$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: w8vfLaYYyCFy+SA2qpo3Eat+80C1lyOqRhvn7Z5TpkU= Subject key identifier: F7:34:53:D6:5F:05:EB:87:D0:6D:2F:EE:0F:01:46:49:5D:F5:3F:03 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 20A4 Signing time: Sat 18 Oct 2025 16:14:09 +0000 Manifest this update: Sat 18 Oct 2025 16:14:09 +0000 Manifest next update: Sat 25 Oct 2025 16:14:09 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: CiZb0sS7kQVmO8bT8jS9oglZw68Gl3MAYbwc5OQnMr8=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 16:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8393 (0x20c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Oct 18 16:14:09 2025 GMT Not After : Oct 25 16:14:09 2025 GMT Subject: CN=68f3bcd1-71fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:86:7a:fb:f3:f3:1e:ca:64:69:68:51:7b: 5d:ec:e2:d5:da:94:27:05:51:1a:09:c1:0a:b4:e2: a6:b5:5a:f3:0e:8d:25:24:03:38:63:28:76:fd:71: 5d:8b:10:05:9a:38:17:42:a8:a1:8b:49:ab:08:4d: c5:46:42:a1:3e:0e:40:b3:dd:ff:a3:32:a6:e5:84: ae:bc:cc:7d:c2:10:cb:64:d9:84:b9:51:ef:5d:af: b2:b2:59:75:d4:e5:06:49:10:1e:1a:3d:90:bf:db: 4d:b1:a4:6c:5a:43:26:a4:0f:0e:3e:3b:01:b3:4b: 9e:d1:12:b1:f3:e9:ba:b4:8a:6f:d1:f8:a1:af:c2: 75:ec:d1:57:04:d8:80:b5:de:74:01:f7:ec:0c:ee: 51:30:f2:7a:5f:49:bc:25:51:6c:c3:99:a2:ba:c4: 12:7b:2d:d4:01:ad:2c:73:2b:6a:26:46:b3:e1:85: 48:e8:78:38:66:a9:23:03:3f:45:78:40:2a:ee:be: 80:ec:b3:82:6d:9d:8e:fb:00:d1:23:50:f9:41:c0: 53:76:2a:8d:0c:73:e2:ca:6a:e4:81:31:57:32:1d: 3b:bf:ef:3f:2a:6d:f9:a7:51:56:39:6d:04:9b:29: 4f:63:1a:b1:06:b8:28:87:36:8c:0c:23:09:1a:40: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:34:53:D6:5F:05:EB:87:D0:6D:2F:EE:0F:01:46:49:5D:F5:3F:03 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:51:6a:e8:83:97:2b:bb:08:4b:bb:f3:9b:19:0f:69:22:4a: 5b:d8:48:2d:4a:e4:d2:f9:f1:24:27:4c:2f:ea:17:0d:74:a3: d8:51:43:35:45:13:1c:ed:61:0a:e6:51:8e:31:86:9d:05:32: 95:7e:ab:ba:35:b0:89:9c:a9:76:5d:50:d2:64:be:37:8c:5f: 59:6d:d4:58:7c:40:db:48:cc:06:88:b1:da:e7:9c:9d:f6:c2: 0d:75:a3:12:26:85:37:bd:e9:92:bc:86:fb:69:0b:35:93:15: 62:d7:e6:90:35:81:ca:5e:93:a6:08:6b:80:ed:ba:54:8a:64: f1:f0:82:83:5a:45:58:e7:1e:13:27:70:62:f5:8e:3d:6b:f4: 11:f1:1c:c5:0d:de:40:39:13:93:9c:d9:94:08:4c:e2:7c:52: 6b:b8:13:81:a0:36:cb:cd:06:6e:e0:a1:6f:4c:89:02:f5:19: c4:43:e4:51:0c:d4:69:fa:c9:82:19:e4:48:0b:e8:f7:02:bc: 62:de:a6:bc:d1:58:cc:32:60:12:0a:b1:08:08:13:30:0e:19: fc:d2:4d:3b:71:ed:f0:20:c7:bc:57:a1:90:a0:a5:89:f0:b6: f8:62:60:bb:5a:9f:da:68:7d:89:a6:f7:7c:53:f6:35:7b:58: ae:12:d6:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUxMDE4MTYxNDA5WhcNMjUxMDI1MTYxNDA5WjAYMRYwFAYD VQQDEw02OGYzYmNkMS03MWZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtdSGevvz8x7KZGloUXtd7OLV2pQnBVEaCcEKtOKmtVrzDo0lJAM4Yyh2/XFd ixAFmjgXQqihi0mrCE3FRkKhPg5As93/ozKm5YSuvMx9whDLZNmEuVHvXa+ysll1 1OUGSRAeGj2Qv9tNsaRsWkMmpA8OPjsBs0ue0RKx8+m6tIpv0fihr8J17NFXBNiA td50AffsDO5RMPJ6X0m8JVFsw5miusQSey3UAa0scytqJkaz4YVI6Hg4ZqkjAz9F eEAq7r6A7LOCbZ2O+wDRI1D5QcBTdiqNDHPiymrkgTFXMh07v+8/Km35p1FWOW0E mylPYxqxBrgohzaMDCMJGkB6ywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPc0U9Zf BeuH0G0v7g8BRkld9T8DMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdUWrog5cruwhLu/ObGQ9pIkpb2EgtSuTS+fEkJ0wv6hcNdKPYUUM1 RRMc7WEK5lGOMYadBTKVfqu6NbCJnKl2XVDSZL43jF9ZbdRYfEDbSMwGiLHa55yd 9sINdaMSJoU3vemSvIb7aQs1kxVi1+aQNYHKXpOmCGuA7bpUimTx8IKDWkVY5x4T J3Bi9Y49a/QR8RzFDd5AOROTnNmUCEzifFJruBOBoDbLzQZu4KFvTIkC9RnEQ+RR DNRp+smCGeRIC+j3Arxi3qa80VjMMmASCrEICBMwDhn80k07ce3wIMe8V6GQoKWJ 8Lb4YmC7Wp/aaH2Jpvd8U/Y1e1iuEtaP -----END CERTIFICATE-----Generated at Mon Oct 20 13:34:18 2025 by rpki-client