$ rpki-client -vvf rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft File: 6bez7TFz3kD-TB_m2P5CucvpyDM.mft (raw, json) Hash identifier: /n0dg1IZbGCtBRCDQo04YKODAeSz74edf2IiXxWPKl8= Subject key identifier: 14:02:C8:25:18:7F:B1:FA:5E:0A:3A:E0:CE:00:CC:AA:ED:92:19:3E Authority key identifier: E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 Certificate issuer: /CN=A9137E12/serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft Manifest number: DB Signing time: Sun 19 Oct 2025 08:36:09 +0000 Manifest this update: Sun 19 Oct 2025 08:36:08 +0000 Manifest next update: Sun 26 Oct 2025 08:36:08 +0000 Files and hashes: 1: 6bez7TFz3kD-TB_m2P5CucvpyDM.crl (hash: C7aNovcHCQhD+Qd+KGLRTGDarSjRrOupjuWT/OAzlOo=) 2: 367EF0645F9B11EFB904A774C4F9AE02.roa (hash: 3W86JdspaifMIg33JDT0CjRhdsWrcUOOO2qpo/ordp4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:36:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137E12, serialNumber=E9B7B3ED3173DE40FE4C1FE6D8FE42B9CBE9C833 Validity Not Before: Oct 19 08:36:08 2025 GMT Not After : Oct 26 08:36:08 2025 GMT Subject: CN=68f4a2f9-7ad7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6e:e9:ad:84:89:17:89:46:31:d2:ca:07:11: ec:2b:28:ad:47:c0:91:ec:0a:f7:cc:ea:3b:eb:36: 56:f2:a5:06:af:55:d2:74:e4:bc:b7:6c:d1:b3:79: 36:3a:28:36:56:a4:1d:dd:45:13:f7:b3:56:e5:bb: ef:6f:fc:84:47:ac:b4:0a:1a:27:29:56:e7:52:ba: 63:95:cf:93:3b:de:04:9d:e4:ee:86:00:50:ee:8e: 88:4f:bd:ba:da:cf:35:88:e2:42:d8:3b:84:87:d2: 92:61:fa:48:aa:39:88:e7:31:e0:67:f1:73:d0:b8: 3a:97:88:a3:2c:d8:58:82:8f:82:dd:17:76:fb:83: 5a:12:ba:77:da:a3:0d:6f:e4:8b:81:d2:f8:e6:9b: 64:71:61:d7:30:ac:c3:25:bf:2c:6a:26:4a:f7:f4: 18:97:16:69:f3:a7:e4:67:40:56:81:d3:fa:56:ce: 85:ca:ff:e6:14:88:99:af:0d:07:44:7a:90:24:8c: 4d:ac:ba:71:7f:1c:95:76:ab:82:e9:ec:3c:b1:54: 77:86:61:4b:13:ef:1b:3e:8c:21:e8:eb:11:1a:30: 9f:4d:c8:32:25:ab:56:bd:88:33:60:86:d9:4f:ce: a7:af:4c:6b:d5:17:44:73:bc:59:34:8b:d8:35:fe: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:02:C8:25:18:7F:B1:FA:5E:0A:3A:E0:CE:00:CC:AA:ED:92:19:3E X509v3 Authority Key Identifier: keyid:E9:B7:B3:ED:31:73:DE:40:FE:4C:1F:E6:D8:FE:42:B9:CB:E9:C8:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6bez7TFz3kD-TB_m2P5CucvpyDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137E12/C7280F345F9A11EFB442BF73C4F9AE02/6bez7TFz3kD-TB_m2P5CucvpyDM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:4b:86:b2:45:35:68:34:c7:56:e4:e7:11:28:f8:22:12:a1: d2:a1:1d:6d:5c:60:ac:56:55:b0:dc:04:bc:73:e3:ac:f2:7f: cd:33:e3:fd:9b:b3:c0:31:94:90:27:49:0d:08:75:f0:50:dd: f0:01:39:4f:7e:ee:49:68:82:4b:09:71:ad:0a:39:11:59:53: 27:dd:66:3e:e2:78:52:25:ae:0f:c3:4e:a2:90:65:7e:09:8b: 69:da:80:d6:ba:76:63:ff:14:ee:ce:05:a5:60:64:bb:f5:b2: 24:24:fb:44:8e:ee:e5:ae:78:00:29:d4:b0:57:35:81:1d:5c: f3:59:b8:c3:1e:07:8a:6a:ec:ba:fb:9a:77:0d:07:b0:7c:4a: 54:a7:e3:44:a9:63:62:ed:53:12:a7:07:42:48:84:0f:8d:a2: e4:34:8d:58:d5:42:b5:d5:7e:14:4e:c7:d0:2b:85:26:a1:67: c2:d4:05:2b:32:9d:61:42:7d:6d:8e:78:00:0e:72:ff:02:7b: 37:14:3a:17:a4:81:28:1f:e3:76:45:f8:e2:59:cc:8c:30:f8: f5:29:dd:1f:da:5d:dc:1f:8c:3c:59:3d:f4:8e:7d:27:c5:78: 6c:8e:b5:5f:25:73:0c:d3:bf:84:d1:ce:4e:14:93:2f:13:34: af:a5:7d:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdFMTIxMTAvBgNVBAUTKEU5QjdCM0VEMzE3M0RFNDBGRTRDMUZFNkQ4RkU0MkI5 Q0JFOUM4MzMwHhcNMjUxMDE5MDgzNjA4WhcNMjUxMDI2MDgzNjA4WjAYMRYwFAYD VQQDEw02OGY0YTJmOS03YWQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1m7prYSJF4lGMdLKBxHsKyitR8CR7Ar3zOo76zZW8qUGr1XSdOS8t2zRs3k2 Oig2VqQd3UUT97NW5bvvb/yER6y0ChonKVbnUrpjlc+TO94EneTuhgBQ7o6IT726 2s81iOJC2DuEh9KSYfpIqjmI5zHgZ/Fz0Lg6l4ijLNhYgo+C3Rd2+4NaErp32qMN b+SLgdL45ptkcWHXMKzDJb8saiZK9/QYlxZp86fkZ0BWgdP6Vs6Fyv/mFIiZrw0H RHqQJIxNrLpxfxyVdquC6ew8sVR3hmFLE+8bPowh6OsRGjCfTcgyJatWvYgzYIbZ T86nr0xr1RdEc7xZNIvYNf5u6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBQCyCUY f7H6Xgo64M4AzKrtkhk+MB8GA1UdIwQYMBaAFOm3s+0xc95A/kwf5tj+QrnL6cgz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0UxMi9DNzI4MEYzNDVG OUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNrRC1UQl9tMlA1Q3VjdnB5 RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZiZXo3VEZ6M2tELVRCX20yUDVDdWN2cHlETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0UxMi9DNzI4MEYzNDVGOUExMUVGQjQ0MkJGNzNDNEY5QUUwMi82YmV6N1RGejNr RC1UQl9tMlA1Q3VjdnB5RE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCJS4ayRTVoNMdW5OcRKPgiEqHSoR1tXGCsVlWw3AS8c+Os8n/NM+P9 m7PAMZSQJ0kNCHXwUN3wATlPfu5JaIJLCXGtCjkRWVMn3WY+4nhSJa4Pw06ikGV+ CYtp2oDWunZj/xTuzgWlYGS79bIkJPtEju7lrngAKdSwVzWBHVzzWbjDHgeKauy6 +5p3DQewfEpUp+NEqWNi7VMSpwdCSIQPjaLkNI1Y1UK11X4UTsfQK4UmoWfC1AUr Mp1hQn1tjngADnL/Ans3FDoXpIEoH+N2RfjiWcyMMPj1Kd0f2l3cH4w8WT30jn0n xXhsjrVfJXMM07+E0c5OFJMvEzSvpX0g -----END CERTIFICATE-----Generated at Mon Oct 20 08:01:46 2025 by rpki-client