$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft File: X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json) Hash identifier: qJSPkLFIk/od0MddCSOR0vTlVzdQJMWl2lbPy6C87mU= Subject key identifier: 03:11:FA:C0:C6:DC:FB:70:CC:F8:CC:44:BE:13:C6:C7:4E:C4:47:A5 Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 Certificate issuer: /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Certificate serial: 06C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft Manifest number: 06C3 Signing time: Sun 02 Nov 2025 22:05:40 +0000 Manifest this update: Sun 02 Nov 2025 22:05:39 +0000 Manifest next update: Sun 09 Nov 2025 22:05:39 +0000 Files and hashes: 1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: c+Ixhbk/KxjnlXjk7T+2x4kTlgpnx6xksVKFApfZqIM=) 2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: QJpUBqNgws3PM1RQ/YpxcOLuHjSbFEKESqjd/lkWkNM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:05:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1735 (0x6c7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8 Validity Not Before: Nov 2 22:05:39 2025 GMT Not After : Nov 9 22:05:39 2025 GMT Subject: CN=6907d5b4-e685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:65:e7:3e:7f:9a:3e:02:be:9e:38:ad:be:81: eb:e4:cb:32:95:f5:a9:4c:fb:c6:00:0e:0a:c1:41: f7:c2:76:35:f1:4a:53:b0:f2:de:3b:de:cd:a9:6e: c5:9b:1f:95:79:1d:60:e8:c4:87:ce:97:53:e0:7b: a2:b4:0b:0b:eb:a2:08:78:d2:0b:8b:8b:5a:66:f2: 9e:79:bd:ce:1d:69:2c:de:f9:4f:c2:ac:7f:0c:d3: 85:ac:e7:05:88:78:30:f3:b4:a2:79:f9:2c:32:e2: 8a:a7:d5:46:1a:ab:bd:ff:a5:d7:0e:6c:8e:15:59: 2f:c9:47:0d:f6:55:de:27:85:c2:7e:5d:fd:c9:a8: 08:41:1a:90:76:f9:6e:89:bd:54:8b:d7:88:94:26: cc:8b:b1:37:cb:9c:cf:24:58:46:a8:90:c4:6e:04: 21:70:63:06:1c:23:73:f9:75:66:57:da:cd:5b:06: 95:32:4a:ce:86:db:e1:66:f0:b5:76:f6:23:98:bc: 20:d3:3c:57:6a:7e:e5:50:69:7d:b4:9a:71:d3:1d: 32:4f:2a:6f:6f:89:41:18:61:be:3d:ba:a9:b3:50: c2:d9:f0:27:7e:49:10:a5:10:8f:f6:15:83:32:18: 95:68:8f:1c:df:47:eb:00:75:d9:86:08:d8:b0:8d: 58:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:11:FA:C0:C6:DC:FB:70:CC:F8:CC:44:BE:13:C6:C7:4E:C4:47:A5 X509v3 Authority Key Identifier: keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:08:1b:3a:63:29:73:e4:08:67:ea:04:50:0c:61:18:a6: ab:ab:20:cd:5d:98:bd:d6:ce:98:52:18:66:3b:53:c1:83:af: f4:49:61:40:27:21:21:03:32:04:9c:88:e2:06:36:3c:fa:2f: d9:ff:6d:32:20:c9:79:f4:f4:dc:93:45:fc:9c:21:09:68:77: 1f:1e:36:d7:03:84:a0:ec:6d:dc:1f:69:29:05:a9:42:f6:92: b2:11:4c:09:0f:d8:87:c8:86:bb:40:c6:a6:ca:75:61:11:85: c2:81:12:cb:a4:e0:0b:20:d6:c9:f0:be:e8:a1:be:29:0a:2c: 37:8b:a1:54:3f:6d:89:f3:23:7c:3c:85:1a:36:ce:d4:5e:bb: 86:34:28:87:e8:ae:c5:46:f6:56:81:e2:7b:e5:96:40:5e:0e: 9f:eb:8c:27:f0:fb:40:68:41:c8:82:82:8c:87:41:7f:2e:65: 4a:69:8e:be:69:9a:47:a6:5b:06:0a:2b:91:24:74:73:be:b0: 33:14:a2:43:1d:fe:1c:62:fb:e6:39:4e:48:fd:33:93:65:55: 7b:01:fc:18:ff:fe:08:7b:9a:51:a3:80:ad:77:a4:87:ff:75: 89:51:32:ea:b8:87:0b:a9:c6:19:7a:1d:13:62:5b:06:00:6a: 46:e8:59:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBscwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzNDRTYxMTAvBgNVBAUTKDVGQUQxQjM5QkU0NTU1MjYyMjA2RDE5RjVBNjY5QkM3 QjY5RjcyQzgwHhcNMjUxMTAyMjIwNTM5WhcNMjUxMTA5MjIwNTM5WjAYMRYwFAYD VQQDEw02OTA3ZDViNC1lNjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnWXnPn+aPgK+njitvoHr5MsylfWpTPvGAA4KwUH3wnY18UpTsPLeO97NqW7F mx+VeR1g6MSHzpdT4HuitAsL66IIeNILi4taZvKeeb3OHWks3vlPwqx/DNOFrOcF iHgw87SiefksMuKKp9VGGqu9/6XXDmyOFVkvyUcN9lXeJ4XCfl39yagIQRqQdvlu ib1Ui9eIlCbMi7E3y5zPJFhGqJDEbgQhcGMGHCNz+XVmV9rNWwaVMkrOhtvhZvC1 dvYjmLwg0zxXan7lUGl9tJpx0x0yTypvb4lBGGG+Pbqps1DC2fAnfkkQpRCP9hWD MhiVaI8c30frAHXZhgjYsI1YPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMR+sDG 3PtwzPjMRL4TxsdOxEelMB8GA1UdIwQYMBaAFF+tGzm+RVUmIgbRn1pmm8e2n3LI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3M0NFNi8wM0EwMTc4NDdC RDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZTWWlCdEdmV21hYng3YWZj c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1g2MGJPYjVGVlNZaUJ0R2ZXbWFieDdhZmNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 M0NFNi8wM0EwMTc4NDdCRDAxMUVCODVBNjY5ODBDNEY5QUUwMi9YNjBiT2I1RlZT WWlCdEdmV21hYng3YWZjc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCiEQgbOmMpc+QIZ+oEUAxhGKarqyDNXZi91s6YUhhmO1PBg6/0SWFA JyEhAzIEnIjiBjY8+i/Z/20yIMl59PTck0X8nCEJaHcfHjbXA4Sg7G3cH2kpBalC 9pKyEUwJD9iHyIa7QMamynVhEYXCgRLLpOALINbJ8L7oob4pCiw3i6FUP22J8yN8 PIUaNs7UXruGNCiH6K7FRvZWgeJ75ZZAXg6f64wn8PtAaEHIgoKMh0F/LmVKaY6+ aZpHplsGCiuRJHRzvrAzFKJDHf4cYvvmOU5I/TOTZVV7AfwY//4Ie5pRo4Ctd6SH /3WJUTLquIcLqcYZeh0TYlsGAGpG6FnB -----END CERTIFICATE-----Generated at Tue Nov 4 19:06:05 2025 by rpki-client