$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: bzv9OK6IouKCAGf8RylvgjQHG4xN5LPjjq91wRozTDg= Subject key identifier: C6:F6:D9:61:8D:91:C1:F2:C9:AD:78:B6:61:9F:B3:15:78:36:32:86 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0237 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 022E Signing time: Sun 19 Oct 2025 04:19:21 +0000 Manifest this update: Sun 19 Oct 2025 04:19:20 +0000 Manifest next update: Sun 26 Oct 2025 04:19:20 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: dwCNo33YlW33Iy8vItllEOVLzreVgJqFXnYvAKpGXJY=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:19:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 567 (0x237) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Oct 19 04:19:20 2025 GMT Not After : Oct 26 04:19:20 2025 GMT Subject: CN=68f466c9-b869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:4a:13:82:93:93:94:45:24:7f:50:1e:8d: b1:6f:14:51:42:36:08:a5:19:5f:7d:8f:dc:b6:f7: b1:3b:e6:b6:0a:d7:dc:21:6e:6e:23:9f:f3:19:82: ae:82:9f:75:78:4d:27:23:33:ed:eb:24:5e:39:2d: 98:ee:b6:37:17:0f:0d:d9:07:f6:ab:40:96:24:94: 66:1c:d4:ff:c0:b8:73:ec:ad:7c:90:f7:29:18:66: 60:87:70:77:fb:ad:3f:5a:68:f5:9d:4c:3f:87:a0: 33:d3:76:8a:3d:7a:ad:e6:a2:4d:c1:93:c3:99:8c: 24:61:88:4a:5f:c0:4f:70:31:a8:9e:4c:29:65:8b: c8:c8:37:a2:e1:29:af:fc:5b:fe:12:6f:56:5e:c5: 10:9c:3a:ac:e2:0a:58:d1:03:d8:68:06:4a:9f:7f: 52:a2:45:26:66:69:d1:97:34:53:bb:3e:55:05:77: c8:2f:45:05:d8:63:3b:ba:c3:84:33:44:04:ed:de: 2f:7e:44:24:b6:17:c3:f0:fd:2c:45:33:d9:ac:72: 52:55:43:99:fa:91:f4:3a:e5:d2:d7:00:de:30:1c: 72:c6:a2:27:cb:75:65:a6:27:20:38:44:74:d2:38: 0a:7b:09:92:2d:a3:f5:7b:90:2e:44:cd:ea:e4:1c: 9d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:F6:D9:61:8D:91:C1:F2:C9:AD:78:B6:61:9F:B3:15:78:36:32:86 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e9:57:a2:b4:44:26:d2:20:e5:16:08:64:78:5c:db:68:80: 2b:8f:59:76:21:7d:c8:0f:23:35:2c:ed:95:d0:74:4b:29:42: 55:d5:6a:1b:72:fa:65:8a:f8:cc:74:80:a2:6b:1d:8d:9e:92: c0:1e:a7:ec:17:9e:20:ce:62:da:35:46:81:45:77:f8:4b:20: 71:51:3f:8a:a2:fe:e3:b5:5f:24:8c:11:50:d3:26:c9:86:87: 78:9b:2f:d2:27:cf:e4:70:09:a4:a9:a1:ed:b0:00:63:4d:e1: 1f:98:2e:24:b7:9a:d3:3e:f5:4f:ae:d6:7d:56:0f:f1:1c:6a: a9:4e:81:f3:9b:0c:d2:62:f6:52:2e:fb:ac:e2:c3:d7:eb:c3: 6a:d0:aa:8f:9c:4e:67:6f:9b:22:a6:81:92:81:6c:5a:36:e6: a4:9a:f9:ea:4e:28:5c:7b:42:d8:5d:1c:e5:2f:82:73:37:70: 48:0a:44:72:4e:d1:42:34:a2:e8:ce:55:30:a0:18:4a:ce:06: a3:0a:86:d5:3f:7a:76:22:84:6f:aa:25:18:d8:c0:68:8d:97: 31:b6:65:16:d1:8e:e4:fa:f8:81:05:68:55:a4:30:be:b3:6a: 86:17:27:53:ba:fc:aa:a6:de:1b:f8:2a:1f:0d:68:af:13:58: 08:a6:76:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUxMDE5MDQxOTIwWhcNMjUxMDI2MDQxOTIwWjAYMRYwFAYD VQQDEw02OGY0NjZjOS1iODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqIFKE4KTk5RFJH9QHo2xbxRRQjYIpRlffY/ctvexO+a2CtfcIW5uI5/zGYKu gp91eE0nIzPt6yReOS2Y7rY3Fw8N2Qf2q0CWJJRmHNT/wLhz7K18kPcpGGZgh3B3 +60/Wmj1nUw/h6Az03aKPXqt5qJNwZPDmYwkYYhKX8BPcDGonkwpZYvIyDei4Smv /Fv+Em9WXsUQnDqs4gpY0QPYaAZKn39SokUmZmnRlzRTuz5VBXfIL0UF2GM7usOE M0QE7d4vfkQkthfD8P0sRTPZrHJSVUOZ+pH0OuXS1wDeMBxyxqIny3VlpicgOER0 0jgKewmSLaP1e5AuRM3q5BydvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMb22WGN kcHyya14tmGfsxV4NjKGMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB96VeitEQm0iDlFghkeFzbaIArj1l2IX3IDyM1LO2V0HRLKUJV1Wob cvplivjMdICiax2NnpLAHqfsF54gzmLaNUaBRXf4SyBxUT+Kov7jtV8kjBFQ0ybJ hod4my/SJ8/kcAmkqaHtsABjTeEfmC4kt5rTPvVPrtZ9Vg/xHGqpToHzmwzSYvZS Lvus4sPX68Nq0KqPnE5nb5sipoGSgWxaNuakmvnqTihce0LYXRzlL4JzN3BICkRy TtFCNKLozlUwoBhKzgajCobVP3p2IoRvqiUY2MBojZcxtmUW0Y7k+viBBWhVpDC+ s2qGFydTuvyqpt4b+CofDWivE1gIpnYX -----END CERTIFICATE-----Generated at Mon Oct 20 01:44:57 2025 by rpki-client