$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: lfSUK8JEAafsYRmG1yUOsNbYWDtcLNiEDO3nIAJ6k5I= Subject key identifier: 30:D2:78:CD:64:5B:A5:61:E3:F0:11:1D:33:21:C8:A2:73:49:DE:BD Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D3E Signing time: Mon 20 Oct 2025 18:34:58 +0000 Manifest this update: Mon 20 Oct 2025 18:34:57 +0000 Manifest next update: Mon 27 Oct 2025 18:34:57 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: Ptwb+EqHuU7QAMEvkuWcoVCknQrCBvmz5+FD3B6uUP0=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3401 (0xd49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Oct 20 18:34:57 2025 GMT Not After : Oct 27 18:34:57 2025 GMT Subject: CN=68f680d2-6c03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8a:4d:c3:a6:f5:59:08:d6:3d:c6:18:39:73: 79:76:f9:2a:38:c6:d4:b2:7c:d9:e7:82:7b:ef:f1: 66:b5:8e:31:bf:81:c2:26:b7:b6:dd:58:24:7d:21: 1c:52:9c:83:88:24:3f:2f:0d:1f:1d:90:f4:c5:fa: 13:4a:ff:3b:57:b7:0b:7d:c1:64:86:fb:08:0c:d8: 9a:b3:d1:5b:dd:42:90:51:65:0f:19:15:80:b2:d4: 3b:9b:b6:86:2f:cf:fb:64:8d:fb:e4:6f:55:30:1a: 06:e8:27:b5:4b:53:2c:09:d2:94:42:1f:3f:6b:ba: 9c:97:1a:08:9f:d4:4d:29:e5:50:a5:0c:df:48:c5: 29:a8:3f:aa:f8:5f:4b:b8:05:2e:d6:b1:5e:b3:a6: ad:bd:80:dd:f7:10:5e:ea:f3:eb:1c:01:f2:9a:ce: 4a:38:b1:06:74:6b:af:1b:f8:5a:ad:31:fe:31:df: eb:f4:b9:8b:9d:50:ce:65:e6:92:65:c4:91:53:bb: 9f:33:d7:a2:34:41:6e:d3:a2:83:75:d2:5c:b3:e3: 32:4b:bd:79:87:e0:dc:d6:2f:b2:b6:f3:ca:7b:30: 56:c6:87:85:23:b9:17:47:72:5e:b0:f1:92:b9:cb: 37:d4:89:41:2f:b4:37:1c:d0:7d:f7:3f:1a:ba:4c: 5b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D2:78:CD:64:5B:A5:61:E3:F0:11:1D:33:21:C8:A2:73:49:DE:BD X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:71:82:06:9a:17:42:2a:d6:3c:14:12:7e:c6:98:9e:51:72: 02:c6:8c:e3:8a:41:ea:60:69:60:bc:52:79:ed:b2:4e:66:5e: 17:04:cb:90:87:88:89:11:ad:bb:6e:1d:3f:fd:f2:b4:4c:b8: 23:14:5a:08:40:23:84:43:a4:ff:6d:b0:b2:fa:8e:99:4f:5b: bd:83:27:fd:a1:9f:98:5c:72:a8:fc:c7:a7:f1:b1:f9:18:d7: cc:92:d4:9a:8c:36:a0:ef:c3:8b:63:49:9c:b9:ca:90:d1:b8: 09:0f:74:c8:a4:e3:80:69:d1:43:da:66:f2:bc:90:ff:93:67: 9c:0d:72:49:4a:6b:f3:01:16:cb:52:3d:15:f7:9d:a0:74:8f: 7b:ee:09:53:d3:fc:fe:e2:c3:0f:62:65:ae:9c:1e:7a:6f:5d: 7c:a6:de:ff:99:f0:e5:7b:ad:ad:63:b8:24:c6:17:42:8a:ef: eb:07:a3:0f:35:70:08:5e:81:5c:21:ac:be:77:e3:95:ac:84: 76:6d:b6:25:58:ad:c9:e9:e2:84:c2:73:ff:12:ce:32:19:d2: c0:ba:65:f0:7c:32:36:bd:ae:3e:75:90:fb:b0:5d:ca:67:55: 74:0d:a8:cf:b8:db:dd:61:81:25:90:5a:c9:c4:5d:1c:c0:a5: 1f:92:bd:22 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUxMDIwMTgzNDU3WhcNMjUxMDI3MTgzNDU3WjAYMRYwFAYD VQQDEw02OGY2ODBkMi02YzAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqopNw6b1WQjWPcYYOXN5dvkqOMbUsnzZ54J77/FmtY4xv4HCJre23VgkfSEc UpyDiCQ/Lw0fHZD0xfoTSv87V7cLfcFkhvsIDNias9Fb3UKQUWUPGRWAstQ7m7aG L8/7ZI375G9VMBoG6Ce1S1MsCdKUQh8/a7qclxoIn9RNKeVQpQzfSMUpqD+q+F9L uAUu1rFes6atvYDd9xBe6vPrHAHyms5KOLEGdGuvG/harTH+Md/r9LmLnVDOZeaS ZcSRU7ufM9eiNEFu06KDddJcs+MyS715h+Dc1i+ytvPKezBWxoeFI7kXR3JesPGS ucs31IlBL7Q3HNB99z8aukxb4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDDSeM1k W6Vh4/ARHTMhyKJzSd69MB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYcYIGmhdCKtY8FBJ+xpieUXICxozjikHqYGlgvFJ57bJOZl4XBMuQ h4iJEa27bh0//fK0TLgjFFoIQCOEQ6T/bbCy+o6ZT1u9gyf9oZ+YXHKo/Men8bH5 GNfMktSajDag78OLY0mcucqQ0bgJD3TIpOOAadFD2mbyvJD/k2ecDXJJSmvzARbL Uj0V952gdI977glT0/z+4sMPYmWunB56b118pt7/mfDle62tY7gkxhdCiu/rB6MP NXAIXoFcIay+d+OVrIR2bbYlWK3J6eKEwnP/Es4yGdLAumXwfDI2va4+dZD7sF3K Z1V0DajPuNvdYYElkFrJxF0cwKUfkr0i -----END CERTIFICATE-----Generated at Tue Oct 21 11:34:27 2025 by rpki-client