$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: hBrpaO1DeIjvBI5XiPaA1qAf9Z5v2YoQ6BBNsPmdA6Y= Subject key identifier: 0F:D3:A1:E1:95:23:CF:F7:C6:6B:01:37:3A:87:46:42:0A:3F:97:6E Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: 010E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: 010B Signing time: Sun 19 Oct 2025 07:52:36 +0000 Manifest this update: Sun 19 Oct 2025 07:52:35 +0000 Manifest next update: Sun 26 Oct 2025 07:52:35 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: MxFHrlPRAd3/n84kByy3FehD9r2Gs2asN05wZN06Gg8=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 270 (0x10e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: Oct 19 07:52:35 2025 GMT Not After : Oct 26 07:52:35 2025 GMT Subject: CN=68f498c3-6f30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:02:ee:16:95:15:32:3c:43:ef:82:cc:5e:c9: 8c:87:e7:fd:37:c4:96:93:e2:22:11:0a:5b:3a:f5: 16:c7:0d:b0:a7:bb:7f:d7:64:7d:3f:0c:6d:25:7d: 51:5a:18:f0:c2:a8:e9:62:0c:08:99:a1:44:ac:db: 81:0d:6a:2e:e7:ea:35:8f:bf:3c:75:cb:a8:0b:38: 62:c9:fb:e4:1f:67:09:35:51:0a:1e:70:f6:56:82: 8a:42:87:6f:ad:90:34:7a:32:93:95:cd:fe:02:69: 3f:8f:97:cf:42:1e:e7:3f:42:cb:82:35:66:ae:f6: 0f:90:5c:10:c2:9b:40:58:e5:c3:dc:57:23:c3:b1: 1e:28:46:62:ab:ce:8c:02:d5:85:3b:f4:cd:7b:c2: 8d:1b:b9:96:6d:a5:bf:94:a6:6a:9a:94:bc:32:77: 67:51:ba:f1:b0:58:2d:7e:41:91:50:1d:c1:23:18: df:f0:6b:08:ef:4b:54:67:04:01:59:f2:81:f1:b1: 3e:bc:61:cb:b0:86:de:1f:7d:de:8f:18:79:a6:81: b7:5b:d7:a5:7a:31:1a:5b:5e:47:e7:11:75:ba:91: 3f:4d:aa:4b:26:0c:28:9f:a2:59:ab:46:0b:46:e3: 35:f2:c1:e1:94:ce:ee:a7:be:0f:47:7c:a6:69:44: a3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D3:A1:E1:95:23:CF:F7:C6:6B:01:37:3A:87:46:42:0A:3F:97:6E X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:8f:0b:15:d7:c7:2c:58:f4:60:c0:b9:f6:3f:34:d9:27:a4: 0e:40:ba:f3:28:0b:6b:95:00:6f:d4:bb:42:d9:91:3d:a0:8c: fa:b9:94:80:dd:a6:8d:3a:fb:f3:eb:3e:85:3f:ea:eb:a3:33: bc:11:81:6f:52:85:6f:a1:a6:be:8e:71:ef:99:51:af:b8:66: eb:1e:ba:4b:8c:46:bd:e8:7d:7b:e2:4d:7f:f6:90:37:4c:80: 92:5c:03:04:57:9c:d1:be:3d:06:a3:84:1e:5f:00:92:f5:02: 15:ca:4a:ea:39:bc:cc:6c:5a:1a:42:a3:cf:87:c3:f0:bb:fb: b1:c5:68:63:2e:5c:f0:65:98:08:36:3c:3b:69:58:52:f6:b7: e8:c9:dc:f9:b7:52:3c:ef:29:5a:f2:e2:07:cb:4d:6f:5b:74: 1f:67:26:66:46:06:c9:ca:62:8a:46:63:85:1d:df:5f:f2:58: 97:57:f6:88:d5:d9:4b:c1:12:cf:bb:a7:d7:87:82:4e:26:57: 2a:15:18:f5:82:4c:1a:07:c4:c6:05:b3:92:06:3e:03:5d:19: a0:41:4d:7a:06:88:b5:c4:3d:43:f9:1f:12:e9:d9:b8:97:78: a1:b9:ec:a0:0e:bb:a7:bc:8e:22:3d:9f:c9:64:aa:c3:d9:cb: e0:68:ef:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUxMDE5MDc1MjM1WhcNMjUxMDI2MDc1MjM1WjAYMRYwFAYD VQQDEw02OGY0OThjMy02ZjMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQLuFpUVMjxD74LMXsmMh+f9N8SWk+IiEQpbOvUWxw2wp7t/12R9PwxtJX1R WhjwwqjpYgwImaFErNuBDWou5+o1j788dcuoCzhiyfvkH2cJNVEKHnD2VoKKQodv rZA0ejKTlc3+Amk/j5fPQh7nP0LLgjVmrvYPkFwQwptAWOXD3Fcjw7EeKEZiq86M AtWFO/TNe8KNG7mWbaW/lKZqmpS8MndnUbrxsFgtfkGRUB3BIxjf8GsI70tUZwQB WfKB8bE+vGHLsIbeH33ejxh5poG3W9elejEaW15H5xF1upE/TapLJgwon6JZq0YL RuM18sHhlM7up74PR3ymaUSj0QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA/ToeGV I8/3xmsBNzqHRkIKP5duMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCujwsV18csWPRgwLn2PzTZJ6QOQLrzKAtrlQBv1LtC2ZE9oIz6uZSA 3aaNOvvz6z6FP+rrozO8EYFvUoVvoaa+jnHvmVGvuGbrHrpLjEa96H174k1/9pA3 TICSXAMEV5zRvj0Go4QeXwCS9QIVykrqObzMbFoaQqPPh8Pwu/uxxWhjLlzwZZgI Njw7aVhS9rfoydz5t1I87yla8uIHy01vW3QfZyZmRgbJymKKRmOFHd9f8liXV/aI 1dlLwRLPu6fXh4JOJlcqFRj1gkwaB8TGBbOSBj4DXRmgQU16Boi1xD1D+R8S6dm4 l3ihueygDrunvI4iPZ/JZKrD2cvgaO+r -----END CERTIFICATE-----Generated at Mon Oct 20 20:59:34 2025 by rpki-client