$ rpki-client -vvf rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft File: cnQCOx-0p0kyj11N-DsN0_B_6UI.mft (raw, json) Hash identifier: ssZdBTKVyZYHmkdv4U7H34hsP8u4bxVJgxJC8c0AjLw= Subject key identifier: 09:CD:AA:02:74:5D:E7:85:1C:A5:3A:FE:84:26:03:D9:27:4A:3A:44 Authority key identifier: 72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 Certificate issuer: /CN=A91FFDF3/serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Certificate serial: 06B6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft Manifest number: 06B6 Signing time: Tue 04 Nov 2025 22:13:07 +0000 Manifest this update: Tue 04 Nov 2025 22:13:07 +0000 Manifest next update: Tue 11 Nov 2025 22:13:07 +0000 Files and hashes: 1: cnQCOx-0p0kyj11N-DsN0_B_6UI.crl (hash: 9ZR5QsHBU56ZFuAQgdtpU0a3RcF+TMCx9pg/r5JrX3c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 22:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1718 (0x6b6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFDF3, serialNumber=7274023B1FB4A749328F5D4DF83B0DD3F07FE942 Validity Not Before: Nov 4 22:13:07 2025 GMT Not After : Nov 11 22:13:07 2025 GMT Subject: CN=690a7a73-948d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ea:62:46:ed:9e:e7:82:76:c0:7c:db:fd:5e: f7:37:1b:4c:d2:23:17:0e:32:25:cb:d1:cf:7f:05: 68:87:78:c6:4c:5b:1e:12:d7:64:1f:c7:df:4c:24: 52:d9:0f:56:c0:8b:d6:65:a7:32:44:77:b0:29:1f: e4:14:1f:03:ad:15:af:0d:cb:9c:d5:d4:9a:0f:0d: ed:fb:1d:25:30:b9:ca:f4:4c:68:3f:ad:ae:b5:b3: df:78:d1:b1:70:fe:14:d2:ff:9e:f5:d1:2f:24:9c: cf:c3:cd:44:1e:34:12:ee:45:0c:87:64:84:86:9f: dd:99:13:e5:56:23:d0:b9:31:c3:12:64:dc:97:65: 45:96:c8:37:7f:17:59:bc:21:1d:0f:2c:2e:b1:2f: 05:67:14:85:2c:15:e0:70:06:bb:74:ce:7c:ed:16: 49:6b:b3:3b:14:c2:95:ae:9f:62:56:cb:ba:94:c9: 8e:08:db:a9:ef:5e:bf:75:08:e8:1d:e9:4c:ea:1d: 3b:fc:fc:9a:72:92:10:08:8a:1a:64:0f:f8:a2:52: bb:6b:71:ee:73:0d:6e:9e:d5:ee:9c:8b:88:a9:25: 95:23:e8:b2:7b:5a:64:1f:7b:40:71:dd:73:43:39: 17:7e:4a:92:89:08:b1:28:1d:39:c4:f8:3b:23:cc: 9b:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CD:AA:02:74:5D:E7:85:1C:A5:3A:FE:84:26:03:D9:27:4A:3A:44 X509v3 Authority Key Identifier: keyid:72:74:02:3B:1F:B4:A7:49:32:8F:5D:4D:F8:3B:0D:D3:F0:7F:E9:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cnQCOx-0p0kyj11N-DsN0_B_6UI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FFDF3/757DB7887D7111EB82D3D661C4F9AE02/cnQCOx-0p0kyj11N-DsN0_B_6UI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 11:76:0c:45:c4:aa:bb:69:58:c8:17:9e:63:f6:3c:ef:1c:59: f8:84:ab:a7:38:7a:2e:90:e6:fd:f7:1f:7c:5f:5d:40:51:e4: 21:e0:14:b0:98:51:ab:e0:9d:95:ac:3d:cd:4d:dd:79:68:71: 37:8a:2f:bb:4a:cf:c9:31:1e:28:0a:da:22:a4:c0:26:76:c1: 87:ca:72:2c:fa:00:04:b9:4d:1d:58:c8:a7:cb:06:0b:69:d1: 12:20:99:b2:d7:27:e1:06:b7:46:9e:0b:f3:25:b9:46:44:1d: 56:0d:cd:31:46:cd:b8:d5:04:ea:6e:bc:cb:76:86:35:3b:ce: 96:6f:28:63:e3:a2:79:8a:92:5c:4c:24:14:44:ae:d9:ea:70: 8e:3c:e9:02:cd:80:1b:3e:99:e3:42:8b:b4:43:72:78:93:f7: 85:2c:44:2a:76:6a:54:5f:72:da:34:2c:d1:56:c1:c6:3a:f4: b1:92:a9:42:91:e7:6b:18:58:4f:2d:7a:b0:ea:82:8c:e3:57: 61:51:99:09:4d:7a:cd:65:75:75:65:a6:ac:25:4a:88:f6:ca: 41:0a:1f:08:34:e8:e0:26:24:4f:c6:08:85:d6:a6:ad:87:f7: 98:22:8b:b7:ad:74:be:4f:01:15:04:f0:fe:af:03:30:06:43: 3e:33:39:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBrYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkZERjMxMTAvBgNVBAUTKDcyNzQwMjNCMUZCNEE3NDkzMjhGNUQ0REY4M0IwREQz RjA3RkU5NDIwHhcNMjUxMTA0MjIxMzA3WhcNMjUxMTExMjIxMzA3WjAYMRYwFAYD VQQDEw02OTBhN2E3My05NDhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtepiRu2e54J2wHzb/V73NxtM0iMXDjIly9HPfwVoh3jGTFseEtdkH8ffTCRS 2Q9WwIvWZacyRHewKR/kFB8DrRWvDcuc1dSaDw3t+x0lMLnK9ExoP62utbPfeNGx cP4U0v+e9dEvJJzPw81EHjQS7kUMh2SEhp/dmRPlViPQuTHDEmTcl2VFlsg3fxdZ vCEdDywusS8FZxSFLBXgcAa7dM587RZJa7M7FMKVrp9iVsu6lMmOCNup716/dQjo HelM6h07/PyacpIQCIoaZA/4olK7a3Hucw1untXunIuIqSWVI+iye1pkH3tAcd1z QzkXfkqSiQixKB05xPg7I8ybOwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnNqgJ0 XeeFHKU6/oQmA9knSjpEMB8GA1UdIwQYMBaAFHJ0AjsftKdJMo9dTfg7DdPwf+lC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRkRGMy83NTdEQjc4ODdE NzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAwa3lqMTFOLURzTjBfQl82 VUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NuUUNPeC0wcDBreWoxMU4tRHNOMF9CXzZVSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RkRGMy83NTdEQjc4ODdENzExMUVCODJEM0Q2NjFDNEY5QUUwMi9jblFDT3gtMHAw a3lqMTFOLURzTjBfQl82VUkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQARdgxFxKq7aVjIF55j9jzvHFn4hKunOHoukOb99x98X11AUeQh4BSw mFGr4J2VrD3NTd15aHE3ii+7Ss/JMR4oCtoipMAmdsGHynIs+gAEuU0dWMinywYL adESIJmy1yfhBrdGngvzJblGRB1WDc0xRs241QTqbrzLdoY1O86Wbyhj46J5ipJc TCQURK7Z6nCOPOkCzYAbPpnjQou0Q3J4k/eFLEQqdmpUX3LaNCzRVsHGOvSxkqlC kedrGFhPLXqw6oKM41dhUZkJTXrNZXV1ZaasJUqI9spBCh8INOjgJiRPxgiF1qat h/eYIou3rXS+TwEVBPD+rwMwBkM+Mzmj -----END CERTIFICATE-----Generated at Wed Nov 5 05:25:26 2025 by rpki-client