$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft File: v49Do1Dk9qJgvwPtS9_BqB2itaE.mft (raw, json) Hash identifier: KdJ9kIacpFZed4K34cdfnmPsknfvWu1qxvzJsbI3cKE= Subject key identifier: 09:CF:8E:AE:38:4F:5D:9A:90:F4:70:50:E4:9B:67:10:62:39:26:9D Authority key identifier: BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 Certificate issuer: /CN=A91FAB62/serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Certificate serial: 06CC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft Manifest number: 06AB Signing time: Thu 06 Nov 2025 20:13:32 +0000 Manifest this update: Thu 06 Nov 2025 20:13:32 +0000 Manifest next update: Thu 13 Nov 2025 20:13:32 +0000 Files and hashes: 1: v49Do1Dk9qJgvwPtS9_BqB2itaE.crl (hash: EaJPMOMEffdkgtvxJMzdpBtLENXp9f2+WqZCKt4plc8=) 2: 606DB4B298D111EB84F5A23CC4F9AE02.roa (hash: NHTAsdosSc1dJObk2/ziQAWfZHiguqT3sc8AFW3nWA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 20:13:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB62, serialNumber=BF8F43A350E4F6A260BF03ED4BDFC1A81DA2B5A1 Validity Not Before: Nov 6 20:13:32 2025 GMT Not After : Nov 13 20:13:32 2025 GMT Subject: CN=690d016c-3402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:6d:df:61:8e:f9:0d:cb:42:d5:d6:82:f7: 8c:63:28:0d:9d:9d:43:1e:eb:d6:94:6f:af:30:ab: f8:74:d7:cf:53:c6:51:ea:b1:77:49:10:2c:ce:78: 65:35:72:bd:8e:17:0a:6b:f0:0a:d9:3a:55:33:52: 66:8f:9a:4d:3c:5e:4a:1c:dd:68:91:c0:dc:e8:75: 50:6e:5e:8a:dc:bb:96:20:26:79:2a:39:b0:88:59: 1e:2c:64:b4:2f:a6:61:fb:53:f3:ff:1f:04:8e:bf: e0:85:4c:5b:30:2a:ed:fa:b0:ef:4b:d7:c1:7a:7d: 3a:7f:42:f5:fb:85:89:87:f6:f0:a0:10:2d:e9:41: 8b:c1:95:24:69:53:64:df:7f:15:fd:64:92:7e:1e: 07:07:a2:7d:74:d0:be:5e:7e:e5:d9:d3:e1:7a:28: 5e:5e:ca:e7:b4:e9:c8:dc:a2:67:7f:e5:3c:5d:56: 6c:f3:0b:0d:b3:83:d6:41:5c:05:69:1e:3d:8d:0f: 9b:5e:90:ab:49:62:ac:4b:39:6d:6d:02:05:cc:4b: 9d:8f:e5:1f:79:3c:11:a4:d5:83:d7:47:05:23:11: 01:a0:cf:5e:fd:b8:a2:30:0c:b7:33:4b:6b:0b:49: e2:03:7f:d5:81:24:c9:70:42:a8:6b:56:17:21:58: 9d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CF:8E:AE:38:4F:5D:9A:90:F4:70:50:E4:9B:67:10:62:39:26:9D X509v3 Authority Key Identifier: keyid:BF:8F:43:A3:50:E4:F6:A2:60:BF:03:ED:4B:DF:C1:A8:1D:A2:B5:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v49Do1Dk9qJgvwPtS9_BqB2itaE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB62/82E93F2C98CF11EBB7572A3AC4F9AE02/v49Do1Dk9qJgvwPtS9_BqB2itaE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:1d:f7:77:59:01:ff:26:64:c4:32:2f:c1:58:9a:4c:be:e4: 00:af:4b:b0:e9:74:e9:bd:66:70:c0:ed:23:0c:b1:6b:81:0a: ae:a0:e7:b6:16:68:55:5c:3f:e8:67:30:9c:4f:a0:07:17:b0: ff:5f:f6:4f:f1:f2:ff:a4:8c:2f:ec:85:3c:ef:15:0c:8e:6a: a8:d1:a2:37:6b:ea:15:4c:7f:12:88:fc:03:d2:e9:7f:a5:40: e7:e3:13:4c:b4:07:ec:27:2c:81:5f:c7:3b:99:d5:4d:20:64: 95:ce:86:83:ab:21:a3:2a:31:61:cd:d8:af:d2:74:b8:f9:ec: f2:60:24:a8:2a:19:52:ed:c9:79:54:32:15:5f:b3:9b:05:9c: e0:87:fd:61:09:04:eb:29:50:d7:a2:7c:d0:9e:d9:b2:1a:c9: 1c:2b:23:94:4d:41:d1:c5:b3:92:00:4d:d2:2f:91:1b:4f:38: f2:f3:3c:36:d3:32:5d:f4:15:50:e7:ec:15:88:f0:0e:06:3e: 84:38:8e:87:7b:5c:cb:1b:0d:13:84:0c:41:db:0b:1a:ac:e4: 6a:0a:88:e2:54:29:5c:bb:a5:c4:64:c3:1a:40:cd:52:7b:39: 8b:95:0a:dd:65:ab:a6:5d:dc:e7:12:2d:ff:54:7c:3f:2d:cb: 9b:fb:fc:1a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCNjIxMTAvBgNVBAUTKEJGOEY0M0EzNTBFNEY2QTI2MEJGMDNFRDRCREZDMUE4 MURBMkI1QTEwHhcNMjUxMTA2MjAxMzMyWhcNMjUxMTEzMjAxMzMyWjAYMRYwFAYD VQQDEw02OTBkMDE2Yy0zNDAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqx1t32GO+Q3LQtXWgveMYygNnZ1DHuvWlG+vMKv4dNfPU8ZR6rF3SRAsznhl NXK9jhcKa/AK2TpVM1Jmj5pNPF5KHN1okcDc6HVQbl6K3LuWICZ5KjmwiFkeLGS0 L6Zh+1Pz/x8Ejr/ghUxbMCrt+rDvS9fBen06f0L1+4WJh/bwoBAt6UGLwZUkaVNk 338V/WSSfh4HB6J9dNC+Xn7l2dPheiheXsrntOnI3KJnf+U8XVZs8wsNs4PWQVwF aR49jQ+bXpCrSWKsSzltbQIFzEudj+UfeTwRpNWD10cFIxEBoM9e/biiMAy3M0tr C0niA3/VgSTJcEKoa1YXIVidyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnPjq44 T12akPRwUOSbZxBiOSadMB8GA1UdIwQYMBaAFL+PQ6NQ5PaiYL8D7UvfwagdorWh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUI2Mi84MkU5M0YyQzk4 Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlxSmd2d1B0UzlfQnFCMml0 YUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Y0OURvMURrOXFKZ3Z3UHRTOV9CcUIyaXRhRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QUI2Mi84MkU5M0YyQzk4Q0YxMUVCQjc1NzJBM0FDNEY5QUUwMi92NDlEbzFEazlx Smd2d1B0UzlfQnFCMml0YUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRHfd3WQH/JmTEMi/BWJpMvuQAr0uw6XTpvWZwwO0jDLFrgQquoOe2 FmhVXD/oZzCcT6AHF7D/X/ZP8fL/pIwv7IU87xUMjmqo0aI3a+oVTH8SiPwD0ul/ pUDn4xNMtAfsJyyBX8c7mdVNIGSVzoaDqyGjKjFhzdiv0nS4+ezyYCSoKhlS7cl5 VDIVX7ObBZzgh/1hCQTrKVDXonzQntmyGskcKyOUTUHRxbOSAE3SL5EbTzjy8zw2 0zJd9BVQ5+wViPAOBj6EOI6He1zLGw0ThAxB2wsarORqCojiVClcu6XEZMMaQM1S ezmLlQrdZaumXdznEi3/VHw/Lcub+/wa -----END CERTIFICATE-----Generated at Fri Nov 7 12:46:38 2025 by rpki-client