$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft File: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json) Hash identifier: bvA8TOajon7kMBebU3UFoikV1bKv4GIJp1ManLh0CQw= Subject key identifier: 8F:4D:D9:35:BF:D2:FD:AB:6C:8A:2F:27:37:79:5C:72:19:C4:81:C9 Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE Certificate issuer: /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Certificate serial: CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft Manifest number: C7 Signing time: Wed 05 Nov 2025 06:04:51 +0000 Manifest this update: Wed 05 Nov 2025 06:04:51 +0000 Manifest next update: Wed 12 Nov 2025 06:04:51 +0000 Files and hashes: 1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: bRS1bN2kikUjKx11QlC+0ldv+r1t1y4HVMA6cepRSig=) 2: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: YBvvTG8CEcUFzimDCpf2NnR5CR5UGFVI9gkQ+sgXEds=) 3: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: ArlGMl3wEFoKu6XnIzHTkLugUTq0moKGL5QIiW5qRPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Validity Not Before: Nov 5 06:04:51 2025 GMT Not After : Nov 12 06:04:51 2025 GMT Subject: CN=690ae903-c856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:36:db:e9:91:15:7e:05:70:0b:b5:af:83:ce: 65:ed:65:42:aa:27:74:e6:70:ef:1a:48:6e:0b:10: 85:62:38:af:0b:7b:83:dd:32:53:95:e5:31:9e:a0: 2d:c2:c8:38:19:d6:2f:81:45:ae:16:54:97:ff:67: 01:64:04:ce:e9:ca:25:48:e0:69:44:13:84:de:bb: 78:c8:1e:47:d7:b6:2c:03:db:e7:1c:c2:0b:8c:f1: a5:f1:11:1f:85:d6:f6:62:c3:af:30:5e:67:29:cf: 4a:43:e4:e3:2f:56:bf:0c:dd:26:12:fa:5c:63:27: 24:37:42:a8:ff:33:9d:f7:a4:2c:c3:c9:d7:fc:4c: 67:ec:2a:c2:b6:4f:9f:a0:59:59:42:7f:57:38:c7: 62:3d:32:c1:8d:38:f2:bf:86:63:41:d1:c0:ab:50: ea:23:77:6b:8e:2c:92:b1:48:ec:4b:75:6e:d6:7d: f5:14:bc:49:24:0c:a2:13:e3:4a:63:d6:05:2a:8b: 5a:65:fb:59:1f:e0:52:17:3f:4a:43:66:07:fe:89: 1d:15:fd:c1:36:e5:1d:bc:83:38:80:bd:de:bd:d5: 9e:22:a7:54:58:d7:0a:58:e4:73:c7:e9:f8:b5:45: 6a:a8:b4:5d:1c:14:c0:76:06:27:5f:f6:2c:37:c5: 35:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:4D:D9:35:BF:D2:FD:AB:6C:8A:2F:27:37:79:5C:72:19:C4:81:C9 X509v3 Authority Key Identifier: keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:02:c6:4c:8f:3d:8b:a5:71:48:dc:a9:d9:0e:bf:11:91:d0: 97:19:65:df:73:30:a0:72:46:65:97:5a:5a:09:51:5b:00:b0: 2c:cc:11:ee:e9:b3:14:12:be:a7:bb:dd:fd:4b:d1:9d:74:76: 5c:13:c6:15:48:6b:9b:92:26:7a:a1:86:e4:0a:5a:06:2d:56: b2:6a:cc:c1:2e:8e:39:2c:43:4d:b6:77:26:bc:37:42:81:08: 82:d5:27:3d:fe:cb:9d:86:f8:67:12:05:ba:85:5c:7e:00:aa: 78:d0:19:b8:bc:49:80:38:db:24:ce:4b:bd:74:f2:02:e2:cf: 2f:58:bd:b0:e3:f0:e9:03:de:b6:99:f6:a6:54:98:8c:3e:e0: c7:38:05:f8:a9:9a:6a:0f:e5:46:f1:10:85:08:04:f5:f5:48: db:30:8c:04:96:83:c5:ff:2c:d4:04:85:98:ad:9b:71:29:8c: 1e:bc:f7:c0:06:52:6f:e6:e7:90:27:2d:e7:2c:0d:33:aa:0d: 8d:91:b1:fe:14:1b:2d:9d:7f:3a:29:66:e5:ce:c2:f1:08:7d: 50:f6:0c:73:12:86:1c:4a:f6:72:e0:c1:c4:19:d8:fc:d2:72: 86:29:06:d0:e6:39:e5:40:04:dc:92:1c:6c:5d:9e:8f:21:0e: f5:08:b1:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5NDQxMTAvBgNVBAUTKDBCQTA3QThCRDUzQzJFMUZGRkY0QTI0NTA1QzQzNDA0 NTQ5NTA5RkUwHhcNMjUxMTA1MDYwNDUxWhcNMjUxMTEyMDYwNDUxWjAYMRYwFAYD VQQDEw02OTBhZTkwMy1jODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDbb6ZEVfgVwC7Wvg85l7WVCqid05nDvGkhuCxCFYjivC3uD3TJTleUxnqAt wsg4GdYvgUWuFlSX/2cBZATO6colSOBpRBOE3rt4yB5H17YsA9vnHMILjPGl8REf hdb2YsOvMF5nKc9KQ+TjL1a/DN0mEvpcYyckN0Ko/zOd96Qsw8nX/Exn7CrCtk+f oFlZQn9XOMdiPTLBjTjyv4ZjQdHAq1DqI3drjiySsUjsS3Vu1n31FLxJJAyiE+NK Y9YFKotaZftZH+BSFz9KQ2YH/okdFf3BNuUdvIM4gL3evdWeIqdUWNcKWORzx+n4 tUVqqLRdHBTAdgYnX/YsN8U1uwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI9N2TW/ 0v2rbIovJzd5XHIZxIHJMB8GA1UdIwQYMBaAFAugeovVPC4f//SiRQXENARUlQn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzk0NC85NTBDM0VCQzkx RjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExoX185S0pGQmNRMEJGU1ZD ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2QjZpOVU4TGhfXzlLSkZCY1EwQkZTVkNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzk0NC85NTBDM0VCQzkxRjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExo X185S0pGQmNRMEJGU1ZDZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzAsZMjz2LpXFI3KnZDr8RkdCXGWXfczCgckZll1paCVFbALAszBHu 6bMUEr6nu939S9GddHZcE8YVSGubkiZ6oYbkCloGLVayaszBLo45LENNtncmvDdC gQiC1Sc9/sudhvhnEgW6hVx+AKp40Bm4vEmAONskzku9dPIC4s8vWL2w4/DpA962 mfamVJiMPuDHOAX4qZpqD+VG8RCFCAT19UjbMIwEloPF/yzUBIWYrZtxKYwevPfA BlJv5ueQJy3nLA0zqg2NkbH+FBstnX86KWblzsLxCH1Q9gxzEoYcSvZy4MHEGdj8 0nKGKQbQ5jnlQATckhxsXZ6PIQ71CLE9 -----END CERTIFICATE-----Generated at Wed Nov 5 12:24:43 2025 by rpki-client