$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: F44pcuxpllKwtC2E7x7jkJyKPx1wBY1uxr048EgWhGs= Subject key identifier: CB:52:FC:50:A8:36:BD:FB:68:AA:44:40:6C:10:5D:E1:F4:48:90:57 Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 09FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 09ED Signing time: Tue 04 Nov 2025 20:00:42 +0000 Manifest this update: Tue 04 Nov 2025 20:00:41 +0000 Manifest next update: Tue 11 Nov 2025 20:00:41 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: K5llDFmpbcuCc4xy3FcSb9RlkRSbjuyMojpZ0YHpSNs=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 20:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2555 (0x9fb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Nov 4 20:00:41 2025 GMT Not After : Nov 11 20:00:41 2025 GMT Subject: CN=690a5b69-ca36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:db:51:c8:c9:b7:09:23:d7:48:19:58:72:95: c5:cb:d6:27:28:08:35:80:43:34:04:36:eb:a0:4a: 7c:47:ee:eb:89:ce:d4:c0:0e:37:68:a4:93:fe:1d: 92:57:bd:29:92:67:eb:34:0e:c3:01:e8:55:96:3c: 42:ca:ea:a7:76:a5:5a:2a:af:c3:96:8f:25:a3:84: d7:fa:a0:f0:de:6c:99:86:b4:63:e5:c3:6a:2d:a8: 7f:0f:70:2f:59:f3:67:41:b5:2d:fc:6c:df:21:1c: d0:88:03:d1:69:19:8f:50:a7:c4:d1:11:dd:bc:fa: e9:04:22:c1:c7:39:a9:6e:0e:a4:e5:c6:97:e4:75: 08:a1:1c:0f:0b:64:35:28:10:86:e7:dd:26:a3:ae: 30:9e:92:a3:c5:cc:ab:0f:b6:2a:55:d9:82:65:2f: 4f:a2:b3:46:10:77:ef:22:22:34:96:15:ae:28:85: 54:31:df:56:47:03:d4:cf:71:74:8c:92:91:d4:66: 53:7d:f2:59:30:f3:c1:7d:56:18:c9:7d:bc:a0:33: 47:74:b2:6a:09:88:88:d3:f2:2c:1d:6c:9d:e3:0e: 96:ac:05:3e:9b:47:ca:cd:40:bb:ba:59:7d:c8:68: 69:da:61:9c:27:c2:68:4f:94:80:60:19:78:89:a7: c5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:52:FC:50:A8:36:BD:FB:68:AA:44:40:6C:10:5D:E1:F4:48:90:57 X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a4:13:53:4b:18:47:53:99:85:03:69:22:19:5f:8f:73:6c:18: 83:52:eb:e1:e7:cf:d8:de:29:01:6f:04:ad:39:c7:bc:85:1e: 34:9b:a9:52:38:26:bf:7f:43:64:26:39:93:b1:6e:bf:3d:2c: 46:e2:39:76:61:53:e8:7d:4b:4c:09:84:bd:25:5f:e6:57:27: 25:a8:a6:f4:b6:b1:e8:a2:2f:58:c2:c1:3f:f9:15:f1:74:24: 7d:87:6f:5c:2f:30:79:a9:90:94:ea:d2:e8:e1:41:a5:b3:ee: eb:a8:95:b2:19:5f:21:05:08:65:7f:fb:d9:bb:58:ff:fe:2a: 26:03:d4:5c:bd:d5:51:e6:ce:63:a3:8f:40:5a:09:69:c2:f3: 54:da:fe:a0:c6:f1:29:bf:70:27:cb:21:61:f2:76:fa:1c:b6: 5a:f5:93:63:dd:40:1d:c5:2f:d4:9f:ce:2f:5a:be:7a:8a:3c: 2f:47:14:18:9d:c4:01:f8:bd:9a:9d:91:ee:60:e5:61:9b:a3: a5:7c:b8:c7:d9:b0:9a:63:31:e8:e1:7a:de:f4:95:1c:5c:67: df:bd:90:fd:d8:14:39:cb:5e:7c:1e:ef:30:7e:58:64:87:53: 93:75:a7:97:2e:c0:51:87:87:ad:00:24:f3:37:8a:3a:99:51: 66:14:65:97 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCfswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUxMTA0MjAwMDQxWhcNMjUxMTExMjAwMDQxWjAYMRYwFAYD VQQDEw02OTBhNWI2OS1jYTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApttRyMm3CSPXSBlYcpXFy9YnKAg1gEM0BDbroEp8R+7ric7UwA43aKST/h2S V70pkmfrNA7DAehVljxCyuqndqVaKq/Dlo8lo4TX+qDw3myZhrRj5cNqLah/D3Av WfNnQbUt/GzfIRzQiAPRaRmPUKfE0RHdvPrpBCLBxzmpbg6k5caX5HUIoRwPC2Q1 KBCG590mo64wnpKjxcyrD7YqVdmCZS9PorNGEHfvIiI0lhWuKIVUMd9WRwPUz3F0 jJKR1GZTffJZMPPBfVYYyX28oDNHdLJqCYiI0/IsHWyd4w6WrAU+m0fKzUC7ull9 yGhp2mGcJ8JoT5SAYBl4iafFKwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMtS/FCo Nr37aKpEQGwQXeH0SJBXMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCkE1NLGEdTmYUDaSIZX49zbBiDUuvh58/Y3ikBbwStOce8hR40m6lS OCa/f0NkJjmTsW6/PSxG4jl2YVPofUtMCYS9JV/mVyclqKb0trHooi9YwsE/+RXx dCR9h29cLzB5qZCU6tLo4UGls+7rqJWyGV8hBQhlf/vZu1j//iomA9RcvdVR5s5j o49AWglpwvNU2v6gxvEpv3AnyyFh8nb6HLZa9ZNj3UAdxS/Un84vWr56ijwvRxQY ncQB+L2anZHuYOVhm6OlfLjH2bCaYzHo4Xre9JUcXGffvZD92BQ5y158Hu8wflhk h1OTdaeXLsBRh4etACTzN4o6mVFmFGWX -----END CERTIFICATE-----Generated at Wed Nov 5 15:43:51 2025 by rpki-client