$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: ObGB15XH/wyimQVW4GYxbyNCtC7J0zFwhbnAhX3qpPQ= Subject key identifier: B2:B0:8B:12:94:99:B5:AC:C5:F0:28:5B:74:CF:9C:2D:33:18:F0:8A Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: C2 Signing time: Sun 19 Oct 2025 09:04:23 +0000 Manifest this update: Sun 19 Oct 2025 09:04:22 +0000 Manifest next update: Sun 26 Oct 2025 09:04:22 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: DtWOnwGJ7MXfB78M/rMfAkyl1MH5HlrbZ4qfiwbFtMc=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: T/QIbCFoEGLW9QUPRttlrCJQfmXnVEJQPws4YkvFJs4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:04:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Oct 19 09:04:22 2025 GMT Not After : Oct 26 09:04:22 2025 GMT Subject: CN=68f4a997-d6e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:b0:92:74:fe:01:7d:db:aa:15:c1:d1:8e:79: 8b:69:f1:16:4c:79:00:8d:0e:a3:d8:47:9a:e3:9f: 2f:ea:3b:96:28:75:f6:53:2c:5a:99:d3:60:a8:d9: cd:f1:be:d0:f8:c0:74:e9:39:3c:8c:e4:2f:54:3c: 0e:d0:71:bc:81:58:94:64:8c:eb:2f:bb:20:f4:60: 36:e2:3e:d0:0c:80:08:1c:9a:37:4d:8f:19:5e:59: a8:1a:ff:72:4f:9a:76:62:a4:ce:41:b7:4f:16:6c: 8e:f9:ae:69:63:01:b5:e7:19:42:67:14:45:ac:1d: 68:75:90:57:2f:cf:cc:45:99:5f:a3:71:33:6c:dd: 05:fb:9c:91:03:87:6a:8b:d4:d3:02:70:85:70:31: ed:85:7b:77:ad:38:cb:91:f1:1c:03:8e:48:00:63: 5f:44:45:b8:71:64:47:89:e6:74:9b:2d:6b:08:7e: cc:f8:43:66:3f:62:c3:8d:c5:e0:d3:b6:df:a8:cc: a5:32:89:8b:05:71:7f:f9:c3:63:ac:74:1e:95:53: d0:af:67:62:ad:3b:f2:12:a9:7a:8e:1a:9b:06:32: 6b:05:4d:32:82:d8:e6:5c:a7:a8:a6:6a:d7:ab:29: b3:72:66:84:54:92:ce:27:09:bc:b6:cf:9d:08:36: ec:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B0:8B:12:94:99:B5:AC:C5:F0:28:5B:74:CF:9C:2D:33:18:F0:8A X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 96:86:da:0d:41:6c:e3:cb:a6:aa:6b:0c:bf:6a:2b:19:ab:39: c2:b6:ea:4d:07:4e:c6:b0:65:0e:1a:07:54:6b:38:02:ee:0b: a1:30:85:31:a8:b8:dc:89:93:91:ac:70:9e:a9:0c:ae:e2:ea: 33:16:84:54:8b:24:9f:2d:71:80:bc:cb:47:0c:2c:56:b1:58: f2:5e:55:7d:28:e2:6f:37:8b:9e:43:70:e3:0c:d5:d4:ec:0f: 62:23:92:f2:9d:cd:b3:38:86:ae:c9:ba:10:04:fa:28:ff:20: e9:c9:eb:ad:ec:56:69:7e:ab:ea:c8:c4:e7:7f:b3:62:20:9f: 26:3b:da:42:14:ba:e4:bf:bc:b5:52:ec:0b:fe:7b:60:f5:52: f3:f7:c8:c3:9f:75:53:a9:6b:bf:83:33:24:3b:00:ef:7b:62: 23:b1:85:89:93:e3:69:d2:c9:0f:5a:84:c0:23:60:d0:dc:fc: 90:e0:44:52:44:26:40:c3:4e:f0:a6:1b:ce:ef:26:45:76:8a: d4:c6:b4:aa:df:a1:8c:f6:ff:11:ae:d8:cc:6b:a1:9e:57:f5: 0c:9e:6b:21:31:c2:e3:60:6f:c1:dd:b8:50:e6:ca:68:53:69: 41:e1:65:b7:32:bd:68:dd:d7:2d:57:15:1b:d3:af:a8:7f:f2: e6:a4:17:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDcxMTAvBgNVBAUTKEU4NjE0MDAyM0YwQ0EwNUYxNzE0QjhBNzBEQzk5NTVG Rjc5N0JEQjEwHhcNMjUxMDE5MDkwNDIyWhcNMjUxMDI2MDkwNDIyWjAYMRYwFAYD VQQDEw02OGY0YTk5Ny1kNmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3LCSdP4BfduqFcHRjnmLafEWTHkAjQ6j2Eea458v6juWKHX2UyxamdNgqNnN 8b7Q+MB06Tk8jOQvVDwO0HG8gViUZIzrL7sg9GA24j7QDIAIHJo3TY8ZXlmoGv9y T5p2YqTOQbdPFmyO+a5pYwG15xlCZxRFrB1odZBXL8/MRZlfo3EzbN0F+5yRA4dq i9TTAnCFcDHthXt3rTjLkfEcA45IAGNfREW4cWRHieZ0my1rCH7M+ENmP2LDjcXg 07bfqMylMomLBXF/+cNjrHQelVPQr2dirTvyEql6jhqbBjJrBU0ygtjmXKeopmrX qymzcmaEVJLOJwm8ts+dCDbs6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLKwixKU mbWsxfAoW3TPnC0zGPCKMB8GA1UdIwQYMBaAFOhhQAI/DKBfFxS4pw3JlV/3l72x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0Ny8zM0IyM0Y3RThD OEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9GOFhGTGluRGNtVlhfZVh2 YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0Ny8zM0IyM0Y3RThDOEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9G OFhGTGluRGNtVlhfZVh2YkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCWhtoNQWzjy6aqawy/aisZqznCtupNB07GsGUOGgdUazgC7guhMIUx qLjciZORrHCeqQyu4uozFoRUiySfLXGAvMtHDCxWsVjyXlV9KOJvN4ueQ3DjDNXU 7A9iI5Lync2zOIauyboQBPoo/yDpyeut7FZpfqvqyMTnf7NiIJ8mO9pCFLrkv7y1 UuwL/ntg9VLz98jDn3VTqWu/gzMkOwDve2IjsYWJk+Np0skPWoTAI2DQ3PyQ4ERS RCZAw07wphvO7yZFdorUxrSq36GM9v8RrtjMa6GeV/UMnmshMcLjYG/B3bhQ5spo U2lB4WW3Mr1o3dctVxUb06+of/LmpBeS -----END CERTIFICATE-----Generated at Mon Oct 20 07:44:52 2025 by rpki-client