$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: S+hvK5eR4HwUnH0NDbO4C7yVbNLGL7Qf+EwNHns07Yk= Subject key identifier: 42:12:BA:03:EB:02:A2:7E:FD:DF:0A:93:51:2B:ED:5B:F4:03:5E:0F Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 83 Signing time: Mon 03 Nov 2025 06:39:42 +0000 Manifest this update: Mon 03 Nov 2025 06:39:42 +0000 Manifest next update: Mon 10 Nov 2025 06:39:42 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: VvX7oVzWko4T4S1sPpVN06/R58/STCuuSjCM2N4z43s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:39:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Nov 3 06:39:42 2025 GMT Not After : Nov 10 06:39:42 2025 GMT Subject: CN=69084e2e-9af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6c:6a:f7:92:e0:ff:78:e3:65:fa:b4:8d:49: 36:22:76:e9:28:15:e3:3e:97:3d:3c:bc:ef:f4:96: 0c:5c:53:77:41:71:9f:ed:e6:08:ed:a0:00:6f:97: 22:ba:19:a7:0c:a0:17:2a:d4:ad:58:77:39:4f:4b: 8d:d9:d4:e8:d1:02:fe:a3:d9:82:f2:db:30:ed:f9: f2:12:1e:ab:66:c3:a4:9c:7f:9a:d6:a8:12:7c:69: 8e:d4:fa:72:f0:a0:db:d7:7c:7e:20:1f:50:aa:7c: 1b:22:7b:7d:90:e6:4f:bb:21:94:ba:a7:da:d2:f9: a6:da:fe:e3:1c:f9:83:33:1c:fb:1e:c4:ec:ed:e9: cb:39:c6:5a:dd:16:46:50:3a:18:f0:1b:6e:fe:d5: 2c:7b:de:96:59:0e:39:97:6e:34:17:ed:93:e1:be: d2:d2:3e:d7:cf:de:df:aa:af:5d:a3:eb:93:2a:cf: 9f:ec:d3:86:17:4b:86:10:19:e6:71:55:4c:b4:aa: 80:b1:4f:17:02:62:9c:80:95:b1:f4:32:90:d6:cb: ed:7f:f1:68:75:89:5e:bc:58:1f:0a:a8:68:77:79: 05:67:75:b8:ea:72:0c:4f:b9:83:5c:7b:89:dd:d9: 58:6f:51:2f:2a:b8:f1:5c:b0:ea:1a:e2:ae:af:cb: ad:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:12:BA:03:EB:02:A2:7E:FD:DF:0A:93:51:2B:ED:5B:F4:03:5E:0F X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:41:c9:b3:94:52:b0:f7:90:87:1f:76:de:c5:e7:f9:10:54: 2f:f9:56:6f:a3:b2:12:9a:ff:a9:ca:72:90:95:11:5d:96:0b: 78:8f:4f:7d:84:c0:b3:7c:4e:d0:9e:09:f9:c9:32:12:37:51: d8:db:12:80:cd:bf:9c:38:47:0f:90:f0:ce:e3:ba:f8:51:ec: aa:86:db:6d:03:cf:62:a1:81:b9:94:e3:6d:da:b6:5b:9e:c1: ce:aa:80:d1:74:2a:94:a5:7f:eb:d5:e4:e3:8c:f5:fe:7a:f5: 4b:47:30:01:bc:40:70:d9:ec:76:70:38:c2:c1:d1:7b:ff:c2: c2:a4:b7:09:3a:8d:ce:a5:fa:58:7a:cf:92:ed:8c:e0:e9:8c: 1f:a6:2a:09:4a:05:e4:88:c8:1a:ca:0b:fd:e7:1f:3a:d6:c0: b6:ae:65:f2:a9:5b:b4:af:e2:b1:df:62:80:32:e6:81:e7:42: e5:df:d1:df:3d:1f:56:05:c8:05:d0:d7:75:11:dc:33:ae:22: ad:13:76:12:ec:b2:08:74:23:f3:8e:6f:a1:f9:de:02:31:95: bb:77:17:94:84:17:43:72:d6:e1:d5:ff:f8:98:2f:c7:77:00: 4e:be:28:f0:dd:43:69:32:d5:4b:2b:3b:f4:8a:40:7a:f5:94: 60:ca:a7:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkYxQ0MxMTAvBgNVBAUTKDMzQTAxNzRBNEE0QjAwOUMwMTE1MTU5NjkxMzZGMzAx MDg5REI1QjUwHhcNMjUxMTAzMDYzOTQyWhcNMjUxMTEwMDYzOTQyWjAYMRYwFAYD VQQDEw02OTA4NGUyZS05YWYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymxq95Lg/3jjZfq0jUk2InbpKBXjPpc9PLzv9JYMXFN3QXGf7eYI7aAAb5ci uhmnDKAXKtStWHc5T0uN2dTo0QL+o9mC8tsw7fnyEh6rZsOknH+a1qgSfGmO1Ppy 8KDb13x+IB9QqnwbInt9kOZPuyGUuqfa0vmm2v7jHPmDMxz7HsTs7enLOcZa3RZG UDoY8Btu/tUse96WWQ45l240F+2T4b7S0j7Xz97fqq9do+uTKs+f7NOGF0uGEBnm cVVMtKqAsU8XAmKcgJWx9DKQ1svtf/FodYlevFgfCqhod3kFZ3W46nIMT7mDXHuJ 3dlYb1EvKrjxXLDqGuKur8utmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEISugPr AqJ+/d8Kk1Er7Vv0A14PMB8GA1UdIwQYMBaAFDOgF0pKSwCcARUVlpE28wEInbW1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjFDQy80M0VBNkIxOEVG NjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFKd0JGUldXa1RiekFRaWR0 YlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRiVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjFDQy80M0VBNkIxOEVGNjMxMUVGQkY2NEFCNkFDNEY5QUUwMi9NNkFYU2twTEFK d0JGUldXa1RiekFRaWR0YlUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBRQcmzlFKw95CHH3bexef5EFQv+VZvo7ISmv+pynKQlRFdlgt4j099 hMCzfE7Qngn5yTISN1HY2xKAzb+cOEcPkPDO47r4UeyqhtttA89ioYG5lONt2rZb nsHOqoDRdCqUpX/r1eTjjPX+evVLRzABvEBw2ex2cDjCwdF7/8LCpLcJOo3OpfpY es+S7Yzg6YwfpioJSgXkiMgaygv95x861sC2rmXyqVu0r+Kx32KAMuaB50Ll39Hf PR9WBcgF0Nd1EdwzriKtE3YS7LIIdCPzjm+h+d4CMZW7dxeUhBdDctbh1f/4mC/H dwBOvijw3UNpMtVLKzv0ikB69ZRgyqcx -----END CERTIFICATE-----Generated at Tue Nov 4 07:21:35 2025 by rpki-client