$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: 9Sm6aiSufZjto/Cly8Fe0rY6XJa1K2xuhUf8M901kl8= Subject key identifier: 52:4B:40:56:7B:58:87:C4:9E:36:C7:6C:70:67:00:49:64:9C:B6:BF Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34D2 Signing time: Sat 18 Oct 2025 14:55:46 +0000 Manifest this update: Sat 18 Oct 2025 14:55:46 +0000 Manifest next update: Sat 25 Oct 2025 14:55:46 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: r1eDPibFmyTuN9tz2M8h7UcqOP9KYhPCmDMS4OIkE5s=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 14:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Oct 18 14:55:46 2025 GMT Not After : Oct 25 14:55:46 2025 GMT Subject: CN=68f3aa72-9585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:03:ff:a0:c5:da:fd:0e:1f:bb:f9:31:32:0d: 2f:8b:69:a6:98:64:4f:62:43:18:5e:3c:ab:ec:f7: 76:60:f1:e8:13:dd:c2:e7:2f:30:1e:fc:a7:b0:d3: dc:74:98:db:af:47:0c:e9:07:bb:aa:a5:d1:f6:1f: 1a:fd:0e:14:75:cc:73:19:1e:85:25:19:ec:fc:1f: 7c:ec:e5:18:81:c3:b0:7f:09:89:49:fb:0a:0c:4c: 0f:b5:42:0c:9c:dc:ed:e4:1f:48:79:f6:2e:15:06: 6e:b1:b3:31:fe:5f:7c:5c:c8:7a:42:98:88:ac:07: ed:3e:0d:36:0a:9a:2d:80:3f:1e:c3:c5:a6:8c:11: a0:7f:b4:ff:df:ab:ef:bb:25:0f:5a:dd:6e:26:57: 77:81:e0:95:ee:21:3b:44:c8:0c:ae:42:3f:a7:d0: 5e:39:d0:22:8d:58:53:81:79:f1:c2:dd:e5:55:64: 38:ea:6a:82:54:41:ba:a7:c9:02:28:e0:5b:1b:3b: d1:73:b6:d2:b3:f8:77:c3:09:46:e2:6d:05:ab:a6: 74:ee:93:39:3f:00:14:e5:ac:56:55:80:da:81:f0: 49:7c:8c:f7:43:26:5a:f0:a0:a4:fb:b9:80:3e:95: 54:8f:94:ae:63:0e:4c:e9:e1:66:7f:cb:c6:8c:dd: ef:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4B:40:56:7B:58:87:C4:9E:36:C7:6C:70:67:00:49:64:9C:B6:BF X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:a2:76:22:71:6b:9d:14:85:72:23:89:e4:7e:82:5d:b6:5e: e3:7a:09:0a:b9:7b:e6:5a:77:2f:b3:be:28:43:ab:64:ed:2d: bb:93:01:0c:b7:78:95:73:aa:7c:dd:32:1b:c5:e6:76:d4:0d: 82:5f:20:3c:db:0c:07:c8:e5:04:5d:e1:71:d0:55:33:25:1e: f2:e3:a2:50:13:e5:67:de:d6:87:7a:1d:a2:f2:e0:a8:90:7b: 26:d5:4c:65:84:9d:55:fe:62:64:3a:41:6c:83:f0:a1:ff:e1: 57:c4:73:bb:4b:12:6e:2e:31:d5:e3:e0:e3:69:f1:4e:91:70: 2a:35:97:fa:0c:41:6e:c2:ba:4e:b8:ec:47:7f:a6:cf:18:21: ca:39:63:dd:74:8a:40:0f:a9:c7:54:f3:24:b9:5c:5b:ac:e7: f3:7f:85:a7:2a:73:8f:6b:a2:66:96:3b:e9:7c:6b:45:49:d9: f5:dc:48:fa:29:34:a5:69:b6:62:78:23:de:45:02:2b:51:d2: 74:e5:4e:78:18:17:78:c4:58:88:96:ed:f6:d9:fe:b1:81:3f: a0:f1:90:4c:af:62:6a:df:0f:9b:3e:20:84:2f:3e:a9:96:aa: fb:42:c0:8e:29:2b:1a:c7:98:ee:3b:54:83:e1:e6:d0:69:4d: ed:79:59:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUxMDE4MTQ1NTQ2WhcNMjUxMDI1MTQ1NTQ2WjAYMRYwFAYD VQQDEw02OGYzYWE3Mi05NTg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApgP/oMXa/Q4fu/kxMg0vi2mmmGRPYkMYXjyr7Pd2YPHoE93C5y8wHvynsNPc dJjbr0cM6Qe7qqXR9h8a/Q4UdcxzGR6FJRns/B987OUYgcOwfwmJSfsKDEwPtUIM nNzt5B9IefYuFQZusbMx/l98XMh6QpiIrAftPg02CpotgD8ew8WmjBGgf7T/36vv uyUPWt1uJld3geCV7iE7RMgMrkI/p9BeOdAijVhTgXnxwt3lVWQ46mqCVEG6p8kC KOBbGzvRc7bSs/h3wwlG4m0Fq6Z07pM5PwAU5axWVYDagfBJfIz3QyZa8KCk+7mA PpVUj5SuYw5M6eFmf8vGjN3vgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFJLQFZ7 WIfEnjbHbHBnAElknLa/MB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoonYicWudFIVyI4nkfoJdtl7jegkKuXvmWncvs74oQ6tk7S27kwEM t3iVc6p83TIbxeZ21A2CXyA82wwHyOUEXeFx0FUzJR7y46JQE+Vn3taHeh2i8uCo kHsm1UxlhJ1V/mJkOkFsg/Ch/+FXxHO7SxJuLjHV4+DjafFOkXAqNZf6DEFuwrpO uOxHf6bPGCHKOWPddIpAD6nHVPMkuVxbrOfzf4WnKnOPa6JmljvpfGtFSdn13Ej6 KTSlabZieCPeRQIrUdJ05U54GBd4xFiIlu322f6xgT+g8ZBMr2Jq3w+bPiCELz6p lqr7QsCOKSsax5juO1SD4ebQaU3teVlx -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:15 2025 by rpki-client