$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: ea57qd7FzP8pfJrVNnBnXQSHGABF8I0RCuZRW8PqxxY= Subject key identifier: 31:B2:17:BC:87:61:AF:8B:11:A6:C9:0A:6E:D9:D6:21:3E:CD:A0:4A Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0222 Signing time: Sun 19 Oct 2025 04:21:18 +0000 Manifest this update: Sun 19 Oct 2025 04:21:17 +0000 Manifest next update: Sun 26 Oct 2025 04:21:17 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: tz12bdMdlbzuuxBHCmhg6a1XYbKbkYgUC3klyTPpLCE=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:21:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Oct 19 04:21:17 2025 GMT Not After : Oct 26 04:21:17 2025 GMT Subject: CN=68f4673e-fe32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ae:bf:2b:12:7d:3b:dd:16:4b:eb:89:6f:49: bf:24:b4:d4:4a:93:01:b2:b1:c5:32:97:ab:a5:e0: 46:52:f2:37:12:ed:1e:07:00:bb:db:d8:3f:93:20: 34:b7:74:58:50:db:e0:a2:b0:8b:63:a4:46:1c:51: 01:d2:ab:f6:9c:25:5d:45:19:de:9a:0f:9f:69:52: 4a:10:21:06:25:af:41:64:37:dd:55:70:c7:bd:b2: 8a:a4:e7:3f:91:62:e2:56:08:c9:31:a0:cf:fc:40: ca:06:e0:a0:d3:ae:cd:ee:a2:51:ab:c9:29:da:37: dd:0c:2c:6d:e1:2b:b7:e4:b4:c5:75:cb:dd:f0:5e: ee:7b:46:c4:da:0e:f2:c8:ee:0c:cd:1a:34:d3:4d: 99:02:84:56:b5:04:24:5a:5b:02:c3:81:d1:e9:e4: 04:54:3c:bb:2e:33:27:2c:f6:d7:2f:02:e4:71:ab: 99:8a:9c:e7:42:15:56:4f:65:dc:89:9b:c5:5a:06: d4:fc:89:b2:f6:cd:a4:0c:c5:33:26:1b:69:11:16: b7:6e:f8:a9:5d:35:a9:4b:71:79:dd:42:5e:f3:74: b0:0a:f1:0b:ca:16:ab:bb:8f:cd:23:eb:72:11:fd: 85:08:21:ca:46:6a:00:55:69:3c:06:ab:55:3c:8e: 38:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B2:17:BC:87:61:AF:8B:11:A6:C9:0A:6E:D9:D6:21:3E:CD:A0:4A X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:04:cb:b5:14:74:7e:11:ec:a4:7c:7c:51:83:00:1e:57:a6: 82:7b:f1:fe:bc:b6:3d:48:bb:6b:36:ad:14:ec:56:30:5d:c9: 69:5e:9d:c4:fa:5c:b4:ce:14:43:7e:a8:fd:aa:ab:ca:07:7c: 93:db:43:e0:c4:ac:b0:1e:06:20:4e:c2:96:75:a8:35:59:e8: 7c:c6:ee:80:4b:37:79:31:d5:cb:24:e7:06:71:36:9d:b5:4c: 6c:ca:ab:a5:88:4a:75:ec:92:ee:2b:20:44:0b:e7:a4:d4:ad: fc:1b:45:41:c6:46:2b:1e:69:21:e7:56:f1:42:18:78:17:c8: 99:83:ce:bc:e8:ef:4b:74:59:a7:06:b6:b7:7c:2e:ba:7a:51: 0a:43:8b:cf:55:c8:4f:96:bb:76:50:96:39:d4:25:3d:ef:bf: c0:77:31:c0:9e:8b:87:39:9e:4e:af:0e:9f:b5:18:c3:19:db: a7:90:b6:47:08:2b:8f:17:c1:65:24:5a:16:be:33:51:e1:22: c6:e1:52:43:b5:87:a4:ae:fb:0b:aa:6f:d9:47:00:70:fe:39: 28:3d:14:76:31:19:49:cf:19:de:ef:27:b2:8e:71:58:2b:59: c7:4c:a1:78:83:db:91:ce:a3:c9:00:a7:5a:65:b5:9a:38:20: b3:0c:bc:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUxMDE5MDQyMTE3WhcNMjUxMDI2MDQyMTE3WjAYMRYwFAYD VQQDEw02OGY0NjczZS1mZTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy66/KxJ9O90WS+uJb0m/JLTUSpMBsrHFMperpeBGUvI3Eu0eBwC729g/kyA0 t3RYUNvgorCLY6RGHFEB0qv2nCVdRRnemg+faVJKECEGJa9BZDfdVXDHvbKKpOc/ kWLiVgjJMaDP/EDKBuCg067N7qJRq8kp2jfdDCxt4Su35LTFdcvd8F7ue0bE2g7y yO4MzRo0002ZAoRWtQQkWlsCw4HR6eQEVDy7LjMnLPbXLwLkcauZipznQhVWT2Xc iZvFWgbU/Imy9s2kDMUzJhtpERa3bvipXTWpS3F53UJe83SwCvELyharu4/NI+ty Ef2FCCHKRmoAVWk8BqtVPI44BQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDGyF7yH Ya+LEabJCm7Z1iE+zaBKMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRBMu1FHR+EeykfHxRgwAeV6aCe/H+vLY9SLtrNq0U7FYwXclpXp3E +ly0zhRDfqj9qqvKB3yT20PgxKywHgYgTsKWdag1Weh8xu6ASzd5MdXLJOcGcTad tUxsyquliEp17JLuKyBEC+ek1K38G0VBxkYrHmkh51bxQhh4F8iZg8686O9LdFmn Bra3fC66elEKQ4vPVchPlrt2UJY51CU977/AdzHAnouHOZ5Orw6ftRjDGdunkLZH CCuPF8FlJFoWvjNR4SLG4VJDtYekrvsLqm/ZRwBw/jkoPRR2MRlJzxne7yeyjnFY K1nHTKF4g9uRzqPJAKdaZbWaOCCzDLwe -----END CERTIFICATE-----Generated at Mon Oct 20 12:16:37 2025 by rpki-client