$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: k4RQNELqai7LzqHT289qigGE8rnrf/H24JenJopipfE= Subject key identifier: C7:09:94:E1:FD:52:A4:D8:1E:F1:EB:D0:C3:42:5D:A2:3D:B7:C7:65 Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0D5F Signing time: Sat 18 Oct 2025 18:39:56 +0000 Manifest this update: Sat 18 Oct 2025 18:39:56 +0000 Manifest next update: Sat 25 Oct 2025 18:39:56 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: hIOUfXpNe6uNJnzA+qgSDxUMpbfG/ExLD/c+whmOrbQ=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: j4ZSWs9Zu9eXGBGyTwHuQZ3Okk0YlAH6B7JO+kTYGo0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3431 (0xd67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: Oct 18 18:39:56 2025 GMT Not After : Oct 25 18:39:56 2025 GMT Subject: CN=68f3defc-6d25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:fb:e1:d2:4a:2d:8f:1c:59:13:67:3b:50:25: 1b:14:81:53:58:49:29:86:40:26:2e:f0:0f:bf:d6: 79:32:34:cf:fd:0c:e8:8c:26:ee:1a:bb:5e:d7:29: 32:47:2f:c6:0e:78:e3:a0:82:a5:6e:e0:25:11:c1: 89:2b:79:57:a6:3a:c6:28:de:23:c4:c1:bb:ad:04: a9:db:8b:33:f1:e8:96:c8:05:a5:4f:e1:be:a8:d9: de:37:b2:49:e0:af:38:9a:64:60:2a:4c:94:31:d2: 56:d1:82:84:bb:06:c5:25:c6:03:ef:2c:5f:ae:fc: 8f:ac:ba:3f:70:5d:65:18:92:6b:e9:36:a3:95:a4: b1:f6:cb:20:8d:b8:41:4f:21:74:48:93:d1:ae:a0: f5:f3:f0:bb:19:ee:ee:af:e7:8a:4d:16:82:0d:44: 5a:e5:9f:0b:2c:ee:0a:99:38:64:8a:0e:28:ba:04: f1:c3:ec:85:4b:63:9c:ff:07:66:97:e9:13:4a:52: 7c:cc:49:38:72:a1:27:3d:d6:68:63:4c:17:d7:20: b1:e6:16:72:aa:f7:bb:5d:d5:36:9f:b2:d4:2a:15: f7:de:46:df:d4:0f:da:7a:15:55:3f:bb:d2:c8:fd: 1c:b5:44:8a:6e:12:48:5c:9b:c3:b2:23:ca:65:ae: 56:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:09:94:E1:FD:52:A4:D8:1E:F1:EB:D0:C3:42:5D:A2:3D:B7:C7:65 X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:75:fd:64:d5:d2:48:64:39:c8:b3:f4:c5:4f:12:d2:b7:4d: 35:06:a3:f6:3a:bf:54:73:3f:30:af:75:95:be:6f:ab:0c:92: d5:74:29:93:01:37:ad:53:cd:9b:b3:ac:34:eb:9b:9f:71:ec: 08:e4:a2:4d:53:2c:53:19:f2:a1:45:06:87:dc:0c:72:f4:a4: 07:68:d0:6f:cf:1e:48:97:9c:d1:a4:88:6c:26:e3:64:bd:01: 80:dc:bd:5a:8f:33:e8:aa:c0:d5:2d:32:7a:ad:75:59:1c:57: 36:ee:ac:e1:8c:b6:6b:db:6d:3e:68:1e:36:90:be:22:7d:bb: fe:90:66:82:ff:f7:98:e3:b3:ad:e3:a3:ba:78:81:2f:a0:c8: 1e:37:65:95:61:58:a0:5a:f8:73:1b:5d:57:4e:68:84:1b:47: e7:91:86:b2:c6:a5:87:15:5a:a2:3f:2d:35:74:0f:7c:3c:69: d7:1a:a2:80:80:a2:04:0b:bf:32:dd:6f:a9:1d:c2:37:7e:7c: 7f:e4:d8:ee:2a:fd:36:a0:78:7f:cf:3b:e6:32:7a:0f:a1:59: 3f:3b:06:09:fd:c0:84:13:3b:8d:55:39:39:df:e4:1d:67:af: 46:dd:93:3d:44:d6:d8:06:d0:8a:94:72:0a:46:27:ac:d2:b5: eb:a0:98:11 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUxMDE4MTgzOTU2WhcNMjUxMDI1MTgzOTU2WjAYMRYwFAYD VQQDEw02OGYzZGVmYy02ZDI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsvvh0kotjxxZE2c7UCUbFIFTWEkphkAmLvAPv9Z5MjTP/QzojCbuGrte1yky Ry/GDnjjoIKlbuAlEcGJK3lXpjrGKN4jxMG7rQSp24sz8eiWyAWlT+G+qNneN7JJ 4K84mmRgKkyUMdJW0YKEuwbFJcYD7yxfrvyPrLo/cF1lGJJr6TajlaSx9ssgjbhB TyF0SJPRrqD18/C7Ge7ur+eKTRaCDURa5Z8LLO4KmThkig4ougTxw+yFS2Oc/wdm l+kTSlJ8zEk4cqEnPdZoY0wX1yCx5hZyqve7XdU2n7LUKhX33kbf1A/aehVVP7vS yP0ctUSKbhJIXJvDsiPKZa5WmQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMcJlOH9 UqTYHvHr0MNCXaI9t8dlMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAudf1k1dJIZDnIs/TFTxLSt001BqP2Or9Ucz8wr3WVvm+rDJLVdCmT ATetU82bs6w065ufcewI5KJNUyxTGfKhRQaH3Axy9KQHaNBvzx5Il5zRpIhsJuNk vQGA3L1ajzPoqsDVLTJ6rXVZHFc27qzhjLZr220+aB42kL4ifbv+kGaC//eY47Ot 46O6eIEvoMgeN2WVYVigWvhzG11XTmiEG0fnkYayxqWHFVqiPy01dA98PGnXGqKA gKIEC78y3W+pHcI3fnx/5NjuKv02oHh/zzvmMnoPoVk/OwYJ/cCEEzuNVTk53+Qd Z69G3ZM9RNbYBtCKlHIKRies0rXroJgR -----END CERTIFICATE-----Generated at Sun Oct 19 23:21:12 2025 by rpki-client