$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft File: h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json) Hash identifier: mwoWXV35jai9X8AY+PVj4gl9bgW/XiotB3Fx2tptCzc= Subject key identifier: A5:11:86:0D:6D:EE:99:4E:7E:48:35:99:DB:ED:E9:01:CF:D6:E6:DA Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F Certificate issuer: /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Certificate serial: 07A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft Manifest number: 0796 Signing time: Tue 04 Nov 2025 21:36:07 +0000 Manifest this update: Tue 04 Nov 2025 21:36:06 +0000 Manifest next update: Tue 11 Nov 2025 21:36:06 +0000 Files and hashes: 1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: AB7dniKCvyc2Uurv3w7cOyKqEQElC80CX1nV/aQWIcg=) 2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: zk34LWbv4bQiMskRqGHmUZeHGe9ThXpt5J1yxmeAi1g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:36:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1958 (0x7a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Validity Not Before: Nov 4 21:36:06 2025 GMT Not After : Nov 11 21:36:06 2025 GMT Subject: CN=690a71c6-e870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f3:ce:cf:e6:9f:75:b1:5a:67:48:5d:70:9b: eb:e5:84:ae:c5:23:23:fd:b7:bf:4c:84:f2:f9:7d: a3:0b:0a:2c:63:9b:dd:2e:d7:3a:b9:f2:9a:07:65: 56:5f:5b:e5:11:a3:05:b9:78:b2:f7:96:31:e4:89: cf:b8:a6:11:fb:10:bf:9e:1d:6b:01:6e:ae:bd:34: 50:94:73:74:8b:83:2a:c0:ef:37:0a:ea:18:61:8e: 07:07:7d:68:00:15:f6:de:ba:8f:38:0f:b3:1b:2e: 5c:85:64:31:a8:af:f1:a8:42:25:aa:23:39:1b:a5: 96:51:3e:c4:92:7f:2c:93:12:b5:fd:3d:e6:0b:e5: 45:6a:4c:1e:7b:99:53:59:11:99:77:18:22:9c:90: ac:32:3e:f4:91:59:6f:a7:ab:4b:a3:dd:c1:83:7c: b5:a4:11:f6:66:ff:5e:0c:97:c7:11:c6:03:56:79: 29:63:14:e0:b2:36:00:af:9c:d2:63:f1:a9:0e:1b: 17:85:74:17:99:b7:41:5c:37:77:63:92:9d:e0:2f: 15:a2:33:13:21:c7:d7:40:d6:7e:14:6f:83:51:c8: 5a:13:55:21:3d:df:0a:5f:da:3e:b0:ba:69:5a:49: 6d:3c:93:5e:f2:98:a4:08:8e:da:12:1d:27:34:a0: 00:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:11:86:0D:6D:EE:99:4E:7E:48:35:99:DB:ED:E9:01:CF:D6:E6:DA X509v3 Authority Key Identifier: keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:45:aa:0b:6c:81:3d:1b:be:99:9a:a9:0d:41:ab:d7:f2:5f: 94:9d:f8:1e:64:52:df:88:98:63:55:aa:98:f7:74:1b:c4:01: 54:b9:fe:aa:e8:dc:dc:11:ce:f2:c5:de:87:57:41:e6:89:b8: 10:fa:66:ba:ad:32:fd:09:18:f9:b6:0f:5b:4e:d0:fe:37:f0: 92:41:55:47:ef:16:61:19:ae:1f:c4:0c:8d:9c:b9:a3:cb:15: e0:31:b4:de:fc:07:21:9b:b9:ab:a7:f4:da:ad:99:51:fe:c8: 35:83:2b:88:ea:f4:40:e8:1a:69:6b:d4:2f:70:60:7d:fe:a1: 67:5f:01:0b:b2:0f:5f:77:6c:53:f4:ae:f8:7c:c0:4b:78:98: 51:64:fa:91:63:22:c0:56:fc:70:7c:e9:8a:53:64:62:17:6f: 22:d0:09:06:76:61:d5:1b:d5:e5:d4:e8:c9:fa:67:58:1d:a8: 68:24:e4:64:99:53:92:bb:76:5d:a3:4c:8d:0d:d1:c8:95:ab: cb:b8:76:bb:4c:5b:4e:6c:1a:d9:84:f5:a5:ff:84:e5:ea:22: 04:98:7a:a1:47:d4:91:6a:da:46:8e:72:f2:e8:94:11:df:ba: 53:cf:f7:4e:f7:e8:85:51:e8:e6:6b:94:71:85:b1:db:2f:64: e2:49:24:65 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0MkYxMTAvBgNVBAUTKDg3QTU1MDYxQjc1RjFEQzJDNUM1QkI4N0QyODk4RTgz MzA3RDg3MEYwHhcNMjUxMTA0MjEzNjA2WhcNMjUxMTExMjEzNjA2WjAYMRYwFAYD VQQDEw02OTBhNzFjNi1lODcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvPOz+afdbFaZ0hdcJvr5YSuxSMj/be/TITy+X2jCwosY5vdLtc6ufKaB2VW X1vlEaMFuXiy95Yx5InPuKYR+xC/nh1rAW6uvTRQlHN0i4MqwO83CuoYYY4HB31o ABX23rqPOA+zGy5chWQxqK/xqEIlqiM5G6WWUT7Ekn8skxK1/T3mC+VFakwee5lT WRGZdxginJCsMj70kVlvp6tLo93Bg3y1pBH2Zv9eDJfHEcYDVnkpYxTgsjYAr5zS Y/GpDhsXhXQXmbdBXDd3Y5Kd4C8VojMTIcfXQNZ+FG+DUchaE1UhPd8KX9o+sLpp WkltPJNe8pikCI7aEh0nNKAAuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKURhg1t 7plOfkg1mdvt6QHP1ubaMB8GA1UdIwQYMBaAFIelUGG3Xx3CxcW7h9KJjoMwfYcP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQyRi9DOEJBMDFCQzJF MkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhjTEZ4YnVIMG9tT2d6Qjlo dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2VlFZYmRmSGNMRnhidUgwb21PZ3pCOWh3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQyRi9DOEJBMDFCQzJFMkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhj TEZ4YnVIMG9tT2d6QjlodzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBORaoLbIE9G76ZmqkNQavX8l+UnfgeZFLfiJhjVaqY93QbxAFUuf6q 6NzcEc7yxd6HV0HmibgQ+ma6rTL9CRj5tg9bTtD+N/CSQVVH7xZhGa4fxAyNnLmj yxXgMbTe/Achm7mrp/TarZlR/sg1gyuI6vRA6Bppa9QvcGB9/qFnXwELsg9fd2xT 9K74fMBLeJhRZPqRYyLAVvxwfOmKU2RiF28i0AkGdmHVG9Xl1OjJ+mdYHahoJORk mVOSu3Zdo0yNDdHIlavLuHa7TFtObBrZhPWl/4Tl6iIEmHqhR9SRatpGjnLy6JQR 37pTz/dO9+iFUejma5RxhbHbL2TiSSRl -----END CERTIFICATE-----Generated at Wed Nov 5 19:28:44 2025 by rpki-client