$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: iZxkiumPH1VTJCNZGSU6tV0fXk65Gi6V10cUGIaqUC8= Subject key identifier: 3C:54:9A:97:22:15:F9:D4:39:23:98:C7:7C:B5:F3:0F:80:61:A0:A3 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2A5B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2A4A Signing time: Tue 04 Nov 2025 14:20:21 +0000 Manifest this update: Tue 04 Nov 2025 14:20:20 +0000 Manifest next update: Tue 11 Nov 2025 14:20:20 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: tAsiMfjrhCwpKHfcUnpcDWQjymm5pHnDmB807QCMOUk=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:20:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10843 (0x2a5b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Nov 4 14:20:20 2025 GMT Not After : Nov 11 14:20:20 2025 GMT Subject: CN=690a0ba5-7612 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:be:16:21:31:f4:79:92:60:74:75:d7:15:be: ad:95:e6:b8:fd:a8:25:f8:a7:a3:1a:5f:42:cf:92: 13:d7:07:c4:b9:2e:91:c4:84:10:e6:27:0f:bd:36: 1e:71:ca:d6:b4:01:b0:bc:01:8e:11:a0:20:1d:61: 5c:a6:48:6a:ea:c9:5d:0f:80:52:68:63:be:e4:08: f2:f2:10:91:3d:c1:1c:af:ac:29:d3:7f:2c:62:83: 63:1a:f2:b3:9c:82:d0:cc:42:f1:f8:be:e7:df:d0: 99:5b:95:fb:92:62:85:de:48:b5:20:fb:85:81:15: 7f:9b:33:71:73:80:e2:54:53:b6:19:f9:e1:fa:46: 8f:4f:9f:20:ac:82:51:bc:10:e8:90:c0:73:5d:1b: af:6b:47:a9:cc:01:49:0a:12:92:c8:be:ed:cc:b1: 18:12:0d:b1:81:99:75:f0:10:34:dd:6a:d0:c3:98: 8b:43:43:a3:33:b5:69:00:37:10:e2:03:a2:9c:24: 08:a1:95:0f:82:7b:d0:a3:f5:f7:fc:56:c0:e5:46: 0d:f8:c9:e4:a2:5c:e2:42:97:3d:21:d4:f9:06:5a: 93:cb:5a:22:ab:4f:ff:f6:d0:13:9e:aa:47:e6:81: 01:05:4e:4e:0a:a7:97:f2:4e:3b:f0:ea:56:d8:c3: 48:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:54:9A:97:22:15:F9:D4:39:23:98:C7:7C:B5:F3:0F:80:61:A0:A3 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 42:63:48:61:db:d6:d8:61:33:6c:e1:a8:5f:e9:0f:a4:ce:76: 58:02:c0:8a:9e:07:67:18:95:e9:48:a8:d4:24:d1:b6:3e:dd: 11:be:44:85:4c:fc:72:ad:0f:08:bf:49:e0:6f:1b:99:e7:d8: 79:fc:97:c3:bf:ca:35:52:43:d5:6e:f5:2b:00:5e:5d:e4:46: d6:3d:d5:b9:e1:8d:92:35:48:4c:6f:ed:85:64:16:e4:99:2d: 0b:bd:76:7d:3f:46:cd:21:fe:3f:34:c8:78:2b:49:ae:ec:ca: 23:23:5a:e3:3c:80:4f:5f:99:90:df:8c:e3:c3:6f:d3:66:13: a7:82:6a:58:5f:60:bb:9c:76:6d:a6:8a:13:10:66:45:2c:cc: 5e:94:c2:e5:b3:83:b0:5b:44:b5:d7:7e:df:ac:f6:18:e9:0a: cf:fa:3a:0e:85:be:31:18:ef:dc:54:66:13:af:fd:46:fa:7c: 31:f0:20:c7:27:94:c2:a4:c5:f5:8c:d6:cb:01:e7:ed:46:12: 11:c0:3b:e6:8f:a0:ff:a9:a5:f7:d0:39:c3:ff:dd:65:c9:08: 3d:25:f8:0b:16:7a:e8:55:5f:ea:21:78:2e:8a:9d:21:37:14: 0f:ad:57:d7:80:e7:f5:f5:35:ea:27:82:12:3a:e0:cb:bf:bd: 1a:0b:c6:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKlswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUxMTA0MTQyMDIwWhcNMjUxMTExMTQyMDIwWjAYMRYwFAYD VQQDEw02OTBhMGJhNS03NjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA474WITH0eZJgdHXXFb6tlea4/agl+KejGl9Cz5IT1wfEuS6RxIQQ5icPvTYe ccrWtAGwvAGOEaAgHWFcpkhq6sldD4BSaGO+5Ajy8hCRPcEcr6wp038sYoNjGvKz nILQzELx+L7n39CZW5X7kmKF3ki1IPuFgRV/mzNxc4DiVFO2Gfnh+kaPT58grIJR vBDokMBzXRuva0epzAFJChKSyL7tzLEYEg2xgZl18BA03WrQw5iLQ0OjM7VpADcQ 4gOinCQIoZUPgnvQo/X3/FbA5UYN+MnkolziQpc9IdT5BlqTy1oiq0//9tATnqpH 5oEBBU5OCqeX8k478OpW2MNIyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDxUmpci FfnUOSOYx3y18w+AYaCjMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBCY0hh29bYYTNs4ahf6Q+kznZYAsCKngdnGJXpSKjUJNG2Pt0RvkSF TPxyrQ8Iv0ngbxuZ59h5/JfDv8o1UkPVbvUrAF5d5EbWPdW54Y2SNUhMb+2FZBbk mS0LvXZ9P0bNIf4/NMh4K0mu7MojI1rjPIBPX5mQ34zjw2/TZhOngmpYX2C7nHZt pooTEGZFLMxelMLls4OwW0S1137frPYY6QrP+joOhb4xGO/cVGYTr/1G+nwx8CDH J5TCpMX1jNbLAeftRhIRwDvmj6D/qaX30DnD/91lyQg9JfgLFnroVV/qIXguip0h NxQPrVfXgOf19TXqJ4ISOuDLv70aC8bM -----END CERTIFICATE-----Generated at Wed Nov 5 04:48:03 2025 by rpki-client