$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft File: 64E_WXYcfGsa4oxHgWfiBhq1ys8.mft (raw, json) Hash identifier: gfioJp4ChQPr3oYynkDMeM19YWIHCh+daB24WbwbnVw= Subject key identifier: 40:E4:DE:6A:9C:14:B9:BE:A9:06:3F:07:68:3F:08:B3:5A:70:34:F2 Authority key identifier: EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF Certificate issuer: /CN=A91DD75B/serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Certificate serial: 02EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft Manifest number: 02E6 Signing time: Wed 05 Nov 2025 01:21:06 +0000 Manifest this update: Wed 05 Nov 2025 01:21:06 +0000 Manifest next update: Wed 12 Nov 2025 01:21:05 +0000 Files and hashes: 1: 64E_WXYcfGsa4oxHgWfiBhq1ys8.crl (hash: fmQ0S2yMVsEjC62zF10yWAiVdSqpOEwus9y44ND9oLk=) 2: D6A658CE01DE11ED8236F073C4F9AE02.roa (hash: kmjWEDePak7RaIzaM2s6P+tZd0JsQcs5f1UxF22C33k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:21:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 746 (0x2ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD75B, serialNumber=EB813F59761C7C6B1AE28C478167E2061AB5CACF Validity Not Before: Nov 5 01:21:06 2025 GMT Not After : Nov 12 01:21:05 2025 GMT Subject: CN=690aa682-6bc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:89:27:91:34:92:9f:ce:3a:07:63:6e:df: fa:20:54:76:7a:2c:08:ad:e1:8b:ae:c9:c6:53:04: af:0f:c0:59:3b:86:e9:e5:e5:2d:85:65:7a:8c:43: ee:37:93:37:a5:89:14:3e:65:c0:54:09:eb:60:ee: af:19:0f:78:f6:04:24:92:ef:34:b4:b3:b0:c0:c6: 4e:6f:4a:79:38:5b:0b:55:e5:2d:de:1c:16:ac:44: 76:b8:33:2d:74:6b:1e:2d:0f:69:d3:5c:a0:9e:98: c3:2b:15:39:62:3a:0c:12:e7:9b:93:80:0b:29:36: 25:80:66:30:c1:2a:5f:bd:3f:7c:d3:98:b6:cb:be: be:1a:5a:ee:71:f5:dc:ab:10:80:70:d0:89:e1:19: 4f:2a:89:99:1a:52:d2:b8:f1:7f:a9:f2:53:88:35: cb:b8:71:00:01:1c:c2:58:aa:32:ae:a6:e4:8e:8b: c9:a8:1c:cb:5e:5c:80:28:eb:e8:11:14:70:17:1c: 63:55:30:b7:ea:27:62:ce:46:ea:bb:c2:4b:16:4f: c3:a8:1b:b9:fe:35:51:51:46:13:4c:d7:18:ba:ec: ea:f8:3e:dd:ad:47:2f:ab:92:a5:12:a4:91:87:7d: 0c:24:cf:43:ac:97:f6:dd:15:bf:c1:64:aa:57:25: 72:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E4:DE:6A:9C:14:B9:BE:A9:06:3F:07:68:3F:08:B3:5A:70:34:F2 X509v3 Authority Key Identifier: keyid:EB:81:3F:59:76:1C:7C:6B:1A:E2:8C:47:81:67:E2:06:1A:B5:CA:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/64E_WXYcfGsa4oxHgWfiBhq1ys8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD75B/64A1DA4801DC11ED9EFE2A56C4F9AE02/64E_WXYcfGsa4oxHgWfiBhq1ys8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 54:88:cb:5d:d5:4d:2c:7a:6b:b3:39:bc:26:63:f6:b2:b2:57: 25:43:9c:f2:1b:46:bc:7f:5f:6c:3d:ec:83:98:2f:66:55:e8: 33:cd:91:da:d5:5c:ea:3b:91:e3:d7:fe:ae:cf:ca:cc:e4:1d: 7a:f8:03:95:7c:cb:84:4f:14:46:fc:94:63:2f:c2:53:cc:ad: 4c:21:fd:1d:5d:72:b2:8c:43:7a:94:76:bd:71:2f:1d:85:1b: e1:d5:a2:2e:4b:ec:12:8c:8c:09:7b:1f:13:64:be:77:5a:61: 8c:f3:13:9b:0b:66:b4:4d:84:59:15:64:bc:7f:14:0b:ff:3e: c4:6c:8f:b0:aa:d2:be:0b:2c:c9:42:c8:e1:95:32:97:46:03: 78:5a:fc:ae:d5:3e:fb:61:cb:0f:f4:8a:fa:74:2e:3c:77:1b: 5f:26:74:c3:d7:4a:dd:be:b6:35:93:c2:a1:1e:0d:c5:97:f8: ba:74:41:ea:b1:e8:0c:a8:aa:f3:b8:e0:90:9e:65:16:42:3f: 63:c5:f6:10:79:db:f6:5a:4b:37:98:0f:3b:92:7f:6e:0c:b4: c0:30:2d:6b:a2:7b:67:4f:5d:11:de:0d:15:25:a0:f2:a2:e9: f3:de:00:2d:a6:c0:06:66:8e:33:76:ce:09:92:98:f0:be:85: 2e:18:48:1f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ3NUIxMTAvBgNVBAUTKEVCODEzRjU5NzYxQzdDNkIxQUUyOEM0NzgxNjdFMjA2 MUFCNUNBQ0YwHhcNMjUxMTA1MDEyMTA2WhcNMjUxMTEyMDEyMTA1WjAYMRYwFAYD VQQDEw02OTBhYTY4Mi02YmM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuvKJJ5E0kp/OOgdjbt/6IFR2eiwIreGLrsnGUwSvD8BZO4bp5eUthWV6jEPu N5M3pYkUPmXAVAnrYO6vGQ949gQkku80tLOwwMZOb0p5OFsLVeUt3hwWrER2uDMt dGseLQ9p01ygnpjDKxU5YjoMEuebk4ALKTYlgGYwwSpfvT9805i2y76+GlrucfXc qxCAcNCJ4RlPKomZGlLSuPF/qfJTiDXLuHEAARzCWKoyrqbkjovJqBzLXlyAKOvo ERRwFxxjVTC36idizkbqu8JLFk/DqBu5/jVRUUYTTNcYuuzq+D7drUcvq5KlEqSR h30MJM9DrJf23RW/wWSqVyVyFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEDk3mqc FLm+qQY/B2g/CLNacDTyMB8GA1UdIwQYMBaAFOuBP1l2HHxrGuKMR4Fn4gYatcrP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDc1Qi82NEExREE0ODAx REMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZHc2E0b3hIZ1dmaUJocTF5 czguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY0RV9XWFljZkdzYTRveEhnV2ZpQmhxMXlzOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDc1Qi82NEExREE0ODAxREMxMUVEOUVGRTJBNTZDNEY5QUUwMi82NEVfV1hZY2ZH c2E0b3hIZ1dmaUJocTF5czgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBUiMtd1U0semuzObwmY/ayslclQ5zyG0a8f19sPeyDmC9mVegzzZHa 1VzqO5Hj1/6uz8rM5B16+AOVfMuETxRG/JRjL8JTzK1MIf0dXXKyjEN6lHa9cS8d hRvh1aIuS+wSjIwJex8TZL53WmGM8xObC2a0TYRZFWS8fxQL/z7EbI+wqtK+CyzJ QsjhlTKXRgN4Wvyu1T77YcsP9Ir6dC48dxtfJnTD10rdvrY1k8KhHg3Fl/i6dEHq segMqKrzuOCQnmUWQj9jxfYQedv2Wks3mA87kn9uDLTAMC1rontnT10R3g0VJaDy ounz3gAtpsAGZo4zds4JkpjwvoUuGEgf -----END CERTIFICATE-----Generated at Wed Nov 5 05:23:12 2025 by rpki-client