$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: kzOnxlNAshlC6i5IELG40l/SIVf2qaZ644hDjFdCiB8= Subject key identifier: 6F:C4:6A:F1:9A:93:F8:2D:11:24:F9:90:1E:0A:D8:AB:E6:BF:2C:E3 Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 5C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:07:49 +0000 Manifest this update: Mon 03 Nov 2025 07:07:49 +0000 Manifest next update: Mon 10 Nov 2025 07:07:49 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: ZLozdGP3mOsdu1CPuA2AId4KC13ouzn7oB9zCv1lQ6A=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:07:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 92 (0x5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Nov 3 07:07:49 2025 GMT Not After : Nov 10 07:07:49 2025 GMT Subject: CN=690854c5-3687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8b:92:11:7a:bb:ec:35:f6:61:3d:a1:e4:54: 7a:26:c7:7e:9c:4d:13:ed:6b:65:a0:1f:29:e5:4a: be:0c:aa:e4:f0:0d:a0:ca:b6:79:41:d9:ba:2e:7e: 47:83:01:f9:f6:7b:09:21:2a:57:b9:87:fe:3e:e8: 13:7f:a6:09:c4:a6:69:62:f1:ae:7c:d0:d4:ce:50: ac:bc:85:1f:2c:70:0b:86:9c:65:03:8f:03:33:71: 0b:0f:b5:87:8e:9e:ff:38:8d:72:f8:b9:88:ce:e0: 51:57:b6:42:9c:b8:73:f7:5a:2f:8c:05:93:06:48: 51:96:e5:9c:83:89:ba:20:f5:22:4f:22:b4:40:3e: ed:f8:14:dc:80:a5:98:3e:60:3c:07:8a:5c:d8:dd: c0:c4:8d:40:e6:29:0d:d9:aa:ae:e9:9f:ac:8b:d2: fa:d5:9f:9a:2a:e9:ba:33:2d:66:09:82:71:2a:ec: 9c:f0:33:bf:f5:d0:15:ca:22:52:6a:2d:23:f1:da: e9:aa:23:0f:a7:f1:39:78:fc:c3:0d:06:0e:8c:2b: ee:08:cd:ee:1b:f0:28:85:99:30:28:7d:46:ff:2e: 9f:04:bb:aa:19:11:8d:aa:fd:12:6a:e4:1b:9c:50: ab:05:1b:a1:ef:02:3b:ee:3d:13:cb:0e:3d:c7:84: db:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:C4:6A:F1:9A:93:F8:2D:11:24:F9:90:1E:0A:D8:AB:E6:BF:2C:E3 X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:3f:a5:f7:64:bb:80:0f:28:34:a1:24:cc:a6:86:49:f7:64: da:a3:1a:0c:f2:0b:34:1f:96:95:7f:b9:99:65:29:e8:1a:b1: ae:e2:8d:67:64:7e:fb:4f:83:56:0a:28:4d:be:83:0a:c0:99: c3:d6:77:df:05:7c:1a:ae:c0:92:84:2a:86:b3:0d:2c:dd:74: 1a:01:55:d2:4f:5f:4d:bc:60:7f:c8:c7:90:9d:02:e6:ee:10: 8f:fd:75:f5:f8:21:58:e2:15:ea:de:0c:c8:01:c3:c3:1f:49: 03:62:1f:b0:ff:4a:f9:2a:82:40:bd:b2:75:cd:4e:04:b9:08: b1:9b:9c:01:8a:bc:24:1f:9b:10:06:9e:ba:dc:a8:a3:9e:b5: f5:a4:58:e8:e2:6f:aa:05:36:eb:8d:ab:86:a3:6d:24:08:2e: c6:32:35:4e:77:57:71:df:e9:67:98:e5:0f:20:b2:02:63:94: d9:64:15:c2:0d:a2:53:59:b7:09:fc:59:5d:1d:91:dd:07:26: f2:f9:e7:e7:3a:64:55:5d:98:e5:1b:41:86:4d:7b:55:88:6a: 54:4c:23:60:5a:6f:5b:09:ef:ca:37:cd:25:80:35:cf:1b:b5: b4:c7:28:d7:b1:52:36:0a:82:b2:fe:fd:67:04:18:a3:e7:a0: c2:66:ba:d7 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTExMDMwNzA3NDlaFw0yNTExMTAwNzA3NDlaMBgxFjAUBgNV BAMTDTY5MDg1NGM1LTM2ODcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDPi5IRervsNfZhPaHkVHomx36cTRPta2WgHynlSr4MquTwDaDKtnlB2boufkeD Afn2ewkhKle5h/4+6BN/pgnEpmli8a580NTOUKy8hR8scAuGnGUDjwMzcQsPtYeO nv84jXL4uYjO4FFXtkKcuHP3Wi+MBZMGSFGW5ZyDibog9SJPIrRAPu34FNyApZg+ YDwHilzY3cDEjUDmKQ3Zqq7pn6yL0vrVn5oq6bozLWYJgnEq7JzwM7/10BXKIlJq LSPx2umqIw+n8Tl4/MMNBg6MK+4Ize4b8CiFmTAofUb/Lp8Eu6oZEY2q/RJq5Buc UKsFG6HvAjvuPRPLDj3HhNsTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUb8Rq8ZqT +C0RJPmQHgrYq+a/LOMwHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF0/pfdku4APKDShJMymhkn3ZNqjGgzyCzQflpV/uZllKegasa7ijWdk fvtPg1YKKE2+gwrAmcPWd98FfBquwJKEKoazDSzddBoBVdJPX028YH/Ix5CdAubu EI/9dfX4IVjiFereDMgBw8MfSQNiH7D/SvkqgkC9snXNTgS5CLGbnAGKvCQfmxAG nrrcqKOetfWkWOjib6oFNuuNq4ajbSQILsYyNU53V3Hf6WeY5Q8gsgJjlNlkFcIN olNZtwn8WV0dkd0HJvL55+c6ZFVdmOUbQYZNe1WIalRMI2Bab1sJ78o3zSWANc8b tbTHKNexUjYKgrL+/WcEGKPnoMJmutc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:54:56 2025 by rpki-client