$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: ZzEuY/NYektINrDKkkYf17sRk/SSGQcpeVsC5e5OlfI= Subject key identifier: 47:DA:08:79:5D:4B:7F:71:35:28:3E:B0:E9:D5:73:02:5F:D4:0A:D4 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 175E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 1754 Signing time: Sat 18 Oct 2025 17:01:09 +0000 Manifest this update: Sat 18 Oct 2025 17:01:08 +0000 Manifest next update: Sat 25 Oct 2025 17:01:08 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: H4uC5UfJLFPmcVZ+d5rc/l+B8yff/C9+OqSYzVIKmfs=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 17:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5982 (0x175e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Oct 18 17:01:08 2025 GMT Not After : Oct 25 17:01:08 2025 GMT Subject: CN=68f3c7d4-5fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:11:d0:ac:78:c4:bc:45:ad:38:5a:2a:cb:d6: bf:8f:71:f8:c3:21:1c:99:d2:f8:12:79:7c:c7:8a: df:0e:9b:88:43:5b:36:71:6f:7d:88:da:46:1a:aa: 92:c0:1d:8e:35:30:e5:33:80:77:cc:84:56:fd:42: 59:3e:d6:42:9f:22:78:c6:a7:64:eb:58:2f:ca:16: f2:5e:e3:41:94:9e:d9:d1:42:ba:8a:23:80:43:cd: e1:4a:08:40:06:2f:dd:0f:db:fa:e2:11:4d:df:05: 91:b1:65:f4:53:e8:3e:5f:39:e1:b9:19:54:f2:71: 4f:29:ca:e6:e9:c8:fd:b9:e8:ac:de:c3:a3:47:e3: 5b:c0:ae:71:bd:f7:63:28:ee:cc:ce:62:b8:ee:37: df:df:76:64:5e:b9:48:ae:4d:e2:8b:ad:80:88:15: 6e:b4:23:04:fe:c2:66:75:08:6b:d4:0a:f8:3a:f1: 04:33:9c:34:4b:68:17:8c:60:ab:c2:1b:a6:62:f9: 98:c2:b9:af:77:06:01:0d:36:60:59:ac:b5:75:39: f6:b2:5a:67:b6:eb:a1:0b:32:fa:3b:a7:e3:32:34: 26:3f:15:c7:52:53:27:77:f3:6f:54:86:32:3a:ac: ed:ba:3d:73:e6:bf:c2:ea:f5:0c:02:34:40:61:4a: 74:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:DA:08:79:5D:4B:7F:71:35:28:3E:B0:E9:D5:73:02:5F:D4:0A:D4 X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:58:1d:72:76:41:3e:54:41:ad:b1:9c:56:da:3a:a4:6d:de: b0:33:bf:7e:3c:be:5c:43:c4:e4:8f:d2:61:27:81:cb:56:56: c2:1f:2a:76:71:d5:f6:7d:5d:33:1d:83:8a:b0:ff:77:a1:c8: 67:1b:69:5f:26:95:e4:94:10:9a:df:0b:73:cc:24:3c:de:ca: 2f:ae:65:58:a1:16:f8:b6:6c:68:bc:dd:13:68:71:2a:5e:02: 3e:d4:67:46:40:86:79:6d:3f:77:cf:bf:47:58:97:3d:38:3a: 6d:88:5a:ba:ea:fe:c0:02:f9:d1:81:96:5f:7d:fb:c1:3a:39: cc:69:ea:b0:57:e3:c9:3f:6c:a1:7e:75:49:82:95:6d:85:77: 59:06:56:7c:74:23:d1:b1:19:96:4b:d8:0d:d3:2b:b5:ce:0b: 0f:07:35:d2:fc:67:ac:10:39:ac:0f:85:02:43:48:ce:0f:b6: 44:e7:59:01:52:73:aa:f8:aa:3e:23:c5:0a:07:20:21:b3:84: a8:50:e1:7f:6d:1d:89:31:54:ef:00:c6:02:a3:32:b3:30:37: ac:28:2c:c3:6e:99:ca:66:47:fe:2d:5e:11:f1:a4:dd:c1:2f: b5:9b:de:9f:03:b5:52:3c:d3:d9:51:13:b1:55:af:43:64:4a: 3e:38:e4:8b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF14wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUxMDE4MTcwMTA4WhcNMjUxMDI1MTcwMTA4WjAYMRYwFAYD VQQDEw02OGYzYzdkNC01ZmI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7BHQrHjEvEWtOFoqy9a/j3H4wyEcmdL4Enl8x4rfDpuIQ1s2cW99iNpGGqqS wB2ONTDlM4B3zIRW/UJZPtZCnyJ4xqdk61gvyhbyXuNBlJ7Z0UK6iiOAQ83hSghA Bi/dD9v64hFN3wWRsWX0U+g+XznhuRlU8nFPKcrm6cj9ueis3sOjR+NbwK5xvfdj KO7MzmK47jff33ZkXrlIrk3ii62AiBVutCME/sJmdQhr1Ar4OvEEM5w0S2gXjGCr whumYvmYwrmvdwYBDTZgWay1dTn2slpntuuhCzL6O6fjMjQmPxXHUlMnd/NvVIYy Oqztuj1z5r/C6vUMAjRAYUp0IQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfaCHld S39xNSg+sOnVcwJf1ArUMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALWB1ydkE+VEGtsZxW2jqkbd6wM79+PL5cQ8Tkj9JhJ4HLVlbCHyp2 cdX2fV0zHYOKsP93ochnG2lfJpXklBCa3wtzzCQ83sovrmVYoRb4tmxovN0TaHEq XgI+1GdGQIZ5bT93z79HWJc9ODptiFq66v7AAvnRgZZfffvBOjnMaeqwV+PJP2yh fnVJgpVthXdZBlZ8dCPRsRmWS9gN0yu1zgsPBzXS/GesEDmsD4UCQ0jOD7ZE51kB UnOq+Ko+I8UKByAhs4SoUOF/bR2JMVTvAMYCozKzMDesKCzDbpnKZkf+LV4R8aTd wS+1m96fA7VSPNPZUROxVa9DZEo+OOSL -----END CERTIFICATE-----Generated at Mon Oct 20 07:45:07 2025 by rpki-client