$ rpki-client -vvf rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft File: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft (raw, json) Hash identifier: 0efQu1ODNhSj+p/6MRNKKiglaYeg7kDit34skhJpf8U= Subject key identifier: 38:30:4A:3C:E4:E4:03:11:56:05:85:84:45:E0:D6:E2:AA:66:E3:94 Authority key identifier: 97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 Certificate issuer: /CN=A9175762/serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Certificate serial: 0628 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft Manifest number: 0622 Signing time: Sun 19 Oct 2025 00:21:26 +0000 Manifest this update: Sun 19 Oct 2025 00:21:26 +0000 Manifest next update: Sun 26 Oct 2025 00:21:26 +0000 Files and hashes: 1: l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl (hash: gy5zHx05o7lBdSutLlqSUciOi5n0Cdqcu0nxiEf18xA=) 2: 9DD99914B85311EBA5D4171FC4F9AE02.roa (hash: sA3Y6loeO+Du++cXdVYeey7TebrDsgcCCcYdqCjW+ns=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1576 (0x628) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9175762, serialNumber=97A126256F96966ED4CAE1DEDD0EF940D30007A6 Validity Not Before: Oct 19 00:21:26 2025 GMT Not After : Oct 26 00:21:26 2025 GMT Subject: CN=68f42f06-64a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:6b:93:1f:65:e0:91:2a:ee:07:b6:51:51:03: b2:18:1a:65:dd:35:1e:60:78:86:e9:79:d7:e6:74: a4:b0:37:45:3c:57:76:7f:66:85:d9:c3:e4:2c:42: 6c:66:93:b9:40:4e:85:a1:f0:11:9a:69:85:ac:20: 61:da:1c:d4:02:87:b4:45:e5:0c:9c:12:13:e8:c4: 92:f5:cb:c4:e2:b0:b9:b4:c8:81:fc:be:06:3f:a7: 6e:47:4d:42:e4:61:a8:bd:ef:61:b2:54:b7:75:97: 42:37:7a:b3:89:25:5a:45:30:a7:7b:aa:6b:e5:58: 3e:ad:48:73:56:ae:63:3f:34:97:ab:30:b0:e1:28: e7:98:00:27:df:c3:0e:c2:0b:14:d7:25:5b:22:ab: 81:c0:55:cc:29:2d:cb:c2:27:e2:9b:18:49:b1:71: 52:27:86:53:d7:09:fa:cf:29:76:25:46:31:13:c7: 48:7e:3f:24:26:b7:81:8f:56:ec:dc:ee:49:7e:91: 9d:98:65:95:0e:c7:f1:aa:6d:6f:b3:70:ff:9b:3b: c4:00:4f:24:0c:35:d7:30:6a:41:e2:95:b9:26:0a: f3:08:5c:0a:ee:51:b0:60:4b:ce:d3:d3:09:38:e0: 30:8b:d6:72:89:3c:92:36:03:7b:eb:43:50:86:12: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:30:4A:3C:E4:E4:03:11:56:05:85:84:45:E0:D6:E2:AA:66:E3:94 X509v3 Authority Key Identifier: keyid:97:A1:26:25:6F:96:96:6E:D4:CA:E1:DE:DD:0E:F9:40:D3:00:07:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9175762/C343692AB85111EB9F80A81CC4F9AE02/l6EmJW-Wlm7UyuHe3Q75QNMAB6Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption f4:c6:37:61:b0:1d:c3:16:68:d9:47:95:7c:99:d1:df:28:91: 19:fa:28:de:c9:b7:e9:70:bb:64:15:c4:c1:a3:5c:f7:b7:f8: b9:9b:eb:40:aa:7f:e7:77:a9:e0:83:8a:d7:4c:6a:ff:48:cf: 75:ea:52:45:b3:4b:45:9f:a7:91:19:bd:5a:84:fd:31:c3:6d: b5:b2:3c:ab:f0:b8:67:e8:59:e8:d1:4d:e8:fc:fb:0f:41:c3: 88:5c:71:3f:b4:bb:08:9c:91:0a:e9:b0:c0:d0:0e:36:59:69: ff:44:8f:54:e8:a0:22:b6:04:25:d1:ef:2b:b8:7b:8b:df:82: 5d:73:fd:07:56:c3:a7:24:17:35:2e:c7:82:31:e0:1a:bf:41: cc:3a:95:5e:f6:be:e2:0a:25:9b:b1:7c:02:d2:e5:a8:23:69: ed:a8:9c:21:64:5b:20:8d:7e:65:c5:d8:ad:b3:f4:be:55:47: 86:8d:19:37:73:2c:4b:cb:9e:45:43:db:b7:c0:12:1f:f6:cd: d6:39:bb:61:98:f4:e8:23:c6:5e:07:62:c6:41:6b:fc:ed:0c: bf:33:c5:a7:41:7c:eb:9c:a0:3f:d0:f1:5b:a2:b8:bf:5b:09: 30:f0:dc:35:41:22:5d:f0:3d:0e:70:75:74:7a:c3:c7:ff:c7: 4d:e7:0f:ac -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU3NjIxMTAvBgNVBAUTKDk3QTEyNjI1NkY5Njk2NkVENENBRTFERUREMEVGOTQw RDMwMDA3QTYwHhcNMjUxMDE5MDAyMTI2WhcNMjUxMDI2MDAyMTI2WjAYMRYwFAYD VQQDEw02OGY0MmYwNi02NGEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWuTH2XgkSruB7ZRUQOyGBpl3TUeYHiG6XnX5nSksDdFPFd2f2aF2cPkLEJs ZpO5QE6FofARmmmFrCBh2hzUAoe0ReUMnBIT6MSS9cvE4rC5tMiB/L4GP6duR01C 5GGove9hslS3dZdCN3qziSVaRTCne6pr5Vg+rUhzVq5jPzSXqzCw4SjnmAAn38MO wgsU1yVbIquBwFXMKS3LwifimxhJsXFSJ4ZT1wn6zyl2JUYxE8dIfj8kJreBj1bs 3O5JfpGdmGWVDsfxqm1vs3D/mzvEAE8kDDXXMGpB4pW5JgrzCFwK7lGwYEvO09MJ OOAwi9ZyiTySNgN760NQhhKjCQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgwSjzk 5AMRVgWFhEXg1uKqZuOUMB8GA1UdIwQYMBaAFJehJiVvlpZu1Mrh3t0O+UDTAAem MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTc2Mi9DMzQzNjkyQUI4 NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xtN1V5dUhlM1E3NVFOTUFC NlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2w2RW1KVy1XbG03VXl1SGUzUTc1UU5NQUI2WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 NTc2Mi9DMzQzNjkyQUI4NTExMUVCOUY4MEE4MUNDNEY5QUUwMi9sNkVtSlctV2xt N1V5dUhlM1E3NVFOTUFCNlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQD0xjdhsB3DFmjZR5V8mdHfKJEZ+ijeybfpcLtkFcTBo1z3t/i5m+tA qn/nd6ngg4rXTGr/SM916lJFs0tFn6eRGb1ahP0xw221sjyr8Lhn6Fno0U3o/PsP QcOIXHE/tLsInJEK6bDA0A42WWn/RI9U6KAitgQl0e8ruHuL34Jdc/0HVsOnJBc1 LseCMeAav0HMOpVe9r7iCiWbsXwC0uWoI2ntqJwhZFsgjX5lxdits/S+VUeGjRk3 cyxLy55FQ9u3wBIf9s3WObthmPToI8ZeB2LGQWv87Qy/M8WnQXzrnKA/0PFbori/ Wwkw8Nw1QSJd8D0OcHV0esPH/8dN5w+s -----END CERTIFICATE-----Generated at Sun Oct 19 23:22:38 2025 by rpki-client