$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: 5whunBa4KCmu6XikTRglY1Z6s3Lm0JzTnwrfJmdNrak= Subject key identifier: BD:BF:8E:A1:26:91:DE:CD:E8:15:52:02:C0:8B:36:5E:06:B6:FE:AE Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0AB6 Signing time: Mon 20 Oct 2025 20:16:44 +0000 Manifest this update: Mon 20 Oct 2025 20:16:43 +0000 Manifest next update: Mon 27 Oct 2025 20:16:43 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: YLurJ9hLVylhyU1eCQNLZg97v3STc8ptBZ3/WO4Ygz8=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2773 (0xad5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Oct 20 20:16:43 2025 GMT Not After : Oct 27 20:16:43 2025 GMT Subject: CN=68f698ac-8ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f7:83:34:39:d5:9e:13:d7:63:08:13:ef:a5: 89:04:af:34:af:74:5d:f0:51:58:0d:b6:6e:3e:f1: 45:1d:8f:ea:42:52:32:c6:a6:ae:90:07:53:38:e9: 80:2d:19:e9:dc:0b:7d:c5:62:e4:f3:48:bb:dc:6e: 71:94:8b:57:0c:5f:df:88:f7:36:ac:a7:ad:86:88: 4f:84:a4:1b:41:b0:3c:49:c2:80:57:a2:74:79:25: d6:9d:cd:4d:b4:0a:0a:b5:6b:1a:e8:3d:8d:32:b7: 26:cb:41:60:41:27:74:47:12:18:3a:88:b3:02:86: df:00:83:59:19:c3:6c:0a:ee:88:54:4a:98:61:2a: 09:46:ed:26:07:ef:f9:dc:d8:56:62:64:72:8d:19: c4:2b:70:ed:8c:87:c0:4e:8f:b8:d8:56:9e:62:ab: bd:96:18:92:85:59:47:03:87:ff:35:dc:4a:61:1f: 2a:ab:42:27:83:54:b1:24:2a:55:19:a9:a6:12:9e: 8e:a1:58:a2:dd:40:97:c2:b3:2c:63:8f:de:54:4b: 40:ea:50:be:03:bb:24:47:ce:f3:8f:64:a7:db:08: 61:89:5c:78:3f:da:b2:42:02:40:b7:83:e5:e7:e9: a2:bf:db:fd:64:b6:f8:6d:66:3e:13:79:d7:87:78: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:BF:8E:A1:26:91:DE:CD:E8:15:52:02:C0:8B:36:5E:06:B6:FE:AE X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:e1:80:51:c3:31:3e:97:b7:49:5a:cf:18:9b:c3:8f:5d:8c: 14:e7:de:85:49:3f:02:4e:fe:b5:ff:9f:46:a8:20:99:ad:b0: 70:7c:d1:84:3e:86:14:06:b2:c3:23:31:d6:c2:91:93:63:9b: 4f:a1:5d:2f:b3:ef:97:c8:c6:15:a6:db:f3:e8:4a:fc:62:01: 79:a0:17:ff:b4:35:cc:4a:0c:25:75:e2:b4:3e:0a:88:d6:88: 9c:9e:8a:b8:19:0d:1a:d5:19:55:21:0e:73:7e:58:24:21:ca: 54:d2:5b:c0:d6:9c:2f:fa:f0:f2:30:58:63:bc:a3:5c:78:82: 8a:53:22:79:b2:05:7a:b3:bc:6f:7d:cc:8d:ec:5b:21:fe:85: b5:ed:44:f3:cc:4b:50:45:c1:f2:d0:ca:69:de:17:6e:24:d6: db:84:17:d2:56:57:27:73:66:23:6d:b5:73:e7:e2:12:8f:77: 19:29:b5:c7:46:44:31:0b:bc:cd:77:d8:56:03:01:93:88:0b: 74:68:09:7c:1a:2f:37:25:10:ba:f2:f8:e3:4d:9e:f5:41:1e: 8b:b0:63:90:eb:88:4d:22:54:0d:3d:7e:79:cf:0c:c7:fa:f8: 46:66:be:f1:a3:9f:cc:13:e2:63:15:54:79:43:2f:18:40:bf: 93:95:4c:a3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUxMDIwMjAxNjQzWhcNMjUxMDI3MjAxNjQzWjAYMRYwFAYD VQQDEw02OGY2OThhYy04Y2NjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv/eDNDnVnhPXYwgT76WJBK80r3Rd8FFYDbZuPvFFHY/qQlIyxqaukAdTOOmA LRnp3At9xWLk80i73G5xlItXDF/fiPc2rKethohPhKQbQbA8ScKAV6J0eSXWnc1N tAoKtWsa6D2NMrcmy0FgQSd0RxIYOoizAobfAINZGcNsCu6IVEqYYSoJRu0mB+/5 3NhWYmRyjRnEK3DtjIfATo+42FaeYqu9lhiShVlHA4f/NdxKYR8qq0Ing1SxJCpV GammEp6OoVii3UCXwrMsY4/eVEtA6lC+A7skR87zj2Sn2whhiVx4P9qyQgJAt4Pl 5+miv9v9ZLb4bWY+E3nXh3hc9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2/jqEm kd7N6BVSAsCLNl4Gtv6uMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAC4YBRwzE+l7dJWs8Ym8OPXYwU596FST8CTv61/59GqCCZrbBwfNGE PoYUBrLDIzHWwpGTY5tPoV0vs++XyMYVptvz6Er8YgF5oBf/tDXMSgwldeK0PgqI 1oicnoq4GQ0a1RlVIQ5zflgkIcpU0lvA1pwv+vDyMFhjvKNceIKKUyJ5sgV6s7xv fcyN7Fsh/oW17UTzzEtQRcHy0Mpp3hduJNbbhBfSVlcnc2YjbbVz5+ISj3cZKbXH RkQxC7zNd9hWAwGTiAt0aAl8Gi83JRC68vjjTZ71QR6LsGOQ64hNIlQNPX55zwzH +vhGZr7xo5/ME+JjFVR5Qy8YQL+TlUyj -----END CERTIFICATE-----Generated at Mon Oct 20 21:54:25 2025 by rpki-client