$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: 0hRYIxPC3TiwkBiNbOrTJiKmic9Y+/jnlFcVIqCLoVY= Subject key identifier: FE:FF:E5:76:98:4B:57:EB:2B:D6:8C:E0:DA:9A:BC:C9:56:31:BA:CB Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 20AC Signing time: Sun 02 Nov 2025 15:58:25 +0000 Manifest this update: Sun 02 Nov 2025 15:58:25 +0000 Manifest next update: Sun 09 Nov 2025 15:58:25 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: i7fmYlR4WGe4PMOBoTM1Se/D4ElZc/0vwApDfn57tPk=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 15:58:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8401 (0x20d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Nov 2 15:58:25 2025 GMT Not After : Nov 9 15:58:25 2025 GMT Subject: CN=69077fa1-30d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:95:79:55:ec:4a:7c:38:51:c1:ca:cc:68:de: 83:3b:77:03:94:1b:fe:c2:07:64:7f:c4:9d:17:df: 18:c2:99:e1:5a:7e:0f:d6:62:1c:57:38:26:1b:54: 55:9c:42:5c:0d:21:51:67:77:87:32:71:e9:ba:2a: da:70:fb:be:0f:0a:e2:ba:4a:53:1b:e6:71:fb:db: b1:fb:4a:18:ee:29:51:5a:f5:19:47:9f:e0:79:39: 1a:7f:35:a1:ee:a2:54:ee:bc:3c:7b:93:fe:09:c1: 65:c1:f3:bd:99:55:4e:1f:56:49:0a:a3:09:9b:ba: 94:97:6d:9a:5f:27:e0:e0:63:64:50:76:fd:7c:c7: 1c:a1:ca:f9:b3:35:6f:c3:76:96:27:fc:a4:a3:f3: 08:84:33:f5:86:da:bd:4e:bb:33:c7:36:b1:f8:88: 6a:bd:80:01:96:04:9e:f5:05:af:88:2f:6c:4b:30: 2b:5f:4e:9f:52:41:98:d9:52:89:89:8d:44:fc:45: 0c:4c:78:77:fd:73:0f:ab:60:54:41:a1:cd:15:b6: 5b:8b:a9:0d:59:3b:81:d7:18:c4:35:d5:83:50:27: 5c:e7:78:5d:7c:88:5e:fe:30:35:2c:cc:c3:27:30: f5:6e:7e:a9:d5:bf:0f:a0:85:33:20:28:9e:cf:d6: df:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:FF:E5:76:98:4B:57:EB:2B:D6:8C:E0:DA:9A:BC:C9:56:31:BA:CB X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:49:8f:e0:96:4b:48:b1:60:17:9b:16:88:43:f4:7c:af:8f: cf:56:8f:e3:90:56:e2:e6:47:f0:42:ee:d1:6e:76:f5:f1:26: 31:6d:b1:2e:b6:22:6d:e5:b4:0d:b9:81:36:c9:99:d7:76:d6: c5:2e:65:82:f2:9f:91:25:c8:e1:08:60:3c:92:80:7f:0b:31: 93:78:0d:15:d7:8a:18:16:d2:07:88:21:bb:ab:49:aa:6a:db: 4b:ca:17:b6:d0:4d:8b:f0:ee:8e:ea:08:49:ce:5f:8c:cc:f0: ec:ee:59:84:e6:67:4f:ee:48:6c:92:6a:7a:6c:0a:bb:32:03: 91:a2:06:9b:db:71:17:43:87:80:de:99:70:8d:43:c6:72:40: 21:67:ed:f8:b3:62:9e:7e:8c:33:10:ce:63:b5:92:f0:6e:33: c7:a6:90:11:db:45:c6:a7:48:dd:de:cb:7c:2a:df:85:d1:1b: d3:de:41:49:d8:63:f5:a6:fb:de:21:4b:6e:39:b3:74:e5:81: 27:b5:20:a5:9f:8b:a2:40:51:05:b3:98:14:fe:eb:92:ea:25: 9a:ec:33:42:11:89:fb:b3:99:f0:43:3d:ea:d0:8e:ef:79:65: eb:a6:8f:58:f7:c8:3b:24:a9:d9:95:04:3e:e7:f7:03:6b:5f: e7:83:eb:78 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICINEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUxMTAyMTU1ODI1WhcNMjUxMTA5MTU1ODI1WjAYMRYwFAYD VQQDEw02OTA3N2ZhMS0zMGQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpV5VexKfDhRwcrMaN6DO3cDlBv+wgdkf8SdF98YwpnhWn4P1mIcVzgmG1RV nEJcDSFRZ3eHMnHpuiracPu+DwriukpTG+Zx+9ux+0oY7ilRWvUZR5/geTkafzWh 7qJU7rw8e5P+CcFlwfO9mVVOH1ZJCqMJm7qUl22aXyfg4GNkUHb9fMccocr5szVv w3aWJ/yko/MIhDP1htq9Trszxzax+IhqvYABlgSe9QWviC9sSzArX06fUkGY2VKJ iY1E/EUMTHh3/XMPq2BUQaHNFbZbi6kNWTuB1xjENdWDUCdc53hdfIhe/jA1LMzD JzD1bn6p1b8PoIUzICiez9bfCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP7/5XaY S1frK9aM4NqavMlWMbrLMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNSY/glktIsWAXmxaIQ/R8r4/PVo/jkFbi5kfwQu7Rbnb18SYxbbEu tiJt5bQNuYE2yZnXdtbFLmWC8p+RJcjhCGA8koB/CzGTeA0V14oYFtIHiCG7q0mq attLyhe20E2L8O6O6ghJzl+MzPDs7lmE5mdP7khskmp6bAq7MgORogab23EXQ4eA 3plwjUPGckAhZ+34s2KefowzEM5jtZLwbjPHppAR20XGp0jd3st8Kt+F0RvT3kFJ 2GP1pvveIUtuObN05YEntSCln4uiQFEFs5gU/uuS6iWa7DNCEYn7s5nwQz3q0I7v eWXrpo9Y98g7JKnZlQQ+5/cDa1/ng+t4 -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:19 2025 by rpki-client