$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: MVxzU9rscgNJ+Ah6m5w+P3H6NtHFxVyl+mpt0XmkRqA= Subject key identifier: 39:83:CF:1C:1E:F3:73:E1:E4:99:5F:CE:BA:14:88:11:BC:E6:F1:4B Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 05F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 05EC Signing time: Sun 19 Oct 2025 00:36:18 +0000 Manifest this update: Sun 19 Oct 2025 00:36:18 +0000 Manifest next update: Sun 26 Oct 2025 00:36:18 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: KW3P+vzqUR98V8VIY/PMH7hMQzMh/G45iuLU1/bPoYs=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: 2cmkD42QcbCRoSMZu579s8sayLfnS2VTqmE89GasVfM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: wVYga0/tD85l8FSG82PbnxhnB2SkjvEdIkkyzqmMiv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 00:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1526 (0x5f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Oct 19 00:36:18 2025 GMT Not After : Oct 26 00:36:18 2025 GMT Subject: CN=68f43282-ca11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:1e:89:29:09:be:cb:4c:b9:f3:fb:43:cf:79: f3:02:7f:ab:72:be:12:99:d0:1c:dc:e9:bd:91:26: 80:1d:ab:9f:bb:67:fd:66:35:4d:35:9b:71:af:8f: 6d:2b:30:6e:1f:22:56:23:49:99:73:ee:a1:c1:de: b0:66:d2:5f:5a:43:e9:b0:31:4f:10:3e:5f:97:ff: fc:94:b0:15:c6:21:b7:34:d4:26:c1:28:1b:74:6b: 25:32:8a:d9:94:b0:e4:03:6f:2a:f5:53:91:13:0b: 4c:b2:9c:d6:1a:90:f8:29:10:b5:5a:0e:52:e6:a0: 95:50:49:9f:bc:ed:68:5a:f7:77:e8:2e:f1:14:5e: a9:cf:cb:4a:e1:62:a4:94:82:8a:7d:cd:91:ec:38: a0:7a:19:75:9a:77:4c:d0:98:d3:64:07:91:67:10: 22:2d:de:b9:ec:d1:95:77:b1:7e:2d:5c:5a:a0:02: cc:ba:3a:29:f6:98:7d:e7:b2:3c:34:fc:44:72:69: 86:a6:9a:9e:f7:d4:fe:f4:7b:7b:d0:ca:25:cc:e5: e1:1f:ae:2b:98:32:e9:71:b5:14:d8:76:29:93:c6: 46:9f:ad:bc:62:d4:24:75:21:bb:6d:57:28:35:f0: 27:ad:f7:4f:4c:86:f6:4b:07:c7:64:87:bf:1f:2a: ef:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:83:CF:1C:1E:F3:73:E1:E4:99:5F:CE:BA:14:88:11:BC:E6:F1:4B X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:8f:8b:ce:0f:50:35:5d:be:aa:86:b4:be:73:bf:de:40:36: 45:01:3e:11:fb:0d:69:22:1d:6c:39:e0:af:d6:cb:09:46:8b: c5:62:ef:45:7a:ee:a3:e9:c9:4b:bf:30:c0:fd:de:4e:0f:9e: 72:8d:42:e6:58:7b:98:56:da:47:50:95:90:e7:d8:7d:59:eb: b7:31:ec:41:00:2a:de:78:c2:d1:15:cb:f9:68:f9:fc:a3:4c: 6b:d4:a0:fb:f2:7f:ce:4d:f8:49:85:47:70:a1:19:c9:ca:a0: d1:3a:d7:db:5f:6d:a6:a1:1b:70:62:3e:9c:41:27:99:41:3c: 70:a4:9d:8e:80:4a:b5:60:f4:35:7f:9c:be:4f:f0:7a:8d:78: cd:76:f4:c2:71:5f:a8:40:f3:8f:c0:c5:3f:ee:35:28:da:db: 04:0c:b5:44:9c:fb:da:a4:01:13:e0:82:be:b3:15:57:8c:ed: 8d:55:87:a3:e4:91:e8:76:7b:e0:69:75:60:7c:b2:3a:dd:49: 5e:c2:c8:bf:ee:ba:62:6b:1a:c8:23:2d:12:10:f8:86:76:82: d4:39:17:77:c3:28:84:79:ab:2d:1d:e4:cf:bb:79:43:ab:ea: 06:0d:4d:3b:e2:1d:db:48:a8:b7:46:0a:b1:77:df:a4:6d:15: ac:22:2e:a4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjUxMDE5MDAzNjE4WhcNMjUxMDI2MDAzNjE4WjAYMRYwFAYD VQQDEw02OGY0MzI4Mi1jYTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxx6JKQm+y0y58/tDz3nzAn+rcr4SmdAc3Om9kSaAHaufu2f9ZjVNNZtxr49t KzBuHyJWI0mZc+6hwd6wZtJfWkPpsDFPED5fl//8lLAVxiG3NNQmwSgbdGslMorZ lLDkA28q9VOREwtMspzWGpD4KRC1Wg5S5qCVUEmfvO1oWvd36C7xFF6pz8tK4WKk lIKKfc2R7Digehl1mndM0JjTZAeRZxAiLd657NGVd7F+LVxaoALMujop9ph957I8 NPxEcmmGppqe99T+9Ht70MolzOXhH64rmDLpcbUU2HYpk8ZGn628YtQkdSG7bVco NfAnrfdPTIb2SwfHZIe/HyrvewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDmDzxwe 83Ph5JlfzroUiBG85vFLMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSj4vOD1A1Xb6qhrS+c7/eQDZFAT4R+w1pIh1sOeCv1ssJRovFYu9F eu6j6clLvzDA/d5OD55yjULmWHuYVtpHUJWQ59h9Weu3MexBACreeMLRFcv5aPn8 o0xr1KD78n/OTfhJhUdwoRnJyqDROtfbX22moRtwYj6cQSeZQTxwpJ2OgEq1YPQ1 f5y+T/B6jXjNdvTCcV+oQPOPwMU/7jUo2tsEDLVEnPvapAET4IK+sxVXjO2NVYej 5JHodnvgaXVgfLI63Ulewsi/7rpiaxrIIy0SEPiGdoLUORd3wyiEeastHeTPu3lD q+oGDU074h3bSKi3Rgqxd9+kbRWsIi6k -----END CERTIFICATE-----Generated at Mon Oct 20 13:49:26 2025 by rpki-client