$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json) Hash identifier: 95RPsC7rs52Q4/gB68fsofAOoFxjW7GiRpzxEMp5QAE= Subject key identifier: 4A:4F:6B:31:4B:04:8A:21:BB:69:54:F0:82:5E:DC:C6:3A:26:49:B8 Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0CD4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft Manifest number: 0CAD Signing time: Sat 18 Oct 2025 18:58:41 +0000 Manifest this update: Sat 18 Oct 2025 18:58:40 +0000 Manifest next update: Sat 25 Oct 2025 18:58:40 +0000 Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: i+yG8qqLug6SfZPF6zp4jYgdvoYhwI7t43mBV2YnySc=) 2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=) 3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=) 4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=) 5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=) 6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:58:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3284 (0xcd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Oct 18 18:58:40 2025 GMT Not After : Oct 25 18:58:40 2025 GMT Subject: CN=68f3e361-1a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:03:43:01:28:c9:2a:c7:c4:87:02:e6:23:1d: 71:f9:09:fc:b4:18:2a:21:67:86:49:91:2d:11:33: 1e:e7:f5:79:a5:23:c2:6e:15:7e:3d:40:09:81:12: 09:97:ae:52:9c:6a:a1:40:a7:5f:e3:2c:85:fd:73: c9:31:24:2c:6d:d3:3c:38:6d:5b:6f:55:f7:e3:a6: 8a:9d:b0:75:a6:a8:85:89:29:40:33:3e:eb:bb:37: ea:0c:4c:82:31:33:94:cf:e6:c9:33:48:29:8b:57: 6b:0c:78:51:37:54:e6:81:a2:85:31:c8:7a:b0:4d: 63:27:e6:5a:15:3d:70:96:5d:02:15:32:99:78:b6: d5:05:08:b3:52:9e:9e:8f:2d:a5:02:4a:f8:9f:3f: 0e:ab:a5:7e:82:97:17:fa:db:97:83:1d:bb:d8:4b: 61:39:34:34:84:53:ca:9b:b4:79:17:c7:73:43:5d: a9:e0:1b:02:5c:bb:a0:1f:d7:a5:bb:4c:68:a8:a2: 58:d5:26:7a:56:e1:84:4c:14:6d:23:7a:5a:22:7d: 94:3e:4e:cb:c2:ae:d6:0d:f4:8e:f2:1b:0f:d3:01: 35:db:d2:64:8e:86:fe:4f:c3:e1:da:a3:cf:bb:1a: bd:f7:91:70:ed:12:65:bd:c4:4d:85:cc:a9:54:1a: 60:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:4F:6B:31:4B:04:8A:21:BB:69:54:F0:82:5E:DC:C6:3A:26:49:B8 X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 66:cf:72:0d:7a:34:b7:69:0e:2c:56:45:b7:e1:95:fd:56:b0: ff:3b:78:7b:5f:ef:d9:be:ed:c7:2a:21:bc:23:16:8c:a2:e5: e2:20:76:2b:c9:11:ec:bb:52:ee:ab:e9:b6:bd:41:64:2e:11: 36:cd:0b:7a:a9:f8:fb:6f:fc:5a:e6:5a:a8:65:97:d1:57:3b: c8:0c:c8:74:15:91:d4:4f:d8:45:6e:b9:d6:23:d9:c4:34:a7: 5a:b7:7f:26:ae:04:74:3a:5e:42:de:19:22:0f:1d:88:97:98: 71:9f:a1:d4:c7:c9:d8:eb:30:88:ac:c2:82:5e:fd:fa:f2:5e: 22:7e:a2:da:4b:c8:aa:0d:8c:97:fd:d4:33:6b:83:64:08:02: ad:47:11:f5:a4:d5:aa:95:1e:bf:6a:a0:0c:dc:43:f7:f0:5a: b3:fc:67:4a:ce:96:a0:b5:6f:3c:7d:7b:c5:a3:0c:c7:d9:a4: 00:34:bd:69:46:40:3d:50:0a:3e:19:2b:29:65:20:d6:2f:79: 7d:35:04:67:bd:47:3c:f8:2a:22:28:dd:64:b4:40:34:0e:8e: 93:df:fb:61:dd:22:a5:9d:c8:15:6f:9e:4c:d7:63:3a:14:13: e6:37:66:57:a0:3b:28:07:2b:fa:3b:d7:f8:b4:78:1a:50:7d: 1f:05:fd:d2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjUxMDE4MTg1ODQwWhcNMjUxMDI1MTg1ODQwWjAYMRYwFAYD VQQDEw02OGYzZTM2MS0xYTBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2wNDASjJKsfEhwLmIx1x+Qn8tBgqIWeGSZEtETMe5/V5pSPCbhV+PUAJgRIJ l65SnGqhQKdf4yyF/XPJMSQsbdM8OG1bb1X346aKnbB1pqiFiSlAMz7ruzfqDEyC MTOUz+bJM0gpi1drDHhRN1TmgaKFMch6sE1jJ+ZaFT1wll0CFTKZeLbVBQizUp6e jy2lAkr4nz8Oq6V+gpcX+tuXgx272EthOTQ0hFPKm7R5F8dzQ12p4BsCXLugH9el u0xoqKJY1SZ6VuGETBRtI3paIn2UPk7Lwq7WDfSO8hsP0wE129Jkjob+T8Ph2qPP uxq995Fw7RJlvcRNhcypVBpgLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEpPazFL BIohu2lU8IJe3MY6Jkm4MB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBmz3INejS3aQ4sVkW34ZX9VrD/O3h7X+/Zvu3HKiG8IxaMouXiIHYr yRHsu1Luq+m2vUFkLhE2zQt6qfj7b/xa5lqoZZfRVzvIDMh0FZHUT9hFbrnWI9nE NKdat38mrgR0Ol5C3hkiDx2Il5hxn6HUx8nY6zCIrMKCXv368l4ifqLaS8iqDYyX /dQza4NkCAKtRxH1pNWqlR6/aqAM3EP38Fqz/GdKzpagtW88fXvFowzH2aQANL1p RkA9UAo+GSspZSDWL3l9NQRnvUc8+CoiKN1ktEA0Do6T3/th3SKlncgVb55M12M6 FBPmN2ZXoDsoByv6O9f4tHgaUH0fBf3S -----END CERTIFICATE-----Generated at Mon Oct 20 16:06:56 2025 by rpki-client