$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json) Hash identifier: 6gBHJFhcAVhdoVAD+0lSeqy6I8+ESWd//2UNKKXaHr0= Subject key identifier: BE:0B:9B:5C:BD:95:12:B2:2C:4A:8A:A1:9A:17:D8:EC:F5:2D:5D:C2 Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: 1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft Manifest number: 1E Signing time: Wed 05 Nov 2025 07:58:35 +0000 Manifest this update: Wed 05 Nov 2025 07:58:34 +0000 Manifest next update: Wed 12 Nov 2025 07:58:34 +0000 Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: bEQ2VIjJoTCuSpJyEZXqKFpJ+UlgCYzvR2B3gQ9A9Wk=) 2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: FS6hEH/j55OHJQ+TqNcRwQCoVjVrvVyoMfAtx5CJ3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Nov 5 07:58:34 2025 GMT Not After : Nov 12 07:58:34 2025 GMT Subject: CN=690b03ab-15bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2c:e9:e3:58:12:88:ae:4d:33:ef:38:1b:e9: f1:22:8f:87:63:ad:82:41:f9:b1:1d:0e:a8:9f:1a: 23:fd:12:15:f8:de:62:80:1a:b8:3b:d7:f5:fb:16: bd:99:c5:98:c5:b1:f9:f5:5e:57:51:5a:98:48:b0: 70:34:a6:1a:b0:a5:8f:1a:29:36:e4:4b:a0:bc:83: f9:cb:10:b7:68:1d:a1:3b:6c:0c:2b:a7:bc:be:28: d5:21:80:07:a6:c8:fd:b0:2f:76:db:8c:8b:f8:6e: cf:d6:76:8a:8e:fd:86:d3:ca:ba:55:45:54:93:f1: 3b:f6:20:23:4a:df:c2:80:0b:90:74:a7:f4:0e:7c: 1e:b7:1b:8a:d3:04:d3:92:cb:8a:2d:b1:2e:44:46: b7:27:cd:89:05:a6:34:fc:6a:a7:f3:0c:cd:f6:7b: a7:6b:c5:33:7a:c8:9b:7c:22:73:4e:2a:63:b0:34: 92:f2:19:2d:32:c4:d5:44:86:8a:d1:17:0d:e1:55: e8:c0:96:22:9d:a0:8a:37:4c:74:46:ea:44:bf:e0: 13:75:37:1e:6a:ea:ff:d5:2a:c1:bb:46:e9:7f:e5: 12:2b:ae:22:e1:d1:b3:a9:14:d2:0e:16:33:d6:48: 38:ba:f9:3b:a6:ca:9b:b3:66:b8:00:9c:83:5c:cc: fa:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0B:9B:5C:BD:95:12:B2:2C:4A:8A:A1:9A:17:D8:EC:F5:2D:5D:C2 X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e4:6b:8d:b7:4f:a0:bf:ee:67:bd:a3:64:b3:3d:d6:5d:ef: 83:e9:a0:c2:8d:91:9c:a3:84:f9:11:da:d3:81:a7:68:5f:97: 3a:d4:29:a7:33:c2:67:e9:23:2a:fa:f0:2a:de:0a:04:5c:a1: 5e:e4:49:c7:2c:07:37:81:8e:e8:37:41:26:e7:bf:22:ed:7b: c9:fa:16:51:af:bb:f6:db:af:c5:b6:05:9b:02:e3:1a:de:a6: 7c:d7:92:59:a2:3b:0d:0b:79:a1:f8:30:2c:ae:ca:ed:9e:4e: 77:7a:28:db:4e:c3:2f:73:b0:01:57:2d:e7:6c:55:30:36:a2: 97:e6:d3:4f:09:90:18:b3:24:96:b2:b1:7f:e8:12:c0:2a:66: 87:39:03:c4:82:52:0c:43:77:5b:6b:b5:3a:9b:fb:ac:39:d7: e6:89:53:7b:64:b8:fe:88:f9:f5:f7:8a:c9:b7:5b:59:61:0b: 5a:f2:ad:f1:a1:71:b9:c6:54:34:76:85:44:81:b8:41:cb:d1: 9d:ca:3a:ae:4a:4e:6a:c7:38:0e:77:8f:a1:24:b3:3a:1f:0d: c7:00:b3:98:ac:8d:be:62:94:ae:b9:e6:4a:e0:ca:68:80:13: 88:1a:c2:ba:e0:b7:a5:3f:67:fc:81:1b:7e:9f:a4:7f:6d:50: e1:26:b8:8e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoMjdBMEEyRERGMzVDMTk3RDRGQzI2MjkwQzI5NTdENDk2 OENGMTU4RjAeFw0yNTExMDUwNzU4MzRaFw0yNTExMTIwNzU4MzRaMBgxFjAUBgNV BAMTDTY5MGIwM2FiLTE1YmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiLOnjWBKIrk0z7zgb6fEij4djrYJB+bEdDqifGiP9EhX43mKAGrg71/X7Fr2Z xZjFsfn1XldRWphIsHA0phqwpY8aKTbkS6C8g/nLELdoHaE7bAwrp7y+KNUhgAem yP2wL3bbjIv4bs/WdoqO/YbTyrpVRVST8Tv2ICNK38KAC5B0p/QOfB63G4rTBNOS y4otsS5ERrcnzYkFpjT8aqfzDM32e6drxTN6yJt8InNOKmOwNJLyGS0yxNVEhorR Fw3hVejAliKdoIo3THRG6kS/4BN1Nx5q6v/VKsG7Rul/5RIrriLh0bOpFNIOFjPW SDi6+TumypuzZrgAnINczPqDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvgubXL2V ErIsSoqhmhfY7PUtXcIwHwYDVR0jBBgwFoAUJ6Ci3fNcGX1PwmKQwpV9SWjPFY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0E2QzU0MEY2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjZDaTNmTmNHWDFQd21LUXdwVjlTV2pQRlk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0E2QzU0MEY2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gx UHdtS1F3cFY5U1dqUEZZOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE7ka423T6C/7me9o2SzPdZd74PpoMKNkZyjhPkR2tOBp2hflzrUKacz wmfpIyr68CreCgRcoV7kSccsBzeBjug3QSbnvyLte8n6FlGvu/bbr8W2BZsC4xre pnzXklmiOw0LeaH4MCyuyu2eTnd6KNtOwy9zsAFXLedsVTA2opfm008JkBizJJay sX/oEsAqZoc5A8SCUgxDd1trtTqb+6w51+aJU3tkuP6I+fX3ism3W1lhC1ryrfGh cbnGVDR2hUSBuEHL0Z3KOq5KTmrHOA53j6EkszofDccAs5isjb5ilK655krgymiA E4gawrrgt6U/Z/yBG36fpH9tUOEmuI4= -----END CERTIFICATE-----Generated at Wed Nov 5 19:38:06 2025 by rpki-client