$ rpki-client -vvf rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft File: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft (raw, json) Hash identifier: PkSmjWRzqSeeDOGU2KOWoRwE5C2MIGj6c/95rE2PaoY= Subject key identifier: 5A:3D:74:4C:A6:94:FD:F3:62:1C:17:A0:47:43:9D:27:97:A4:CA:2C Authority key identifier: EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B Certificate issuer: /CN=A911C362/serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Certificate serial: 0156 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft Manifest number: 0135 Signing time: Mon 03 Nov 2025 05:00:05 +0000 Manifest this update: Mon 03 Nov 2025 05:00:04 +0000 Manifest next update: Mon 10 Nov 2025 05:00:04 +0000 Files and hashes: 1: 6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl (hash: 3BrkX2g7YA4MyF0GsNTG7BXnztRnrA9vZ4eRDM1okTQ=) 2: 6492D4985B9011EF8DB48C24C4F9AE02.roa (hash: It848C/9Bwo+dM5KHxOWOmLE+nNLbDgRj+xtHR+Q7NY=) 3: 8DCB0F7C49D511F0A83B4647C4F9AE02.roa (hash: EVsgRJZkrCA+X6URfbAAHCVUloJhomMJyZF/Ejmuu7o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 342 (0x156) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C362, serialNumber=EA83AF4A21CBC2071F56956E5DDD584C7638FA5B Validity Not Before: Nov 3 05:00:04 2025 GMT Not After : Nov 10 05:00:04 2025 GMT Subject: CN=690836d5-7980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:41:ed:af:5c:0a:70:d1:03:1e:e4:37:d1:44: 6a:ba:e6:7e:c8:d6:8e:4e:70:be:26:c6:57:f0:10: 3b:08:4b:af:a0:9e:b0:86:86:72:39:29:d7:4b:eb: bc:83:bd:b7:70:be:17:fb:70:a0:68:fb:9a:6c:9f: 26:2d:9d:d9:62:07:0c:b2:13:64:41:6b:e1:5d:1b: b6:89:0f:55:60:30:a7:0a:8e:56:c4:bf:23:f0:d3: d6:16:de:e4:f5:8c:89:b3:55:6d:ad:d5:cb:2f:e4: 64:3f:6e:f4:c0:4e:bb:0f:c3:b0:96:6d:26:8e:f5: e0:c1:40:98:8f:35:de:bc:bc:71:33:2b:b8:20:35: fc:8b:97:a9:1e:88:da:30:dd:0d:11:5e:89:21:ff: 67:d5:89:79:d8:e8:3c:7f:ba:54:33:47:8e:98:3e: f4:a7:3f:4e:86:8b:7b:ab:a3:b3:f3:6b:ec:bf:28: 9a:40:63:51:36:1d:af:94:35:ff:3d:9e:54:21:d7: b1:37:fc:be:0a:b1:ec:ad:34:1c:f1:11:ea:dc:66: 88:e7:5a:24:37:9c:f6:7f:aa:a8:14:07:63:3c:47: cb:cb:b4:e5:40:04:63:1c:2c:1e:94:c4:d6:75:4c: 90:cb:c8:7d:62:bc:4b:da:a1:39:47:a4:db:aa:a5: cd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:74:4C:A6:94:FD:F3:62:1C:17:A0:47:43:9D:27:97:A4:CA:2C X509v3 Authority Key Identifier: keyid:EA:83:AF:4A:21:CB:C2:07:1F:56:95:6E:5D:DD:58:4C:76:38:FA:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6oOvSiHLwgcfVpVuXd1YTHY4-ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C362/6A08F492257711EFBB0B8251C4F9AE02/6oOvSiHLwgcfVpVuXd1YTHY4-ls.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:62:bd:f8:9b:3e:c1:31:47:e0:eb:eb:37:39:c5:8b:f0:4f: cc:16:dc:8c:8e:f9:57:7e:e6:c9:ec:02:d3:5b:e7:de:0d:5e: e9:ca:a1:cd:d0:2e:30:49:a3:e1:c6:7f:f7:46:be:d3:a0:07: d8:50:7a:6e:37:76:7a:94:cc:93:42:18:5c:34:34:05:73:39: cc:de:f6:f4:ce:a4:8b:8d:98:34:ba:1e:f5:c0:92:07:b6:39: 14:20:1f:fe:54:6d:d7:6a:58:6f:02:48:b5:3e:ea:a5:c9:28: 2f:14:1e:4d:2c:69:42:a6:e5:d0:a8:65:f8:fe:13:20:a1:1a: b7:ff:c2:e7:45:4f:16:b8:d2:d4:59:05:79:26:03:7a:1c:89: 81:c1:cb:f3:85:01:73:bf:b7:e7:3a:ee:57:45:20:b6:57:dc: 32:5b:28:41:72:db:63:cd:06:a0:58:43:51:5f:04:8b:98:a0: 46:01:af:ee:01:c9:9c:08:aa:f4:56:86:f7:4b:38:a2:a8:43: cb:d5:87:dc:89:7b:b4:dd:e7:46:73:70:ad:58:9c:b1:d6:7a: af:53:99:1e:d2:43:42:6c:27:c3:46:7a:c7:83:cf:56:bb:ab: 6c:f8:60:45:a8:aa:7c:e2:a1:e9:28:6e:61:f5:64:9d:b6:85: d0:5e:ce:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUMzNjIxMTAvBgNVBAUTKEVBODNBRjRBMjFDQkMyMDcxRjU2OTU2RTVEREQ1ODRD NzYzOEZBNUIwHhcNMjUxMTAzMDUwMDA0WhcNMjUxMTEwMDUwMDA0WjAYMRYwFAYD VQQDEw02OTA4MzZkNS03OTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUHtr1wKcNEDHuQ30URquuZ+yNaOTnC+JsZX8BA7CEuvoJ6whoZyOSnXS+u8 g723cL4X+3CgaPuabJ8mLZ3ZYgcMshNkQWvhXRu2iQ9VYDCnCo5WxL8j8NPWFt7k 9YyJs1VtrdXLL+RkP270wE67D8Owlm0mjvXgwUCYjzXevLxxMyu4IDX8i5epHoja MN0NEV6JIf9n1Yl52Og8f7pUM0eOmD70pz9Ohot7q6Oz82vsvyiaQGNRNh2vlDX/ PZ5UIdexN/y+CrHsrTQc8RHq3GaI51okN5z2f6qoFAdjPEfLy7TlQARjHCwelMTW dUyQy8h9YrxL2qE5R6TbqqXN7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFo9dEym lP3zYhwXoEdDnSeXpMosMB8GA1UdIwQYMBaAFOqDr0ohy8IHH1aVbl3dWEx2OPpb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzM2Mi82QTA4RjQ5MjI1 NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdnY2ZWcFZ1WGQxWVRIWTQt bHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvT3ZTaUhMd2djZlZwVnVYZDFZVEhZNC1scy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzM2Mi82QTA4RjQ5MjI1NzcxMUVGQkIwQjgyNTFDNEY5QUUwMi82b092U2lITHdn Y2ZWcFZ1WGQxWVRIWTQtbHMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFYr34mz7BMUfg6+s3OcWL8E/MFtyMjvlXfubJ7ALTW+feDV7pyqHN 0C4wSaPhxn/3Rr7ToAfYUHpuN3Z6lMyTQhhcNDQFcznM3vb0zqSLjZg0uh71wJIH tjkUIB/+VG3XalhvAki1PuqlySgvFB5NLGlCpuXQqGX4/hMgoRq3/8LnRU8WuNLU WQV5JgN6HImBwcvzhQFzv7fnOu5XRSC2V9wyWyhBcttjzQagWENRXwSLmKBGAa/u AcmcCKr0Vob3SziiqEPL1YfciXu03edGc3CtWJyx1nqvU5ke0kNCbCfDRnrHg89W u6ts+GBFqKp84qHpKG5h9WSdtoXQXs4+ -----END CERTIFICATE-----Generated at Tue Nov 4 12:36:52 2025 by rpki-client