$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft File: z6g6HLFaT2Y_z9bITI4K00wOBnM.mft (raw, json) Hash identifier: f08s4sgjUg3MaWaUCmRz7Jty2iotRVykt7uaQ3cPFjQ= Subject key identifier: 95:1A:BA:27:67:2D:47:4D:F4:CA:52:D4:39:31:89:52:1F:C1:30:F4 Authority key identifier: CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 Certificate issuer: /CN=A91AA5F1/serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft Manifest number: 05 Signing time: Sun 19 Oct 2025 11:40:45 +0000 Manifest this update: Sun 19 Oct 2025 11:40:45 +0000 Manifest next update: Sun 26 Oct 2025 11:40:44 +0000 Files and hashes: 1: z6g6HLFaT2Y_z9bITI4K00wOBnM.crl (hash: XL0+0PZvFuwl0DbCfQF5P3poL0typzsLefNHhCjUlIQ=) 2: C56E767CA89811F08959A364C4F9AE02.roa (hash: 3h7NekD5uJiBtHmPr+ql3V5I4Pzxe7a+UwFYXogXAM4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA5F1, serialNumber=CFA83A1CB15A4F663FCFD6C84C8E0AD34C0E0673 Validity Not Before: Oct 19 11:40:45 2025 GMT Not After : Oct 26 11:40:44 2025 GMT Subject: CN=68f4ce3d-4f40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d1:94:f2:1b:2a:76:57:2e:88:a7:3b:70:f6: a1:40:30:3b:1e:4d:9c:86:83:06:ad:09:76:2c:67: e6:09:43:5e:2c:a4:cb:46:55:50:e5:6c:3f:21:75: 10:8a:06:10:92:b3:b1:f8:ff:46:dd:29:d7:06:bb: 90:09:46:db:80:c9:ac:d7:aa:d6:bf:88:8b:8b:9c: 7f:f0:a4:44:62:f6:c4:44:a9:dd:d2:93:67:7f:da: 62:da:a5:d3:ed:43:48:0a:be:b0:b2:9e:13:8f:86: c7:a6:6d:5f:97:ec:8e:d9:da:78:39:ba:c7:a6:e3: ee:cc:25:45:2c:4a:fb:78:19:ac:61:62:e8:e6:ac: 30:7d:a0:7a:30:c1:00:6b:13:42:a0:ae:9a:65:92: 0a:d1:45:9b:21:4a:7d:94:69:99:6b:36:02:90:3d: 17:e3:99:ba:cf:e0:09:88:67:07:ff:bd:fc:6e:58: 62:c9:cb:31:82:96:6d:a2:e8:29:db:7a:e4:44:be: 6c:28:4b:f6:07:51:df:0d:71:58:7b:17:0f:09:56: 1f:9d:17:e6:f7:9f:cd:bb:d5:14:c5:fd:8d:ed:4d: e4:67:cf:42:32:cc:af:00:a0:20:e6:51:31:36:ca: b8:c0:b8:43:d6:fb:ef:66:8a:9a:14:23:f3:d9:25: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:1A:BA:27:67:2D:47:4D:F4:CA:52:D4:39:31:89:52:1F:C1:30:F4 X509v3 Authority Key Identifier: keyid:CF:A8:3A:1C:B1:5A:4F:66:3F:CF:D6:C8:4C:8E:0A:D3:4C:0E:06:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z6g6HLFaT2Y_z9bITI4K00wOBnM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA5F1/ED3EC004A89711F083D93A63C4F9AE02/z6g6HLFaT2Y_z9bITI4K00wOBnM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:0c:26:8e:e8:9f:bc:d6:eb:d8:f4:29:66:6e:e5:0b:bc:5a: 2c:c3:39:0d:01:45:88:00:3f:ae:63:81:cb:dc:b5:88:9a:a8: f5:dc:b6:5c:52:b6:d5:58:bb:04:76:2a:e0:7f:13:13:6a:ee: 5d:7c:7d:80:0f:ff:21:7d:45:03:8d:40:c0:8c:b7:8c:b9:99: db:3c:32:73:ac:33:cd:b9:9d:6d:31:c8:8e:00:32:5d:9a:ad: 7d:5b:5f:f9:c9:77:dc:58:c8:04:34:c0:49:cf:b2:d4:46:ef: ab:1e:17:39:b8:20:a6:f0:ac:60:25:64:cc:f1:91:fa:63:75: a3:84:6e:7a:f0:b3:07:0d:0b:6d:c9:92:b0:17:96:52:5e:ee: 06:61:15:19:6a:41:bc:4b:2a:80:0d:b9:8c:ea:f0:ff:e2:67: cc:6c:9b:16:e6:88:f7:13:69:d4:6f:53:61:8c:d5:d0:61:4f: 31:4b:46:e1:79:15:53:f0:8e:e7:19:84:6f:15:89:87:1f:5b: 94:e4:35:ab:5d:71:10:08:d6:4b:20:67:9b:57:d1:03:0b:0c: f7:1e:77:8f:0a:f6:66:cf:80:6c:d6:41:87:f0:4c:ec:be:e7: 3a:9a:d0:7d:bd:af:48:8f:e2:7b:5f:42:e3:a1:93:e0:74:48: d7:3c:10:76 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTVGMTExMC8GA1UEBRMoQ0ZBODNBMUNCMTVBNEY2NjNGQ0ZENkM4NEM4RTBBRDM0 QzBFMDY3MzAeFw0yNTEwMTkxMTQwNDVaFw0yNTEwMjYxMTQwNDRaMBgxFjAUBgNV BAMTDTY4ZjRjZTNkLTRmNDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQ0ZTyGyp2Vy6Ipztw9qFAMDseTZyGgwatCXYsZ+YJQ14spMtGVVDlbD8hdRCK BhCSs7H4/0bdKdcGu5AJRtuAyazXqta/iIuLnH/wpERi9sREqd3Sk2d/2mLapdPt Q0gKvrCynhOPhsembV+X7I7Z2ng5usem4+7MJUUsSvt4GaxhYujmrDB9oHowwQBr E0KgrpplkgrRRZshSn2UaZlrNgKQPRfjmbrP4AmIZwf/vfxuWGLJyzGClm2i6Cnb euREvmwoS/YHUd8NcVh7Fw8JVh+dF+b3n8271RTF/Y3tTeRnz0IyzK8AoCDmUTE2 yrjAuEPW++9mipoUI/PZJflTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlRq6J2ct R030ylLUOTGJUh/BMPQwHwYDVR0jBBgwFoAUz6g6HLFaT2Y/z9bITI4K00wOBnMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBNUYxL0VEM0VDMDA0QTg5 NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZX3o5YklUSTRLMDB3T0Ju TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvejZnNkhMRmFUMllfejliSVRJNEswMHdPQm5NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFB NUYxL0VEM0VDMDA0QTg5NzExRjA4M0Q5M0E2M0M0RjlBRTAyL3o2ZzZITEZhVDJZ X3o5YklUSTRLMDB3T0JuTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALgMJo7on7zW69j0KWZu5Qu8WizDOQ0BRYgAP65jgcvctYiaqPXctlxS ttVYuwR2KuB/ExNq7l18fYAP/yF9RQONQMCMt4y5mds8MnOsM825nW0xyI4AMl2a rX1bX/nJd9xYyAQ0wEnPstRG76seFzm4IKbwrGAlZMzxkfpjdaOEbnrwswcNC23J krAXllJe7gZhFRlqQbxLKoANuYzq8P/iZ8xsmxbmiPcTadRvU2GM1dBhTzFLRuF5 FVPwjucZhG8ViYcfW5TkNatdcRAI1ksgZ5tX0QMLDPced48K9mbPgGzWQYfwTOy+ 5zqa0H29r0iP4ntfQuOhk+B0SNc8EHY= -----END CERTIFICATE-----Generated at Sun Oct 19 22:56:23 2025 by rpki-client