$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: gyLWv+3ouFVyJQcE9n0N4LSDjscOe2M6Rp22sYFFi08= Subject key identifier: DA:41:EA:42:71:B4:85:99:0A:71:5C:8F:13:CF:95:80:C0:65:01:87 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0252 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 0232 Signing time: Mon 03 Nov 2025 02:04:04 +0000 Manifest this update: Mon 03 Nov 2025 02:04:03 +0000 Manifest next update: Mon 10 Nov 2025 02:04:03 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: 10psiYTaH5L+h6rdVfBaq3qDTddiUIbIkT674UmV71E=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 594 (0x252) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Nov 3 02:04:03 2025 GMT Not After : Nov 10 02:04:03 2025 GMT Subject: CN=69080d94-06bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9f:94:77:1f:4e:45:f4:41:17:6b:03:35:bb: a2:bd:bf:d2:6d:cb:c5:dd:9f:6d:7f:43:67:8b:b3: 88:5e:06:c6:b3:11:86:b9:b6:0c:f1:ed:95:ec:77: e7:76:9b:30:a8:ef:f8:fa:45:20:f8:a8:f4:68:0f: 98:c4:da:9c:57:a0:d0:8f:20:36:af:83:5c:84:d1: 0f:f6:4d:13:85:be:62:aa:6e:28:95:0c:e1:83:a6: 2e:5b:72:09:f9:1b:6e:a3:fb:09:dc:75:6f:63:42: 53:88:12:9f:d4:a9:e6:20:f6:6a:76:d9:1e:96:3c: 75:cd:5d:d3:4c:52:1b:2d:0f:94:8b:16:d3:a1:ce: af:ab:7f:09:60:28:13:b2:71:e7:6e:3e:d1:17:80: 15:87:25:04:97:6a:5c:c0:62:21:77:16:fc:fc:4f: ef:31:b9:34:8b:ef:0a:d4:74:30:17:c4:da:0c:b2: 7d:f5:fe:3b:02:fe:48:84:f8:37:4c:f5:2c:25:0d: a5:b0:31:9a:4a:4e:77:89:ed:85:a0:b5:25:22:2f: 76:7e:8c:ac:70:21:e3:b2:b1:6a:63:8e:cb:c3:e0: 6f:de:2f:97:47:0e:b6:ff:38:a3:dc:58:a9:74:75: aa:e2:bb:3e:4a:02:d5:19:8c:e7:5c:89:cf:4e:dc: 94:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:41:EA:42:71:B4:85:99:0A:71:5C:8F:13:CF:95:80:C0:65:01:87 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:9c:de:a0:22:19:f6:dc:4f:6f:0e:e9:d5:7e:82:db:d4:09: 98:5b:e9:7e:22:44:23:22:a4:8c:75:7d:96:eb:1f:6a:14:36: b9:55:00:0a:e9:f5:d6:ec:b3:aa:3a:c6:ac:97:1e:69:9b:c1: 0a:9c:ea:01:da:08:73:f2:3d:e5:f9:3d:57:0f:7e:a0:e1:17: 1a:17:65:30:36:3b:d7:af:ca:03:ce:0f:c2:a7:e2:1e:f8:37: 2f:41:77:f3:61:34:32:35:d5:71:9a:aa:da:96:c9:b7:80:f8: b2:bc:9c:d2:77:92:35:e5:c9:75:11:f4:f5:58:53:19:48:f9: 88:e6:ba:bd:65:bd:f4:7d:85:66:eb:82:12:71:d6:2d:ce:3f: 5c:cc:5d:7e:3c:39:51:8e:72:73:31:0a:74:56:90:c6:ce:db: 4c:b3:ac:94:c8:d0:73:9f:75:f7:7b:f0:ae:f6:be:ae:6b:49: 5b:32:b9:6c:57:2c:8d:e5:eb:4f:f2:94:91:92:fc:12:90:a8: 93:6c:48:49:3b:67:9e:96:72:2b:a3:c7:9f:fc:05:71:14:f6: a9:b0:db:34:e0:c9:e3:b7:57:0f:5b:23:74:03:64:0f:08:88: a1:65:64:69:42:94:27:0a:6a:28:8c:66:b8:5c:71:2a:6a:5f: 67:94:bd:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAlIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUxMTAzMDIwNDAzWhcNMjUxMTEwMDIwNDAzWjAYMRYwFAYD VQQDEw02OTA4MGQ5NC0wNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Z+Udx9ORfRBF2sDNbuivb/SbcvF3Z9tf0Nni7OIXgbGsxGGubYM8e2V7Hfn dpswqO/4+kUg+Kj0aA+YxNqcV6DQjyA2r4NchNEP9k0Thb5iqm4olQzhg6YuW3IJ +Rtuo/sJ3HVvY0JTiBKf1KnmIPZqdtkeljx1zV3TTFIbLQ+UixbToc6vq38JYCgT snHnbj7RF4AVhyUEl2pcwGIhdxb8/E/vMbk0i+8K1HQwF8TaDLJ99f47Av5IhPg3 TPUsJQ2lsDGaSk53ie2FoLUlIi92foyscCHjsrFqY47Lw+Bv3i+XRw62/zij3Fip dHWq4rs+SgLVGYznXInPTtyUZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNpB6kJx tIWZCnFcjxPPlYDAZQGHMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBynN6gIhn23E9vDunVfoLb1AmYW+l+IkQjIqSMdX2W6x9qFDa5VQAK 6fXW7LOqOsaslx5pm8EKnOoB2ghz8j3l+T1XD36g4RcaF2UwNjvXr8oDzg/Cp+Ie +DcvQXfzYTQyNdVxmqralsm3gPiyvJzSd5I15cl1EfT1WFMZSPmI5rq9Zb30fYVm 64IScdYtzj9czF1+PDlRjnJzMQp0VpDGzttMs6yUyNBzn3X3e/Cu9r6ua0lbMrls VyyN5etP8pSRkvwSkKiTbEhJO2eelnIro8ef/AVxFPapsNs04Mnjt1cPWyN0A2QP CIihZWRpQpQnCmoojGa4XHEqal9nlL3z -----END CERTIFICATE-----Generated at Tue Nov 4 21:36:03 2025 by rpki-client