$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft File: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft (raw, json) Hash identifier: ZWR7C/jgrAEZ96s2P5oByLhzStm1N977UcLLF3J+FFQ= Subject key identifier: FB:D9:AB:DD:74:D5:BF:85:3B:67:4F:EB:2C:7A:0F:C5:66:C0:12:EA Authority key identifier: DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE Certificate issuer: /CN=A91E6CCA/serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft Manifest number: 6A Signing time: Thu 23 Oct 2025 09:08:30 +0000 Manifest this update: Thu 23 Oct 2025 09:08:30 +0000 Manifest next update: Thu 30 Oct 2025 09:08:30 +0000 Files and hashes: 1: 2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl (hash: r7JvoYxjEL7OHvVLTQPeb0lYRGd6RsQe5knIs6C3k98=) 2: E9CF18DE0F7111F096BBCF24C4F9AE02.roa (hash: LJYk/G3tN+KuXhxLY4vLUCBZc2tSEaFJTdOb4sX/qHg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 09:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6CCA, serialNumber=DB13FBAF7B3B38DB7630DB0B97374DAAD0315ADE Validity Not Before: Oct 23 09:08:30 2025 GMT Not After : Oct 30 09:08:30 2025 GMT Subject: CN=68f9f08e-061d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:59:ba:6b:6d:6b:19:54:c0:ba:1e:1d:5a:a6: a1:02:44:71:a7:4d:80:f3:7d:e7:2c:75:2e:94:ff: f1:c9:3e:e5:c6:e2:07:e1:24:a7:e6:84:cb:58:0d: e5:5d:41:72:09:70:43:33:c9:ab:58:a4:ec:42:23: 37:62:ae:d3:f4:2e:9d:42:8e:30:2f:61:7b:64:93: 4e:c6:95:12:7c:69:b1:c5:64:bf:2d:da:96:57:ed: 68:ab:ab:47:71:57:f6:ca:09:cc:16:8a:0b:f5:69: 75:f7:6d:54:7b:7e:64:11:58:2c:b4:0c:41:34:79: 3f:a3:8f:b4:c0:80:32:b7:2a:49:bf:38:8e:14:7c: 94:08:be:49:e8:03:2b:8e:a7:b2:61:f1:cc:bb:28: bd:3e:68:15:db:2f:0d:3e:ce:31:ba:c1:d2:33:4e: ff:07:44:32:6b:72:1e:e9:e7:96:e7:14:0e:86:bb: 88:73:bd:38:ed:7c:99:65:63:7c:6e:eb:78:8a:a1: 2e:b1:34:95:25:29:41:6a:3a:bb:df:28:9a:cc:cb: a8:6d:13:af:50:4e:34:ed:af:73:54:56:9f:54:ce: aa:ee:67:a9:cc:e0:27:c3:80:e1:83:2c:4e:68:e8: 42:9f:da:a4:d9:2d:9b:26:b5:a9:f7:2c:8a:5a:24: 76:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:D9:AB:DD:74:D5:BF:85:3B:67:4F:EB:2C:7A:0F:C5:66:C0:12:EA X509v3 Authority Key Identifier: keyid:DB:13:FB:AF:7B:3B:38:DB:76:30:DB:0B:97:37:4D:AA:D0:31:5A:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2xP7r3s7ONt2MNsLlzdNqtAxWt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6CCA/24010D520F7011F09E2F7D1FC4F9AE02/2xP7r3s7ONt2MNsLlzdNqtAxWt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:a0:af:bb:1e:c6:7a:d7:25:47:e1:37:a8:a9:a6:3a:67:97: c2:74:ad:8b:43:50:d5:fb:ac:91:97:56:77:d8:6b:9d:6b:41: 9a:2f:ad:bc:fc:83:e2:1e:c1:ac:8b:8a:b9:62:c0:15:c9:74: 35:8d:f3:6a:c6:51:42:12:41:13:e5:e7:82:61:f7:85:b3:b9: 34:f2:f4:51:74:ed:4c:96:6a:10:13:43:38:16:cd:7d:b7:df: 45:00:fb:a4:ec:c8:0f:6a:51:86:d4:c0:ae:7b:7c:2b:d1:f2: e9:4c:c1:84:78:a0:20:f1:57:a0:4b:7e:2b:f4:02:5d:ff:26: ab:66:ff:e1:24:5e:59:52:9f:78:cb:ea:bd:12:e7:70:db:3d: e1:5d:9f:1a:8c:c3:1e:44:7f:33:f0:68:a1:1a:f6:63:93:77: 5b:68:24:51:c1:f1:ee:d4:b5:01:db:a7:09:40:f7:dd:3f:c8: c2:35:50:26:0b:c8:5d:7c:98:27:3a:ee:64:36:0a:e0:65:98: da:98:bb:34:d5:17:76:c9:3d:a5:45:8c:31:ca:62:20:ba:94: ba:71:fa:a7:5e:7b:2a:d2:28:cf:82:9c:9a:f6:80:44:dd:db: 13:50:31:c9:4d:66:0c:46:ea:68:e6:6a:30:ef:61:43:68:26: 6a:cd:fe:ee -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NkNDQTExMC8GA1UEBRMoREIxM0ZCQUY3QjNCMzhEQjc2MzBEQjBCOTczNzREQUFE MDMxNUFERTAeFw0yNTEwMjMwOTA4MzBaFw0yNTEwMzAwOTA4MzBaMBgxFjAUBgNV BAMTDTY4ZjlmMDhlLTA2MWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDCWbprbWsZVMC6Hh1apqECRHGnTYDzfecsdS6U//HJPuXG4gfhJKfmhMtYDeVd QXIJcEMzyatYpOxCIzdirtP0Lp1CjjAvYXtkk07GlRJ8abHFZL8t2pZX7Wirq0dx V/bKCcwWigv1aXX3bVR7fmQRWCy0DEE0eT+jj7TAgDK3Kkm/OI4UfJQIvknoAyuO p7Jh8cy7KL0+aBXbLw0+zjG6wdIzTv8HRDJrch7p55bnFA6Gu4hzvTjtfJllY3xu 63iKoS6xNJUlKUFqOrvfKJrMy6htE69QTjTtr3NUVp9UzqruZ6nM4CfDgOGDLE5o 6EKf2qTZLZsmtan3LIpaJHZ1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+9mr3XTV v4U7Z0/rLHoPxWbAEuowHwYDVR0jBBgwFoAU2xP7r3s7ONt2MNsLlzdNqtAxWt4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2Q0NBLzI0MDEwRDUyMEY3 MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050Mk1Oc0xsemROcXRBeFd0 NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMnhQN3IzczdPTnQyTU5zTGx6ZE5xdEF4V3Q0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2 Q0NBLzI0MDEwRDUyMEY3MDExRjA5RTJGN0QxRkM0RjlBRTAyLzJ4UDdyM3M3T050 Mk1Oc0xsemROcXRBeFd0NC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADugr7sexnrXJUfhN6ippjpnl8J0rYtDUNX7rJGXVnfYa51rQZovrbz8 g+IewayLirliwBXJdDWN82rGUUISQRPl54Jh94WzuTTy9FF07UyWahATQzgWzX23 30UA+6TsyA9qUYbUwK57fCvR8ulMwYR4oCDxV6BLfiv0Al3/Jqtm/+EkXllSn3jL 6r0S53DbPeFdnxqMwx5EfzPwaKEa9mOTd1toJFHB8e7UtQHbpwlA990/yMI1UCYL yF18mCc67mQ2CuBlmNqYuzTVF3bJPaVFjDHKYiC6lLpx+qdeeyrSKM+CnJr2gETd 2xNQMclNZgxG6mjmajDvYUNoJmrN/u4= -----END CERTIFICATE-----Generated at Fri Oct 24 11:09:08 2025 by rpki-client