$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: EOtySAgHf2g+HdgDrzeomwc/C6KQnbENhcN0pf4E8Vc= Subject key identifier: 7F:7F:C6:56:B9:76:88:E4:D2:1F:0A:83:24:EB:C9:DC:5C:82:F3:8B Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 151D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 1512 Signing time: Mon 20 Oct 2025 17:12:14 +0000 Manifest this update: Mon 20 Oct 2025 17:12:13 +0000 Manifest next update: Mon 27 Oct 2025 17:12:13 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: aV2ZjVQA9ikzmSFURgXtJiVGYhiSHt52Dd7U67h6Rqk=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 17:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5405 (0x151d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Oct 20 17:12:13 2025 GMT Not After : Oct 27 17:12:13 2025 GMT Subject: CN=68f66d6d-b766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:95:17:43:b9:e2:96:20:be:31:ea:3e:26:4a: e4:37:90:c1:78:5d:ba:b7:4a:08:e4:93:f8:b2:b4: c5:81:3b:64:e4:9e:7d:c3:42:5a:3b:bd:d9:52:18: d9:b5:ba:b3:ee:09:d6:3e:25:48:69:11:92:92:47: e1:a2:ef:8b:32:1c:f7:2b:f0:e8:20:69:f7:e9:f9: d3:2b:74:17:f4:74:a8:19:d4:8e:e4:12:f2:45:78: e6:a1:37:a1:66:4e:b9:9d:a8:e6:0a:07:e3:d4:af: 44:4f:b0:ab:de:05:aa:86:64:a5:bb:d1:a9:b1:a0: f5:8d:20:5a:bb:63:d9:3e:ed:4a:77:f5:10:29:a6: 14:aa:ea:80:7b:e4:00:91:c4:c1:a3:e1:65:3d:88: af:d3:c0:b0:59:b3:cb:c2:6f:b1:44:d3:28:12:a8: 75:8f:56:97:5c:bc:fd:29:e0:f3:eb:e7:09:d5:64: 75:b2:fe:9a:cf:52:c1:93:b9:c2:5e:40:dc:98:1b: 60:71:61:79:43:be:1c:8d:c5:9e:7a:55:b5:87:37: ca:a5:42:2a:57:98:34:cc:19:23:a2:7b:3b:56:79: 66:da:78:35:aa:bf:3c:7e:4b:2a:64:11:e7:c9:9d: 41:e5:10:45:c2:30:df:9a:e6:d8:63:a4:4a:9a:9b: d5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:7F:C6:56:B9:76:88:E4:D2:1F:0A:83:24:EB:C9:DC:5C:82:F3:8B X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:dc:b1:d7:fd:c6:93:f8:39:5d:d0:c0:9f:4c:70:a1:5a:22: c0:b4:1d:e2:04:77:9e:c0:7f:fe:0a:e3:7d:52:b1:dd:4a:c5: f5:8c:f6:bd:80:0f:85:45:a1:62:ba:ea:56:20:07:0f:c8:37: 24:1e:4b:e5:3a:95:6f:53:b4:f5:10:9f:35:44:4c:2f:03:77: cc:04:f7:2e:04:ac:f8:61:9c:54:cf:ce:93:22:12:90:bc:fe: 16:e7:24:69:26:b8:b0:3d:71:cb:33:7e:ec:96:24:ac:f8:fc: 8b:03:0f:fd:7b:f5:9e:4d:61:03:22:dc:1a:69:03:70:a0:a8: c4:1e:68:47:f5:f5:ad:43:c8:de:06:e3:9e:0a:19:58:ba:d9: 8a:99:f7:60:c5:3d:fc:b7:7a:23:70:9f:18:91:21:c6:6d:59: 43:0e:60:f3:0b:02:e6:0a:fe:4c:60:16:9d:ba:03:1d:5b:b9: 4e:6d:81:11:e5:b0:cd:ae:8f:01:fb:b0:1d:91:15:9f:39:c2: d3:6f:5d:aa:01:b4:4d:0a:76:4d:78:9c:5d:96:18:cd:bd:09: 6f:ce:ed:c1:8c:1c:86:1f:4f:45:8a:e6:f0:d6:01:4f:55:d6: e6:1e:98:11:1d:3a:35:51:03:b5:8c:8f:d7:f2:46:d3:4b:3e: 77:e2:f0:a8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUxMDIwMTcxMjEzWhcNMjUxMDI3MTcxMjEzWjAYMRYwFAYD VQQDEw02OGY2NmQ2ZC1iNzY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JUXQ7niliC+Meo+JkrkN5DBeF26t0oI5JP4srTFgTtk5J59w0JaO73ZUhjZ tbqz7gnWPiVIaRGSkkfhou+LMhz3K/DoIGn36fnTK3QX9HSoGdSO5BLyRXjmoTeh Zk65najmCgfj1K9ET7Cr3gWqhmSlu9GpsaD1jSBau2PZPu1Kd/UQKaYUquqAe+QA kcTBo+FlPYiv08CwWbPLwm+xRNMoEqh1j1aXXLz9KeDz6+cJ1WR1sv6az1LBk7nC XkDcmBtgcWF5Q74cjcWeelW1hzfKpUIqV5g0zBkjons7Vnlm2ng1qr88fksqZBHn yZ1B5RBFwjDfmubYY6RKmpvV/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH9/xla5 dojk0h8KgyTrydxcgvOLMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA93LHX/caT+Dld0MCfTHChWiLAtB3iBHeewH/+CuN9UrHdSsX1jPa9 gA+FRaFiuupWIAcPyDckHkvlOpVvU7T1EJ81REwvA3fMBPcuBKz4YZxUz86TIhKQ vP4W5yRpJriwPXHLM37sliSs+PyLAw/9e/WeTWEDItwaaQNwoKjEHmhH9fWtQ8je BuOeChlYutmKmfdgxT38t3ojcJ8YkSHGbVlDDmDzCwLmCv5MYBadugMdW7lObYER 5bDNro8B+7AdkRWfOcLTb12qAbRNCnZNeJxdlhjNvQlvzu3BjByGH09Fiubw1gFP VdbmHpgRHTo1UQO1jI/X8kbTSz534vCo -----END CERTIFICATE-----Generated at Mon Oct 20 21:25:04 2025 by rpki-client