$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft File: n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json) Hash identifier: pidZ+gUMAKIOPGWdJSjDasAfzCaBoQP59GDP7eO6Jvk= Subject key identifier: 85:68:0E:82:19:F5:07:5B:B7:B8:16:77:11:80:AF:BB:8A:B1:D1:1C Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C Certificate issuer: /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Certificate serial: 0140 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft Manifest number: 0137 Signing time: Sun 19 Oct 2025 07:22:55 +0000 Manifest this update: Sun 19 Oct 2025 07:22:54 +0000 Manifest next update: Sun 26 Oct 2025 07:22:54 +0000 Files and hashes: 1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: Ir/TMlzeQ668dQB2YlsVL8jQ6j24jiT31vhYRsHP/k0=) 2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: yaqGJ55mUP3MHEApA47X+44ZI9rv9+pSI8dIE6Q7v10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 320 (0x140) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C Validity Not Before: Oct 19 07:22:54 2025 GMT Not After : Oct 26 07:22:54 2025 GMT Subject: CN=68f491cf-aa9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ec:a5:af:2b:76:bd:b0:25:74:f6:a6:1e:ee: 6d:a2:a2:35:32:63:dc:11:21:d1:30:a4:fc:05:dd: 09:84:fa:c8:79:ca:b6:3a:a1:e9:68:ca:c3:71:ae: 6e:56:d7:e8:5d:0d:2e:d2:80:e4:00:f1:2c:b7:b7: bb:dc:07:e8:ad:6e:47:dc:fc:44:01:08:ed:ff:0d: a0:23:61:e5:68:fd:4a:57:29:2c:0f:64:f5:a6:cf: f3:49:76:c6:b1:33:f0:4e:0c:df:f7:99:c3:c2:b3: 8a:99:2e:2d:ca:dc:90:66:1d:63:7a:4b:32:8f:90: cc:be:d1:79:cd:02:e7:c2:95:a2:8e:1f:67:d7:20: 34:ec:cf:f5:53:67:d8:1f:0f:a1:20:74:ba:b7:41: 4f:b2:b6:c7:a5:6e:21:49:ea:16:f2:a3:7e:a8:dd: 20:96:39:77:0f:72:bf:1b:46:5e:80:b3:1c:6e:48: a9:16:87:19:ec:e3:10:44:9c:af:0c:68:c8:3b:f7: 21:d7:f8:80:42:e2:73:25:1f:f6:81:a5:4e:cd:41: e2:34:cd:b6:31:a3:e8:5f:91:c8:99:59:49:4e:e9: 01:85:57:50:4b:ee:d1:a0:f1:67:30:84:4c:18:32: 96:dd:39:7e:83:db:7e:70:42:0e:ab:47:11:03:48: f3:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:68:0E:82:19:F5:07:5B:B7:B8:16:77:11:80:AF:BB:8A:B1:D1:1C X509v3 Authority Key Identifier: keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:95:02:c4:08:f3:44:0d:b6:8e:ce:4d:29:8a:3e:ad:3a:3c: ff:71:18:16:4b:8e:6d:a1:56:8e:91:e1:a5:32:43:a0:ee:c2: 94:df:c2:da:97:39:91:19:ae:ab:a0:72:09:7c:0a:e7:73:46: 9a:8d:ce:b6:69:31:24:0b:1a:f5:b2:55:3b:04:8f:a7:03:77: fb:2d:e9:2f:30:52:6e:4f:3a:6e:ec:0d:37:96:ee:ea:30:c6: a1:df:ad:76:5a:d8:17:35:8b:f8:49:82:35:0a:62:97:64:09: dc:41:47:ed:0a:67:1b:0f:bf:b9:6f:94:48:c1:e1:87:51:94: e4:fe:78:09:0e:8e:44:32:47:30:f1:d4:05:d2:b2:17:31:0d: 7d:1d:7a:f6:13:f1:52:6a:d5:2d:0a:54:97:93:e6:9a:fb:32: b7:73:fe:67:69:56:84:d2:1d:d7:d0:c5:6c:fa:c1:86:8c:79: 77:0c:a8:10:f2:58:c0:e6:2f:fc:f3:3c:46:aa:e5:09:88:1d: 07:2b:b1:27:d6:41:cd:c6:48:8b:8a:28:fe:26:17:4e:b1:30: b6:27:91:ee:9c:9e:70:40:ae:ff:42:29:aa:cf:2d:10:36:b3: 94:52:c1:5a:7f:18:ec:ee:2d:d3:db:ee:11:d0:8a:68:f8:11: 49:d7:84:48 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUxN0MxMTAvBgNVBAUTKDlGQUY4MzQxNjc1RUY0Mzg5NjQxOTkzNjI1NDI1NzJD ODkyODU0MEMwHhcNMjUxMDE5MDcyMjU0WhcNMjUxMDI2MDcyMjU0WjAYMRYwFAYD VQQDEw02OGY0OTFjZi1hYTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveylryt2vbAldPamHu5toqI1MmPcESHRMKT8Bd0JhPrIecq2OqHpaMrDca5u VtfoXQ0u0oDkAPEst7e73AforW5H3PxEAQjt/w2gI2HlaP1KVyksD2T1ps/zSXbG sTPwTgzf95nDwrOKmS4tytyQZh1jeksyj5DMvtF5zQLnwpWijh9n1yA07M/1U2fY Hw+hIHS6t0FPsrbHpW4hSeoW8qN+qN0gljl3D3K/G0ZegLMcbkipFocZ7OMQRJyv DGjIO/ch1/iAQuJzJR/2gaVOzUHiNM22MaPoX5HImVlJTukBhVdQS+7RoPFnMIRM GDKW3Tl+g9t+cEIOq0cRA0jzIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIVoDoIZ 9Qdbt7gWdxGAr7uKsdEcMB8GA1UdIwQYMBaAFJ+vg0FnXvQ4lkGZNiVCVyyJKFQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTE3Qy9DRDM3NjNFNkRD RUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlEaVdRWmsySlVKWExJa29W QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242LURRV2RlOURpV1FaazJKVUpYTElrb1ZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTE3Qy9DRDM3NjNFNkRDRUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlE aVdRWmsySlVKWExJa29WQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3lQLECPNEDbaOzk0pij6tOjz/cRgWS45toVaOkeGlMkOg7sKU38La lzmRGa6roHIJfArnc0aajc62aTEkCxr1slU7BI+nA3f7LekvMFJuTzpu7A03lu7q MMah3612WtgXNYv4SYI1CmKXZAncQUftCmcbD7+5b5RIweGHUZTk/ngJDo5EMkcw 8dQF0rIXMQ19HXr2E/FSatUtClSXk+aa+zK3c/5naVaE0h3X0MVs+sGGjHl3DKgQ 8ljA5i/88zxGquUJiB0HK7En1kHNxkiLiij+JhdOsTC2J5HunJ5wQK7/Qimqzy0Q NrOUUsFafxjs7i3T2+4R0Ipo+BFJ14RI -----END CERTIFICATE-----Generated at Mon Oct 20 14:45:01 2025 by rpki-client