$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: wqi6kLQIXOqiQz549s7tfxLQe7Pqc/JPG5RPKaIXdF4= Subject key identifier: 51:E9:E8:EB:F2:87:B4:EA:53:D0:D3:6A:67:35:83:70:35:F4:3F:7D Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 01CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 01CB Signing time: Sun 19 Oct 2025 05:21:26 +0000 Manifest this update: Sun 19 Oct 2025 05:21:25 +0000 Manifest next update: Sun 26 Oct 2025 05:21:25 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: v0Q/KjAfokGCmZKlk54C+AmkN+cz6Wya5lYR5yWs8ZE=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 05:21:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 463 (0x1cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Oct 19 05:21:25 2025 GMT Not After : Oct 26 05:21:25 2025 GMT Subject: CN=68f47556-dc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:b6:25:35:7c:2a:44:1d:0e:36:86:5c:d0: 78:35:ef:18:ce:9b:93:aa:da:18:44:17:e3:66:50: 9b:fa:04:3f:05:06:5d:57:56:25:d2:81:a5:99:e1: 9a:4a:2c:7e:fc:1b:45:f5:68:2d:b3:5a:a5:79:a3: c9:fd:25:57:dc:75:34:c3:9c:11:38:68:08:eb:8a: 90:b4:0b:ca:71:2d:2c:95:4e:b5:0f:0a:44:75:b7: c2:00:0b:86:53:2c:4e:9b:60:12:20:a7:dd:38:d9: fe:2b:38:1b:f1:fe:95:f4:fe:60:9b:ad:26:54:6b: b6:9e:a5:f4:d6:b6:40:fb:8f:6a:35:53:b7:83:34: b9:fe:9d:7c:2b:4e:22:7b:8f:f6:e9:6a:32:ed:0d: 99:25:ef:72:fa:84:95:b5:d6:93:7b:8f:18:a7:0c: 15:44:51:62:79:67:54:43:c8:d3:ea:f2:ed:3a:b9: 5a:9c:35:fd:3f:84:fb:9b:fa:97:c3:ac:d1:a3:a2: 55:96:e9:12:01:36:d2:52:52:df:75:10:97:f7:bc: 95:44:d7:42:45:86:87:a1:f9:90:9c:22:64:8d:c4: 6c:b5:7c:68:c8:d4:d0:a5:0b:40:83:01:80:c9:f8: 58:22:e0:68:73:ae:c1:53:34:1c:59:d6:29:77:af: f4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E9:E8:EB:F2:87:B4:EA:53:D0:D3:6A:67:35:83:70:35:F4:3F:7D X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:53:6c:77:42:cc:13:e8:0f:7d:6c:e0:62:29:d6:d7:f3:62: 70:0d:54:ec:c6:11:56:c7:81:3e:14:3a:62:3c:b0:4e:bf:fc: fc:31:e9:f3:dc:5a:0c:32:77:6c:e5:ca:40:19:3b:c7:50:74: 96:2d:3e:04:0e:72:36:c8:ab:88:14:9f:ad:8f:af:87:0b:51: bd:94:9a:1e:71:19:c0:60:49:9e:4b:61:41:5a:83:47:1d:b7: ba:32:8e:78:7a:f1:4b:32:a6:e8:11:ad:f4:45:fa:6e:b7:a6: 6f:b9:22:b4:fa:72:57:df:f3:64:4b:7f:82:12:8b:f7:01:2c: 86:62:09:dd:91:b1:e7:36:95:ee:e6:f1:59:b9:ee:75:6a:45: 05:8a:74:3d:61:1e:d3:da:f0:59:53:ab:2a:95:9e:55:46:27: 4d:af:98:9a:b3:14:80:c3:56:e5:48:3b:7d:4c:d7:33:56:50: 2f:f7:e1:91:8b:02:6d:ac:11:df:ea:7d:1f:18:6a:7c:b0:92: 3a:b4:38:96:6c:ad:6d:87:31:2e:de:c6:f5:b0:ff:65:a0:05: ff:12:d9:ad:3d:76:9f:ca:09:52:59:07:dd:c2:8d:38:c2:02: 41:f9:65:51:e2:02:a6:c4:7e:39:34:fa:90:6d:8f:97:3e:00: bd:34:ac:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjUxMDE5MDUyMTI1WhcNMjUxMDI2MDUyMTI1WjAYMRYwFAYD VQQDEw02OGY0NzU1Ni1kYzc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyfG2JTV8KkQdDjaGXNB4Ne8YzpuTqtoYRBfjZlCb+gQ/BQZdV1Yl0oGlmeGa Six+/BtF9Wgts1qleaPJ/SVX3HU0w5wROGgI64qQtAvKcS0slU61DwpEdbfCAAuG UyxOm2ASIKfdONn+Kzgb8f6V9P5gm60mVGu2nqX01rZA+49qNVO3gzS5/p18K04i e4/26Woy7Q2ZJe9y+oSVtdaTe48YpwwVRFFieWdUQ8jT6vLtOrlanDX9P4T7m/qX w6zRo6JVlukSATbSUlLfdRCX97yVRNdCRYaHofmQnCJkjcRstXxoyNTQpQtAgwGA yfhYIuBoc67BUzQcWdYpd6/0EwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFHp6Ovy h7TqU9DTamc1g3A19D99MB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATU2x3QswT6A99bOBiKdbX82JwDVTsxhFWx4E+FDpiPLBOv/z8Menz 3FoMMnds5cpAGTvHUHSWLT4EDnI2yKuIFJ+tj6+HC1G9lJoecRnAYEmeS2FBWoNH Hbe6Mo54evFLMqboEa30Rfput6ZvuSK0+nJX3/NkS3+CEov3ASyGYgndkbHnNpXu 5vFZue51akUFinQ9YR7T2vBZU6sqlZ5VRidNr5iasxSAw1blSDt9TNczVlAv9+GR iwJtrBHf6n0fGGp8sJI6tDiWbK1thzEu3sb1sP9loAX/EtmtPXafyglSWQfdwo04 wgJB+WVR4gKmxH45NPqQbY+XPgC9NKyF -----END CERTIFICATE-----Generated at Mon Oct 20 01:45:30 2025 by rpki-client