$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: QirdpO1UKWfD0JVb2vo+S9G+FJtJ9WYtiZDOpBZMaO4= Subject key identifier: 4B:34:3E:C3:E7:47:20:99:5F:12:C9:5D:37:DC:EA:E9:09:2E:3D:0A Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0B24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0B1B Signing time: Sat 18 Oct 2025 20:13:22 +0000 Manifest this update: Sat 18 Oct 2025 20:13:21 +0000 Manifest next update: Sat 25 Oct 2025 20:13:21 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: mENbLRD9Clv4+0hQ3tiyJAp1dvUPlNiQCeLxDKujylw=) 2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:13:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2852 (0xb24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Oct 18 20:13:21 2025 GMT Not After : Oct 25 20:13:21 2025 GMT Subject: CN=68f3f4e1-41c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:32:8c:74:07:22:6f:5a:4c:24:e3:12:53:bd: 6b:b0:81:ad:bd:53:9b:b5:4a:90:d1:ee:58:56:38: d8:7e:da:9f:8e:41:2a:d6:86:19:70:e5:0f:53:56: 90:13:27:b9:92:2c:92:5a:b9:48:bc:ca:24:cc:a6: 97:e1:3b:21:16:4f:f0:96:f0:de:41:89:e2:0f:53: fa:d2:5b:34:b8:e9:63:eb:c3:f0:c7:22:65:af:bb: 11:7c:ae:76:0c:8b:18:27:26:f7:2e:01:49:69:6d: e2:22:bc:ae:58:c9:29:ef:9c:3f:ee:d6:51:3f:43: 41:7f:bc:7c:62:66:c7:cb:33:99:34:f3:c2:37:e8: d0:8c:37:f7:e5:15:1a:c0:5f:07:6c:d1:4d:60:18: 29:a1:40:9c:3e:f9:4f:fc:ec:08:7a:ef:ab:df:4a: 65:15:7b:3a:f0:66:44:b9:dc:de:b1:09:84:1d:92: d1:11:40:f4:34:fa:f4:85:ea:ae:39:d0:e9:f0:6b: 27:98:05:25:3c:c1:f4:b1:9d:99:6a:2a:cf:33:f6: 38:a5:99:83:fc:9c:aa:4e:56:86:b8:fe:0b:f2:29: 20:9e:1b:53:b1:35:fb:ba:c6:61:e9:a2:68:02:1b: 7f:44:3a:90:05:d9:5d:20:d3:25:61:ac:e5:1a:77: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:34:3E:C3:E7:47:20:99:5F:12:C9:5D:37:DC:EA:E9:09:2E:3D:0A X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 83:a5:2d:ba:be:e7:bc:65:57:d2:91:70:79:45:9d:93:15:8f: f5:b2:10:5c:b0:07:7c:28:7a:5c:d5:45:9e:af:4c:6a:ad:db: 23:85:3f:b9:39:9c:c5:ae:51:a2:63:f1:f1:88:fc:df:b9:3e: 8c:45:44:77:9d:78:d0:2d:d9:08:d0:ae:ac:11:19:f0:3e:62: a0:7c:55:83:dd:93:21:cb:ad:93:86:cb:bd:27:f3:15:e9:14: d0:34:61:bc:20:75:42:60:43:cf:15:14:b0:15:a9:c9:76:26: 4a:65:0a:ba:df:c2:4e:07:7c:26:22:f3:e8:f4:5b:6f:ab:a2: 88:63:5b:6f:58:1f:70:6c:16:a9:c0:e9:54:f1:f9:9c:7a:f5: 06:ad:a9:19:1e:83:cd:c5:7f:f3:0f:39:d7:0f:f7:4a:5a:02: 1c:db:53:55:78:18:45:64:68:9e:ee:94:78:02:8a:3e:b6:6e: f5:89:c2:45:2b:5d:47:26:1a:d5:8a:c5:a0:3c:bb:8d:7b:5f: 88:8e:1d:62:57:5c:54:f2:52:d4:83:d0:47:13:c3:2c:96:64: 64:b8:85:09:6f:94:a8:c0:f5:44:d9:47:3e:b9:78:2f:49:01: f6:37:11:b9:0f:ab:bc:38:7f:c3:e7:f4:60:3b:cf:7b:0a:6b: 87:7d:32:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCyQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUxMDE4MjAxMzIxWhcNMjUxMDI1MjAxMzIxWjAYMRYwFAYD VQQDEw02OGYzZjRlMS00MWMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvDKMdAcib1pMJOMSU71rsIGtvVObtUqQ0e5YVjjYftqfjkEq1oYZcOUPU1aQ Eye5kiySWrlIvMokzKaX4TshFk/wlvDeQYniD1P60ls0uOlj68PwxyJlr7sRfK52 DIsYJyb3LgFJaW3iIryuWMkp75w/7tZRP0NBf7x8YmbHyzOZNPPCN+jQjDf35RUa wF8HbNFNYBgpoUCcPvlP/OwIeu+r30plFXs68GZEudzesQmEHZLREUD0NPr0hequ OdDp8GsnmAUlPMH0sZ2ZairPM/Y4pZmD/JyqTlaGuP4L8ikgnhtTsTX7usZh6aJo Aht/RDqQBdldINMlYazlGndrCwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEs0PsPn RyCZXxLJXTfc6ukJLj0KMB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCDpS26vue8ZVfSkXB5RZ2TFY/1shBcsAd8KHpc1UWer0xqrdsjhT+5 OZzFrlGiY/HxiPzfuT6MRUR3nXjQLdkI0K6sERnwPmKgfFWD3ZMhy62Thsu9J/MV 6RTQNGG8IHVCYEPPFRSwFanJdiZKZQq638JOB3wmIvPo9Ftvq6KIY1tvWB9wbBap wOlU8fmcevUGrakZHoPNxX/zDznXD/dKWgIc21NVeBhFZGie7pR4Aoo+tm71icJF K11HJhrVisWgPLuNe1+Ijh1iV1xU8lLUg9BHE8MslmRkuIUJb5SowPVE2Uc+uXgv SQH2NxG5D6u8OH/D5/RgO897CmuHfTLc -----END CERTIFICATE-----Generated at Mon Oct 20 14:08:18 2025 by rpki-client