$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: yWRv3ZL0m3cHIY6J0m/lPfTPaFtvgvZaEOf4N3bvLKs= Subject key identifier: 7E:CF:0D:2E:93:B1:49:09:B9:93:1F:B6:A3:CD:78:08:7E:43:5A:AD Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0447 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 043C Signing time: Wed 05 Nov 2025 00:21:10 +0000 Manifest this update: Wed 05 Nov 2025 00:21:10 +0000 Manifest next update: Wed 12 Nov 2025 00:21:10 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: 72waZbeT3DatfrGvNuQwmySsqNbWY107nDc1qRlzJVM=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1095 (0x447) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Nov 5 00:21:10 2025 GMT Not After : Nov 12 00:21:10 2025 GMT Subject: CN=690a9876-b3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:7b:18:28:4a:68:97:2d:c0:ff:af:bd:64:3c: a9:d1:a1:3c:86:d6:5f:e6:8e:3c:de:cd:e6:94:62: 92:82:b2:40:de:03:e0:94:ce:2f:60:09:34:b6:ed: 7c:60:3f:08:81:17:ce:a7:66:eb:b8:66:4f:c8:fa: cc:80:3e:9c:58:be:a7:2c:18:5c:b8:8c:4d:f2:d8: 16:c4:cc:23:27:87:de:79:d1:33:bf:5c:9f:78:c3: af:fc:24:d7:60:51:67:bb:31:00:15:5d:20:35:87: d5:9b:a7:c3:eb:a6:24:09:bd:8f:c6:0d:93:a5:16: e8:5f:45:73:f7:bc:84:47:78:30:4d:f6:a5:07:54: 39:f5:57:7c:8a:21:d3:aa:96:17:c8:d6:c7:e2:4a: fe:81:95:0a:ab:80:f4:b1:84:9c:4c:4c:7a:f0:c2: 58:14:a0:3f:cf:20:67:9e:7f:a0:f5:cc:da:fe:8e: 0a:76:b4:55:25:8d:45:87:34:38:49:ae:49:ab:41: b5:e4:a1:d6:87:52:84:34:67:6a:e5:6f:2f:a5:1b: 06:df:d0:a4:ae:b0:f6:db:cc:b6:bf:48:93:53:c4: a7:c5:36:f6:19:2d:01:8a:a7:5f:01:f4:56:a7:d8: 9e:8e:d1:63:36:32:1a:60:a7:b4:77:47:65:3e:83: de:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:CF:0D:2E:93:B1:49:09:B9:93:1F:B6:A3:CD:78:08:7E:43:5A:AD X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:ca:7e:d1:42:49:9e:9f:2c:44:f6:fa:99:e1:63:0a:c4:8a: 84:f0:9b:e0:de:ca:3a:56:4d:cc:2a:4c:b0:33:ca:ea:39:d4: a7:05:a7:ec:af:ac:41:1f:74:10:9b:fc:1a:74:18:19:21:b1: 16:53:9c:1c:b8:1f:1b:cb:d2:37:08:5a:c1:a1:76:2a:bc:5b: 5b:58:d6:ae:03:48:84:ca:1a:44:e6:48:ad:d7:f8:36:a3:85: fc:86:e9:0e:ad:20:72:9f:8b:7a:82:bf:e7:ca:d7:66:5a:90: 62:4c:ac:93:9e:35:11:03:e0:7a:4f:5c:fb:c8:eb:67:e5:92: 0f:f8:4c:ac:ea:1a:4f:a3:1c:21:e2:9d:1f:cd:53:b5:39:b5: d4:3b:9c:a6:4a:8a:d6:59:9c:8b:bf:4d:11:31:f9:7d:fc:fd: c1:2f:1f:cc:d6:88:89:03:63:17:b6:ee:f3:40:0c:ef:92:96: f4:7d:95:c0:c1:b1:ab:d9:f9:da:11:e8:7e:06:ba:10:5c:c3: 46:97:e4:16:dd:66:24:59:e4:56:33:7d:9f:1c:a2:18:dd:d3: d5:cc:96:a6:e1:c9:86:36:79:ad:c0:21:eb:ad:cc:b9:67:02: 62:b7:77:85:3b:cd:52:8f:08:1e:fe:60:73:30:f5:2d:49:cf: 80:17:52:ec -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUxMTA1MDAyMTEwWhcNMjUxMTEyMDAyMTEwWjAYMRYwFAYD VQQDEw02OTBhOTg3Ni1iM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9nsYKEpoly3A/6+9ZDyp0aE8htZf5o483s3mlGKSgrJA3gPglM4vYAk0tu18 YD8IgRfOp2bruGZPyPrMgD6cWL6nLBhcuIxN8tgWxMwjJ4feedEzv1yfeMOv/CTX YFFnuzEAFV0gNYfVm6fD66YkCb2Pxg2TpRboX0Vz97yER3gwTfalB1Q59Vd8iiHT qpYXyNbH4kr+gZUKq4D0sYScTEx68MJYFKA/zyBnnn+g9cza/o4KdrRVJY1FhzQ4 Sa5Jq0G15KHWh1KENGdq5W8vpRsG39CkrrD228y2v0iTU8SnxTb2GS0BiqdfAfRW p9iejtFjNjIaYKe0d0dlPoPeXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFH7PDS6T sUkJuZMftqPNeAh+Q1qtMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRyn7RQkmenyxE9vqZ4WMKxIqE8Jvg3so6Vk3MKkywM8rqOdSnBafs r6xBH3QQm/wadBgZIbEWU5wcuB8by9I3CFrBoXYqvFtbWNauA0iEyhpE5kit1/g2 o4X8hukOrSByn4t6gr/nytdmWpBiTKyTnjURA+B6T1z7yOtn5ZIP+Eys6hpPoxwh 4p0fzVO1ObXUO5ymSorWWZyLv00RMfl9/P3BLx/M1oiJA2MXtu7zQAzvkpb0fZXA wbGr2fnaEeh+BroQXMNGl+QW3WYkWeRWM32fHKIY3dPVzJam4cmGNnmtwCHrrcy5 ZwJit3eFO81Sjwge/mBzMPUtSc+AF1Ls -----END CERTIFICATE-----Generated at Wed Nov 5 03:53:33 2025 by rpki-client