$ rpki-client -vvf rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft File: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft (raw, json) Hash identifier: lzo1Iyt7ZDO8R+ts9eAnu4ANRGL6oUTPOxvpyrNOx3U= Subject key identifier: F9:F4:94:0F:8B:AF:01:53:DE:86:7F:01:6A:C4:D1:8F:C9:0C:F4:07 Authority key identifier: 93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA Certificate issuer: /CN=A91E473F/serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Certificate serial: 066E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft Manifest number: 066A Signing time: Tue 04 Nov 2025 22:37:53 +0000 Manifest this update: Tue 04 Nov 2025 22:37:52 +0000 Manifest next update: Tue 11 Nov 2025 22:37:52 +0000 Files and hashes: 1: k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl (hash: KoMNXiEXhook5vNdmS2Bf1Nyo2vfWKOCSvty3gk3pBE=) 2: 4816D7F0327A11EEA132B74CC4F9AE02.roa (hash: vwAWNkOECPjjWatP7CXVkY05vRy7dP/taTedzApQJgw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1646 (0x66e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E473F, serialNumber=9341F9B70F714F131C52E1FE4BE5E5AB8C26EBEA Validity Not Before: Nov 4 22:37:52 2025 GMT Not After : Nov 11 22:37:52 2025 GMT Subject: CN=690a8041-858e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:eb:3c:53:33:8e:b9:a1:77:40:95:56:0f:e0: c5:de:31:cc:c6:7f:02:38:80:87:7f:c2:8c:96:8c: 2e:b8:3f:9c:74:7c:13:ae:79:d6:6c:de:bb:c3:18: 01:f4:42:86:cf:93:fe:96:4b:8a:86:2a:64:2e:c0: 37:01:95:2c:b9:30:14:17:c0:9c:d6:25:3c:2e:7b: 0f:df:f8:89:96:e5:a4:4f:04:c8:7f:2b:73:b1:14: d4:3f:1f:01:81:2c:35:ce:f2:04:c3:52:00:ec:ca: 9d:27:ce:61:59:26:8a:c8:3f:ca:c6:14:6f:e6:a9: 98:c2:58:12:56:b9:4c:06:de:2e:0f:88:bf:03:d1: c5:fe:e8:55:59:0f:50:8c:fc:02:07:24:1e:d9:ce: 6d:e4:1d:72:3e:54:e5:8a:04:7f:eb:4b:91:34:a1: 04:b0:f9:4f:3e:a6:86:6e:fe:ba:71:ec:37:9e:06: ad:ba:c5:2a:77:fd:79:f5:4d:4c:a8:2a:76:27:8c: 85:0d:ef:1e:16:03:aa:24:2a:62:d7:26:e7:fb:f1: b1:35:b7:03:bf:1e:a3:43:71:ae:b4:70:8f:7f:f8: 63:a7:ac:78:45:6c:07:0a:ed:07:1b:3b:ab:94:21: 00:9e:8b:d4:03:d5:76:e8:d2:c7:65:4e:79:e8:f4: 9f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F4:94:0F:8B:AF:01:53:DE:86:7F:01:6A:C4:D1:8F:C9:0C:F4:07 X509v3 Authority Key Identifier: keyid:93:41:F9:B7:0F:71:4F:13:1C:52:E1:FE:4B:E5:E5:AB:8C:26:EB:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E473F/D6E540389DB311EBB032B04CC4F9AE02/k0H5tw9xTxMcUuH-S-Xlq4wm6-o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:89:ec:25:67:70:a6:7f:08:cf:d8:7a:a7:2e:06:db:0e:c9: 21:34:5f:80:cc:18:81:37:5f:2a:84:ba:46:8d:df:45:87:57: 86:4d:d1:3f:c0:67:3b:a3:eb:a0:4f:30:e4:29:0d:75:4a:61: 1d:00:98:47:08:70:fd:6a:e9:22:b3:87:bf:67:d7:2d:c5:95: c2:c1:15:71:c6:90:5b:3e:d5:e7:6e:e4:2b:20:d8:e4:e5:b3: ed:c3:a4:e2:9d:41:f8:6b:76:78:c8:de:8c:f0:82:a9:58:9f: 6f:07:32:9d:0c:95:5f:db:ac:31:2a:dc:fc:45:fc:cc:6d:df: 5a:62:b8:1d:d0:af:a8:11:dc:a2:cf:ed:f5:d6:60:92:cc:8e: 4e:a0:ad:6c:45:6d:38:7d:1d:ee:6e:51:2d:1b:9b:04:51:d3: 23:30:ca:ee:61:41:94:42:e9:d3:f4:d2:2c:fc:a7:9b:0d:e9: 9b:3e:75:90:c4:8f:54:f9:f6:72:e5:c4:b6:48:95:80:11:03: a8:64:cf:99:ca:7a:17:7f:b3:79:dd:cc:ba:26:81:bb:c7:0a: 62:17:cc:77:c5:2e:47:4f:58:0b:01:c8:61:aa:31:0d:da:21: ef:3e:f9:3e:3e:14:75:73:fb:6a:1a:dd:11:6d:c4:20:b4:12: 52:f3:15:2e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBm4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ3M0YxMTAvBgNVBAUTKDkzNDFGOUI3MEY3MTRGMTMxQzUyRTFGRTRCRTVFNUFC OEMyNkVCRUEwHhcNMjUxMTA0MjIzNzUyWhcNMjUxMTExMjIzNzUyWjAYMRYwFAYD VQQDEw02OTBhODA0MS04NThlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr+s8UzOOuaF3QJVWD+DF3jHMxn8COICHf8KMlowuuD+cdHwTrnnWbN67wxgB 9EKGz5P+lkuKhipkLsA3AZUsuTAUF8Cc1iU8LnsP3/iJluWkTwTIfytzsRTUPx8B gSw1zvIEw1IA7MqdJ85hWSaKyD/KxhRv5qmYwlgSVrlMBt4uD4i/A9HF/uhVWQ9Q jPwCByQe2c5t5B1yPlTligR/60uRNKEEsPlPPqaGbv66cew3ngatusUqd/159U1M qCp2J4yFDe8eFgOqJCpi1ybn+/GxNbcDvx6jQ3GutHCPf/hjp6x4RWwHCu0HGzur lCEAnovUA9V26NLHZU556PSfpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPn0lA+L rwFT3oZ/AWrE0Y/JDPQHMB8GA1UdIwQYMBaAFJNB+bcPcU8THFLh/kvl5auMJuvq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDczRi9ENkU1NDAzODlE QjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4TWNVdUgtUy1YbHE0d202 LW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2swSDV0dzl4VHhNY1V1SC1TLVhscTR3bTYtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NDczRi9ENkU1NDAzODlEQjMxMUVCQjAzMkIwNENDNEY5QUUwMi9rMEg1dHc5eFR4 TWNVdUgtUy1YbHE0d202LW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRiewlZ3CmfwjP2HqnLgbbDskhNF+AzBiBN18qhLpGjd9Fh1eGTdE/ wGc7o+ugTzDkKQ11SmEdAJhHCHD9aukis4e/Z9ctxZXCwRVxxpBbPtXnbuQrINjk 5bPtw6TinUH4a3Z4yN6M8IKpWJ9vBzKdDJVf26wxKtz8RfzMbd9aYrgd0K+oEdyi z+311mCSzI5OoK1sRW04fR3ublEtG5sEUdMjMMruYUGUQunT9NIs/KebDembPnWQ xI9U+fZy5cS2SJWAEQOoZM+ZynoXf7N53cy6JoG7xwpiF8x3xS5HT1gLAchhqjEN 2iHvPvk+PhR1c/tqGt0RbcQgtBJS8xUu -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:31 2025 by rpki-client