$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: rU76CRDeAbLECOxdDAD6lRhqT1fAo1ygmqWPwR4gtCU= Subject key identifier: AD:E9:D5:D3:E7:7A:44:45:3D:73:D2:59:DD:2B:1E:11:F3:1E:D1:FE Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A80 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2A5A Signing time: Sat 18 Oct 2025 15:47:18 +0000 Manifest this update: Sat 18 Oct 2025 15:47:17 +0000 Manifest next update: Sat 25 Oct 2025 15:47:17 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: 7kkRemVZueSXbGdSkVcxtQIzhT/6oNTrzOkTNOZ7iOs=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=) 3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=) 4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 15:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10880 (0x2a80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Oct 18 15:47:17 2025 GMT Not After : Oct 25 15:47:17 2025 GMT Subject: CN=68f3b686-b1fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4a:72:7b:d0:ca:2a:b8:c0:aa:6a:4f:18:d5: fc:2d:26:f3:f3:ff:fe:74:2d:78:a4:4f:e4:fb:1a: 1f:b0:25:45:2b:bb:4b:a0:1f:85:36:fd:88:ef:49: dd:7e:48:33:d2:0e:c5:65:18:0f:10:75:dc:74:27: 3b:5c:4b:72:3c:6d:7d:fb:87:fa:61:72:74:97:fa: d0:45:78:c2:53:88:1e:ad:7c:58:40:03:6d:d9:b3: cb:1f:26:d8:b4:cc:b1:51:49:e4:d5:94:9d:3c:0a: c1:a5:59:da:6e:d9:bd:52:f5:08:4a:22:32:56:62: 1d:76:3b:61:f1:40:c3:61:a1:eb:77:ff:01:0f:86: 23:21:7e:e6:e8:34:15:79:cb:e9:7d:37:1c:2c:a0: 4a:17:2e:ef:00:b0:ff:ce:c5:6d:28:df:dd:5e:bf: c1:76:a1:83:21:12:b5:23:e4:df:02:e7:03:67:b9: d4:66:9d:64:8a:8b:d0:bd:42:4f:ac:5e:fa:a9:8c: fa:c7:b7:8f:11:0e:5b:0d:69:70:dd:88:70:24:7f: 6e:ae:c4:52:dc:65:1b:e1:9b:90:20:b6:e5:61:a6: a4:46:46:9b:6d:51:00:d3:1a:75:49:22:cb:9b:e8: ad:6e:76:50:0a:26:60:a5:69:e3:a8:77:d0:85:c9: 48:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E9:D5:D3:E7:7A:44:45:3D:73:D2:59:DD:2B:1E:11:F3:1E:D1:FE X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a7:6a:a4:cb:1c:5e:e0:a5:a6:75:b0:2e:93:3f:80:e0:f6:04: 4a:7a:4f:75:6b:16:aa:bd:12:dd:b5:75:5c:ed:80:f7:2c:15: 0e:67:ad:76:e7:18:ec:07:c5:8e:77:72:9d:35:7b:45:76:bb: e6:3a:13:43:83:70:74:9c:cc:20:a1:00:3e:42:41:a6:57:6c: 57:f0:9f:46:a0:b6:76:bd:76:62:bc:2f:38:bc:eb:86:2d:00: ed:34:aa:3b:8b:ce:4b:89:99:36:a9:cc:8b:1a:df:72:26:ea: 99:ff:5f:f7:e1:b3:68:37:b0:88:ca:5c:fc:15:04:93:b7:37: 86:60:ad:7c:9d:5d:82:1e:a9:57:da:cc:63:6e:64:c1:4d:66: 30:20:ad:5b:3a:4b:13:5a:28:86:97:ea:65:d8:2b:51:ec:52: da:77:ab:b0:98:bd:5e:77:32:db:74:4d:68:7e:67:6a:be:7f: c1:da:f2:ba:4e:e4:1e:74:f8:02:07:e4:e1:68:fb:36:0e:d9: fd:70:7c:cd:e8:bb:a0:40:74:c2:2d:79:37:50:8b:aa:eb:f1: 1b:9a:6a:8d:37:b2:dd:d8:1e:6e:73:dc:c7:7a:86:c3:ce:e0: 0c:f0:a0:fe:d6:49:bf:5d:0f:1b:80:3d:6c:e2:01:67:0e:f7: 8a:70:0d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKoAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUxMDE4MTU0NzE3WhcNMjUxMDI1MTU0NzE3WjAYMRYwFAYD VQQDEw02OGYzYjY4Ni1iMWZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Upye9DKKrjAqmpPGNX8LSbz8//+dC14pE/k+xofsCVFK7tLoB+FNv2I70nd fkgz0g7FZRgPEHXcdCc7XEtyPG19+4f6YXJ0l/rQRXjCU4gerXxYQANt2bPLHybY tMyxUUnk1ZSdPArBpVnabtm9UvUISiIyVmIddjth8UDDYaHrd/8BD4YjIX7m6DQV ecvpfTccLKBKFy7vALD/zsVtKN/dXr/BdqGDIRK1I+TfAucDZ7nUZp1kiovQvUJP rF76qYz6x7ePEQ5bDWlw3YhwJH9ursRS3GUb4ZuQILblYaakRkabbVEA0xp1SSLL m+itbnZQCiZgpWnjqHfQhclIiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK3p1dPn ekRFPXPSWd0rHhHzHtH+MB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCnaqTLHF7gpaZ1sC6TP4Dg9gRKek91axaqvRLdtXVc7YD3LBUOZ612 5xjsB8WOd3KdNXtFdrvmOhNDg3B0nMwgoQA+QkGmV2xX8J9GoLZ2vXZivC84vOuG LQDtNKo7i85LiZk2qcyLGt9yJuqZ/1/34bNoN7CIylz8FQSTtzeGYK18nV2CHqlX 2sxjbmTBTWYwIK1bOksTWiiGl+pl2CtR7FLad6uwmL1edzLbdE1ofmdqvn/B2vK6 TuQedPgCB+ThaPs2Dtn9cHzN6LugQHTCLXk3UIuq6/EbmmqNN7Ld2B5uc9zHeobD zuAM8KD+1km/XQ8bgD1s4gFnDveKcA00 -----END CERTIFICATE-----Generated at Mon Oct 20 17:25:26 2025 by rpki-client