$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json) Hash identifier: I4x+XFy5B+WCowNq9u1+tqtG/Ls3kN1KNpOJ+ScWdrw= Subject key identifier: 2D:C7:D5:B1:A7:B0:D7:43:FA:A1:83:AF:22:8A:55:D4:60:D9:5E:89 Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Certificate serial: 41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft Manifest number: 3F Signing time: Sun 19 Oct 2025 10:55:26 +0000 Manifest this update: Sun 19 Oct 2025 10:55:25 +0000 Manifest next update: Sun 26 Oct 2025 10:55:25 +0000 Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: 6T7dbAZebyoOegB1puu1qMvJ6hn0gMSadEoOQstfdSA=) 2: 554EE88487D911F08B837C49C4F9AE02.roa (hash: mrqENyuiKG5xVgDdo7UrrcMh5yOfyP2Su4rVIqkeeYw=) 3: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65 (0x41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Validity Not Before: Oct 19 10:55:25 2025 GMT Not After : Oct 26 10:55:25 2025 GMT Subject: CN=68f4c39e-6029 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:3c:c1:c1:15:b6:ed:cb:c2:46:52:50:99: 63:51:5e:b6:97:65:59:fa:e4:c9:97:87:91:ac:c7: ac:48:4c:8e:36:55:ec:79:b8:30:0a:b0:9b:85:e4: cb:6f:9c:21:b1:02:24:dd:a6:9f:80:55:4b:03:f3: 32:0e:66:e2:9a:a7:ea:40:9d:0c:3f:70:50:d1:b0: c6:eb:cd:3e:86:3f:b7:6d:af:8a:c8:04:ff:c5:bc: be:8e:3c:18:61:63:7d:e3:87:21:95:f9:db:e6:0c: 6b:79:60:9b:a9:31:3f:fe:b2:81:34:a6:8d:b4:00: a4:2a:77:5e:81:5e:65:1c:6c:03:bd:ab:38:f2:20: 38:2d:14:cd:4b:95:86:1f:21:ad:3a:fc:27:7f:4d: 9c:1d:b2:5d:56:fb:e7:12:f6:32:90:05:da:6a:6a: ea:8c:e9:ca:0d:bd:67:b3:50:61:0d:38:36:88:b7: 81:d5:95:ad:e8:70:35:2a:93:5b:de:14:49:ac:af: ba:17:9e:3f:08:ff:42:e5:82:27:8c:24:cc:d1:46: 3c:5e:24:ea:0b:61:f3:d2:cd:39:53:c4:84:59:20: 0e:fc:8c:27:29:96:bc:e5:18:85:d1:de:87:dd:7b: 1a:87:4d:c1:df:6f:ab:17:8e:46:65:77:65:fa:cd: 14:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:C7:D5:B1:A7:B0:D7:43:FA:A1:83:AF:22:8A:55:D4:60:D9:5E:89 X509v3 Authority Key Identifier: keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:1d:d5:61:b6:c9:20:8c:07:2c:28:89:30:aa:f7:de:63:c7: b0:ad:66:f2:e7:00:89:ad:4b:02:b3:b4:17:26:7c:b4:6c:25: 1d:db:3f:71:94:ff:14:31:5f:77:24:32:c9:ba:66:93:80:31: 08:5e:ae:a6:b7:be:70:50:47:e5:16:fd:6b:bf:88:73:e7:bb: 59:60:e6:b6:f0:2b:cf:c3:c9:bb:a9:5b:f8:08:90:a9:4a:0d: ad:19:eb:01:63:68:57:c3:a4:02:df:d7:aa:25:25:b0:5f:b2: c8:c5:c6:8c:9b:bc:45:fc:82:09:d5:21:18:2d:be:ac:d5:a2: 9a:9e:4b:34:95:2d:5a:79:96:06:1a:37:43:da:2f:b2:87:64: 51:d2:0c:35:56:9f:50:d1:15:57:75:13:4a:c6:15:34:f4:20: c1:44:a3:21:7f:80:e9:99:f0:6d:1f:82:12:ea:f3:fa:e7:e8: d1:b1:17:dd:0e:66:cb:7e:a4:40:2d:3c:d7:aa:30:96:99:69: d7:ce:35:c5:a3:d2:31:f9:c0:ff:5a:c2:fc:75:6f:f0:24:59: 9a:23:20:bc:d0:d9:a2:5b:2a:c4:b8:ca:1d:9f:7d:30:2c:4c: f5:f4:ce:e1:64:51:80:d6:c9:00:c9:1b:15:52:9d:df:8f:b8: ea:20:16:41 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5 N0MwQTYzRjAeFw0yNTEwMTkxMDU1MjVaFw0yNTEwMjYxMDU1MjVaMBgxFjAUBgNV BAMTDTY4ZjRjMzllLTYwMjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrOzzBwRW27cvCRlJQmWNRXraXZVn65MmXh5Gsx6xITI42Vex5uDAKsJuF5Mtv nCGxAiTdpp+AVUsD8zIOZuKap+pAnQw/cFDRsMbrzT6GP7dtr4rIBP/FvL6OPBhh Y33jhyGV+dvmDGt5YJupMT/+soE0po20AKQqd16BXmUcbAO9qzjyIDgtFM1LlYYf Ia06/Cd/TZwdsl1W++cS9jKQBdpqauqM6coNvWezUGENODaIt4HVla3ocDUqk1ve FEmsr7oXnj8I/0LlgieMJMzRRjxeJOoLYfPSzTlTxIRZIA78jCcplrzlGIXR3ofd exqHTcHfb6sXjkZld2X6zRRLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQULcfVsaew 10P6oYOvIopV1GDZXokwHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1 M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJYd1WG2ySCMBywoiTCq995jx7CtZvLnAImtSwKztBcmfLRsJR3bP3GU /xQxX3ckMsm6ZpOAMQherqa3vnBQR+UW/Wu/iHPnu1lg5rbwK8/DybupW/gIkKlK Da0Z6wFjaFfDpALf16olJbBfssjFxoybvEX8ggnVIRgtvqzVopqeSzSVLVp5lgYa N0PaL7KHZFHSDDVWn1DRFVd1E0rGFTT0IMFEoyF/gOmZ8G0fghLq8/rn6NGxF90O Zst+pEAtPNeqMJaZadfONcWj0jH5wP9awvx1b/AkWZojILzQ2aJbKsS4yh2ffTAs TPX0zuFkUYDWyQDJGxVSnd+PuOogFkE= -----END CERTIFICATE-----Generated at Mon Oct 20 18:23:22 2025 by rpki-client