$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: y5IHVWG/KgAzgHFE5RvREan/ERvE3aRzMPrUp/2wNgg= Subject key identifier: A4:01:67:6A:75:5E:EE:6B:53:4C:92:0C:DF:F0:61:FE:EA:E2:D2:BB Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 7A Signing time: Sun 19 Oct 2025 10:03:24 +0000 Manifest this update: Sun 19 Oct 2025 10:03:23 +0000 Manifest next update: Sun 26 Oct 2025 10:03:23 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: ptGTzz082e54PI35fSnfKMy13aVwOdYCBG8dKIJyUBo=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:03:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 123 (0x7b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: Oct 19 10:03:23 2025 GMT Not After : Oct 26 10:03:23 2025 GMT Subject: CN=68f4b76c-5112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:18:81:80:48:47:77:66:48:70:33:b9:7e: bb:18:cf:05:db:90:ef:94:58:b2:e7:a6:be:66:b0: 22:0b:ef:de:71:05:5a:53:f9:ee:7c:30:77:6a:78: 74:f8:84:f2:1a:fa:5d:1a:46:5b:13:16:fb:2f:4b: ce:4c:ee:6d:b2:04:d8:b8:d4:97:e6:4b:9e:2a:8b: fd:20:a3:e5:c1:c3:95:03:a9:0e:89:1c:ae:88:c0: 67:fe:6e:c5:61:50:1a:20:59:6c:7d:df:dc:45:97: 59:db:dd:da:3d:d4:6b:22:f2:e5:70:4a:68:37:8c: 4e:73:e5:cd:06:20:1a:57:34:e3:b8:bd:18:a8:3f: 6e:f1:62:2c:53:ed:65:83:25:05:ba:83:54:dd:9e: 18:74:ed:0f:a5:21:3d:dd:c5:60:b2:21:e4:fa:cc: 50:a0:81:4d:60:e4:25:ad:64:00:17:41:d5:86:8c: 75:ee:3b:ea:8a:53:01:d3:63:01:7c:3e:06:08:26: 07:7d:8a:a3:7e:40:f8:5e:d6:09:ad:99:15:28:72: ec:db:9e:b0:ac:31:8c:34:30:db:fb:9b:ce:2b:5a: 50:5f:ae:ed:69:5f:74:00:11:e4:65:ba:b8:8d:ae: 85:1f:31:7d:ad:c5:1e:a3:a9:20:e8:12:34:2a:a0: a9:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:01:67:6A:75:5E:EE:6B:53:4C:92:0C:DF:F0:61:FE:EA:E2:D2:BB X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:5e:29:bd:94:c7:b4:75:a5:9f:e3:3e:f6:76:8e:52:2f:73: 66:84:c4:3b:44:ca:62:2e:31:87:52:c9:3a:d2:ad:b0:ce:77: 8c:d4:c4:d9:cf:d7:10:9d:a1:95:83:c0:3e:5c:bb:a9:34:48: f9:6c:67:1c:2c:fc:e6:c8:7e:73:8b:08:ff:ff:06:98:0b:15: 9d:23:33:0d:c3:6d:ae:1f:c1:34:2b:14:d5:9a:a2:ff:0e:4f: 88:6e:d3:3b:76:16:83:e7:21:80:f2:f5:5c:1f:b6:28:d8:59: f6:2d:93:5b:25:38:91:1f:35:a0:7a:27:34:03:1e:f1:e3:4f: 59:b6:e5:91:6c:82:52:24:53:ca:60:b8:fc:30:af:1f:3c:40: cd:a3:77:84:f3:08:92:38:db:cc:f1:f7:6f:1e:f3:e2:d2:5e: 73:e2:38:1f:b5:15:73:80:19:a3:c5:10:3f:38:e1:ab:d7:d3: 96:fe:03:c3:ba:3f:7a:43:b4:2f:b1:73:05:51:83:09:b0:91: 9e:22:4d:2f:35:e3:de:cd:75:1c:3a:47:e7:7f:e9:1c:47:56: 41:c5:f7:58:45:51:5b:57:d3:86:e8:b7:64:77:11:82:04:a1: 50:3b:0b:b8:52:a9:c8:33:dc:be:28:fe:ba:fe:ad:84:0c:33: 6b:e0:6c:b9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBezANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTEwMTkxMDAzMjNaFw0yNTEwMjYxMDAzMjNaMBgxFjAUBgNV BAMTDTY4ZjRiNzZjLTUxMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC75BiBgEhHd2ZIcDO5frsYzwXbkO+UWLLnpr5msCIL795xBVpT+e58MHdqeHT4 hPIa+l0aRlsTFvsvS85M7m2yBNi41JfmS54qi/0go+XBw5UDqQ6JHK6IwGf+bsVh UBogWWx939xFl1nb3do91Gsi8uVwSmg3jE5z5c0GIBpXNOO4vRioP27xYixT7WWD JQW6g1Tdnhh07Q+lIT3dxWCyIeT6zFCggU1g5CWtZAAXQdWGjHXuO+qKUwHTYwF8 PgYIJgd9iqN+QPhe1gmtmRUocuzbnrCsMYw0MNv7m84rWlBfru1pX3QAEeRluriN roUfMX2txR6jqSDoEjQqoKkdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUpAFnanVe 7mtTTJIM3/Bh/uri0rswHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAABeKb2Ux7R1pZ/jPvZ2jlIvc2aExDtEymIuMYdSyTrSrbDOd4zUxNnP 1xCdoZWDwD5cu6k0SPlsZxws/ObIfnOLCP//BpgLFZ0jMw3Dba4fwTQrFNWaov8O T4hu0zt2FoPnIYDy9VwftijYWfYtk1slOJEfNaB6JzQDHvHjT1m25ZFsglIkU8pg uPwwrx88QM2jd4TzCJI428zx928e8+LSXnPiOB+1FXOAGaPFED844avX05b+A8O6 P3pDtC+xcwVRgwmwkZ4iTS81497NdRw6R+d/6RxHVkHF91hFUVtX04bot2R3EYIE oVA7C7hSqcgz3L4o/rr+rYQMM2vgbLk= -----END CERTIFICATE-----Generated at Mon Oct 20 13:40:28 2025 by rpki-client