$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: kNfRQmtNp4KxyLy0y9GbIqeNhYTqTcDBDf5lSdDrBJc= Subject key identifier: 0C:2B:35:BD:21:88:C7:82:14:AF:D5:1A:1D:87:87:CF:59:48:4F:5E Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 3508 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34ED Signing time: Sat 18 Oct 2025 14:47:30 +0000 Manifest this update: Sat 18 Oct 2025 14:47:29 +0000 Manifest next update: Sat 25 Oct 2025 14:47:29 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: 6klcJ+me/HuAkJ+cUOarTVyT3NBcPmUtKVokiZO+efg=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:47:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13576 (0x3508) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Oct 18 14:47:29 2025 GMT Not After : Oct 25 14:47:29 2025 GMT Subject: CN=68f3a881-5c6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ea:fa:1f:4c:13:14:03:a9:24:cc:a9:de:29: 26:44:c9:6e:35:e2:de:95:25:53:ea:cc:5e:ea:32: 19:a8:00:a3:a8:65:03:ec:cc:b8:d9:ea:2b:77:4f: dd:fe:49:06:c7:29:5e:57:1c:81:a5:33:9f:1c:ec: 26:94:cb:04:f2:e5:63:9e:ad:f1:ba:79:2e:75:66: fb:6b:1e:2a:a4:09:07:a7:7b:a4:22:b3:ad:32:57: 72:06:8c:86:9d:47:62:0c:e6:d3:c4:0f:a4:c2:2f: 55:2a:09:c1:ca:c9:5a:1b:d0:64:55:49:9e:75:0c: 35:90:2c:5a:c2:84:ac:11:66:16:15:e6:b8:46:5c: 94:59:02:6e:6d:f8:27:1d:0a:0c:fe:e9:b0:b9:9e: 8f:61:0a:c1:ba:e3:0b:d3:ea:c3:9b:a4:c2:52:7f: 46:cc:e1:84:f1:32:3c:74:34:d7:8b:26:7c:f3:8e: d5:39:cd:0b:fa:75:5a:88:10:23:a2:fc:9d:b8:84: ab:f1:4d:38:3a:1f:95:5e:51:53:bd:6f:32:5c:bc: b0:ef:b8:67:ef:e5:a9:cc:98:56:21:d2:04:31:05: 41:20:d6:70:11:4b:3b:16:f8:7e:6c:07:d0:42:f9: a9:75:03:3e:7d:6d:a1:bb:2a:fc:3f:c2:b9:75:89: 2f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:2B:35:BD:21:88:C7:82:14:AF:D5:1A:1D:87:87:CF:59:48:4F:5E X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:c1:75:b5:8f:55:15:49:c1:0c:80:8b:64:df:9d:40:ea:4a: e1:04:ab:3e:8c:84:54:a2:3b:f2:fa:39:8f:f3:a8:f8:61:16: 60:6e:2e:04:96:02:e4:df:19:41:cf:ce:5a:82:73:df:a1:84: ba:e6:b1:40:42:02:86:bd:83:6e:32:2d:49:30:cb:48:21:6f: 01:8a:06:92:fe:f1:58:ac:5c:ea:f7:92:60:ab:d0:09:4f:79: 60:95:30:70:a7:cd:ec:18:04:a4:2b:83:60:46:dc:a6:24:17: 09:b5:a2:07:06:80:26:b6:f2:46:b8:0e:3d:2e:fc:93:19:cb: 3f:bb:7b:c0:ee:da:17:97:37:71:62:fb:60:46:d0:4e:8f:31: b6:9e:7a:88:63:0a:dd:a4:49:e2:61:38:dc:24:95:c0:e6:1f: 37:48:26:43:61:53:ae:57:c1:04:41:9f:71:a9:1c:e2:de:d7: 28:4e:21:38:f5:a2:3c:0d:98:95:7f:48:06:57:83:b9:3d:4d: 06:09:57:3b:2c:dd:17:64:7f:14:50:93:b2:f8:c3:3d:61:c0: 48:77:d5:2a:0b:86:5e:fe:b4:5d:af:06:66:5d:47:59:4f:6d: 1c:66:79:56:b8:e5:31:50:f3:8a:1c:bb:24:db:c5:8a:e3:e7: 2b:2b:86:51 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNQgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUxMDE4MTQ0NzI5WhcNMjUxMDI1MTQ0NzI5WjAYMRYwFAYD VQQDEw02OGYzYTg4MS01YzZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOr6H0wTFAOpJMyp3ikmRMluNeLelSVT6sxe6jIZqACjqGUD7My42eord0/d /kkGxyleVxyBpTOfHOwmlMsE8uVjnq3xunkudWb7ax4qpAkHp3ukIrOtMldyBoyG nUdiDObTxA+kwi9VKgnByslaG9BkVUmedQw1kCxawoSsEWYWFea4RlyUWQJubfgn HQoM/umwuZ6PYQrBuuML0+rDm6TCUn9GzOGE8TI8dDTXiyZ8847VOc0L+nVaiBAj ovyduISr8U04Oh+VXlFTvW8yXLyw77hn7+WpzJhWIdIEMQVBINZwEUs7Fvh+bAfQ QvmpdQM+fW2huyr8P8K5dYkvgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwrNb0h iMeCFK/VGh2Hh89ZSE9eMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4wXW1j1UVScEMgItk351A6krhBKs+jIRUojvy+jmP86j4YRZgbi4E lgLk3xlBz85agnPfoYS65rFAQgKGvYNuMi1JMMtIIW8BigaS/vFYrFzq95Jgq9AJ T3lglTBwp83sGASkK4NgRtymJBcJtaIHBoAmtvJGuA49LvyTGcs/u3vA7toXlzdx YvtgRtBOjzG2nnqIYwrdpEniYTjcJJXA5h83SCZDYVOuV8EEQZ9xqRzi3tcoTiE4 9aI8DZiVf0gGV4O5PU0GCVc7LN0XZH8UUJOy+MM9YcBId9UqC4Ze/rRdrwZmXUdZ T20cZnlWuOUxUPOKHLsk28WK4+crK4ZR -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:50 2025 by rpki-client