$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft File: b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft (raw, json) Hash identifier: Zr8AhETAIhd8sjWxXbFAjOVfI9M3nd4nvj51CvjZfBI= Subject key identifier: D1:93:0D:38:FF:0F:25:68:61:BB:1B:07:10:FB:18:EF:37:9B:D0:BD Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA Certificate issuer: /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Certificate serial: 31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft Manifest number: 2D Signing time: Sun 19 Oct 2025 11:14:42 +0000 Manifest this update: Sun 19 Oct 2025 11:14:41 +0000 Manifest next update: Sun 26 Oct 2025 11:14:41 +0000 Files and hashes: 1: b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl (hash: DVaC+sOJakSeVcswFg+lhMXXlav/Bdy6FmJB/D8SqWQ=) 2: B30F869670E511F08CE5B42CC4F9AE02.roa (hash: erO5HGBwapQrQxqX0w/vK8XPII0Rjyl1v5zKuwttKDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:14:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Validity Not Before: Oct 19 11:14:41 2025 GMT Not After : Oct 26 11:14:41 2025 GMT Subject: CN=68f4c822-61bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ba:e7:66:67:f3:e4:98:ed:81:74:d0:e1:72: c9:09:bc:7b:d7:19:b0:1e:8c:98:32:85:83:e0:47: 0d:f2:d9:54:26:48:78:b8:fe:02:73:40:3a:44:c2: d5:3f:16:03:0a:8d:f6:07:eb:33:1f:d1:35:e4:ac: 5d:0a:43:d3:03:57:dd:36:61:26:18:9e:8b:99:ed: 20:67:c5:71:16:aa:dc:66:98:e4:72:92:65:2d:30: 08:23:97:ed:07:74:54:38:f7:3f:09:d2:69:66:d1: c8:96:11:9a:28:d4:9d:3b:5a:7e:d9:cb:56:93:78: cc:2f:61:74:fe:8b:18:9b:05:11:4c:94:b9:55:2b: d0:d5:50:52:d5:0e:8f:4e:84:5d:44:95:cd:c1:5c: 6d:53:dc:c3:0b:b7:90:59:97:76:2e:a5:41:fc:8d: 83:a2:12:17:25:b5:90:d5:3f:da:02:ab:37:25:53: f8:cd:9e:3c:e7:84:d3:32:f9:55:b9:6a:7a:21:90: ab:c1:bc:3d:8c:a6:84:b9:00:6c:6b:61:5e:71:c2: aa:02:96:65:36:4f:5f:e6:8e:cd:f1:51:84:60:12: 0f:58:eb:4c:9a:50:5a:af:bb:c9:d4:ca:48:e6:2e: 0b:2a:6e:57:b7:d3:c5:e5:8e:75:6b:43:6c:67:68: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:93:0D:38:FF:0F:25:68:61:BB:1B:07:10:FB:18:EF:37:9B:D0:BD X509v3 Authority Key Identifier: keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:73:c2:14:6e:30:1f:a3:c7:26:90:33:84:0f:7f:4d:a2:8e: 54:c7:2b:03:26:32:78:94:40:ab:31:55:ec:98:86:b9:e5:bb: 9f:54:53:99:e0:68:b5:d1:61:c4:a4:4a:6d:59:2d:b2:1a:85: a1:fe:25:91:03:18:b1:60:53:1c:62:b1:c8:a8:5f:2d:7c:45: 34:81:34:38:7c:13:64:ac:8a:e9:db:b7:ee:48:ca:c7:99:6c: 7a:bb:5e:d3:5c:d3:d6:0a:a1:6f:07:9f:59:3e:c7:78:83:86: 9d:d7:fc:45:7e:f7:74:20:6c:7b:69:9f:ea:89:62:b6:6c:f3: f4:ca:51:f0:8a:69:c0:f3:6d:7d:c0:cd:62:7e:95:d6:cf:66: 0c:bc:66:3c:9a:03:79:1b:90:1b:9c:53:35:4e:6f:1f:a5:af: db:d0:d2:df:23:74:40:a2:f4:25:6e:43:9d:6d:28:c4:cb:7f: 94:bd:fb:3e:de:ed:7f:d0:bd:d3:56:70:52:69:da:05:ee:fc: 0c:ff:17:f0:d2:e7:48:b0:20:d0:05:4b:65:c4:21:97:86:52: 88:45:f7:35:aa:4d:b2:45:bd:af:8f:81:71:d4:cb:bf:6f:b2: 18:1f:f8:09:ce:f3:e3:ed:c5:bc:c1:b5:a3:42:15:96:bc:a4: c1:3c:1a:80 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODc2RDExMC8GA1UEBRMoNkZBMTA0QkU2NjVFNTIzQ0I2NTdDOUJGOEMzMDhGMDIz RUE5QzBEQTAeFw0yNTEwMTkxMTE0NDFaFw0yNTEwMjYxMTE0NDFaMBgxFjAUBgNV BAMTDTY4ZjRjODIyLTYxYmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyuudmZ/PkmO2BdNDhcskJvHvXGbAejJgyhYPgRw3y2VQmSHi4/gJzQDpEwtU/ FgMKjfYH6zMf0TXkrF0KQ9MDV902YSYYnouZ7SBnxXEWqtxmmORykmUtMAgjl+0H dFQ49z8J0mlm0ciWEZoo1J07Wn7Zy1aTeMwvYXT+ixibBRFMlLlVK9DVUFLVDo9O hF1Elc3BXG1T3MMLt5BZl3YupUH8jYOiEhcltZDVP9oCqzclU/jNnjznhNMy+VW5 anohkKvBvD2MpoS5AGxrYV5xwqoClmU2T1/mjs3xUYRgEg9Y60yaUFqvu8nUykjm Lgsqble308XljnVrQ2xnaMxnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU0ZMNOP8P JWhhuxsHEPsY7zeb0L0wHwYDVR0jBBgwFoAUb6EEvmZeUjy2V8m/jDCPAj6pwNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NzZELzU3QTJFQUZBNzBF NTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5MlY4bV9qRENQQWo2cHdO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZFRXZtWmVVankyVjhtX2pEQ1BBajZwd05vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NzZELzU3QTJFQUZBNzBFNTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5 MlY4bV9qRENQQWo2cHdOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVzwhRuMB+jxyaQM4QPf02ijlTHKwMmMniUQKsxVeyYhrnlu59UU5ng aLXRYcSkSm1ZLbIahaH+JZEDGLFgUxxiscioXy18RTSBNDh8E2Ssiunbt+5IyseZ bHq7XtNc09YKoW8Hn1k+x3iDhp3X/EV+93QgbHtpn+qJYrZs8/TKUfCKacDzbX3A zWJ+ldbPZgy8ZjyaA3kbkBucUzVObx+lr9vQ0t8jdECi9CVuQ51tKMTLf5S9+z7e 7X/QvdNWcFJp2gXu/Az/F/DS50iwINAFS2XEIZeGUohF9zWqTbJFva+PgXHUy79v shgf+AnO8+PtxbzBtaNCFZa8pME8GoA= -----END CERTIFICATE-----Generated at Tue Oct 21 07:19:46 2025 by rpki-client