$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: r2iRG73VKqqgHpt6wsHYmXz/tDk9quJ8vUWV1MBh1Bg= Subject key identifier: D5:43:5A:0F:85:A2:E8:83:47:35:62:39:88:5F:39:5A:4E:86:24:1F Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 02D0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 02CB Signing time: Wed 05 Nov 2025 01:28:04 +0000 Manifest this update: Wed 05 Nov 2025 01:28:03 +0000 Manifest next update: Wed 12 Nov 2025 01:28:03 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: N6PzYZbBHJxZTHynNuWSG1fBCpXTiu6LQL6VyOR1y2Q=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 01:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 720 (0x2d0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Nov 5 01:28:03 2025 GMT Not After : Nov 12 01:28:03 2025 GMT Subject: CN=690aa824-8092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:3d:49:0f:cd:06:30:d5:45:92:43:3d:c4: 47:76:a5:ec:26:c0:54:40:ef:f5:fa:e5:9a:af:d9: 88:53:f3:a0:02:01:28:d3:a4:98:6c:ca:c6:66:13: f6:76:7d:c1:fc:49:d1:d7:2e:12:79:26:ea:71:d2: 77:3a:9b:b9:ca:ab:4e:26:5d:56:25:d7:8b:55:82: 9f:97:c1:b8:e2:b8:9d:3d:24:f0:50:40:d4:21:e2: 3e:08:2f:11:f9:1d:d5:4d:e0:84:8e:f5:38:70:c7: 7e:05:9b:0e:aa:31:a8:29:c2:07:07:f3:b6:5d:6b: 44:6c:da:2d:bf:b2:85:72:d5:45:ef:d9:31:b2:77: 67:21:db:dd:6d:1d:04:d8:78:e5:66:4b:b6:32:4e: a9:ef:53:8e:19:f2:21:79:c2:91:eb:b1:cc:04:de: 68:3f:86:a6:fb:5f:22:53:53:c2:bf:17:a5:5e:f2: 89:81:7d:68:70:7d:79:ea:27:d7:d8:dc:b5:35:b0: 29:6f:3d:6e:66:5b:57:32:c3:6f:b6:0f:fa:cf:5d: 85:e6:b3:03:45:5c:bd:57:62:66:3f:d2:ee:3d:62: d5:42:0d:f4:3b:6a:a1:e1:34:e5:33:60:4f:1b:8e: 0f:f0:43:87:81:49:31:9e:29:e1:40:b0:3d:b3:2a: 33:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:43:5A:0F:85:A2:E8:83:47:35:62:39:88:5F:39:5A:4E:86:24:1F X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4d:65:32:47:93:47:6b:1c:16:1a:a5:a5:e0:99:f9:49:62:0c: 93:52:3c:bc:73:c7:bc:0f:f0:f8:8d:5f:a3:81:b1:4c:1c:0b: 51:40:ee:31:0f:27:2a:06:7e:9e:4d:64:58:2d:d9:c8:09:70: 1f:24:f7:f5:18:ba:32:86:12:81:7d:f0:56:33:04:8e:69:cb: 85:24:72:d6:23:60:f7:be:01:63:49:57:52:70:6d:5e:e4:b7: f4:4f:58:33:95:db:ad:68:a7:5d:ad:be:7c:b4:0d:60:77:1b: 56:f8:6b:d0:2d:15:db:c8:c9:ec:46:0f:90:71:7d:d1:5a:d4: 76:e3:72:ea:2c:a3:af:7b:29:05:93:d2:0e:91:0d:25:b8:0c: dd:0c:66:bf:1c:5a:36:81:6c:f3:c2:87:3b:50:3f:19:53:1d: 3c:ba:c2:b1:d6:46:9f:ca:71:35:ba:03:84:86:00:30:cf:f4: 8c:72:b6:c8:a8:a7:da:4a:70:42:40:fb:28:25:30:1c:ef:64: 92:da:ee:43:9a:75:e9:84:b9:34:0a:06:22:60:0b:21:07:bb: 24:15:df:5f:bc:5e:f2:ca:43:39:df:5a:8b:e0:ca:e8:86:11: d5:ac:ce:9f:76:7e:5e:5b:b3:0d:de:b0:34:11:2e:99:5e:99: b2:9f:30:25 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUxMTA1MDEyODAzWhcNMjUxMTEyMDEyODAzWjAYMRYwFAYD VQQDEw02OTBhYTgyNC04MDkyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsoI9SQ/NBjDVRZJDPcRHdqXsJsBUQO/1+uWar9mIU/OgAgEo06SYbMrGZhP2 dn3B/EnR1y4SeSbqcdJ3Opu5yqtOJl1WJdeLVYKfl8G44ridPSTwUEDUIeI+CC8R +R3VTeCEjvU4cMd+BZsOqjGoKcIHB/O2XWtEbNotv7KFctVF79kxsndnIdvdbR0E 2HjlZku2Mk6p71OOGfIhecKR67HMBN5oP4am+18iU1PCvxelXvKJgX1ocH156ifX 2Ny1NbApbz1uZltXMsNvtg/6z12F5rMDRVy9V2JmP9LuPWLVQg30O2qh4TTlM2BP G44P8EOHgUkxninhQLA9syozzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNVDWg+F ouiDRzViOYhfOVpOhiQfMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBNZTJHk0drHBYapaXgmflJYgyTUjy8c8e8D/D4jV+jgbFMHAtRQO4x DycqBn6eTWRYLdnICXAfJPf1GLoyhhKBffBWMwSOacuFJHLWI2D3vgFjSVdScG1e 5Lf0T1gzldutaKddrb58tA1gdxtW+GvQLRXbyMnsRg+QcX3RWtR243LqLKOveykF k9IOkQ0luAzdDGa/HFo2gWzzwoc7UD8ZUx08usKx1kafynE1ugOEhgAwz/SMcrbI qKfaSnBCQPsoJTAc72SS2u5DmnXphLk0CgYiYAshB7skFd9fvF7yykM531qL4Mro hhHVrM6fdn5eW7MN3rA0ES6ZXpmynzAl -----END CERTIFICATE-----Generated at Wed Nov 5 11:36:54 2025 by rpki-client