$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: 73Ty0Xo6YaAUq0w81IMf1uHetRAhqoiGksILETx10HA= Subject key identifier: 5F:53:F1:E7:35:DD:6B:AF:C9:77:1B:E1:30:BA:40:80:8B:1E:E5:46 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C65 Signing time: Sat 18 Oct 2025 19:23:18 +0000 Manifest this update: Sat 18 Oct 2025 19:23:18 +0000 Manifest next update: Sat 25 Oct 2025 19:23:18 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: fAEO3wq45ITqDuefwKNY2grMyE0FxiTRnoQVF/rQ0Jo=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 19:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3203 (0xc83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Oct 18 19:23:18 2025 GMT Not After : Oct 25 19:23:18 2025 GMT Subject: CN=68f3e926-28a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ad:2a:22:ec:61:dd:3c:07:59:2e:56:2c:c5: 27:23:95:db:70:d4:9b:02:2d:27:6d:8d:0f:9c:31: eb:97:64:4b:37:4c:80:b6:99:19:4f:7a:76:75:b5: e7:85:1e:ea:f1:1b:0b:a1:be:58:73:7d:f9:ca:ef: 4a:d7:19:de:c9:19:c2:30:62:ec:f6:9b:a3:12:d1: fc:c3:b7:a2:13:61:1b:77:a2:30:79:e3:a8:53:01: 72:5d:dd:ad:af:ef:54:35:c8:47:fd:65:7c:ac:9a: 97:2e:73:cd:e1:c0:13:52:02:aa:e3:71:b3:2c:35: 34:d2:ed:b8:a0:ac:7f:b9:93:6b:87:58:8f:1e:23: e2:a4:77:a1:80:13:f8:06:4a:af:90:8c:aa:47:bd: 5a:51:6e:fc:ea:e0:d4:41:62:3f:7a:dc:b9:27:a9: 7a:72:f3:e2:df:fd:cd:7d:46:62:df:1a:49:8b:d9: af:1a:e9:f2:93:56:f3:fc:29:42:2e:ff:3d:4b:7c: 3a:7e:13:e6:e3:d5:60:91:5d:56:8d:85:29:df:cc: 1d:68:15:41:6e:4b:05:c9:cb:36:99:f7:82:1a:ce: 1b:83:8e:3a:79:34:ae:25:93:72:f6:25:b9:88:ec: 5b:39:c6:26:c9:6c:d1:68:1c:7b:33:94:ed:93:a6: 1a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:53:F1:E7:35:DD:6B:AF:C9:77:1B:E1:30:BA:40:80:8B:1E:E5:46 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 07:81:c7:b5:5c:2b:89:aa:f9:bb:6f:a7:7c:26:3c:3c:27:78: 76:e9:26:d0:17:f2:71:1e:e5:b3:b0:d4:79:aa:17:82:49:29: 6f:68:d8:3f:e1:cc:47:e0:af:9f:40:3f:c5:36:43:2b:84:5b: 84:69:9c:bd:98:1b:96:04:9b:be:a6:29:67:22:2e:b9:5d:cb: b1:df:9d:1c:eb:4e:18:a1:dd:9b:d4:3f:9b:2c:f5:e3:48:d0: 7f:1a:07:b6:30:90:cd:bf:11:1c:3e:72:ab:2b:a5:b9:b9:de: fa:60:51:c5:4f:10:ce:42:17:99:e4:68:2d:26:fb:54:3f:98: 78:60:15:58:24:86:9d:21:d2:83:5d:ab:76:12:ea:79:77:fb: fb:31:9a:d1:0c:e7:94:99:89:b8:f5:d3:86:39:01:65:ed:6a: 20:6e:d7:f4:a7:00:22:32:44:ed:21:fc:3f:e9:d5:88:88:f1: 54:4e:ff:ac:a2:ec:7e:e8:24:24:00:3c:59:4f:c7:70:3b:37: ca:10:36:0f:4f:9c:81:76:c3:e5:f6:be:df:dd:34:c2:33:de: a4:2a:55:98:62:4f:af:66:e3:0a:98:a1:58:d1:5e:1f:45:0d: 51:83:8b:b6:94:5e:74:e4:b8:94:99:e3:d6:d4:19:3f:f7:32: 5e:bc:ed:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUxMDE4MTkyMzE4WhcNMjUxMDI1MTkyMzE4WjAYMRYwFAYD VQQDEw02OGYzZTkyNi0yOGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2K0qIuxh3TwHWS5WLMUnI5XbcNSbAi0nbY0PnDHrl2RLN0yAtpkZT3p2dbXn hR7q8RsLob5Yc335yu9K1xneyRnCMGLs9pujEtH8w7eiE2Ebd6IweeOoUwFyXd2t r+9UNchH/WV8rJqXLnPN4cATUgKq43GzLDU00u24oKx/uZNrh1iPHiPipHehgBP4 BkqvkIyqR71aUW786uDUQWI/ety5J6l6cvPi3/3NfUZi3xpJi9mvGunyk1bz/ClC Lv89S3w6fhPm49VgkV1WjYUp38wdaBVBbksFycs2mfeCGs4bg446eTSuJZNy9iW5 iOxbOcYmyWzRaBx7M5Ttk6Ya5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF9T8ec1 3WuvyXcb4TC6QICLHuVGMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAHgce1XCuJqvm7b6d8Jjw8J3h26SbQF/JxHuWzsNR5qheCSSlvaNg/ 4cxH4K+fQD/FNkMrhFuEaZy9mBuWBJu+pilnIi65Xcux350c604Yod2b1D+bLPXj SNB/Gge2MJDNvxEcPnKrK6W5ud76YFHFTxDOQheZ5GgtJvtUP5h4YBVYJIadIdKD Xat2Eup5d/v7MZrRDOeUmYm49dOGOQFl7Wogbtf0pwAiMkTtIfw/6dWIiPFUTv+s oux+6CQkADxZT8dwOzfKEDYPT5yBdsPl9r7f3TTCM96kKlWYYk+vZuMKmKFY0V4f RQ1Rg4u2lF505LiUmePW1Bk/9zJevO21 -----END CERTIFICATE-----Generated at Mon Oct 20 04:18:29 2025 by rpki-client