$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: 5Qv36Le+c8m8m0M0NPTakOaQeMSH1l9xPZU42Uq5/Gk= Subject key identifier: AE:B9:63:B1:B1:9C:A0:5E:C5:B3:18:E7:DE:22:DD:A0:78:FA:96:4B Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0CD6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0CC0 Signing time: Tue 04 Nov 2025 18:18:06 +0000 Manifest this update: Tue 04 Nov 2025 18:18:06 +0000 Manifest next update: Tue 11 Nov 2025 18:18:06 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: pJPX7PW6chGsSBCe1fW83KIyNpMg63uTdSY60QqNaOg=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:18:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3286 (0xcd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: Nov 4 18:18:06 2025 GMT Not After : Nov 11 18:18:06 2025 GMT Subject: CN=690a435e-8edc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:64:d4:c2:f0:c1:26:75:18:70:21:6e:78:f9: 7e:3a:d3:9c:ec:25:b4:ba:d3:d5:4f:2d:e8:54:d5: 2a:19:8a:0b:3b:bb:6f:02:3d:54:62:ea:ab:a5:a7: 1a:12:26:6d:1e:90:ae:ba:95:43:33:80:da:66:d4: 24:dd:72:32:4f:43:ef:40:1c:35:eb:2c:02:8a:09: 5e:df:82:00:6c:78:67:e6:67:e4:b4:b7:ca:35:55: 36:c1:fb:10:91:21:20:95:d5:13:91:a1:e4:17:d8: c9:0e:69:38:b3:a4:4d:ec:13:3f:08:b3:fc:ff:7f: 08:84:c1:89:79:ed:48:e7:01:cd:8f:ab:78:a8:47: 1f:1e:41:d1:90:63:e0:1c:6a:a5:d8:9a:88:b9:e7: ae:b3:cf:72:31:34:4a:d5:3b:94:22:9e:79:6e:cc: d8:5a:0e:d9:9a:04:8c:37:70:b1:53:01:64:d6:2f: 42:c2:d7:2f:97:0b:dc:50:37:57:bc:b1:fe:fb:da: 51:e7:b2:4e:d9:95:2c:b6:45:a4:4e:34:94:4f:17: 95:0b:63:62:26:c0:b4:de:a0:59:ea:95:7d:7e:f5: 1f:e4:70:c5:69:0c:77:72:cf:3e:fe:06:2b:48:bd: 84:7e:b8:0d:73:95:1f:22:3c:54:f6:16:6c:ea:74: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:B9:63:B1:B1:9C:A0:5E:C5:B3:18:E7:DE:22:DD:A0:78:FA:96:4B X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e3:4a:f8:e3:65:64:c0:ff:39:17:00:43:07:9e:60:73:9b: 74:a5:13:e0:52:7c:ed:05:7f:ee:7d:02:67:47:6a:2d:75:bc: fa:23:e4:81:0a:e3:c0:3d:8c:57:32:76:8a:01:e4:ef:8b:1a: ea:86:1c:8e:ff:9e:7d:2a:ef:da:f3:aa:8b:68:59:21:94:18: 70:99:dc:cd:44:43:3b:38:de:3b:21:8e:c3:e0:2e:47:92:5b: 11:e0:08:31:92:a8:70:63:03:5f:89:cb:08:96:c3:87:ee:44: 02:c8:7a:9b:d0:55:01:8d:3b:66:4f:08:0f:ff:a4:1c:ac:5e: cc:63:20:c6:d1:ad:05:d9:5f:e1:c5:ac:1e:ca:61:eb:e9:fd: 95:20:60:a0:92:0e:73:b9:21:8b:e6:c3:eb:27:d8:29:eb:4d: e4:30:a7:8f:8c:50:5c:fe:bc:bf:d0:ae:9d:20:57:37:42:b5: 0c:b5:49:d2:02:37:07:93:31:87:36:f9:44:e8:e7:40:92:84: b2:2a:ff:f5:79:14:af:01:5c:6f:54:04:2a:e5:f1:c6:56:cc: 41:6a:98:2a:ca:ec:f3:af:ad:f6:f6:5d:c8:4f:cf:48:9d:46: a6:ec:5e:63:8f:a7:bf:50:38:dd:2b:be:c6:a8:9b:bc:2c:40: 61:1c:fa:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUxMTA0MTgxODA2WhcNMjUxMTExMTgxODA2WjAYMRYwFAYD VQQDEw02OTBhNDM1ZS04ZWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx2TUwvDBJnUYcCFuePl+OtOc7CW0utPVTy3oVNUqGYoLO7tvAj1UYuqrpaca EiZtHpCuupVDM4DaZtQk3XIyT0PvQBw16ywCigle34IAbHhn5mfktLfKNVU2wfsQ kSEgldUTkaHkF9jJDmk4s6RN7BM/CLP8/38IhMGJee1I5wHNj6t4qEcfHkHRkGPg HGql2JqIueeus89yMTRK1TuUIp55bszYWg7ZmgSMN3CxUwFk1i9CwtcvlwvcUDdX vLH++9pR57JO2ZUstkWkTjSUTxeVC2NiJsC03qBZ6pV9fvUf5HDFaQx3cs8+/gYr SL2EfrgNc5UfIjxU9hZs6nRtgwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK65Y7Gx nKBexbMY594i3aB4+pZLMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBK40r442VkwP85FwBDB55gc5t0pRPgUnztBX/ufQJnR2otdbz6I+SB CuPAPYxXMnaKAeTvixrqhhyO/559Ku/a86qLaFkhlBhwmdzNREM7ON47IY7D4C5H klsR4AgxkqhwYwNficsIlsOH7kQCyHqb0FUBjTtmTwgP/6QcrF7MYyDG0a0F2V/h xaweymHr6f2VIGCgkg5zuSGL5sPrJ9gp603kMKePjFBc/ry/0K6dIFc3QrUMtUnS AjcHkzGHNvlE6OdAkoSyKv/1eRSvAVxvVAQq5fHGVsxBapgqyuzzr6329l3IT89I nUam7F5jj6e/UDjdK77GqJu8LEBhHPoL -----END CERTIFICATE-----Generated at Wed Nov 5 11:46:58 2025 by rpki-client