$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: EVtJBAonzPOKRg/0PJkLJAAzUjMJZ1//ee65rbkQf10= Subject key identifier: 16:5E:C7:55:20:40:FD:2A:B0:7F:A5:5F:38:90:DD:2B:9A:26:26:BE Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0AF5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0AE0 Signing time: Sat 18 Oct 2025 20:22:36 +0000 Manifest this update: Sat 18 Oct 2025 20:22:35 +0000 Manifest next update: Sat 25 Oct 2025 20:22:35 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: M1K0Rq5cgTQlakMYB2y7uyliQFZ3pi15WbxDpVOeJeU=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2805 (0xaf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Oct 18 20:22:35 2025 GMT Not After : Oct 25 20:22:35 2025 GMT Subject: CN=68f3f70c-d404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ac:c4:c7:fa:ed:9e:f6:2e:36:77:83:ea:d1: 62:0d:c0:7a:58:a7:d3:59:b1:15:fb:f9:95:9c:28: e0:8f:f7:a3:1e:d3:a4:ce:75:13:29:6c:82:f1:cb: 67:27:0e:37:d4:a1:3d:ee:69:d4:57:11:68:22:ee: 11:60:67:d2:39:51:e2:57:0a:f2:51:a5:1c:a6:43: 28:d6:b2:c8:24:e2:36:26:6b:b4:c4:cb:8c:90:9e: 3e:67:63:cf:56:34:28:64:a9:8d:f6:9f:c2:af:b5: e2:7c:1b:9e:a1:1b:2c:23:a3:b7:cd:39:7d:8a:34: 55:84:cd:e8:cd:50:91:31:d3:41:00:98:0e:78:01: 1f:6d:b0:5b:a0:53:36:09:d7:76:bd:62:81:a9:28: c0:05:9d:ad:2c:55:16:60:0f:af:a2:85:4a:b7:7f: 58:1f:b2:43:57:45:15:e4:bf:21:fb:44:2f:cf:3a: 25:a5:93:b2:6f:84:d2:e5:0f:57:0d:05:4c:b9:27: 2b:cf:d1:76:15:1d:18:db:dd:4a:b3:0d:ab:e8:d3: 0d:48:70:d4:4c:9e:e0:fe:ab:9f:27:a4:55:ab:4c: ff:61:9e:45:74:26:c7:56:04:dd:b8:da:fe:cd:0a: 99:c9:88:aa:86:8d:d1:f5:f2:0e:94:8c:d4:c4:ef: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:5E:C7:55:20:40:FD:2A:B0:7F:A5:5F:38:90:DD:2B:9A:26:26:BE X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:97:a3:47:4e:e8:15:2b:ba:23:1e:10:41:54:75:ec:f4:d5: f9:83:ba:70:33:ff:de:3e:80:44:7f:e2:72:c9:c6:35:c3:1e: d6:2c:aa:64:43:9f:55:e6:51:1c:f2:80:90:58:08:1c:3d:8e: 27:3c:78:49:b1:00:f1:c0:69:0b:71:4b:8e:89:50:eb:4e:19: 4c:64:db:d1:ee:2a:2f:ec:1e:10:00:53:af:91:98:13:03:c4: 1a:d7:48:cf:7b:f1:85:d0:45:19:f3:dc:e7:1f:2b:cf:02:be: d9:f2:c7:4a:f7:cb:3b:8b:fb:26:ca:8b:6c:2b:64:03:5f:0f: 62:f0:c2:81:b9:d4:ff:40:7b:98:db:7d:5c:3b:b3:52:f7:3f: 95:e9:97:58:94:65:a5:92:67:fd:89:2e:0c:6d:53:7b:6d:3d: 3b:37:cc:61:e5:0b:67:0d:42:40:98:85:a2:01:89:3b:93:50: 6d:39:54:53:34:28:02:2e:7e:ac:68:6d:66:63:51:a9:03:7c: 14:58:04:2c:5e:81:01:e5:24:cb:fd:19:f9:08:88:a4:e8:a1: 55:f1:dd:4d:9e:27:dd:06:4e:19:df:05:0d:f2:73:a6:11:f9: 51:ed:1c:75:57:31:d7:67:a2:9a:91:83:05:05:ba:37:3b:07: 73:90:8f:b7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCvUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUxMDE4MjAyMjM1WhcNMjUxMDI1MjAyMjM1WjAYMRYwFAYD VQQDEw02OGYzZjcwYy1kNDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6zEx/rtnvYuNneD6tFiDcB6WKfTWbEV+/mVnCjgj/ejHtOkznUTKWyC8ctn Jw431KE97mnUVxFoIu4RYGfSOVHiVwryUaUcpkMo1rLIJOI2Jmu0xMuMkJ4+Z2PP VjQoZKmN9p/Cr7XifBueoRssI6O3zTl9ijRVhM3ozVCRMdNBAJgOeAEfbbBboFM2 Cdd2vWKBqSjABZ2tLFUWYA+vooVKt39YH7JDV0UV5L8h+0QvzzolpZOyb4TS5Q9X DQVMuScrz9F2FR0Y291Ksw2r6NMNSHDUTJ7g/qufJ6RVq0z/YZ5FdCbHVgTduNr+ zQqZyYiqho3R9fIOlIzUxO+6zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZex1Ug QP0qsH+lXziQ3SuaJia+MB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMl6NHTugVK7ojHhBBVHXs9NX5g7pwM//ePoBEf+JyycY1wx7WLKpk Q59V5lEc8oCQWAgcPY4nPHhJsQDxwGkLcUuOiVDrThlMZNvR7iov7B4QAFOvkZgT A8Qa10jPe/GF0EUZ89znHyvPAr7Z8sdK98s7i/smyotsK2QDXw9i8MKBudT/QHuY 231cO7NS9z+V6ZdYlGWlkmf9iS4MbVN7bT07N8xh5QtnDUJAmIWiAYk7k1BtOVRT NCgCLn6saG1mY1GpA3wUWAQsXoEB5STL/Rn5CIik6KFV8d1NnifdBk4Z3wUN8nOm EflR7Rx1VzHXZ6KakYMFBbo3OwdzkI+3 -----END CERTIFICATE-----Generated at Mon Oct 20 11:37:02 2025 by rpki-client