$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft File: vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json) Hash identifier: E/5yP5FyxtIzMKv3o443JhVpDjTdKgxQFYWLi9xCsfo= Subject key identifier: 77:B6:98:11:CF:EA:8A:34:B2:4A:DA:74:54:CA:15:67:D2:D4:EB:F7 Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 Certificate issuer: /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Certificate serial: 5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft Manifest number: 5A Signing time: Mon 03 Nov 2025 07:09:50 +0000 Manifest this update: Mon 03 Nov 2025 07:09:49 +0000 Manifest next update: Mon 10 Nov 2025 07:09:49 +0000 Files and hashes: 1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: PhZRihTiQk3Uz2FmQnW5ZYp639w7H6Oe3zSaUxC/2TY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:09:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 90 (0x5a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2 Validity Not Before: Nov 3 07:09:49 2025 GMT Not After : Nov 10 07:09:49 2025 GMT Subject: CN=6908553d-d49d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:de:cc:57:4e:e3:e7:05:a9:e5:a4:8f:37:61: c1:e8:9e:c6:76:26:3b:0e:bf:7e:0d:23:5f:ab:d2: 6f:98:ff:d7:69:f2:b9:2b:68:9b:93:62:ef:17:3c: 97:42:88:4a:93:d6:b5:b0:e3:8d:94:ca:89:0c:03: a5:93:3b:e4:6e:ba:f4:ae:18:68:5a:7b:55:b2:3d: 7a:27:72:56:f3:3d:bb:11:b3:bc:1c:58:ca:0b:b9: 02:83:2e:89:aa:74:44:ae:f9:55:d6:8c:84:82:01: be:17:63:7b:c5:88:57:a4:d3:46:e5:54:dd:89:a2: 9b:39:53:d2:c3:c9:e4:f7:d1:5c:2d:45:9f:1a:09: 80:e6:d5:20:25:f9:93:3d:bb:fe:57:45:12:53:b3: 77:61:10:3f:51:fe:16:0f:6f:92:b1:35:76:7c:a1: b1:d2:0c:16:cc:61:09:16:5c:60:14:61:b1:2c:f3: 2c:59:9b:e5:ab:fb:a4:83:0a:33:53:bf:71:d1:ae: f1:02:1d:f3:93:86:2a:0b:9f:4c:72:b3:d4:ea:a0: 5a:0f:2b:cb:64:c1:43:bd:60:39:72:ea:21:cf:c2: 2c:85:9c:ca:d4:5d:e8:82:31:1e:7f:ca:fa:04:0a: 08:ec:95:86:7c:3c:d5:af:ad:9f:9d:b0:0e:32:7c: 6c:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B6:98:11:CF:EA:8A:34:B2:4A:DA:74:54:CA:15:67:D2:D4:EB:F7 X509v3 Authority Key Identifier: keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:f1:08:4e:27:48:b3:62:6e:c0:db:a2:4a:d1:45:91:00:56: 09:98:c1:9d:67:e1:d7:a8:f5:8a:c8:48:ed:84:9e:64:30:20: ab:42:9f:21:25:b4:6d:2b:2a:20:89:9e:7b:a6:3e:48:81:9b: a7:3e:76:4d:4e:df:81:7d:b3:ba:16:ac:b3:6a:aa:b2:2c:ee: 8e:11:ed:25:c8:49:8b:86:74:ca:29:fe:6c:a1:46:c2:b1:95: 4a:e9:e1:6a:1f:7d:69:bc:e1:2f:24:e8:46:18:42:4a:7d:76: f5:17:ea:6c:e0:74:1f:41:b1:b8:f4:7f:79:ac:dc:20:1f:b0: 20:b4:68:71:5c:e2:d2:e3:7d:05:a3:6c:28:2b:7f:84:ae:5c: f1:f2:c5:81:85:1d:30:ca:26:cf:dd:23:27:60:93:0e:6d:4d: ed:c2:c6:c0:f9:54:f8:9d:17:3f:a1:4d:45:c6:ec:2c:3d:ff: af:e7:55:ef:c2:32:a3:75:ee:5e:3f:02:2a:07:59:31:cc:f8: 3c:b5:b7:94:27:8c:fe:e8:4b:da:1a:4a:d4:6e:0b:c7:29:e1: 2b:6c:5a:44:cc:62:4f:c3:52:40:91:88:da:dd:85:ad:f0:7f: ec:f1:82:7a:2d:de:0b:dc:17:59:a2:94:26:69:40:29:26:60: 39:0d:c7:f3 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBWjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoQkNFOUZBNkMzNzdDOTQzNEIxMkM3N0JFRkNERDQyQTVC NzAzNEZGMjAeFw0yNTExMDMwNzA5NDlaFw0yNTExMTAwNzA5NDlaMBgxFjAUBgNV BAMTDTY5MDg1NTNkLWQ0OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCs3sxXTuPnBanlpI83YcHonsZ2JjsOv34NI1+r0m+Y/9dp8rkraJuTYu8XPJdC iEqT1rWw442UyokMA6WTO+RuuvSuGGhae1WyPXonclbzPbsRs7wcWMoLuQKDLomq dESu+VXWjISCAb4XY3vFiFek00blVN2Jops5U9LDyeT30VwtRZ8aCYDm1SAl+ZM9 u/5XRRJTs3dhED9R/hYPb5KxNXZ8obHSDBbMYQkWXGAUYbEs8yxZm+Wr+6SDCjNT v3HRrvECHfOThioLn0xys9TqoFoPK8tkwUO9YDly6iHPwiyFnMrUXeiCMR5/yvoE CgjslYZ8PNWvrZ+dsA4yfGxrAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUd7aYEc/q ijSyStp0VMoVZ9LU6/cwHwYDVR0jBBgwFoAUvOn6bDd8lDSxLHe+/N1CpbcDT/Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5L0MxMkNEQUU0MzE4 RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRf SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdk9uNmJEZDhsRFN4TEhlLV9OMUNwYmNEVF9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVD M0M5L0MxMkNEQUU0MzE4RTExRjA5QzM2REE3QkM0RjlBRTAyL3ZPbjZiRGQ4bERT eExIZS1fTjFDcGJjRFRfSS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABLxCE4nSLNibsDbokrRRZEAVgmYwZ1n4deo9YrISO2EnmQwIKtCnyEl tG0rKiCJnnumPkiBm6c+dk1O34F9s7oWrLNqqrIs7o4R7SXISYuGdMop/myhRsKx lUrp4WoffWm84S8k6EYYQkp9dvUX6mzgdB9Bsbj0f3ms3CAfsCC0aHFc4tLjfQWj bCgrf4SuXPHyxYGFHTDKJs/dIydgkw5tTe3CxsD5VPidFz+hTUXG7Cw9/6/nVe/C MqN17l4/AioHWTHM+Dy1t5QnjP7oS9oaStRuC8cp4StsWkTMYk/DUkCRiNrdha3w f+zxgnot3gvcF1milCZpQCkmYDkNx/M= -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:26 2025 by rpki-client