$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json) Hash identifier: kT/FSxjxr8jWHgLWUQrDzMXhn19kuumTNgtZGuHJa98= Subject key identifier: D9:7E:D1:5A:67:D1:EE:12:E9:1D:8C:54:1F:4D:58:80:1B:87:5B:CD Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: 17 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft Manifest number: 16 Signing time: Sun 19 Oct 2025 11:26:27 +0000 Manifest this update: Sun 19 Oct 2025 11:26:26 +0000 Manifest next update: Sun 26 Oct 2025 11:26:26 +0000 Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: I5TLR83G8wJtgNrWub2XtlZUc9ObBQwobA49KD5Ttms=) 2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: FS6hEH/j55OHJQ+TqNcRwQCoVjVrvVyoMfAtx5CJ3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:26:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Oct 19 11:26:26 2025 GMT Not After : Oct 26 11:26:26 2025 GMT Subject: CN=68f4cae2-9699 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2e:f6:03:0f:4e:11:0b:8e:ec:19:12:cb:97: b2:7a:1b:52:87:df:44:e3:a4:e8:56:ea:5f:21:03: f6:35:32:53:16:96:e0:97:1b:7c:e1:64:83:98:93: 4f:e9:f4:19:52:61:5c:bf:b2:a0:41:5e:a4:02:e7: b4:41:d0:14:db:45:cb:2e:08:83:3a:1e:3a:b4:a8: 0e:fc:ff:65:2b:0f:42:98:99:54:2b:1d:2e:94:07: cb:19:53:08:1d:65:52:6f:18:43:bf:a7:f4:c2:fa: 2a:05:62:22:e5:81:9e:be:50:f3:ad:8e:bf:3b:22: 3d:6f:49:c9:d0:48:60:2d:82:29:e8:8c:8d:6a:6c: 74:5a:0d:9c:43:3e:60:65:cc:10:52:b3:be:e6:6d: 59:3d:e6:27:4b:89:e9:1d:1a:ea:8e:cc:76:34:f0: 47:61:95:9e:a7:38:02:c4:e4:09:b1:50:42:1b:09: 8c:50:8e:f2:9a:44:86:76:15:6f:47:70:0a:36:8b: a1:b5:35:3c:9c:ad:d0:af:82:ed:90:a0:2b:60:83: 13:4a:b6:20:2e:a4:9e:05:53:91:c1:8d:af:b9:e0: ed:49:53:e3:0d:ff:66:f6:d9:20:92:1d:67:34:cb: b2:f4:f4:68:23:cf:54:d9:33:76:3f:88:3c:ec:66: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:7E:D1:5A:67:D1:EE:12:E9:1D:8C:54:1F:4D:58:80:1B:87:5B:CD X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:6c:4c:6c:d4:e9:a8:1e:ad:2c:3c:c8:a2:5b:58:e6:0a:11: d7:e7:d3:9b:0a:01:12:c0:8d:8d:a7:29:98:55:ae:54:7f:1d: 10:d4:85:12:0d:ea:ca:ac:6a:2d:bd:cc:b0:45:7f:ab:48:21: 8e:72:a9:59:67:78:16:fb:ef:c7:69:23:18:af:f0:0a:66:85: 9c:37:9d:da:ea:4d:1d:99:4a:47:65:a6:3b:f9:2d:79:ea:65: 97:96:4a:38:d3:13:68:21:8a:5b:1e:4f:7b:ab:c8:05:44:59: b0:cd:bd:29:f3:f6:04:42:5f:5c:75:96:62:00:c4:af:a9:60: dc:b8:54:65:cd:f5:fc:02:30:9b:17:69:e5:95:2c:2e:b6:d5: 85:5e:10:72:a8:93:c7:5a:a9:56:5b:1b:88:44:e2:b6:48:e0: ca:a1:13:90:23:b9:6b:2a:1a:e3:d0:bd:ac:a8:67:45:b1:6f: ac:e8:b2:82:77:15:3c:8e:07:d2:61:2d:75:9a:2e:2a:56:6b: 43:62:43:ee:47:55:d5:f1:cf:20:5a:9d:0a:9c:08:5d:39:85: 6c:5f:78:81:e6:4a:fb:a8:f6:74:70:4b:3b:76:52:73:7a:8f: 53:d7:26:1a:58:f1:68:ef:86:6b:fb:8d:84:e8:d3:dd:d1:af: 86:38:2f:96 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoMjdBMEEyRERGMzVDMTk3RDRGQzI2MjkwQzI5NTdENDk2 OENGMTU4RjAeFw0yNTEwMTkxMTI2MjZaFw0yNTEwMjYxMTI2MjZaMBgxFjAUBgNV BAMTDTY4ZjRjYWUyLTk2OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVLvYDD04RC47sGRLLl7J6G1KH30TjpOhW6l8hA/Y1MlMWluCXG3zhZIOYk0/p 9BlSYVy/sqBBXqQC57RB0BTbRcsuCIM6Hjq0qA78/2UrD0KYmVQrHS6UB8sZUwgd ZVJvGEO/p/TC+ioFYiLlgZ6+UPOtjr87Ij1vScnQSGAtginojI1qbHRaDZxDPmBl zBBSs77mbVk95idLiekdGuqOzHY08EdhlZ6nOALE5AmxUEIbCYxQjvKaRIZ2FW9H cAo2i6G1NTycrdCvgu2QoCtggxNKtiAupJ4FU5HBja+54O1JU+MN/2b22SCSHWc0 y7L09Ggjz1TZM3Y/iDzsZoNZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU2X7RWmfR 7hLpHYxUH01YgBuHW80wHwYDVR0jBBgwFoAUJ6Ci3fNcGX1PwmKQwpV9SWjPFY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0E2QzU0MEY2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjZDaTNmTmNHWDFQd21LUXdwVjlTV2pQRlk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0E2QzU0MEY2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gx UHdtS1F3cFY5U1dqUEZZOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC9sTGzU6agerSw8yKJbWOYKEdfn05sKARLAjY2nKZhVrlR/HRDUhRIN 6sqsai29zLBFf6tIIY5yqVlneBb778dpIxiv8ApmhZw3ndrqTR2ZSkdlpjv5LXnq ZZeWSjjTE2ghilseT3uryAVEWbDNvSnz9gRCX1x1lmIAxK+pYNy4VGXN9fwCMJsX aeWVLC621YVeEHKok8daqVZbG4hE4rZI4MqhE5AjuWsqGuPQvayoZ0Wxb6zosoJ3 FTyOB9JhLXWaLipWa0NiQ+5HVdXxzyBanQqcCF05hWxfeIHmSvuo9nRwSzt2UnN6 j1PXJhpY8Wjvhmv7jYTo093Rr4Y4L5Y= -----END CERTIFICATE-----Generated at Mon Oct 20 17:59:11 2025 by rpki-client