$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: nojlIa32FMQJ1/LldqL+1h2CmoTNqXVKb1Wwldq7mE0= Subject key identifier: 73:34:0F:C4:05:6B:67:2C:59:49:DA:16:B5:02:36:B2:B5:90:1F:21 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 023F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 0236 Signing time: Wed 05 Nov 2025 02:06:41 +0000 Manifest this update: Wed 05 Nov 2025 02:06:40 +0000 Manifest next update: Wed 12 Nov 2025 02:06:40 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: yhCXQOWwTKCHE5hx2xj6xdB+fHJJZh5L19cDHmt3XWY=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 575 (0x23f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Nov 5 02:06:40 2025 GMT Not After : Nov 12 02:06:40 2025 GMT Subject: CN=690ab130-b218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:d5:12:c8:61:75:8e:ec:6a:7b:2f:26:c6: 7f:6f:ab:28:cd:ee:e8:18:41:6b:e1:5f:48:60:c3: e9:ae:7c:3f:22:50:c3:fc:70:42:5e:2c:08:e2:b1: 9a:69:d8:9c:c7:ed:08:69:48:89:1d:04:c4:53:de: e9:51:9a:ba:e1:33:ee:65:a7:dc:50:6b:41:6e:36: 0b:b6:35:e9:82:11:00:10:d1:82:ae:6b:f1:93:1a: 8a:fe:b9:7b:de:5a:73:85:cc:d3:9b:ad:9d:c5:0f: d4:8c:de:d3:21:f2:8d:d6:b8:58:f0:ca:ea:24:6c: f6:64:9e:fd:d6:a9:c2:de:55:e8:d2:20:50:b4:69: 32:a4:38:05:f2:a4:29:2a:74:78:8c:aa:3e:33:84: 8e:5a:b8:77:21:27:c0:d7:cf:18:d6:48:99:25:88: fa:bf:7d:18:37:87:24:99:69:ff:a1:3c:fb:64:8d: 2e:66:d1:5f:d2:35:51:73:ac:c3:67:ea:9c:e7:14: b7:43:7b:36:3b:c8:e8:ff:4d:d8:60:7f:34:0a:59: 9e:7a:67:65:74:fa:57:f8:b0:25:9b:b8:c4:cc:12: ed:c3:c0:b7:bf:82:2c:90:3a:57:d6:2b:fb:1c:f0: 1c:f9:81:9e:8b:cc:91:1f:43:a0:62:ef:1c:46:5a: 25:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:34:0F:C4:05:6B:67:2C:59:49:DA:16:B5:02:36:B2:B5:90:1F:21 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a1:74:fd:24:7e:cc:29:44:e6:a3:a3:c3:bf:78:e7:b4:2b:3c: 55:64:f0:a8:4c:f2:7c:c3:0b:80:ee:11:be:21:49:3b:9c:09: cd:a2:64:9a:d6:a0:3f:6d:c4:bd:ba:d0:12:a7:0c:73:05:e3: e8:de:fc:32:e6:a5:90:b7:97:d8:09:8b:fe:a1:db:c8:83:2a: 5c:fb:82:e2:8e:a6:99:4d:bd:e7:4c:03:9c:2f:5d:6c:c8:78: 21:be:49:22:3a:51:a3:84:75:45:44:d2:6b:70:bf:dd:53:e2: 07:02:95:3c:fd:76:10:28:c1:8b:bb:13:df:7c:8a:b7:32:5a: fc:41:ea:0b:f7:e3:62:ca:1f:c0:e7:16:9b:e0:29:79:42:7e: 9d:77:35:dd:0a:3c:e4:0a:70:bc:7b:92:ab:04:95:08:cb:b5: 52:d5:d3:68:b8:75:27:82:90:e9:d6:6e:49:38:fe:84:dc:b1: 8e:79:a2:c0:9e:ec:9a:4e:d8:02:e1:55:60:51:e6:8b:da:f7: 3f:8a:1b:16:9a:10:bc:cd:05:04:ad:45:2a:4b:49:70:32:c4: ab:97:e1:bc:b4:fe:00:f2:77:67:97:f5:fa:ec:2e:5f:3c:c7: 9f:48:41:3e:c5:35:c4:c8:73:f2:9e:09:c7:8d:e8:64:a9:50: ed:34:65:3d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUxMTA1MDIwNjQwWhcNMjUxMTEyMDIwNjQwWjAYMRYwFAYD VQQDEw02OTBhYjEzMC1iMjE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyErVEshhdY7sansvJsZ/b6soze7oGEFr4V9IYMPprnw/IlDD/HBCXiwI4rGa adicx+0IaUiJHQTEU97pUZq64TPuZafcUGtBbjYLtjXpghEAENGCrmvxkxqK/rl7 3lpzhczTm62dxQ/UjN7TIfKN1rhY8MrqJGz2ZJ791qnC3lXo0iBQtGkypDgF8qQp KnR4jKo+M4SOWrh3ISfA188Y1kiZJYj6v30YN4ckmWn/oTz7ZI0uZtFf0jVRc6zD Z+qc5xS3Q3s2O8jo/03YYH80ClmeemdldPpX+LAlm7jEzBLtw8C3v4IskDpX1iv7 HPAc+YGei8yRH0OgYu8cRlolawIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHM0D8QF a2csWUnaFrUCNrK1kB8hMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQChdP0kfswpROajo8O/eOe0KzxVZPCoTPJ8wwuA7hG+IUk7nAnNomSa 1qA/bcS9utASpwxzBePo3vwy5qWQt5fYCYv+odvIgypc+4LijqaZTb3nTAOcL11s yHghvkkiOlGjhHVFRNJrcL/dU+IHApU8/XYQKMGLuxPffIq3Mlr8QeoL9+Niyh/A 5xab4Cl5Qn6ddzXdCjzkCnC8e5KrBJUIy7VS1dNouHUngpDp1m5JOP6E3LGOeaLA nuyaTtgC4VVgUeaL2vc/ihsWmhC8zQUErUUqS0lwMsSrl+G8tP4A8ndnl/X67C5f PMefSEE+xTXEyHPyngnHjehkqVDtNGU9 -----END CERTIFICATE-----Generated at Wed Nov 5 19:23:53 2025 by rpki-client