$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json) Hash identifier: pM8pGemISiJ9n8LmXm7FHc2jOMbaUkWT3YcGVAL74pE= Subject key identifier: 39:10:39:E9:3F:60:14:2D:05:8B:EF:81:EB:51:03:0F:C5:AD:10:E0 Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Certificate serial: 03CF Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft Manifest number: 03CC Signing time: Sun 19 Oct 2025 02:36:59 +0000 Manifest this update: Sun 19 Oct 2025 02:36:58 +0000 Manifest next update: Sun 26 Oct 2025 02:36:58 +0000 Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: vx7MaTC/4Giu9zT9dpKLP786k5QzDl6mfjL/VdiVD3A=) 2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 02:36:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 975 (0x3cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Validity Not Before: Oct 19 02:36:58 2025 GMT Not After : Oct 26 02:36:58 2025 GMT Subject: CN=68f44ecb-9fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:4c:5e:1b:f3:bd:4b:b5:76:db:02:f5:96:cf: c3:3d:60:44:14:fa:17:12:d3:d5:62:a2:3b:3d:d9: a5:24:39:d7:a1:5b:1f:2a:4e:3d:d6:3f:55:4c:4a: 51:1c:84:63:ee:41:be:c9:06:dd:9b:af:57:34:dd: d7:86:7f:92:57:96:16:23:e7:3f:e2:73:6d:6c:12: 90:45:5f:b9:36:a3:60:dd:11:f4:b9:8e:ec:44:d9: eb:91:60:9d:da:13:cf:81:05:6c:6a:8d:a8:73:03: aa:7f:72:27:43:89:a1:2f:bb:88:ee:93:f0:b0:eb: 07:78:e9:6f:e7:20:32:46:db:4b:38:11:3b:f9:55: ca:c0:43:d7:35:cd:e5:93:02:6c:51:87:45:ed:0f: 24:9a:de:26:e4:f4:0b:a2:9c:57:35:6d:ce:89:86: fb:7d:30:f2:8e:dc:7c:a9:8b:f4:c5:15:8c:fb:ea: e5:96:63:16:f2:cd:81:bf:e2:50:7c:f1:0d:8f:23: e9:20:93:27:5f:02:bb:9f:ea:fc:4f:e6:40:1d:b1: c4:40:5d:2f:a7:d8:ec:5d:72:6f:9d:97:21:9f:97: 76:60:1a:48:57:09:ef:27:69:f4:d5:27:82:34:d7: cb:cf:7d:3c:92:9a:a8:5f:88:9f:5a:75:37:39:67: 85:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:10:39:E9:3F:60:14:2D:05:8B:EF:81:EB:51:03:0F:C5:AD:10:E0 X509v3 Authority Key Identifier: keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 50:84:87:f5:f5:9b:6c:56:a4:0b:91:89:e6:0b:8a:e8:68:bb: ba:ff:22:db:cc:7d:e2:87:af:e1:a3:bd:14:64:6f:f0:4d:a5: d0:4d:2e:fb:5d:b7:63:b5:06:17:b1:69:b0:fd:cb:a3:b8:19: dc:26:9a:d0:54:e3:b6:b4:85:72:ce:80:d1:b8:1f:4f:37:5a: 05:55:c3:36:0d:4b:aa:2f:9e:3f:39:8d:7c:89:fb:29:44:85: ac:ac:55:90:a4:0f:d3:88:91:9e:1d:1e:4f:21:e4:f5:9a:75: 06:81:ba:6b:d0:8a:97:6f:52:0c:98:11:e1:ca:34:ed:ff:8a: 39:21:06:79:46:9b:d9:80:33:9f:ad:1e:aa:d1:20:4a:5c:53: d3:d1:87:09:92:2e:33:6f:72:14:5a:be:8e:02:9b:f1:8d:2a: 04:8b:79:8e:fe:70:e4:6f:ab:e6:3e:cc:aa:e9:ac:04:7c:f1: 7c:fd:68:83:7e:fc:11:b8:9c:83:00:e6:d4:1a:24:57:a0:30: ca:2f:56:66:d8:c6:7b:90:aa:c1:8d:45:16:65:3b:ce:f5:ca: 4b:e3:02:43:a5:29:16:5e:7c:c7:56:6b:6c:56:48:7b:d3:a9: 20:e5:7b:c8:ed:05:f0:c9:d3:d9:59:f9:bf:a2:07:89:4e:99: 26:3a:31:2d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA88wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD NUQzRERFOEIwHhcNMjUxMDE5MDIzNjU4WhcNMjUxMDI2MDIzNjU4WjAYMRYwFAYD VQQDEw02OGY0NGVjYi05ZmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv0xeG/O9S7V22wL1ls/DPWBEFPoXEtPVYqI7PdmlJDnXoVsfKk491j9VTEpR HIRj7kG+yQbdm69XNN3Xhn+SV5YWI+c/4nNtbBKQRV+5NqNg3RH0uY7sRNnrkWCd 2hPPgQVsao2ocwOqf3InQ4mhL7uI7pPwsOsHeOlv5yAyRttLOBE7+VXKwEPXNc3l kwJsUYdF7Q8kmt4m5PQLopxXNW3OiYb7fTDyjtx8qYv0xRWM++rllmMW8s2Bv+JQ fPENjyPpIJMnXwK7n+r8T+ZAHbHEQF0vp9jsXXJvnZchn5d2YBpIVwnvJ2n01SeC NNfLz308kpqoX4ifWnU3OWeFcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDkQOek/ YBQtBYvvgetRAw/FrRDgMB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBQhIf19ZtsVqQLkYnmC4roaLu6/yLbzH3ih6/ho70UZG/wTaXQTS77 XbdjtQYXsWmw/cujuBncJprQVOO2tIVyzoDRuB9PN1oFVcM2DUuqL54/OY18ifsp RIWsrFWQpA/TiJGeHR5PIeT1mnUGgbpr0IqXb1IMmBHhyjTt/4o5IQZ5RpvZgDOf rR6q0SBKXFPT0YcJki4zb3IUWr6OApvxjSoEi3mO/nDkb6vmPsyq6awEfPF8/WiD fvwRuJyDAObUGiRXoDDKL1Zm2MZ7kKrBjUUWZTvO9cpL4wJDpSkWXnzHVmtsVkh7 06kg5XvI7QXwydPZWfm/ogeJTpkmOjEt -----END CERTIFICATE-----Generated at Mon Oct 20 15:23:54 2025 by rpki-client