$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft File: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json) Hash identifier: g9o9gA+cL4Y4xYFdkpnIRb38z+eaTVxL+ufGh93KnWU= Subject key identifier: 19:C4:7B:00:41:10:52:1F:89:00:DB:92:D4:45:6B:80:3B:90:4F:3A Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 Certificate issuer: /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft Manifest number: 2A Signing time: Sun 19 Oct 2025 11:16:55 +0000 Manifest this update: Sun 19 Oct 2025 11:16:54 +0000 Manifest next update: Sun 26 Oct 2025 11:16:54 +0000 Files and hashes: 1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: ow54UsxHBWSBaf2Cevu1OHLO0hkVGiC+PmuA4fmr5ow=) 2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: EWAFcedkF4KQQjCKc7J1r1NxEnBfI+A1I/eGLsYGq3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Validity Not Before: Oct 19 11:16:54 2025 GMT Not After : Oct 26 11:16:54 2025 GMT Subject: CN=68f4c8a6-c3b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:19:a3:c1:63:1c:1d:e6:b7:e5:2b:8d:d6:bf: 0b:e2:c7:6a:9f:8d:a7:9f:a6:6b:ce:0d:94:aa:1a: b6:19:26:cd:b1:d5:47:a2:8a:01:7e:37:72:79:c4: 58:93:5b:7f:8b:c1:40:3d:54:24:8b:05:3d:cb:2a: 5e:08:c9:90:74:1f:3e:23:39:69:f3:0e:62:61:6f: eb:40:1a:b8:c2:78:1b:26:2d:aa:84:b3:c8:da:e4: 71:4b:ce:5b:98:40:54:54:03:cb:6a:0e:b0:b4:7d: 6a:8d:6e:b8:28:98:c3:52:62:22:d9:52:ff:7b:a0: dd:f1:6d:6c:4b:14:aa:a0:d2:ff:11:16:9a:29:7d: 16:80:ef:69:08:f1:9b:18:ab:19:f2:48:7c:9e:ba: 04:72:7b:e9:5f:c2:fb:f7:ee:63:b3:55:4a:3f:2d: ee:bb:94:1c:4f:6e:5a:8d:0f:19:26:45:c7:27:31: 59:ff:e5:36:2f:e8:c2:71:91:95:72:a9:02:5f:4c: c8:07:3a:61:bd:59:f4:8d:d1:a3:01:68:b6:da:50: 43:a6:37:c2:07:24:c2:0f:de:0b:2f:c7:28:37:91: 58:c0:f8:a1:9a:cb:4a:fb:8d:0b:b6:4e:25:02:5b: c7:64:14:ef:00:ac:87:29:d4:45:c3:aa:fb:20:53: 7b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:C4:7B:00:41:10:52:1F:89:00:DB:92:D4:45:6B:80:3B:90:4F:3A X509v3 Authority Key Identifier: keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5d:dd:6e:b3:13:2f:cc:64:c2:14:66:36:5d:fe:84:02:e9:b7: 4d:a8:1f:9c:04:43:7a:5f:c7:ea:f6:21:32:83:5f:da:9e:db: e6:c7:ef:b8:7b:88:bd:8a:f5:67:b6:8f:a7:ef:5c:c8:ed:8f: c0:e0:66:d0:83:ee:51:eb:8b:ff:fb:42:5f:38:db:fe:fa:62: ad:60:a0:ac:d2:98:1b:32:7a:8c:1d:20:c8:55:a3:49:6b:56: 3b:48:0a:06:22:36:ea:78:60:85:88:29:ec:32:7d:9a:6b:f7: cb:b8:7d:b6:2f:6e:46:40:2a:6f:d8:a4:7d:13:c8:c9:a7:aa: 24:36:28:04:ea:f8:88:bc:31:35:34:de:79:6d:14:fc:97:a7: 01:2d:ed:d9:c3:81:65:8b:45:24:33:ce:22:28:76:75:d4:0c: d2:72:e3:11:88:e1:83:c3:bb:e2:04:c3:8d:d2:87:d8:b5:55: 8f:a8:7b:4c:b2:5e:2f:65:c8:b7:c9:46:33:21:a1:69:4c:60: 13:f2:98:f4:ab:36:b8:d4:a3:51:25:c3:11:b4:97:77:2c:f1: ce:26:35:3d:5a:25:b1:97:69:0e:9a:c6:47:8b:7b:a4:f8:32: 98:e5:1a:d5:41:86:a4:cb:25:fa:dc:af:c9:8e:b8:fb:78:85: 3f:1f:08:cb -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkUwMTExMC8GA1UEBRMoRUEwNTY0OTk0NEEyNDA0MjM3MDAzQTdGOEJBNDFEOEQ4 NDIyRTcyMTAeFw0yNTEwMTkxMTE2NTRaFw0yNTEwMjYxMTE2NTRaMBgxFjAUBgNV BAMTDTY4ZjRjOGE2LWMzYjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDUGaPBYxwd5rflK43Wvwvix2qfjaefpmvODZSqGrYZJs2x1UeiigF+N3J5xFiT W3+LwUA9VCSLBT3LKl4IyZB0Hz4jOWnzDmJhb+tAGrjCeBsmLaqEs8ja5HFLzluY QFRUA8tqDrC0fWqNbrgomMNSYiLZUv97oN3xbWxLFKqg0v8RFpopfRaA72kI8ZsY qxnySHyeugRye+lfwvv37mOzVUo/Le67lBxPblqNDxkmRccnMVn/5TYv6MJxkZVy qQJfTMgHOmG9WfSN0aMBaLbaUEOmN8IHJMIP3gsvxyg3kVjA+KGay0r7jQu2TiUC W8dkFO8ArIcp1EXDqvsgU3sfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUGcR7AEEQ Uh+JANuS1EVrgDuQTzowHwYDVR0jBBgwFoAU6gVkmUSiQEI3ADp/i6QdjYQi5yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRTAxLzIzMjNBNDlDNzQ5 RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJM0FEcF9pNlFkallRaTV5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNmdWa21VU2lRRUkzQURwX2k2UWRqWVFpNXlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RTAxLzIzMjNBNDlDNzQ5RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJ M0FEcF9pNlFkallRaTV5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF3dbrMTL8xkwhRmNl3+hALpt02oH5wEQ3pfx+r2ITKDX9qe2+bH77h7 iL2K9We2j6fvXMjtj8DgZtCD7lHri//7Ql842/76Yq1goKzSmBsyeowdIMhVo0lr VjtICgYiNup4YIWIKewyfZpr98u4fbYvbkZAKm/YpH0TyMmnqiQ2KATq+Ii8MTU0 3nltFPyXpwEt7dnDgWWLRSQzziIodnXUDNJy4xGI4YPDu+IEw43Sh9i1VY+oe0yy Xi9lyLfJRjMhoWlMYBPymPSrNrjUo1ElwxG0l3cs8c4mNT1aJbGXaQ6axkeLe6T4 MpjlGtVBhqTLJfrcr8mOuPt4hT8fCMs= -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:16 2025 by rpki-client