$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: oThvjeM5OX/PIrBKNzJQbmzkObt84OwieasU7/2wOAk= Subject key identifier: 1F:BF:FC:37:E0:55:B1:F9:70:2F:2B:BA:F9:E8:5A:77:DF:28:C8:3C Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 07A9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 07A0 Signing time: Sat 18 Oct 2025 22:44:23 +0000 Manifest this update: Sat 18 Oct 2025 22:44:22 +0000 Manifest next update: Sat 25 Oct 2025 22:44:22 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: b/omRGKMh0LbvCXyjb+8+geKHV0+PoWWSZbT85ct4Mc=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: sWE9LUdizataLAzmIhBLPntdutpqhdEosVPOQbEaHm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 22:44:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1961 (0x7a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: Oct 18 22:44:22 2025 GMT Not After : Oct 25 22:44:22 2025 GMT Subject: CN=68f41847-5076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:5e:69:5c:06:cd:b2:17:d4:29:f8:76:ed: c5:43:ae:81:84:12:b7:c9:59:de:e5:69:30:6b:aa: 6d:af:1b:7c:21:67:92:b4:4e:83:91:c9:88:ed:6c: cb:4d:98:f6:28:8d:bc:f8:fe:59:5b:87:72:79:26: d7:7e:ad:6d:f8:27:6f:bb:68:b5:5f:86:0a:fe:32: 80:ad:06:d6:8e:2c:80:55:0d:2a:85:f9:aa:e8:74: d1:75:fc:a4:b1:07:95:9d:5b:36:57:57:8c:b9:2d: 88:b7:0f:df:22:f6:86:8e:88:f3:7e:88:5d:73:dc: 50:9e:82:2c:81:4e:5d:ff:39:0a:12:a4:85:6b:09: b8:97:e9:2c:37:cd:2f:b0:d9:b5:43:b3:b3:b4:5e: a0:c1:cb:11:a4:7e:a9:bf:ef:70:75:ff:95:20:52: 86:06:8b:a7:60:a4:ea:7b:1f:c8:9c:b7:18:fe:ca: 7f:55:17:60:84:e0:ee:07:81:5d:fa:a0:2b:7d:8e: 6d:e2:97:72:2a:01:dd:cd:db:90:63:fe:ea:3b:71: a2:58:9d:57:30:7b:a0:93:ae:d6:3c:10:70:fc:99: 59:a2:6c:d3:24:a7:8d:91:49:dc:4c:b5:16:29:ca: 07:4a:25:ff:7d:31:0c:5f:9c:17:4e:5f:a8:9a:90: a9:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:BF:FC:37:E0:55:B1:F9:70:2F:2B:BA:F9:E8:5A:77:DF:28:C8:3C X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:e5:44:64:80:d7:5d:c2:cf:82:65:9a:77:e1:18:fd:73:fa: e1:ac:fa:e6:65:39:b8:4c:34:2e:a3:b4:e6:54:06:dd:8d:3b: 56:97:21:16:b0:04:b9:0e:02:08:a9:cc:65:42:dc:7d:63:47: dc:aa:a9:f2:d7:d7:cc:8b:ad:ef:b0:94:f0:b4:b8:39:36:0f: eb:08:b1:6b:07:07:62:b1:19:f5:4c:0b:97:71:92:da:9c:da: c8:54:fc:23:29:f8:c1:cd:67:e3:12:49:a4:0e:77:c1:13:e9: e1:ff:2e:f0:88:6a:6c:ea:8a:82:10:e1:b4:4e:0d:d9:9f:25: 7c:0a:b1:71:d8:8d:18:e0:7c:55:d5:60:45:83:2a:48:cd:19: 43:96:82:3e:d8:83:50:27:e6:df:25:94:c7:ab:7d:fc:90:a3: ec:2d:61:4e:c1:5a:4d:3b:1e:ae:b3:db:c1:b8:22:68:f5:7b: ea:b1:ef:f3:f5:81:40:e1:55:33:b6:3f:16:29:57:95:d2:08: 13:a3:52:1f:72:a4:e2:62:cd:b3:fb:0b:e4:c0:30:30:b8:5d: 27:d2:3f:01:4b:13:96:90:e0:8a:08:22:a3:f7:e2:d0:67:2c: 2c:35:a0:83:d0:f2:21:d8:4f:2c:2f:5d:1e:fb:61:eb:49:d0: 90:01:f0:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB6kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjUxMDE4MjI0NDIyWhcNMjUxMDI1MjI0NDIyWjAYMRYwFAYD VQQDEw02OGY0MTg0Ny01MDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt+JeaVwGzbIX1Cn4du3FQ66BhBK3yVne5Wkwa6ptrxt8IWeStE6DkcmI7WzL TZj2KI28+P5ZW4dyeSbXfq1t+Cdvu2i1X4YK/jKArQbWjiyAVQ0qhfmq6HTRdfyk sQeVnVs2V1eMuS2Itw/fIvaGjojzfohdc9xQnoIsgU5d/zkKEqSFawm4l+ksN80v sNm1Q7OztF6gwcsRpH6pv+9wdf+VIFKGBounYKTqex/InLcY/sp/VRdghODuB4Fd +qArfY5t4pdyKgHdzduQY/7qO3GiWJ1XMHugk67WPBBw/JlZomzTJKeNkUncTLUW KcoHSiX/fTEMX5wXTl+ompCpCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFB+//Dfg VbH5cC8ruvnoWnffKMg8MB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAw5URkgNddws+CZZp34Rj9c/rhrPrmZTm4TDQuo7TmVAbdjTtWlyEW sAS5DgIIqcxlQtx9Y0fcqqny19fMi63vsJTwtLg5Ng/rCLFrBwdisRn1TAuXcZLa nNrIVPwjKfjBzWfjEkmkDnfBE+nh/y7wiGps6oqCEOG0Tg3ZnyV8CrFx2I0Y4HxV 1WBFgypIzRlDloI+2INQJ+bfJZTHq338kKPsLWFOwVpNOx6us9vBuCJo9Xvqse/z 9YFA4VUztj8WKVeV0ggTo1IfcqTiYs2z+wvkwDAwuF0n0j8BSxOWkOCKCCKj9+LQ ZywsNaCD0PIh2E8sL10e+2HrSdCQAfD/ -----END CERTIFICATE-----Generated at Mon Oct 20 10:33:29 2025 by rpki-client