$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft File: i6r6xGXwjQR9LXCUulKA19OYg2Y.mft (raw, json) Hash identifier: tI1EefyomBKVXB/JcUa5JMhHXUcS15pylEmVwALOlvU= Subject key identifier: BD:C1:CD:0B:9B:82:B0:52:61:95:31:6C:42:16:D4:5C:CB:A2:22:8C Authority key identifier: 8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 Certificate issuer: /CN=A917C716/serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Certificate serial: 02C2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft Manifest number: 0403 Signing time: Sun 19 Oct 2025 03:41:03 +0000 Manifest this update: Sun 19 Oct 2025 03:41:03 +0000 Manifest next update: Sun 26 Oct 2025 03:41:03 +0000 Files and hashes: 1: i6r6xGXwjQR9LXCUulKA19OYg2Y.crl (hash: TaDpd3phlQktvZO+cg7FlAngN6cUfC4wit1QSKqi0co=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 706 (0x2c2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C716, serialNumber=8BAAFAC465F08D047D2D7094BA5280D7D3988366 Validity Not Before: Oct 19 03:41:03 2025 GMT Not After : Oct 26 03:41:03 2025 GMT Subject: CN=68f45dcf-9483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:36:e4:a0:c3:d3:15:09:57:e9:3d:5c:f2:29: d6:a6:49:da:b5:ff:e5:f1:32:ef:37:0d:68:83:07: d3:0e:8a:77:1e:6a:f8:61:74:1d:27:2d:37:e7:e8: 93:ec:a3:ba:d9:ce:ae:5f:84:cd:83:e2:61:56:18: f6:5b:fc:4e:ef:cb:2f:ec:8e:58:3d:a4:ed:52:f6: da:b3:3b:7f:11:f2:d6:06:a3:e2:63:35:ce:a3:1c: f3:80:0d:8d:6b:bb:c9:3a:fb:7e:65:9a:c8:65:e4: 6b:69:5c:19:ea:f5:a9:34:0b:d2:e2:78:00:d0:c5: 0f:45:71:f7:e6:fa:61:09:c4:61:52:8a:f3:88:c5: 6e:30:36:1e:67:17:48:87:49:45:b8:cb:1d:1e:a2: d8:82:ed:dd:da:dc:18:4f:1b:23:c6:58:b2:b7:e0: 1a:52:ee:05:37:cb:82:e1:83:d6:1c:81:91:94:06: a9:a9:f6:33:3c:70:56:03:87:35:aa:3f:96:14:c2: 4e:79:c5:1b:1f:15:f3:0e:1a:d5:c1:e3:06:64:be: 85:36:9b:5d:54:4f:6e:79:90:37:69:b7:56:67:76: 0b:82:4e:bc:ec:79:38:62:31:89:ab:5a:83:b0:a2: 1e:0a:75:13:4e:ec:30:50:d7:84:87:fb:da:55:4b: d2:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C1:CD:0B:9B:82:B0:52:61:95:31:6C:42:16:D4:5C:CB:A2:22:8C X509v3 Authority Key Identifier: keyid:8B:AA:FA:C4:65:F0:8D:04:7D:2D:70:94:BA:52:80:D7:D3:98:83:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/i6r6xGXwjQR9LXCUulKA19OYg2Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/i6r6xGXwjQR9LXCUulKA19OYg2Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:d9:e5:89:63:5e:74:96:1e:4e:bf:ef:28:7c:b0:de:7d:a4: 12:59:e3:ca:86:f4:75:a3:b1:ff:df:a0:b0:69:25:1b:84:9f: 9a:9a:68:a7:ed:f4:35:b3:14:6d:d0:12:ca:d7:3b:1f:ab:1d: 5c:36:17:9b:6b:b3:23:a5:c5:c0:53:67:bf:d4:11:19:df:2c: d3:64:13:a5:24:79:04:3c:49:ee:43:a8:e2:37:1e:0d:6e:a0: bc:38:d7:22:41:f8:5f:5b:fb:e5:22:5b:e0:7d:b9:79:fa:89: 37:6a:3f:c4:ac:54:3a:e9:23:e6:ff:00:0e:1e:f5:1b:70:8e: 18:a0:94:e0:bb:6c:1e:69:23:7c:c3:08:f3:c5:69:78:f5:52: b5:17:a2:43:5e:e5:22:1e:4e:0c:a1:f7:54:b4:a8:2c:b0:6c: 33:aa:a1:2e:a4:d7:62:b3:4d:90:8f:1b:b1:51:9e:31:12:fe: 34:e0:fb:23:50:d9:45:46:31:42:0c:d0:4c:76:8e:9b:eb:6c: 7a:75:5b:4c:1b:3a:3e:dc:1b:82:3e:f6:d7:dc:71:08:68:b3: 8e:66:b8:f6:3e:ed:6a:18:2e:1c:f5:b9:83:94:48:26:9d:0e: ec:a4:bc:d9:0a:de:ad:44:f3:d6:7c:79:39:45:e9:54:e2:53: 33:4a:d8:17 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0M3MTYxMTAvBgNVBAUTKDhCQUFGQUM0NjVGMDhEMDQ3RDJENzA5NEJBNTI4MEQ3 RDM5ODgzNjYwHhcNMjUxMDE5MDM0MTAzWhcNMjUxMDI2MDM0MTAzWjAYMRYwFAYD VQQDEw02OGY0NWRjZi05NDgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwjbkoMPTFQlX6T1c8inWpknatf/l8TLvNw1ogwfTDop3Hmr4YXQdJy035+iT 7KO62c6uX4TNg+JhVhj2W/xO78sv7I5YPaTtUvbaszt/EfLWBqPiYzXOoxzzgA2N a7vJOvt+ZZrIZeRraVwZ6vWpNAvS4ngA0MUPRXH35vphCcRhUorziMVuMDYeZxdI h0lFuMsdHqLYgu3d2twYTxsjxliyt+AaUu4FN8uC4YPWHIGRlAapqfYzPHBWA4c1 qj+WFMJOecUbHxXzDhrVweMGZL6FNptdVE9ueZA3abdWZ3YLgk687Hk4YjGJq1qD sKIeCnUTTuwwUNeEh/vaVUvSpwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3BzQub grBSYZUxbEIW1FzLoiKMMB8GA1UdIwQYMBaAFIuq+sRl8I0EfS1wlLpSgNfTmINm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QzcxNi80REI5Q0FDNDE0 MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pRUjlMWENVdWxLQTE5T1ln MlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2k2cjZ4R1h3alFSOUxYQ1V1bEtBMTlPWWcyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QzcxNi80REI5Q0FDNDE0MDIxMUVEQjk2NjM0MTVDNEY5QUUwMi9pNnI2eEdYd2pR UjlMWENVdWxLQTE5T1lnMlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA52eWJY150lh5Ov+8ofLDefaQSWePKhvR1o7H/36CwaSUbhJ+ammin 7fQ1sxRt0BLK1zsfqx1cNheba7MjpcXAU2e/1BEZ3yzTZBOlJHkEPEnuQ6jiNx4N bqC8ONciQfhfW/vlIlvgfbl5+ok3aj/ErFQ66SPm/wAOHvUbcI4YoJTgu2weaSN8 wwjzxWl49VK1F6JDXuUiHk4MofdUtKgssGwzqqEupNdis02QjxuxUZ4xEv404Psj UNlFRjFCDNBMdo6b62x6dVtMGzo+3BuCPvbX3HEIaLOOZrj2Pu1qGC4c9bmDlEgm nQ7spLzZCt6tRPPWfHk5RelU4lMzStgX -----END CERTIFICATE-----Generated at Mon Oct 20 01:49:21 2025 by rpki-client