$ rpki-client -vvf rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft File: b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft (raw, json) Hash identifier: DjuTW5l+MFK2ltAjDmbYvlGjpeNKtkYRCDDd2wsbO/E= Subject key identifier: 35:6F:72:C0:6E:E2:85:4C:AE:FD:42:13:B5:4A:FD:FF:24:20:1F:05 Authority key identifier: 6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA Certificate issuer: /CN=A912876D/serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft Manifest number: 34 Signing time: Mon 03 Nov 2025 07:37:26 +0000 Manifest this update: Mon 03 Nov 2025 07:37:25 +0000 Manifest next update: Mon 10 Nov 2025 07:37:25 +0000 Files and hashes: 1: b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl (hash: cvifOK50/yaY6RA51HzGmdFwBMV0BoFDq6cAAivPgXg=) 2: B30F869670E511F08CE5B42CC4F9AE02.roa (hash: erO5HGBwapQrQxqX0w/vK8XPII0Rjyl1v5zKuwttKDQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912876D, serialNumber=6FA104BE665E523CB657C9BF8C308F023EA9C0DA Validity Not Before: Nov 3 07:37:25 2025 GMT Not After : Nov 10 07:37:25 2025 GMT Subject: CN=69085bb6-fc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b9:46:9d:26:40:f0:6c:69:f0:f6:db:67:b7: 12:26:f6:df:91:f2:59:5c:d7:21:62:aa:17:96:a5: 81:05:61:c8:f0:e9:5c:c3:14:bf:ea:9a:6c:01:ba: 53:f9:06:6a:9a:a3:2e:a1:3f:79:06:b9:60:fb:f3: 58:59:a8:f7:d2:a9:14:92:6e:61:49:2e:df:8a:d6: fc:24:18:ba:a1:ff:61:bb:ce:2b:57:73:f8:d7:ed: 7f:14:b8:1d:b2:d4:c6:d7:ff:00:da:35:cc:8c:53: 98:2d:83:0e:12:9f:8f:c8:01:a4:f9:57:67:5c:00: 57:36:b3:a2:15:7a:8b:8e:f1:cb:59:8f:7e:45:b2: b4:24:d6:e5:90:ef:5b:8b:63:39:aa:f2:87:51:41: 9b:33:8b:32:c3:1b:1d:db:13:51:f6:25:9f:54:6c: 46:6e:ba:f2:d3:e0:2e:58:c3:77:01:0d:b6:5f:90: 32:0c:99:ae:19:9f:b5:07:58:ed:85:37:78:14:5a: b6:1e:0b:b7:9e:ac:f3:4b:78:6a:2e:b2:42:7f:26: a3:5a:b3:a5:71:30:36:e8:48:97:bc:eb:ce:34:38: 3a:5a:75:12:f8:43:a1:d8:87:2d:1a:66:e7:b3:40: 24:51:f9:94:5a:a0:9f:cf:2e:40:84:55:a8:6e:b6: 9b:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:6F:72:C0:6E:E2:85:4C:AE:FD:42:13:B5:4A:FD:FF:24:20:1F:05 X509v3 Authority Key Identifier: keyid:6F:A1:04:BE:66:5E:52:3C:B6:57:C9:BF:8C:30:8F:02:3E:A9:C0:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b6EEvmZeUjy2V8m_jDCPAj6pwNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912876D/57A2EAFA70E511F0A9380A2CC4F9AE02/b6EEvmZeUjy2V8m_jDCPAj6pwNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:57:04:79:5c:f2:f1:1b:50:76:bd:cb:21:32:f1:d2:7a:c7: 38:7f:2f:29:53:2e:44:0a:ea:a1:0c:a3:2a:0d:76:27:a9:79: 33:96:0e:e2:2c:90:db:77:ca:9a:22:4c:07:44:7a:9d:6e:5f: 93:95:73:5d:b7:73:a6:99:07:10:1f:fb:9e:b8:7d:69:c4:4c: 0b:ea:1e:48:f7:12:b8:fa:73:37:5d:fd:7b:e8:d4:99:15:7e: 31:06:35:ea:3d:03:dc:ca:53:2e:88:14:c8:eb:96:62:98:4c: a4:15:4c:47:70:9c:36:d3:29:c1:7f:1d:8e:4f:47:3f:4e:f3: 2e:48:09:30:74:90:c6:9c:14:25:9f:b3:cd:94:bd:df:10:17: 54:9e:c6:70:78:ba:ad:90:d3:c2:63:f1:7a:0a:c6:de:6b:b6: 58:25:b9:4a:70:07:b9:c0:b8:ff:de:cd:15:4b:5a:97:f4:0e: 93:c7:f4:5a:f5:da:12:b3:c1:10:86:55:22:1f:3c:33:1f:ae: 2e:12:82:06:b0:4f:1b:75:b3:9b:10:65:26:65:66:81:a6:95: 26:27:67:79:b7:b6:cf:0d:91:ec:0e:c9:12:c4:8d:88:c4:ed: 32:60:c6:e4:7c:5c:93:2e:c4:2a:6d:e2:3a:e8:84:85:f6:c6: 25:e6:34:1c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEy ODc2RDExMC8GA1UEBRMoNkZBMTA0QkU2NjVFNTIzQ0I2NTdDOUJGOEMzMDhGMDIz RUE5QzBEQTAeFw0yNTExMDMwNzM3MjVaFw0yNTExMTAwNzM3MjVaMBgxFjAUBgNV BAMTDTY5MDg1YmI2LWZjMmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYuUadJkDwbGnw9ttntxIm9t+R8llc1yFiqheWpYEFYcjw6VzDFL/qmmwBulP5 Bmqaoy6hP3kGuWD781hZqPfSqRSSbmFJLt+K1vwkGLqh/2G7zitXc/jX7X8UuB2y 1MbX/wDaNcyMU5gtgw4Sn4/IAaT5V2dcAFc2s6IVeouO8ctZj35FsrQk1uWQ71uL Yzmq8odRQZszizLDGx3bE1H2JZ9UbEZuuvLT4C5Yw3cBDbZfkDIMma4Zn7UHWO2F N3gUWrYeC7eerPNLeGouskJ/JqNas6VxMDboSJe86840ODpadRL4Q6HYhy0aZuez QCRR+ZRaoJ/PLkCEVahutpvXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNW9ywG7i hUyu/UITtUr9/yQgHwUwHwYDVR0jBBgwFoAUb6EEvmZeUjy2V8m/jDCPAj6pwNow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4NzZELzU3QTJFQUZBNzBF NTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5MlY4bV9qRENQQWo2cHdO by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYjZFRXZtWmVVankyVjhtX2pEQ1BBajZwd05vLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTI4 NzZELzU3QTJFQUZBNzBFNTExRjBBOTM4MEEyQ0M0RjlBRTAyL2I2RUV2bVplVWp5 MlY4bV9qRENQQWo2cHdOby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEFXBHlc8vEbUHa9yyEy8dJ6xzh/LylTLkQK6qEMoyoNdiepeTOWDuIs kNt3ypoiTAdEep1uX5OVc123c6aZBxAf+564fWnETAvqHkj3Erj6czdd/Xvo1JkV fjEGNeo9A9zKUy6IFMjrlmKYTKQVTEdwnDbTKcF/HY5PRz9O8y5ICTB0kMacFCWf s82Uvd8QF1SexnB4uq2Q08Jj8XoKxt5rtlgluUpwB7nAuP/ezRVLWpf0DpPH9Fr1 2hKzwRCGVSIfPDMfri4SggawTxt1s5sQZSZlZoGmlSYnZ3m3ts8NkewOyRLEjYjE 7TJgxuR8XJMuxCpt4jrohIX2xiXmNBw= -----END CERTIFICATE-----Generated at Wed Nov 5 05:38:23 2025 by rpki-client