$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: imMF/4y4IEYGF7drLHQSbnEv6x9lG4gh81i8C8EQY74= Subject key identifier: 3A:19:79:92:05:1D:B0:B2:03:4B:AA:34:8A:B7:05:47:88:44:B9:1B Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 0222 Signing time: Sun 19 Oct 2025 04:20:31 +0000 Manifest this update: Sun 19 Oct 2025 04:20:30 +0000 Manifest next update: Sun 26 Oct 2025 04:20:30 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: Qt49L0DQ7xg40zJ/NFTBS448Js19Uqnyk1k2RJiVDBY=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 04:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Oct 19 04:20:30 2025 GMT Not After : Oct 26 04:20:30 2025 GMT Subject: CN=68f4670f-61aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f4:5f:12:28:7e:9a:f1:c7:e8:73:54:a1:df: 71:45:40:6e:3d:dc:d2:be:ad:12:38:bb:1c:24:69: fe:0f:64:4b:70:fb:71:04:fd:17:88:86:5f:a3:8e: ee:9d:37:4e:34:f1:b2:fe:a6:92:00:8e:9e:40:ae: 4e:72:01:e9:2f:a5:88:8e:7b:07:bd:5f:27:46:db: 32:e9:3a:fb:a3:42:ee:7d:82:13:4a:77:e2:ef:22: e3:a9:11:97:21:34:aa:f1:e3:8a:79:00:db:c4:74: 6d:ea:48:ff:e6:09:6c:79:72:84:22:a5:6d:6b:8b: 53:a7:c4:8a:53:fe:db:31:54:63:a5:b2:14:bc:02: 5e:7c:d5:9a:c8:37:32:19:42:d0:04:ce:ec:ec:54: 83:2e:cc:3c:a5:a9:5b:d0:99:47:4d:55:f0:7b:78: af:07:6b:e6:fe:8b:0b:2d:bd:79:38:3c:b9:f5:27: 1f:67:7f:83:05:b5:3a:ed:d3:fc:00:9f:95:d1:86: 07:40:93:de:eb:13:ea:7a:e3:e5:cc:ac:91:c2:44: c9:ec:3b:1d:af:ce:00:a5:bd:04:01:8e:25:68:1f: 86:c4:61:6a:8a:39:84:86:f3:7d:e2:41:64:53:c9: b1:8a:0d:08:91:16:60:17:61:7d:1d:2a:e7:54:25: 72:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:19:79:92:05:1D:B0:B2:03:4B:AA:34:8A:B7:05:47:88:44:B9:1B X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:3c:05:57:b5:0b:56:50:81:0c:c3:5f:3e:ab:e6:0a:ff:95: 8e:8e:66:b3:31:3a:55:2d:1a:5f:cd:57:4f:91:58:18:5f:39: 08:64:d4:ee:e7:24:33:13:62:83:78:d9:00:68:c4:56:24:26: 38:4b:e5:f6:00:f7:73:b7:f9:2b:50:8e:77:90:dd:24:21:f9: 95:ce:fc:fd:53:ef:92:76:f7:51:df:60:c6:63:73:4c:dd:01: 3e:a7:82:b0:4f:b0:ff:80:ed:51:fa:f3:f2:50:8c:9d:dc:e5: e1:48:5f:5b:4a:12:f2:d1:c6:e7:55:33:5b:5b:fb:d8:c7:87: 50:23:2e:52:fb:a1:87:67:ce:c2:82:b1:70:80:55:17:68:10: e6:93:39:c5:fb:e6:83:59:3c:df:7a:c2:d6:d1:03:39:35:cc: ba:a9:5b:6f:ce:1c:cb:29:46:19:ae:f7:59:da:7e:87:59:76: 9d:82:69:df:93:62:c6:85:10:98:33:d6:f5:75:25:9d:96:e3: 0a:e8:6a:cf:97:49:16:b0:76:a1:69:af:8f:45:3c:4a:f9:5b: 5a:f3:52:e0:f4:91:fd:32:fc:1a:3d:e7:28:fa:a6:58:61:09: 15:2f:aa:04:f2:89:42:6d:3a:7c:1c:b5:c2:21:3d:ca:23:8c: 8d:8f:c3:46 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUxMDE5MDQyMDMwWhcNMjUxMDI2MDQyMDMwWjAYMRYwFAYD VQQDEw02OGY0NjcwZi02MWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuPRfEih+mvHH6HNUod9xRUBuPdzSvq0SOLscJGn+D2RLcPtxBP0XiIZfo47u nTdONPGy/qaSAI6eQK5OcgHpL6WIjnsHvV8nRtsy6Tr7o0LufYITSnfi7yLjqRGX ITSq8eOKeQDbxHRt6kj/5glseXKEIqVta4tTp8SKU/7bMVRjpbIUvAJefNWayDcy GULQBM7s7FSDLsw8palb0JlHTVXwe3ivB2vm/osLLb15ODy59ScfZ3+DBbU67dP8 AJ+V0YYHQJPe6xPqeuPlzKyRwkTJ7Dsdr84Apb0EAY4laB+GxGFqijmEhvN94kFk U8mxig0IkRZgF2F9HSrnVCVy4QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDoZeZIF HbCyA0uqNIq3BUeIRLkbMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQByPAVXtQtWUIEMw18+q+YK/5WOjmazMTpVLRpfzVdPkVgYXzkIZNTu 5yQzE2KDeNkAaMRWJCY4S+X2APdzt/krUI53kN0kIfmVzvz9U++SdvdR32DGY3NM 3QE+p4KwT7D/gO1R+vPyUIyd3OXhSF9bShLy0cbnVTNbW/vYx4dQIy5S+6GHZ87C grFwgFUXaBDmkznF++aDWTzfesLW0QM5Ncy6qVtvzhzLKUYZrvdZ2n6HWXadgmnf k2LGhRCYM9b1dSWdluMK6GrPl0kWsHahaa+PRTxK+Vta81Lg9JH9MvwaPeco+qZY YQkVL6oE8olCbTp8HLXCIT3KI4yNj8NG -----END CERTIFICATE-----Generated at Mon Oct 20 21:39:59 2025 by rpki-client