$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: eoI0Z6XsXHbp6cH0gMQxan+m+iTW95kiefIMcxeujP4= Subject key identifier: 1B:35:4C:B7:5C:60:29:C6:47:FA:25:62:E6:FB:A3:3B:0E:CE:1C:35 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 61 Signing time: Mon 03 Nov 2025 07:05:21 +0000 Manifest this update: Mon 03 Nov 2025 07:05:21 +0000 Manifest next update: Mon 10 Nov 2025 07:05:21 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: svgeABJlT/lH9ZcDDP1s8VNxuJBn4Neg92gBaAER16k=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:05:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 102 (0x66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Nov 3 07:05:21 2025 GMT Not After : Nov 10 07:05:21 2025 GMT Subject: CN=69085431-63cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:aa:4c:78:d3:19:88:35:0b:df:6c:04:ae:e7: aa:49:07:a2:6f:33:fe:b6:ef:ad:dc:8a:0d:f2:93: 87:f3:79:62:bf:bd:84:10:8a:87:d8:25:83:a6:23: 42:02:93:7a:a1:40:66:95:bb:f2:72:ac:2d:94:d1: 71:50:b6:72:68:51:2c:75:06:9d:2c:2d:28:1d:54: 73:fe:67:5d:cf:13:85:ee:ce:c1:5f:39:47:04:ed: b4:ea:57:9c:87:74:b8:7c:06:2a:23:88:77:d4:57: ea:e8:cc:f6:fe:5e:db:47:a4:9a:4f:d8:5c:d9:29: b2:f5:d0:e9:a1:34:d4:fd:85:b5:8e:7d:b0:ab:3e: 1f:ac:7b:bc:96:c6:a0:67:99:c5:d4:64:7f:c4:5b: ce:a4:06:ad:82:b3:f9:c2:fb:7e:5b:98:ac:50:2d: 82:b6:74:c5:88:c6:66:03:8d:3f:a1:5f:47:0e:0b: 4d:a7:b1:e5:4e:79:f5:4d:aa:87:34:93:ab:a4:5e: 1e:1a:83:50:16:d0:d5:a5:87:aa:10:79:ce:ff:23: 16:50:7d:c0:a0:86:8c:c4:2d:4a:ce:ec:43:bd:f6: 17:23:fa:d6:91:28:3f:c8:a5:dc:95:a9:59:1d:9d: 26:71:a6:f8:3b:27:8f:79:e8:f1:27:18:54:16:7d: 1f:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:35:4C:B7:5C:60:29:C6:47:FA:25:62:E6:FB:A3:3B:0E:CE:1C:35 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d0:46:8d:1e:d4:c4:08:51:21:fd:36:50:60:54:a3:3c:45: 22:0c:e1:37:95:6c:b4:62:ba:af:8e:1b:aa:87:db:2c:9a:6b: a0:37:24:06:b0:e2:3c:84:18:65:bf:44:5d:a0:d5:66:3d:75: aa:b0:16:ec:4e:c1:01:3d:d7:35:16:7e:dc:19:4d:52:19:8a: b5:0e:5a:5a:6b:bc:37:71:a1:3f:ec:a4:9e:24:36:ef:01:ec: 66:22:34:e2:62:c3:d9:5a:70:b3:a4:73:16:26:07:4a:d0:dd: 2a:2a:57:85:c3:e4:bf:9a:dd:4c:05:34:11:50:30:89:ef:42: d4:d2:dc:9c:f8:40:27:52:f4:0a:82:f1:64:24:df:9e:e9:ce: a3:0d:8f:3c:40:22:5a:e8:eb:2f:2b:a1:ff:1b:32:aa:95:45: 82:79:fd:a9:e0:cb:bd:00:72:7f:d6:aa:ee:3e:d1:2c:40:fa: 08:62:16:53:f5:e9:7e:e9:43:f6:e3:61:d5:e6:d4:ff:19:f8: 90:0b:b4:ff:9c:ab:ea:7e:3d:20:c6:1f:4d:65:c4:8a:c5:9f: 91:dd:48:10:28:88:1e:94:47:7a:38:2e:df:3d:b6:42:ba:05: 38:b4:b1:f2:63:f3:76:7a:94:1c:19:ce:06:c5:87:06:3e:e8: e7:5f:69:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTExMDMwNzA1MjFaFw0yNTExMTAwNzA1MjFaMBgxFjAUBgNV BAMTDTY5MDg1NDMxLTYzY2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvqkx40xmINQvfbASu56pJB6JvM/62763cig3yk4fzeWK/vYQQiofYJYOmI0IC k3qhQGaVu/JyrC2U0XFQtnJoUSx1Bp0sLSgdVHP+Z13PE4XuzsFfOUcE7bTqV5yH dLh8BiojiHfUV+rozPb+XttHpJpP2FzZKbL10OmhNNT9hbWOfbCrPh+se7yWxqBn mcXUZH/EW86kBq2Cs/nC+35bmKxQLYK2dMWIxmYDjT+hX0cOC02nseVOefVNqoc0 k6ukXh4ag1AW0NWlh6oQec7/IxZQfcCghozELUrO7EO99hcj+taRKD/IpdyVqVkd nSZxpvg7J4956PEnGFQWfR95AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGzVMt1xg KcZH+iVi5vujOw7OHDUwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAH3QRo0e1MQIUSH9NlBgVKM8RSIM4TeVbLRiuq+OG6qH2yyaa6A3JAaw 4jyEGGW/RF2g1WY9daqwFuxOwQE91zUWftwZTVIZirUOWlprvDdxoT/spJ4kNu8B 7GYiNOJiw9lacLOkcxYmB0rQ3SoqV4XD5L+a3UwFNBFQMInvQtTS3Jz4QCdS9AqC 8WQk357pzqMNjzxAIlro6y8rof8bMqqVRYJ5/angy70Acn/Wqu4+0SxA+ghiFlP1 6X7pQ/bjYdXm1P8Z+JALtP+cq+p+PSDGH01lxIrFn5HdSBAoiB6UR3o4Lt89tkK6 BTi0sfJj83Z6lBwZzgbFhwY+6OdfafI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:02 2025 by rpki-client