$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft File: x8206hgWXlmC0KkZ_0f3JnbgUHM.mft (raw, json) Hash identifier: dzVWiQJ089FHd/YpYi7avk0cLGcubccnuB82ZaeHKnc= Subject key identifier: BB:F2:BB:EB:15:20:53:16:DF:D3:5F:E8:D4:7E:60:BD:7A:F5:4F:94 Authority key identifier: C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 Certificate issuer: /CN=A91FBEFA/serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft Manifest number: 6B Signing time: Sun 19 Oct 2025 10:20:22 +0000 Manifest this update: Sun 19 Oct 2025 10:20:22 +0000 Manifest next update: Sun 26 Oct 2025 10:20:22 +0000 Files and hashes: 1: x8206hgWXlmC0KkZ_0f3JnbgUHM.crl (hash: eXNmKv6pdTEBH6g3vIKb8POVi8A1Wm/V7xZHZxQM/vo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 10:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=C7CDB4EA18165E5982D0A919FF47F72676E05073 Validity Not Before: Oct 19 10:20:22 2025 GMT Not After : Oct 26 10:20:22 2025 GMT Subject: CN=68f4bb66-8343 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:3d:c1:bf:e3:1c:bb:9d:4c:02:b9:4d:d5:b6: b6:00:21:34:19:80:bc:f6:88:ba:15:49:59:88:25: 36:3a:c6:dd:c0:b7:63:ed:2b:00:84:7e:ef:db:72: ea:8d:80:02:92:06:7c:5b:21:0b:5a:77:40:f5:67: b4:a9:2d:f2:8c:0e:77:3c:eb:2d:b1:16:33:1c:f0: 11:fe:b1:84:86:f3:fe:da:fd:be:1e:21:f7:e3:d3: a2:76:58:33:fa:a3:cd:26:50:df:77:4a:9a:f2:6d: 88:65:b2:78:73:d9:2c:48:3e:1a:d8:3a:36:86:18: 3d:bd:ab:2f:97:85:f9:84:95:a4:87:c4:61:d7:bb: e3:63:81:d3:33:62:e1:f9:7e:4d:a5:7d:93:46:c1: b0:94:d2:1d:b5:21:95:9f:94:be:03:76:96:ee:4c: c7:92:37:e4:c2:18:f3:18:d6:aa:8d:fe:40:e9:36: 51:e3:43:5f:a5:42:91:6d:b3:56:56:98:53:75:2c: a9:a8:31:b7:5d:60:a9:8c:cc:28:1d:39:04:a4:42: cf:b5:47:d4:5c:81:7a:5f:d3:b2:0a:05:c8:95:0f: 70:7f:94:93:9b:45:55:76:61:a7:80:af:27:1f:7c: 40:a6:b0:c0:dc:c0:ab:f1:9f:fe:f5:a2:16:90:94: 73:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F2:BB:EB:15:20:53:16:DF:D3:5F:E8:D4:7E:60:BD:7A:F5:4F:94 X509v3 Authority Key Identifier: keyid:C7:CD:B4:EA:18:16:5E:59:82:D0:A9:19:FF:47:F7:26:76:E0:50:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x8206hgWXlmC0KkZ_0f3JnbgUHM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/172546BC0B3711F08C239863C4F9AE02/x8206hgWXlmC0KkZ_0f3JnbgUHM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:8c:9d:b3:28:88:42:37:2e:3d:d9:6f:fc:7e:cb:2d:3b:02: 2d:c7:54:17:fb:d3:98:e5:58:91:80:fa:d9:e6:4c:6d:78:2f: 68:c8:77:46:04:ee:3d:0a:45:68:7e:e7:11:30:2d:b5:26:83: c5:c5:37:e6:ef:1d:c5:62:db:b2:1d:1c:c4:5b:98:2f:50:f4: 95:29:e9:86:01:14:63:d4:14:b1:27:b4:9a:4a:7a:03:ff:4a: 7f:72:b1:09:6c:21:70:f3:b4:f3:fe:c5:5d:86:34:8b:a0:85: 8d:2a:7f:7b:31:b2:c3:7a:c9:6a:dc:eb:cb:ad:91:a4:0c:c3: 3c:f2:d6:a2:66:57:3d:60:89:22:5e:c3:91:68:9e:f3:d5:34: 42:42:ed:40:23:e1:31:5c:89:19:a4:08:95:44:47:e8:b9:91: 64:57:76:5c:fb:a6:74:9c:d0:1b:95:84:11:2f:ac:cd:21:de: 72:27:fe:1a:5a:05:37:9d:ab:17:9d:d5:44:39:f5:21:6c:f7: 96:68:c3:1b:6d:df:88:cd:f4:5b:cd:94:63:5f:4b:0b:17:98: f9:47:91:2b:09:fd:21:38:e3:49:3a:84:40:40:8c:50:d6:9c: d1:18:bd:15:cf:88:1e:9a:73:43:66:d3:cf:f0:5f:c8:46:1a: d9:ff:87:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoQzdDREI0RUExODE2NUU1OTgyRDBBOTE5RkY0N0Y3MjY3 NkUwNTA3MzAeFw0yNTEwMTkxMDIwMjJaFw0yNTEwMjYxMDIwMjJaMBgxFjAUBgNV BAMTDTY4ZjRiYjY2LTgzNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBPcG/4xy7nUwCuU3VtrYAITQZgLz2iLoVSVmIJTY6xt3At2PtKwCEfu/bcuqN gAKSBnxbIQtad0D1Z7SpLfKMDnc86y2xFjMc8BH+sYSG8/7a/b4eIffj06J2WDP6 o80mUN93SprybYhlsnhz2SxIPhrYOjaGGD29qy+XhfmElaSHxGHXu+NjgdMzYuH5 fk2lfZNGwbCU0h21IZWflL4DdpbuTMeSN+TCGPMY1qqN/kDpNlHjQ1+lQpFts1ZW mFN1LKmoMbddYKmMzCgdOQSkQs+1R9RcgXpf07IKBciVD3B/lJObRVV2YaeArycf fECmsMDcwKvxn/71ohaQlHOFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUu/K76xUg Uxbf01/o1H5gvXr1T5QwHwYDVR0jBBgwFoAUx8206hgWXlmC0KkZ/0f3JnbgUHMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzE3MjU0NkJDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxtQzBLa1pfMGYzSm5iZ1VI TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIveDgyMDZoZ1dYbG1DMEtrWl8wZjNKbmJnVUhNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZC RUZBLzE3MjU0NkJDMEIzNzExRjA4QzIzOTg2M0M0RjlBRTAyL3g4MjA2aGdXWGxt QzBLa1pfMGYzSm5iZ1VITS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGiMnbMoiEI3Lj3Zb/x+yy07Ai3HVBf705jlWJGA+tnmTG14L2jId0YE 7j0KRWh+5xEwLbUmg8XFN+bvHcVi27IdHMRbmC9Q9JUp6YYBFGPUFLEntJpKegP/ Sn9ysQlsIXDztPP+xV2GNIughY0qf3sxssN6yWrc68utkaQMwzzy1qJmVz1giSJe w5FonvPVNEJC7UAj4TFciRmkCJVER+i5kWRXdlz7pnSc0BuVhBEvrM0h3nIn/hpa BTedqxed1UQ59SFs95Zowxtt34jN9FvNlGNfSwsXmPlHkSsJ/SE440k6hEBAjFDW nNEYvRXPiB6ac0Nm08/wX8hGGtn/h3s= -----END CERTIFICATE-----Generated at Mon Oct 20 14:00:52 2025 by rpki-client