$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: hClh7Uhi2e+ZfksaCnarB+HjCc+dBIcS4cok7N7z2XI= Subject key identifier: FC:97:5B:2C:0D:89:8C:B6:3F:70:DB:62:2B:AE:CC:01:23:34:E7:3C Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D51 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D46 Signing time: Tue 04 Nov 2025 18:07:23 +0000 Manifest this update: Tue 04 Nov 2025 18:07:23 +0000 Manifest next update: Tue 11 Nov 2025 18:07:23 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: cXJfMLZZsoWuWhUHBa0uKh3568Ond6rPqTBUYBfEy3c=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:07:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3409 (0xd51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Nov 4 18:07:23 2025 GMT Not After : Nov 11 18:07:23 2025 GMT Subject: CN=690a40db-9316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ac:84:ff:7a:09:2b:9f:b7:80:20:2a:1b:a1: a7:c1:e9:ca:88:45:68:24:99:f6:b3:94:ea:c8:df: ec:e5:79:1f:6a:ab:6a:7f:a5:30:b2:f3:23:47:93: 9d:07:00:38:96:63:a8:d2:ea:0d:a5:08:2d:e3:eb: a9:f3:93:b4:32:6a:21:22:da:29:f2:7b:5a:82:99: 54:bb:86:df:98:5d:31:d8:f5:43:f5:7c:36:ff:58: cb:e9:24:b7:df:41:21:f9:c3:4a:54:c7:6a:70:91: 8f:67:5f:23:5f:82:50:77:eb:90:54:dd:99:05:a2: fd:6a:7c:b8:55:7b:52:db:27:9e:c3:92:49:8c:30: 01:83:ed:2a:73:52:61:55:4f:ce:20:91:6e:2d:4b: 90:42:e0:3d:62:ed:61:80:3e:e9:88:d1:6a:ee:21: 5f:bc:d4:78:b4:6d:b4:59:22:c0:9e:46:dc:87:30: 5e:39:ba:f6:24:4b:87:8c:15:48:91:94:84:b8:44: ef:6e:7e:2c:92:27:b4:6e:85:7e:f3:c8:5e:66:80: ab:c5:ce:47:a8:88:9b:d4:2a:f6:bc:56:f2:3c:34: f0:7a:41:93:c9:18:2b:7a:04:3e:d7:a0:29:a0:40: 31:c5:e8:a5:db:d3:d5:a3:22:e0:36:19:4f:6c:31: 3d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:97:5B:2C:0D:89:8C:B6:3F:70:DB:62:2B:AE:CC:01:23:34:E7:3C X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 36:cd:63:a2:2a:45:3e:09:d1:38:fc:59:5b:02:77:53:33:11: f8:8d:c9:8e:13:2f:ba:fd:04:d7:66:c6:e4:c9:e4:33:cb:0a: 4a:54:2d:1b:49:27:2f:d0:62:f5:03:83:e3:3a:ed:80:29:b8: f8:4f:d1:2b:81:cd:06:04:1e:d5:01:d9:43:6d:95:1b:c1:f8: 07:0e:6c:88:cd:26:26:e2:e5:31:07:3d:57:b2:32:15:28:89: c4:f3:3b:86:96:58:49:9f:62:b7:8c:73:44:50:4b:e7:b6:6d: af:13:e4:51:6c:c1:07:4d:f6:34:70:03:7e:e3:38:64:35:29: 1c:0b:77:b9:eb:96:03:bf:60:ae:21:49:4f:17:31:f5:ec:18: f5:7f:a9:28:72:70:03:48:ee:95:8b:23:2b:58:0c:81:68:83: 4c:6a:2e:c7:03:f2:35:64:50:29:5c:ef:f7:55:ce:53:96:ee: 96:3f:47:1d:12:a1:05:3f:bf:ad:45:f5:ff:49:ed:6e:e0:1e: 7e:d3:a4:1c:d5:1f:1b:31:63:fd:81:66:50:b2:81:5a:af:87: b0:84:9a:ec:4a:4e:a2:ed:d9:02:52:5f:5e:eb:96:67:8d:16: 72:63:70:2f:37:28:e9:1c:97:33:a9:5c:e4:5a:5e:5d:87:c3: a4:09:f0:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUxMTA0MTgwNzIzWhcNMjUxMTExMTgwNzIzWjAYMRYwFAYD VQQDEw02OTBhNDBkYi05MzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt6yE/3oJK5+3gCAqG6GnwenKiEVoJJn2s5TqyN/s5Xkfaqtqf6UwsvMjR5Od BwA4lmOo0uoNpQgt4+up85O0MmohItop8ntagplUu4bfmF0x2PVD9Xw2/1jL6SS3 30Eh+cNKVMdqcJGPZ18jX4JQd+uQVN2ZBaL9any4VXtS2yeew5JJjDABg+0qc1Jh VU/OIJFuLUuQQuA9Yu1hgD7piNFq7iFfvNR4tG20WSLAnkbchzBeObr2JEuHjBVI kZSEuETvbn4skie0boV+88heZoCrxc5HqIib1Cr2vFbyPDTwekGTyRgregQ+16Ap oEAxxeil29PVoyLgNhlPbDE9cwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPyXWywN iYy2P3DbYiuuzAEjNOc8MB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA2zWOiKkU+CdE4/FlbAndTMxH4jcmOEy+6/QTXZsbkyeQzywpKVC0b SScv0GL1A4PjOu2AKbj4T9Ergc0GBB7VAdlDbZUbwfgHDmyIzSYm4uUxBz1XsjIV KInE8zuGllhJn2K3jHNEUEvntm2vE+RRbMEHTfY0cAN+4zhkNSkcC3e565YDv2Cu IUlPFzH17Bj1f6kocnADSO6ViyMrWAyBaINMai7HA/I1ZFApXO/3Vc5Tlu6WP0cd EqEFP7+tRfX/Se1u4B5+06Qc1R8bMWP9gWZQsoFar4ewhJrsSk6i7dkCUl9e65Zn jRZyY3AvNyjpHJczqVzkWl5dh8OkCfDU -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:58 2025 by rpki-client