$ rpki-client -vvf rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft File: b6Yr4K15obTDhpuhmQ8hTfazzic.mft (raw, json) Hash identifier: lvKJxpvJk6EweWswkcJOgd2pa2XHD0RlCVsYhzK6tpU= Subject key identifier: 38:03:51:22:CB:EB:DF:4B:80:CA:88:B3:62:F0:1B:50:8C:A8:3C:17 Authority key identifier: 6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 Certificate issuer: /CN=A91C882A/serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Certificate serial: 010C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft Manifest number: 0108 Signing time: Sun 19 Oct 2025 07:58:21 +0000 Manifest this update: Sun 19 Oct 2025 07:58:21 +0000 Manifest next update: Sun 26 Oct 2025 07:58:21 +0000 Files and hashes: 1: b6Yr4K15obTDhpuhmQ8hTfazzic.crl (hash: WzT6rBDuifvT9SRcNjkbG+Z3YpI/0YjmWkZjhj2ib3E=) 2: 24C853F2AE6411EF9E94822AC4F9AE02.roa (hash: JDZyv3s2Qwc3bu83urEP0uEoNAGKRBqIwwX8qTLx3RQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 268 (0x10c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C882A, serialNumber=6FA62BE0AD79A1B4C3869BA1990F214DF6B3CE27 Validity Not Before: Oct 19 07:58:21 2025 GMT Not After : Oct 26 07:58:21 2025 GMT Subject: CN=68f49a1d-1119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:fc:fb:83:19:1a:77:fc:80:bf:73:f4:7d: 99:70:cc:a5:82:b0:bc:54:c0:d6:dc:a0:f8:10:8a: 9b:c7:37:ba:63:6c:6e:3d:93:2e:b6:7e:45:79:b4: ae:e8:ac:dc:a6:d3:e2:5a:c8:b7:41:46:c5:cb:58: 5e:74:07:a7:9c:45:46:5b:c4:a5:0a:b7:43:3e:b3: c3:9e:be:4b:6d:7f:88:97:14:ad:77:d5:f5:16:7e: 6a:69:35:f1:20:c2:c2:31:43:f6:f6:48:95:58:00: 32:ae:ad:05:3b:31:0c:c8:29:96:f1:8e:db:ad:b9: 5f:de:62:ed:ac:0b:c6:bf:8b:8a:b7:f1:97:d2:dd: dd:b0:c1:d9:70:1f:ac:62:ea:6a:11:f2:a0:f5:68: 95:f3:7a:85:fc:12:f6:30:51:ab:be:08:84:02:69: 73:8e:5c:02:f5:6a:13:9b:6d:80:01:3e:bc:1e:6a: 3e:22:f8:bc:3a:31:fd:c0:50:9e:1e:55:a1:5c:cb: a6:6b:1a:2d:3b:c1:d7:37:f5:f1:bc:17:74:54:58: b7:ca:4d:bd:8c:4e:55:6a:88:f4:ce:a9:54:21:84: 70:9b:97:c6:f3:21:aa:81:16:59:93:f4:48:c7:78: 64:ba:6c:51:dd:ac:dc:1e:6a:8f:6f:d0:b3:63:4a: f3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:03:51:22:CB:EB:DF:4B:80:CA:88:B3:62:F0:1B:50:8C:A8:3C:17 X509v3 Authority Key Identifier: keyid:6F:A6:2B:E0:AD:79:A1:B4:C3:86:9B:A1:99:0F:21:4D:F6:B3:CE:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6Yr4K15obTDhpuhmQ8hTfazzic.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C882A/B9C0C97A21A211EFB9069A6AC4F9AE02/b6Yr4K15obTDhpuhmQ8hTfazzic.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:39:fe:04:1e:82:b7:c4:7a:5e:e7:eb:36:e6:ff:3b:ab:92: 5f:65:0e:45:6f:f8:a6:79:1a:66:6e:65:e4:28:fa:95:98:96: 5b:41:d6:fd:6d:b0:77:cf:ad:87:48:4f:40:1f:24:52:9e:75: ff:ed:d1:69:c1:17:cb:91:d6:f8:f2:18:31:d3:76:f1:75:96: ec:b4:76:2e:b9:d3:f9:1a:5a:42:53:13:85:06:3f:42:d0:9f: db:b9:5b:fc:27:62:40:88:f1:12:86:34:18:52:ec:e7:0d:e2: e4:fd:bb:07:6d:f5:83:ed:b6:14:40:a6:23:c3:b9:9d:45:39: a7:b2:8d:2c:d8:95:99:1c:e7:2c:53:a5:83:01:84:a2:74:48: fd:61:fa:b9:f1:75:7c:6f:3b:9e:86:c2:ac:31:5f:4d:15:47: 14:4b:0d:17:23:1f:78:99:2a:44:e4:b3:13:20:a4:1c:62:29: ec:cb:0b:52:7d:3a:0c:0a:21:b2:82:43:bb:af:d2:d9:cd:37: 25:fa:76:86:7a:b7:ad:d6:0b:31:7d:54:b9:56:6b:f9:02:1b: 58:d5:03:0e:73:14:dd:73:1f:2d:ed:1a:a3:92:8b:e0:2d:99: 3b:a5:fe:d2:52:27:6e:f0:25:70:e1:fc:47:5c:03:33:24:80: da:36:ed:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg4MkExMTAvBgNVBAUTKDZGQTYyQkUwQUQ3OUExQjRDMzg2OUJBMTk5MEYyMTRE RjZCM0NFMjcwHhcNMjUxMDE5MDc1ODIxWhcNMjUxMDI2MDc1ODIxWjAYMRYwFAYD VQQDEw02OGY0OWExZC0xMTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc38+4MZGnf8gL9z9H2ZcMylgrC8VMDW3KD4EIqbxze6Y2xuPZMutn5FebSu 6KzcptPiWsi3QUbFy1hedAennEVGW8SlCrdDPrPDnr5LbX+IlxStd9X1Fn5qaTXx IMLCMUP29kiVWAAyrq0FOzEMyCmW8Y7brblf3mLtrAvGv4uKt/GX0t3dsMHZcB+s YupqEfKg9WiV83qF/BL2MFGrvgiEAmlzjlwC9WoTm22AAT68Hmo+Ivi8OjH9wFCe HlWhXMumaxotO8HXN/XxvBd0VFi3yk29jE5Vaoj0zqlUIYRwm5fG8yGqgRZZk/RI x3hkumxR3azcHmqPb9CzY0rziQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDgDUSLL 699LgMqIs2LwG1CMqDwXMB8GA1UdIwQYMBaAFG+mK+CteaG0w4aboZkPIU32s84n MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODgyQS9COUMwQzk3QTIx QTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9iVERocHVobVE4aFRmYXp6 aWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I2WXI0SzE1b2JURGhwdWhtUThoVGZhenppYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODgyQS9COUMwQzk3QTIxQTIxMUVGQjkwNjlBNkFDNEY5QUUwMi9iNllyNEsxNW9i VERocHVobVE4aFRmYXp6aWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBOf4EHoK3xHpe5+s25v87q5JfZQ5Fb/imeRpmbmXkKPqVmJZbQdb9 bbB3z62HSE9AHyRSnnX/7dFpwRfLkdb48hgx03bxdZbstHYuudP5GlpCUxOFBj9C 0J/buVv8J2JAiPEShjQYUuznDeLk/bsHbfWD7bYUQKYjw7mdRTmnso0s2JWZHOcs U6WDAYSidEj9Yfq58XV8bzuehsKsMV9NFUcUSw0XIx94mSpE5LMTIKQcYinsywtS fToMCiGygkO7r9LZzTcl+naGeret1gsxfVS5Vmv5AhtY1QMOcxTdcx8t7Rqjkovg LZk7pf7SUidu8CVw4fxHXAMzJIDaNu2a -----END CERTIFICATE-----Generated at Sun Oct 19 23:19:52 2025 by rpki-client