$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: 1TQ+pRJvV0YbWewiKSJli3CM0aNKPaOiBupfFSX4/QQ= Subject key identifier: 8D:1D:A8:2D:96:75:FD:67:DD:70:0F:17:B6:4F:84:1C:43:18:73:DB Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 0965 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 095E Signing time: Sat 18 Oct 2025 21:12:09 +0000 Manifest this update: Sat 18 Oct 2025 21:12:08 +0000 Manifest next update: Sat 25 Oct 2025 21:12:08 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: DuJWtdUGy+L5uCdCwS2nN4hY1HQTZDXUlugASKDt70I=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: U+2Kae/qqfcPAGDUNj2rc7ly1La28a/4nOUamtVuvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 21:12:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2405 (0x965) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Oct 18 21:12:08 2025 GMT Not After : Oct 25 21:12:08 2025 GMT Subject: CN=68f402a9-3696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b2:b8:18:14:21:13:33:f0:2a:96:6d:07:02: e5:fc:02:e7:60:c2:ba:aa:6d:1f:fc:9a:1b:f6:46: ce:12:24:bc:be:40:e6:fa:d6:e8:ed:e7:57:50:60: 24:09:0c:16:7c:79:c8:2f:4d:6b:1b:fe:95:8e:45: 2c:41:d6:19:83:22:9e:89:c5:56:dc:08:5e:b3:1e: 19:18:4c:0a:44:23:8e:55:e4:57:09:37:49:6d:2a: b7:99:fa:72:2c:8e:87:ea:d5:56:a9:bf:f7:2e:73: 2e:bd:c2:4a:0c:54:77:b8:e4:8c:d5:80:54:10:87: 84:62:78:9b:6e:3c:13:d3:e0:ff:56:e0:fe:7c:3c: cc:9a:ea:40:c5:3f:37:7a:7a:52:25:36:93:46:5f: b3:3a:10:f3:ae:e5:55:85:c1:b3:a0:ef:a9:5d:86: 14:21:58:78:29:2d:8e:13:97:3f:81:8a:0c:db:47: bc:6a:1f:f6:c7:bb:ba:96:af:6d:88:80:fc:fb:a1: 03:16:42:d6:a3:e7:1f:fa:77:37:cc:2c:43:71:cb: 69:b6:0a:ee:4d:90:79:bd:95:92:40:6a:1f:22:76: c0:a2:ab:3b:b8:09:95:d8:9d:ac:c8:b6:c9:eb:a6: b2:3d:3f:ea:ec:a6:10:b4:4a:ef:c3:1f:90:59:41: ce:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:A8:2D:96:75:FD:67:DD:70:0F:17:B6:4F:84:1C:43:18:73:DB X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:c9:e4:95:67:c1:b9:68:53:c4:06:dd:51:65:b0:27:1c:56: be:0f:1e:78:ee:b0:d8:54:50:a7:8e:f8:d3:dc:22:6c:d2:4a: 6d:0e:3f:3f:15:50:33:f6:f3:aa:d2:43:85:f5:5a:06:fa:eb: 7e:21:16:4b:44:04:a2:02:75:33:17:72:ce:e5:81:a3:42:28: 0d:e4:70:a3:33:b3:dd:88:eb:cc:56:26:3e:40:e6:88:e3:01: 33:5e:6b:41:ed:ff:00:76:f3:3d:d0:21:53:00:18:7a:d7:a1: 7e:e7:e0:95:63:60:d0:4e:a2:70:f5:3e:ec:00:c9:44:35:c9: 17:98:7a:57:10:ed:53:ce:74:7d:33:66:cd:d1:35:e7:ca:61: e3:4d:d3:31:5e:e5:86:45:71:ae:9d:c1:34:14:28:7e:65:29: 50:96:4a:81:d1:ce:1e:4b:d5:b3:57:c8:92:96:2f:c4:4c:5d: f8:26:e3:b0:e2:7c:43:3a:0c:a9:c5:78:b3:43:f4:9d:ed:87: 39:ce:41:97:52:0d:02:60:a0:50:ad:89:7e:2f:f4:40:37:ce: ad:22:ed:b7:bc:e9:d4:5a:68:01:67:a9:89:57:bd:f1:26:2b: 6e:23:31:b6:4e:fd:93:dd:b7:75:b4:7f:60:aa:ab:9e:c8:1a: 44:0e:f1:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCWUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjUxMDE4MjExMjA4WhcNMjUxMDI1MjExMjA4WjAYMRYwFAYD VQQDEw02OGY0MDJhOS0zNjk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA37K4GBQhEzPwKpZtBwLl/ALnYMK6qm0f/Job9kbOEiS8vkDm+tbo7edXUGAk CQwWfHnIL01rG/6VjkUsQdYZgyKeicVW3Ahesx4ZGEwKRCOOVeRXCTdJbSq3mfpy LI6H6tVWqb/3LnMuvcJKDFR3uOSM1YBUEIeEYnibbjwT0+D/VuD+fDzMmupAxT83 enpSJTaTRl+zOhDzruVVhcGzoO+pXYYUIVh4KS2OE5c/gYoM20e8ah/2x7u6lq9t iID8+6EDFkLWo+cf+nc3zCxDcctptgruTZB5vZWSQGofInbAoqs7uAmV2J2syLbJ 66ayPT/q7KYQtErvwx+QWUHOqQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI0dqC2W df1n3XAPF7ZPhBxDGHPbMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAsyeSVZ8G5aFPEBt1RZbAnHFa+Dx547rDYVFCnjvjT3CJs0kptDj8/ FVAz9vOq0kOF9VoG+ut+IRZLRASiAnUzF3LO5YGjQigN5HCjM7PdiOvMViY+QOaI 4wEzXmtB7f8AdvM90CFTABh616F+5+CVY2DQTqJw9T7sAMlENckXmHpXEO1TznR9 M2bN0TXnymHjTdMxXuWGRXGuncE0FCh+ZSlQlkqB0c4eS9WzV8iSli/ETF34JuOw 4nxDOgypxXizQ/Sd7Yc5zkGXUg0CYKBQrYl+L/RAN86tIu23vOnUWmgBZ6mJV73x JituIzG2Tv2T3bd1tH9gqqueyBpEDvEy -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:42 2025 by rpki-client