$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft File: J6IiDxq_zcps_VIjbsEKERKog0U.mft (raw, json) Hash identifier: 54WTuVP0HkPMMpnXbLonsy+tK2TxwzETxKLPHs0w5qk= Subject key identifier: C7:7F:18:D2:F8:E2:65:B3:5F:9D:89:D8:1A:7C:E5:DF:F1:5E:F9:6E Authority key identifier: 27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 Certificate issuer: /CN=A91CC7EA/serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Certificate serial: 014D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft Manifest number: 014A Signing time: Sun 19 Oct 2025 07:01:35 +0000 Manifest this update: Sun 19 Oct 2025 07:01:35 +0000 Manifest next update: Sun 26 Oct 2025 07:01:35 +0000 Files and hashes: 1: J6IiDxq_zcps_VIjbsEKERKog0U.crl (hash: s/HBD21YZiI4ur9jMB+hMlru/54nJBGNs46aU03CA7k=) 2: 6734E4C4B57411EEBCB6B977C4F9AE02.roa (hash: FA7x6xVF2Cw2uJbqOHPR0PvfekjSEl4pesKDhFGadGE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 07:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 333 (0x14d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC7EA, serialNumber=27A2220F1ABFCDCA6CFD52236EC10A1112A88345 Validity Not Before: Oct 19 07:01:35 2025 GMT Not After : Oct 26 07:01:35 2025 GMT Subject: CN=68f48ccf-a36c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d0:53:6c:0e:5a:b6:5b:6e:d4:5a:d5:6d:01: 43:d1:79:5e:5f:e1:1e:c3:0a:2f:1c:3a:f7:92:86: 8a:43:f4:a1:dc:4a:e9:0f:65:b1:e4:0f:fa:cb:c5: 36:70:08:4e:6b:a2:74:1f:a8:fe:53:2d:ce:c5:cb: cf:a3:f2:97:f5:79:25:29:d3:69:8c:2b:d3:eb:ee: c8:67:19:b1:07:0b:3c:66:55:71:3d:eb:b6:91:c5: 7a:36:fe:a0:b3:ac:be:7b:5c:a3:74:ef:39:b1:95: 4f:2b:ef:d3:a8:24:68:36:5b:d5:b8:f8:85:61:0b: ac:3b:a6:49:fa:61:21:fe:51:7e:c6:6f:37:39:db: 74:b0:c3:29:c5:b9:e8:b5:36:da:03:28:e4:72:e5: 1e:47:29:64:17:6d:b4:40:ef:74:83:39:87:6f:38: bb:70:30:42:99:f3:94:07:79:b7:af:e8:c7:d8:a9: ad:bb:4b:29:c6:c3:a2:34:5b:f9:ea:ac:2a:34:81: ef:bb:6f:22:95:37:4b:d5:93:38:3d:69:d8:96:37: 0c:30:67:42:78:11:08:4c:09:b9:e2:48:40:e4:ab: 09:cd:53:aa:eb:5c:f4:86:a6:f4:14:99:31:93:10: f3:c9:74:0c:1b:b5:4c:81:4f:f5:94:e7:21:bf:43: b0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:7F:18:D2:F8:E2:65:B3:5F:9D:89:D8:1A:7C:E5:DF:F1:5E:F9:6E X509v3 Authority Key Identifier: keyid:27:A2:22:0F:1A:BF:CD:CA:6C:FD:52:23:6E:C1:0A:11:12:A8:83:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J6IiDxq_zcps_VIjbsEKERKog0U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC7EA/B5C87D68B57311EE8F50896CC4F9AE02/J6IiDxq_zcps_VIjbsEKERKog0U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:8d:0c:b6:15:2a:ea:4b:a5:98:5d:7a:b0:49:1f:66:32:d3: 9b:33:16:81:f4:03:f2:fe:21:bc:98:11:05:e2:e8:be:84:ec: 41:07:49:15:37:c1:35:e8:de:4f:bf:7e:2a:63:76:97:6f:d2: 40:07:17:b0:45:d6:02:56:aa:63:39:51:ae:e8:c3:96:04:dc: 82:0a:37:59:3f:c0:db:0d:83:41:e9:de:bd:38:27:c4:d0:82: ec:c0:53:36:4a:4c:9b:14:e7:12:41:10:9e:b3:e9:0f:1e:6d: ed:ff:da:c7:70:cd:6c:f9:aa:3b:34:8b:36:a8:15:4b:0a:98: a1:02:f1:17:35:33:59:41:2c:52:5e:14:66:de:84:c1:c9:97: c9:05:e6:76:fe:03:90:4b:a9:68:79:70:09:83:e6:78:31:81: 26:e9:0c:76:51:55:df:1b:d4:43:e0:76:35:8d:bf:a0:53:6b: eb:a5:0f:a9:ab:71:c9:a7:7a:cc:26:6e:d2:bc:42:3e:a7:5c: 1c:92:b7:1a:c1:96:e1:15:04:3a:f6:d8:e4:a5:8e:a8:9a:9b: 59:f0:cd:46:a6:03:90:9d:cc:e3:da:a0:00:ca:81:88:04:45: da:ba:86:b1:d3:3c:21:0c:9a:d0:c9:0e:6f:6d:f6:ce:5c:fb: d5:d9:cc:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M3RUExMTAvBgNVBAUTKDI3QTIyMjBGMUFCRkNEQ0E2Q0ZENTIyMzZFQzEwQTEx MTJBODgzNDUwHhcNMjUxMDE5MDcwMTM1WhcNMjUxMDI2MDcwMTM1WjAYMRYwFAYD VQQDEw02OGY0OGNjZi1hMzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotBTbA5atltu1FrVbQFD0XleX+EewwovHDr3koaKQ/Sh3ErpD2Wx5A/6y8U2 cAhOa6J0H6j+Uy3OxcvPo/KX9XklKdNpjCvT6+7IZxmxBws8ZlVxPeu2kcV6Nv6g s6y+e1yjdO85sZVPK+/TqCRoNlvVuPiFYQusO6ZJ+mEh/lF+xm83Odt0sMMpxbno tTbaAyjkcuUeRylkF220QO90gzmHbzi7cDBCmfOUB3m3r+jH2Kmtu0spxsOiNFv5 6qwqNIHvu28ilTdL1ZM4PWnYljcMMGdCeBEITAm54khA5KsJzVOq61z0hqb0FJkx kxDzyXQMG7VMgU/1lOchv0Ow1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMd/GNL4 4mWzX52J2Bp85d/xXvluMB8GA1UdIwQYMBaAFCeiIg8av83KbP1SI27BChESqINF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzdFQS9CNUM4N0Q2OEI1 NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pjcHNfVklqYnNFS0VSS29n MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o2SWlEeHFfemNwc19WSWpic0VLRVJLb2cwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QzdFQS9CNUM4N0Q2OEI1NzMxMUVFOEY1MDg5NkNDNEY5QUUwMi9KNklpRHhxX3pj cHNfVklqYnNFS0VSS29nMFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+jQy2FSrqS6WYXXqwSR9mMtObMxaB9APy/iG8mBEF4ui+hOxBB0kV N8E16N5Pv34qY3aXb9JABxewRdYCVqpjOVGu6MOWBNyCCjdZP8DbDYNB6d69OCfE 0ILswFM2SkybFOcSQRCes+kPHm3t/9rHcM1s+ao7NIs2qBVLCpihAvEXNTNZQSxS XhRm3oTByZfJBeZ2/gOQS6loeXAJg+Z4MYEm6Qx2UVXfG9RD4HY1jb+gU2vrpQ+p q3HJp3rMJm7SvEI+p1wckrcawZbhFQQ69tjkpY6omptZ8M1GpgOQnczj2qAAyoGI BEXauoax0zwhDJrQyQ5vbfbOXPvV2czO -----END CERTIFICATE-----Generated at Mon Oct 20 00:22:09 2025 by rpki-client