$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: HFZvAkD+VaqtzRCeehR5JrTXDSNrsEiej3Ym8x58VXY= Subject key identifier: BB:C8:54:46:4B:45:56:55:D8:1E:76:DB:B9:12:0D:FB:08:86:92:BB Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 014F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: 012E Signing time: Sun 19 Oct 2025 08:01:12 +0000 Manifest this update: Sun 19 Oct 2025 08:01:11 +0000 Manifest next update: Sun 26 Oct 2025 08:01:11 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: R/Ly6kchPGI1d21R/pa6LI/vrF2LduTPD51uvVKyBUE=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: It848C/9Bwo+dM5KHxOWOmLE+nNLbDgRj+xtHR+Q7NY=) 3: 8DCB0F7C49D511F0A83B4647C4F9AE02.roa (hash: EVsgRJZkrCA+X6URfbAAHCVUloJhomMJyZF/Ejmuu7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Oct 19 08:01:11 2025 GMT Not After : Oct 26 08:01:11 2025 GMT Subject: CN=68f49ac7-19e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:24:78:a3:21:2f:52:1d:35:b3:93:3c:2f:c0: 3e:96:52:e3:15:aa:e2:c1:38:5f:67:7f:ef:dd:f2: 7d:27:19:89:92:0b:a4:0e:0b:b2:b8:fe:ad:60:34: 82:82:8c:63:8b:0b:f5:bb:95:65:10:f4:2d:b2:8e: ab:35:a3:f0:e6:03:98:d9:ba:ac:95:98:91:b0:bf: de:bb:b6:5e:17:62:d4:5e:63:51:45:04:c7:af:84: 5c:20:fd:8c:62:06:8d:37:0e:61:7d:d1:97:09:da: b1:9c:48:74:99:51:f0:78:c1:dc:c7:e1:41:a8:ae: bf:69:6d:c2:c3:56:67:7f:82:fe:f0:4a:c1:48:59: 59:21:da:56:72:4f:a5:1c:9e:9a:c8:ac:2c:14:56: bb:2c:1d:0d:7f:09:b5:c6:89:76:65:2e:35:3a:94: 6d:39:77:e4:d6:6b:10:8a:e6:6f:df:9a:6f:b5:27: c3:f4:6d:8a:74:21:33:b6:28:92:c8:68:e1:21:c4: 21:ab:51:98:68:99:0e:2d:3b:d9:d3:50:37:e4:c9: f2:6f:3a:5f:76:c8:40:98:a1:1e:fb:4e:0d:10:08: 49:e2:d7:15:a2:cf:d5:85:b2:64:06:51:d7:66:17: 01:eb:55:a1:57:03:bc:7c:b1:0b:20:9d:3a:87:5a: 69:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C8:54:46:4B:45:56:55:D8:1E:76:DB:B9:12:0D:FB:08:86:92:BB X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7e:0e:fe:59:76:c3:0d:7e:23:9d:32:b1:35:71:d3:36:61:2e: 87:88:9d:50:d0:04:52:a2:3e:39:35:fb:ee:ff:9c:1f:3b:42: c0:ad:d1:33:53:7e:78:9f:30:cc:0f:58:b7:3f:58:21:3d:55: 2c:cf:65:d2:88:fa:15:fa:75:dd:3a:79:0f:ac:78:61:75:d2: 0e:32:88:eb:21:57:a3:b7:61:24:e5:af:52:d3:7b:3a:e5:11: b1:bf:f6:60:a9:eb:2b:74:58:14:d7:d2:6f:40:e1:a3:04:da: 62:0b:1b:4f:58:f0:5b:90:42:79:09:bf:14:13:5d:01:86:ad: 92:18:e0:ca:ef:06:05:3f:0e:79:f3:ec:09:1c:fd:a2:33:44: 78:ad:9c:b9:11:3f:96:2d:46:fd:60:78:97:e3:dc:30:3f:69: 92:6c:e0:75:8a:c7:61:25:b3:67:c4:94:98:57:78:0d:21:86: 33:7e:99:5a:2e:f8:f3:9e:cc:69:01:89:c6:08:3f:45:bf:56: 18:ce:2f:d5:c9:a4:7c:bd:8f:47:84:44:67:02:8e:e9:a4:e8: 50:ee:1e:52:97:8b:3f:79:12:fb:e7:58:4c:b2:68:b3:7d:a1: 10:f1:85:8f:e4:de:17:06:73:25:dc:8a:b7:28:cd:27:60:4d: dc:b3:e4:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUxMDE5MDgwMTExWhcNMjUxMDI2MDgwMTExWjAYMRYwFAYD VQQDEw02OGY0OWFjNy0xOWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnSR4oyEvUh01s5M8L8A+llLjFariwThfZ3/v3fJ9JxmJkgukDguyuP6tYDSC goxjiwv1u5VlEPQtso6rNaPw5gOY2bqslZiRsL/eu7ZeF2LUXmNRRQTHr4RcIP2M YgaNNw5hfdGXCdqxnEh0mVHweMHcx+FBqK6/aW3Cw1Znf4L+8ErBSFlZIdpWck+l HJ6ayKwsFFa7LB0Nfwm1xol2ZS41OpRtOXfk1msQiuZv35pvtSfD9G2KdCEztiiS yGjhIcQhq1GYaJkOLTvZ01A35MnybzpfdshAmKEe+04NEAhJ4tcVos/VhbJkBlHX ZhcB61WhVwO8fLELIJ06h1ppIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLvIVEZL RVZV2B5227kSDfsIhpK7MB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB+Dv5ZdsMNfiOdMrE1cdM2YS6HiJ1Q0ARSoj45Nfvu/5wfO0LArdEz U354nzDMD1i3P1ghPVUsz2XSiPoV+nXdOnkPrHhhddIOMojrIVejt2Ek5a9S03s6 5RGxv/ZgqesrdFgU19JvQOGjBNpiCxtPWPBbkEJ5Cb8UE10Bhq2SGODK7wYFPw55 8+wJHP2iM0R4rZy5ET+WLUb9YHiX49wwP2mSbOB1isdhJbNnxJSYV3gNIYYzfpla LvjznsxpAYnGCD9Fv1YYzi/VyaR8vY9HhERnAo7ppOhQ7h5Sl4s/eRL751hMsmiz faEQ8YWP5N4XBnMl3Iq3KM0nYE3cs+Rj -----END CERTIFICATE-----Generated at Mon Oct 20 19:31:09 2025 by rpki-client