$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: BFeoEfeKt1Iut0rbuPcLSGFf0y09RDvKfu5eRVuztvA= Subject key identifier: A5:68:12:C5:3A:06:C5:C7:1C:0A:61:0E:F1:70:15:8F:B1:45:AE:6F Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: 0154 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: 014D Signing time: Sun 19 Oct 2025 07:03:31 +0000 Manifest this update: Sun 19 Oct 2025 07:03:31 +0000 Manifest next update: Sun 26 Oct 2025 07:03:31 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: CUIfmqTMgfhxeNlhzB4PRbmuRRlIS5EHRJv9mqbOV2M=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=) 3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:03:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 340 (0x154) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: Oct 19 07:03:31 2025 GMT Not After : Oct 26 07:03:31 2025 GMT Subject: CN=68f48d43-3bb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:61:aa:c1:a7:a0:fb:8b:43:b7:80:c7:10:29: e0:55:b0:30:1c:e9:c4:1d:30:c2:d3:b0:f9:b5:9e: ed:df:91:2f:34:1f:c2:b2:a5:67:7d:e8:97:7a:e1: d7:09:bd:66:42:f0:65:58:e1:6e:29:ed:b3:aa:60: 78:68:c2:f8:3d:be:31:69:74:ae:4e:0b:e3:76:5f: 02:4f:76:bb:17:19:16:b7:e9:82:6a:62:8d:13:b9: 77:23:57:20:09:ef:c3:52:c8:e7:24:42:6d:4d:22: 0f:61:43:04:5c:0e:7b:31:bb:70:32:90:36:8c:5c: 2f:2e:90:35:4e:fa:1f:76:01:36:12:4c:e4:97:67: 0a:f3:86:90:e1:9f:72:6b:d5:01:6b:f4:fa:ba:1a: d2:f0:38:2e:d3:fb:9b:a7:df:50:a9:e0:0f:13:87: b2:75:a3:b4:a0:04:d1:88:78:29:e1:b1:a2:ea:61: a7:8a:35:04:a6:5d:f8:f8:d6:49:ea:12:28:b8:3f: e0:8a:4c:ed:e0:c0:50:02:c2:77:f4:5c:12:b5:78: 27:56:5e:82:4e:ae:8d:39:2e:35:34:bc:59:d7:c9: 44:b8:5c:b7:c9:32:0b:d4:e9:a0:fe:6b:3d:6d:93: 77:5a:49:f8:37:e4:ca:36:40:87:e0:c8:1f:5b:a2: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:68:12:C5:3A:06:C5:C7:1C:0A:61:0E:F1:70:15:8F:B1:45:AE:6F X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:a0:5f:76:ab:64:ec:22:b1:1e:fa:8a:9f:46:a3:39:0c:56: e0:46:aa:92:82:da:d0:89:ec:c9:5e:57:ae:0b:9f:24:00:be: 7b:64:c2:ea:91:68:e2:62:01:7c:9f:0c:2d:83:81:6b:91:85: 6a:5c:ab:a1:c8:1f:a8:74:1f:15:bd:68:a1:c7:5a:e8:0b:d1: c5:1a:25:a5:08:00:be:38:d4:f0:8a:9d:52:e6:3a:48:08:73: af:3c:69:84:02:6f:a2:7c:22:fc:76:07:d9:2c:12:cc:3e:19: 95:b4:13:a8:df:c9:38:94:c4:94:23:45:04:6d:b7:49:e2:ca: f7:59:1d:97:11:f5:4d:c4:90:cb:9d:9b:b9:3d:c6:1b:65:16: 8b:20:b2:3e:4a:7b:d9:c6:d9:1c:6a:12:40:d5:42:32:0e:c2: 41:50:cd:ba:a5:3d:22:08:9d:03:cc:07:f3:4b:ca:37:0b:6a: fc:73:c6:1a:3e:bf:f4:51:b1:7d:38:2a:f9:4f:3a:e9:89:a8: d3:94:eb:01:ab:83:3a:f2:a3:a7:eb:33:99:62:d1:7d:3e:08: 84:c2:46:15:b5:aa:b8:83:d9:f6:a0:31:66:95:ba:c7:0b:fa: 66:e7:d3:a0:8b:27:16:d6:9f:42:38:5a:36:6f:3d:ae:44:32: f5:f2:45:bb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5 QUQwMDFCQkQwHhcNMjUxMDE5MDcwMzMxWhcNMjUxMDI2MDcwMzMxWjAYMRYwFAYD VQQDEw02OGY0OGQ0My0zYmI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2Gqwaeg+4tDt4DHECngVbAwHOnEHTDC07D5tZ7t35EvNB/CsqVnfeiXeuHX Cb1mQvBlWOFuKe2zqmB4aML4Pb4xaXSuTgvjdl8CT3a7FxkWt+mCamKNE7l3I1cg Ce/DUsjnJEJtTSIPYUMEXA57MbtwMpA2jFwvLpA1TvofdgE2Ekzkl2cK84aQ4Z9y a9UBa/T6uhrS8Dgu0/ubp99QqeAPE4eydaO0oATRiHgp4bGi6mGnijUEpl34+NZJ 6hIouD/gikzt4MBQAsJ39FwStXgnVl6CTq6NOS41NLxZ18lEuFy3yTIL1Omg/ms9 bZN3Wkn4N+TKNkCH4MgfW6L+0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVoEsU6 BsXHHAphDvFwFY+xRa5vMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4 M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzoF92q2TsIrEe+oqfRqM5DFbgRqqSgtrQiezJXleuC58kAL57ZMLq kWjiYgF8nwwtg4FrkYVqXKuhyB+odB8VvWihx1roC9HFGiWlCAC+ONTwip1S5jpI CHOvPGmEAm+ifCL8dgfZLBLMPhmVtBOo38k4lMSUI0UEbbdJ4sr3WR2XEfVNxJDL nZu5PcYbZRaLILI+SnvZxtkcahJA1UIyDsJBUM26pT0iCJ0DzAfzS8o3C2r8c8Ya Pr/0UbF9OCr5TzrpiajTlOsBq4M68qOn6zOZYtF9PgiEwkYVtaq4g9n2oDFmlbrH C/pm59OgiycW1p9COFo2bz2uRDL18kW7 -----END CERTIFICATE-----Generated at Mon Oct 20 14:03:37 2025 by rpki-client