$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: 04z68MkmxKpOJo8sexxRAQceiLmSpt2cK0/MMn+44K8= Subject key identifier: 11:F4:81:09:06:E8:81:BD:CB:7F:A0:81:18:18:31:10:36:D5:9F:C3 Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0B60 Signing time: Sat 18 Oct 2025 20:01:23 +0000 Manifest this update: Sat 18 Oct 2025 20:01:23 +0000 Manifest next update: Sat 25 Oct 2025 20:01:23 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: sZjUIO1feC2SPvU/FgTATAILxWb5OS6Lw4iMwFGBGB4=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=) 3: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=) 4: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (hash: +1fBdFMYnCMvceFuuR7PjuuiY3XOXJxU7RALxaZnijA=) 5: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: 8vpKBeJciA8itO/tuEUUZVJL+/L7+dZrf+czWVWdO7o=) 6: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (hash: EULTaWn9A6XpyaasKLs+lwRXB4hNMDSkDnUr6yUeV1o=) 7: 4F153D60719511F0A684963CC4F9AE02.roa (hash: 4gYAUnZaCoe3Qlid6S3QmUoJ7RBfvEPZol27rumogJ8=) 8: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 20:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2949 (0xb85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Oct 18 20:01:23 2025 GMT Not After : Oct 25 20:01:23 2025 GMT Subject: CN=68f3f213-b38e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:cc:a2:7e:ef:8c:e5:cd:c0:29:79:d0:97: 15:4d:a5:34:2c:ed:42:a2:ad:2c:92:79:29:50:9c: c0:87:7a:99:c7:cf:ff:61:62:2f:ed:b0:ba:1d:f2: 98:47:ee:98:53:cf:77:dc:c1:9d:a9:16:b9:fe:63: 25:fc:4b:9d:57:11:69:b9:72:d9:bd:1e:2f:6e:74: 7f:42:84:03:4e:7d:b0:d5:21:92:b5:a2:a9:ba:b7: ae:98:ce:54:88:1d:1f:35:4f:f2:7d:af:71:be:3f: 70:bd:2c:a6:51:7d:35:25:36:61:91:25:b1:10:0f: e7:f8:8e:57:12:7e:06:22:db:43:e8:03:dd:53:01: d4:e7:90:a9:9a:24:22:56:91:75:fc:7a:40:ac:df: e5:95:43:e0:e1:83:48:52:6d:fa:4b:dd:96:cb:8f: 55:8e:d4:82:e3:e6:e0:54:2f:e7:8a:e8:70:6d:32: 4a:25:60:d6:c3:a7:3d:60:cd:43:29:19:76:1b:ff: 35:87:f9:e5:7b:1a:3c:c6:47:4e:05:72:b2:25:44: cf:1e:f0:4d:86:34:37:94:5b:14:5d:55:46:a4:4e: 37:71:e9:48:35:c6:df:67:50:07:9f:a8:56:33:9a: b4:b8:a3:80:a7:74:dc:52:fc:f2:1e:ab:19:49:4c: 4e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F4:81:09:06:E8:81:BD:CB:7F:A0:81:18:18:31:10:36:D5:9F:C3 X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:d9:1f:1c:96:d0:70:12:90:b1:fb:7e:ca:a4:e2:1f:a0:07: 3b:14:e2:6d:e9:43:88:cb:85:aa:09:d4:3e:18:84:ce:8f:a3: b6:8e:0a:d4:16:f6:1d:78:4e:da:f6:08:b1:4f:d8:5c:ec:03: b3:20:be:fa:62:44:bb:ad:e6:11:66:9d:c4:39:3c:13:40:6f: 0f:21:8a:a3:93:af:51:d1:8b:c7:cd:ad:9e:0f:fe:5b:3f:02: 66:c1:cf:1f:4a:5b:93:16:5b:b3:46:a9:0d:1d:97:b8:dd:9b: b3:4d:6a:ac:82:e3:29:c4:4b:65:3b:15:df:5c:53:36:e1:cd: 64:f4:72:e6:33:41:16:8d:82:6b:5f:64:9f:09:a4:56:4c:27: 8e:8a:c9:c5:58:dd:b0:b7:43:d2:de:17:7c:c6:2f:7a:67:a9: 1c:00:d0:aa:d1:88:b0:5b:04:b7:a0:a2:cb:b0:71:17:ae:35: ea:14:74:ae:10:b9:8f:14:5a:cf:34:9f:01:b3:d9:9d:fa:d2: 42:ea:41:95:cb:3f:e0:94:8b:dc:6b:56:c0:81:6a:d5:d5:7e: 8e:56:ba:10:72:db:7e:6b:04:ab:01:62:b6:79:e8:81:3a:a0: 58:63:2d:9d:de:fd:21:29:11:e5:a7:98:d9:33:bc:af:23:26: f2:d2:c9:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC4UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUxMDE4MjAwMTIzWhcNMjUxMDI1MjAwMTIzWjAYMRYwFAYD VQQDEw02OGYzZjIxMy1iMzhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1/Mon7vjOXNwCl50JcVTaU0LO1Coq0sknkpUJzAh3qZx8//YWIv7bC6HfKY R+6YU8933MGdqRa5/mMl/EudVxFpuXLZvR4vbnR/QoQDTn2w1SGStaKpureumM5U iB0fNU/yfa9xvj9wvSymUX01JTZhkSWxEA/n+I5XEn4GIttD6APdUwHU55CpmiQi VpF1/HpArN/llUPg4YNIUm36S92Wy49VjtSC4+bgVC/niuhwbTJKJWDWw6c9YM1D KRl2G/81h/nlexo8xkdOBXKyJUTPHvBNhjQ3lFsUXVVGpE43celINcbfZ1AHn6hW M5q0uKOAp3TcUvzyHqsZSUxOdQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBH0gQkG 6IG9y3+ggRgYMRA21Z/DMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC42R8cltBwEpCx+37KpOIfoAc7FOJt6UOIy4WqCdQ+GITOj6O2jgrU FvYdeE7a9gixT9hc7AOzIL76YkS7reYRZp3EOTwTQG8PIYqjk69R0YvHza2eD/5b PwJmwc8fSluTFluzRqkNHZe43ZuzTWqsguMpxEtlOxXfXFM24c1k9HLmM0EWjYJr X2SfCaRWTCeOisnFWN2wt0PS3hd8xi96Z6kcANCq0YiwWwS3oKLLsHEXrjXqFHSu ELmPFFrPNJ8Bs9md+tJC6kGVyz/glIvca1bAgWrV1X6OVroQctt+awSrAWK2eeiB OqBYYy2d3v0hKRHlp5jZM7yvIyby0sl1 -----END CERTIFICATE-----Generated at Mon Oct 20 01:46:13 2025 by rpki-client