMi82N1Z1OWFROUhs YTRybXcxNzktUWFyaGRKMVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA69P8nJsa0HLPQIKfmj5hrF4KAoQEb9xBy7w8mwkFJ8tv7q/ZT1Y6Z kTi8nsfbpQJNJyKgH0O7a5YYn/A1Df4958gxCY6Fp+CReBebb6iuchK4XJGpkee6 tRPVrZBYQ5E5xymEYCXS2Vh9QQaypMwytF+D2cHHBUgEWdAREnkznzUwgvon0ICZ xY7yZMrHaoEAqrUyutqOPQvqFCbpUfxFvuFwDwhagaIVGOMAj4Kj01NJVPKINGvZ uNmpFqJNIRCpu4uXZJUmPjfFlaHaYkjYOjclAeHOiUiIfLpZK/+acoAzAww/Na7t 4jjrTPwsPh+LGFyOq42h4cZVXRuRGdhJ -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:25 2025 by rpki-client