$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: xxdqthF2VB4BEzUtEm1X6FR0MXTv+H9r5uvXHi0kH6A= Subject key identifier: 06:58:E3:31:CC:D2:4A:EA:47:47:96:B8:D6:42:5C:9C:DA:20:E7:9A Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D94 Signing time: Thu 06 Nov 2025 17:13:55 +0000 Manifest this update: Thu 06 Nov 2025 17:13:55 +0000 Manifest next update: Thu 13 Nov 2025 17:13:55 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: BlSM2k59Tp27xIxNhYsMWE5vTr3J8LuDOAAO1lQ0PL4=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: ea5pQ154Qvp0SJ7Us+DBRZX79LxrjMjlZoLuAw0uaMY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 13 Nov 2025 17:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3486 (0xd9e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: Nov 6 17:13:55 2025 GMT Not After : Nov 13 17:13:55 2025 GMT Subject: CN=690cd753-2a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:af:d9:bf:17:59:6b:fa:24:d2:9d:3b:9f:e1: c0:ed:d2:b8:24:49:ec:7a:3b:fc:a7:03:29:f7:71: ab:fc:57:9f:1d:87:c8:e3:33:56:7d:ef:28:a4:4a: 53:43:73:e7:d5:b8:29:00:92:e1:1c:cc:71:9e:37: 3e:05:c7:58:44:16:47:e8:3b:c7:12:12:8d:95:db: c1:9e:41:6d:92:78:56:4b:be:cd:79:e0:49:10:6e: 3f:1a:7a:78:2b:41:a6:20:2e:58:49:a0:ce:8a:10: bc:2f:11:58:3b:db:e6:25:a0:5b:af:31:11:c9:38: 7f:e7:e6:b3:60:06:b9:5a:5f:aa:74:8c:5f:2a:7f: e6:fb:08:37:24:fd:8a:6a:dd:3e:85:22:2b:55:73: 36:5b:d4:24:10:7f:26:30:69:df:68:56:62:79:dd: 76:22:cf:fd:99:e7:c8:c4:63:ff:8c:a5:78:9a:1e: a1:f4:4a:67:fb:df:ff:bb:5a:53:49:3f:f5:fd:18: 88:15:e8:0f:d8:f2:2d:45:00:5f:01:52:ab:6f:00: f9:41:d6:da:e9:93:13:1c:77:05:95:b4:31:72:82: 8f:a3:24:ad:89:59:9c:a6:a2:85:53:94:93:23:bb: 03:58:ce:f0:5d:df:06:ba:9d:29:f0:1b:1d:4d:37: c5:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:58:E3:31:CC:D2:4A:EA:47:47:96:B8:D6:42:5C:9C:DA:20:E7:9A X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b3:29:38:ab:4d:b4:02:c2:38:5c:2e:53:cb:07:f7:20:c3: fd:8b:6b:eb:82:25:22:03:7c:4c:2f:6a:69:27:d6:14:5a:3b: 27:f8:7f:57:79:9e:f8:ca:e8:e6:5b:75:c8:a1:a8:24:26:ee: 3d:90:28:06:f0:66:71:53:39:4c:e5:ba:76:bd:ad:7d:8b:e7: bb:28:9b:96:e9:d9:a1:b8:bb:ff:19:d6:d1:c9:22:ba:94:c1: 11:cb:67:b8:85:2f:a3:ab:47:33:1e:8d:34:c8:12:a6:07:19: 0a:cd:61:1c:8a:0b:82:c5:a0:3c:c7:91:46:5a:45:1d:6e:8c: 03:26:a0:0f:a6:84:1e:75:36:30:b8:b5:1c:45:6b:c1:76:e4: 36:8c:70:c9:da:a8:e0:02:7d:9b:5c:00:90:8a:e7:ba:40:66: aa:ed:85:3d:b7:3b:b3:50:a6:54:73:ee:f7:56:b8:73:cc:5e: 67:7a:93:0d:0c:db:e1:3e:01:45:4f:30:df:31:4a:11:f8:c1: 9a:ac:51:92:42:8e:ed:7b:76:c2:42:a8:61:28:d0:62:19:e8: 0c:5e:cd:be:f1:65:f9:b2:99:06:48:83:6c:36:63:b6:b2:54: 75:97:55:ce:86:30:89:d1:3f:ad:78:1b:63:56:9b:6c:19:e7: e3:59:17:fb -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDZ4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUxMTA2MTcxMzU1WhcNMjUxMTEzMTcxMzU1WjAYMRYwFAYD VQQDEw02OTBjZDc1My0yYTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0a/ZvxdZa/ok0p07n+HA7dK4JEnsejv8pwMp93Gr/FefHYfI4zNWfe8opEpT Q3Pn1bgpAJLhHMxxnjc+BcdYRBZH6DvHEhKNldvBnkFtknhWS77NeeBJEG4/Gnp4 K0GmIC5YSaDOihC8LxFYO9vmJaBbrzERyTh/5+azYAa5Wl+qdIxfKn/m+wg3JP2K at0+hSIrVXM2W9QkEH8mMGnfaFZied12Is/9mefIxGP/jKV4mh6h9Epn+9//u1pT ST/1/RiIFegP2PItRQBfAVKrbwD5Qdba6ZMTHHcFlbQxcoKPoyStiVmcpqKFU5ST I7sDWM7wXd8Gup0p8BsdTTfFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAZY4zHM 0krqR0eWuNZCXJzaIOeaMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvsyk4q020AsI4XC5Tywf3IMP9i2vrgiUiA3xML2ppJ9YUWjsn+H9X eZ74yujmW3XIoagkJu49kCgG8GZxUzlM5bp2va19i+e7KJuW6dmhuLv/GdbRySK6 lMERy2e4hS+jq0czHo00yBKmBxkKzWEciguCxaA8x5FGWkUdbowDJqAPpoQedTYw uLUcRWvBduQ2jHDJ2qjgAn2bXACQiue6QGaq7YU9tzuzUKZUc+73VrhzzF5nepMN DNvhPgFFTzDfMUoR+MGarFGSQo7te3bCQqhhKNBiGegMXs2+8WX5spkGSINsNmO2 slR1l1XOhjCJ0T+teBtjVptsGefjWRf7 -----END CERTIFICATE-----Generated at Fri Nov 7 15:22:00 2025 by rpki-client