$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft File: i6wN0-SRhYlP2uKChO3IBHILRhQ.mft (raw, json) Hash identifier: lew5gpkbBhjKjz8HyVgsbjZa1lEcEzuJh9NS2OrU9jY= Subject key identifier: 51:3B:71:81:6A:54:DB:F2:19:29:DA:3E:92:FF:C9:3B:31:FB:5C:CD Authority key identifier: 8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 Certificate issuer: /CN=A91EBFAE/serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft Manifest number: 34D8 Signing time: Sun 02 Nov 2025 14:31:37 +0000 Manifest this update: Sun 02 Nov 2025 14:31:36 +0000 Manifest next update: Sun 09 Nov 2025 14:31:36 +0000 Files and hashes: 1: i6wN0-SRhYlP2uKChO3IBHILRhQ.crl (hash: pFlXllQXRfJjqX1sMZTdGrE8NnBIsQ+8oyNB7KfRBGw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:31:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBFAE, serialNumber=8BAC0DD3E49185894FDAE28284EDC804720B4614 Validity Not Before: Nov 2 14:31:36 2025 GMT Not After : Nov 9 14:31:36 2025 GMT Subject: CN=69076b48-1886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:24:59:93:b7:95:68:b5:4e:fe:7a:99:a8:38: 90:b4:13:7d:61:42:4b:d4:43:2e:88:41:29:0a:8b: 4c:0e:60:66:74:ae:f2:cc:e4:60:82:00:ed:04:f7: b9:82:e2:62:4e:75:9e:3c:03:50:6d:e9:29:52:9a: 0f:89:30:1b:47:72:99:2c:a5:a0:e7:7a:4d:9e:2f: 58:71:1a:41:87:1e:3d:57:c9:f9:af:53:e7:d6:01: e8:f7:0e:ba:22:48:44:0d:76:d3:af:c2:f7:d7:b6: b2:98:65:2c:bb:54:44:eb:28:f7:02:b2:0c:c7:a6: e7:5e:0f:96:26:0e:22:53:dc:c0:1e:b1:9f:64:3f: c3:ef:f6:4d:42:4b:99:0e:b6:f8:56:f8:00:25:36: 95:b2:18:53:f8:db:98:ff:8f:0f:80:2f:01:2b:73: 5b:89:ab:1c:de:d7:08:bb:a5:8b:21:8a:dc:77:90: 55:a9:cb:a0:5f:75:dd:58:4d:4a:6e:93:23:e1:75: 1d:20:5c:34:54:22:bf:ab:ca:42:13:08:7a:a9:c3: fb:5a:f8:f9:da:c0:0c:56:64:ca:d0:96:1e:3a:6d: 94:d5:2c:a8:a5:06:d3:20:28:2d:67:a3:ee:82:22: 78:56:e8:86:1a:ca:ca:10:f0:b6:41:56:f7:22:26: 16:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3B:71:81:6A:54:DB:F2:19:29:DA:3E:92:FF:C9:3B:31:FB:5C:CD X509v3 Authority Key Identifier: keyid:8B:AC:0D:D3:E4:91:85:89:4F:DA:E2:82:84:ED:C8:04:72:0B:46:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6wN0-SRhYlP2uKChO3IBHILRhQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBFAE/168FFD6C1D8A11E290D0DEE308B02CD2/i6wN0-SRhYlP2uKChO3IBHILRhQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:2a:16:cd:52:08:0f:86:41:a6:67:90:dc:e1:fa:9b:28:1c: 58:d7:93:94:2b:6b:a1:c5:64:19:51:49:99:e5:be:50:1e:47: 81:82:18:7c:a2:c5:1f:c7:d2:a5:18:db:a3:97:c3:a4:09:0b: db:1d:4b:53:e7:d5:ef:f8:33:17:09:5c:05:76:87:f2:d8:f9: e1:e4:2e:f9:1e:ca:a1:13:be:c3:bc:ce:65:e5:a1:2e:93:61: 32:e5:51:6d:06:c9:c8:1a:aa:9a:7a:88:41:a7:87:ae:5b:54: 90:bd:fc:5b:17:6a:83:0f:69:98:1a:d7:eb:2c:d3:f7:33:2e: a6:27:95:99:cd:0a:8d:ec:3d:dd:b2:19:fa:c6:51:f1:3f:c4: 8a:e5:fd:ef:12:10:34:91:2a:fd:a7:62:8e:88:fb:80:50:18: 79:f6:0c:6c:0f:7b:94:fa:8d:2f:34:44:2a:b8:90:da:54:71: f7:fd:00:60:1e:ef:f9:69:ad:44:66:0f:f0:4c:43:5d:cc:36: e7:74:7f:bf:dc:ac:b8:ba:8e:24:2c:90:b8:67:a7:a6:21:3b: d3:d0:1f:3b:a0:8e:98:7a:29:17:ac:1e:20:12:8b:d4:72:85: 12:80:33:18:3a:ee:9c:9a:52:e1:42:31:ce:72:c9:cf:f9:14: 96:0c:a1:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJGQUUxMTAvBgNVBAUTKDhCQUMwREQzRTQ5MTg1ODk0RkRBRTI4Mjg0RURDODA0 NzIwQjQ2MTQwHhcNMjUxMTAyMTQzMTM2WhcNMjUxMTA5MTQzMTM2WjAYMRYwFAYD VQQDEw02OTA3NmI0OC0xODg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2CRZk7eVaLVO/nqZqDiQtBN9YUJL1EMuiEEpCotMDmBmdK7yzORgggDtBPe5 guJiTnWePANQbekpUpoPiTAbR3KZLKWg53pNni9YcRpBhx49V8n5r1Pn1gHo9w66 IkhEDXbTr8L317aymGUsu1RE6yj3ArIMx6bnXg+WJg4iU9zAHrGfZD/D7/ZNQkuZ Drb4VvgAJTaVshhT+NuY/48PgC8BK3Nbiasc3tcIu6WLIYrcd5BVqcugX3XdWE1K bpMj4XUdIFw0VCK/q8pCEwh6qcP7Wvj52sAMVmTK0JYeOm2U1SyopQbTICgtZ6Pu giJ4VuiGGsrKEPC2QVb3IiYWtwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE7cYFq VNvyGSnaPpL/yTsx+1zNMB8GA1UdIwQYMBaAFIusDdPkkYWJT9rigoTtyARyC0YU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkZBRS8xNjhGRkQ2QzFE OEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZbFAydUtDaE8zSUJISUxS aFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2d04wLVNSaFlsUDJ1S0NoTzNJQkhJTFJoUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QkZBRS8xNjhGRkQ2QzFEOEExMUUyOTBEMERFRTMwOEIwMkNEMi9pNndOMC1TUmhZ bFAydUtDaE8zSUJISUxSaFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANKhbNUggPhkGmZ5Dc4fqbKBxY15OUK2uhxWQZUUmZ5b5QHkeBghh8 osUfx9KlGNujl8OkCQvbHUtT59Xv+DMXCVwFdofy2Pnh5C75HsqhE77DvM5l5aEu k2Ey5VFtBsnIGqqaeohBp4euW1SQvfxbF2qDD2mYGtfrLNP3My6mJ5WZzQqN7D3d shn6xlHxP8SK5f3vEhA0kSr9p2KOiPuAUBh59gxsD3uU+o0vNEQquJDaVHH3/QBg Hu/5aa1EZg/wTENdzDbndH+/3Ky4uo4kLJC4Z6emITvT0B87oI6YeikXrB4gEovU coUSgDMYOu6cmlLhQjHOcsnP+RSWDKGD -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:13 2025 by rpki-client