$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: xwjR28/qfCHCKzTj+FnCPLRw/5wv8YhaSxzroFfTloo= Subject key identifier: 8C:BB:6D:BE:D3:28:3A:4F:6B:6B:0E:EE:09:B9:99:B3:10:DC:46:F3 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0ADD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0ABE Signing time: Tue 04 Nov 2025 19:36:05 +0000 Manifest this update: Tue 04 Nov 2025 19:36:04 +0000 Manifest next update: Tue 11 Nov 2025 19:36:04 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: BbvnbmJHeI4Makl6l1FlSYkO+xdxR9UQZ2lwUp470QA=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:36:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2781 (0xadd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Nov 4 19:36:04 2025 GMT Not After : Nov 11 19:36:04 2025 GMT Subject: CN=690a55a5-57bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d6:64:7d:a6:6d:e2:b4:86:bf:b0:a3:e3:21: de:ce:f1:e2:c1:5a:39:90:32:a5:17:a7:98:64:7f: 6d:d9:ab:fb:77:d7:cc:98:c0:42:53:d2:39:f0:01: 46:dc:5d:e4:69:5d:3b:fb:85:7f:42:d6:49:ff:fe: 1a:b7:2a:8a:79:56:70:ee:54:5f:47:b5:e0:fd:e9: bc:18:19:b0:90:16:86:e2:c1:65:79:0c:60:61:47: 44:ef:ad:c1:dd:49:15:42:4d:ae:6d:06:73:6a:1d: 4b:a2:d7:85:ee:25:30:08:22:c5:8f:d1:78:2c:5e: 7c:83:44:13:30:d5:33:cd:6d:91:b6:d2:08:26:7b: 12:e7:f2:f0:fd:c6:a0:9a:31:e0:dc:2c:af:c7:0c: 28:bc:ce:7a:94:d4:ed:de:86:59:2a:af:ca:b4:5c: 7a:42:d2:c8:19:28:0b:bf:02:d2:cf:f9:cc:8d:14: 08:e6:ad:36:55:5d:7c:f0:c1:87:66:bc:88:51:e7: 21:9f:19:c7:e9:2f:94:14:79:55:42:f8:35:bd:23: 4c:c0:5a:fe:fc:c5:ab:b1:3a:48:94:39:7d:7e:17: 27:59:6e:2a:49:b5:80:37:ad:b8:ec:49:23:84:b5: f8:d8:55:c7:9e:ad:e6:47:35:87:78:36:64:d5:08: 6c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:6D:BE:D3:28:3A:4F:6B:6B:0E:EE:09:B9:99:B3:10:DC:46:F3 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:54:d9:ce:91:d9:b0:56:b4:0d:34:e3:2b:11:3b:1c:3c:1c: 43:76:01:f6:42:09:11:61:97:4c:1e:9d:c7:0f:e9:0c:76:27: 44:31:58:c2:bf:fb:87:90:cd:23:e4:f7:da:af:8f:43:f6:bf: 66:79:29:89:30:c2:8e:f0:2d:0b:be:4e:e5:91:22:5d:fc:60: d1:d2:20:17:3b:be:0d:49:56:d4:eb:9a:86:f4:96:84:02:5a: 8f:44:df:b0:6e:5c:bb:45:af:5b:67:b9:75:3e:d0:8a:c6:93: f5:81:47:bd:5d:1c:3f:e6:f3:c3:3a:62:ba:5a:0a:dc:d7:cb: f4:41:e2:70:3b:cd:2d:9e:d4:18:c9:f1:26:36:3e:2f:90:2c: 43:77:3b:a7:b3:bc:80:ee:e3:89:84:0a:d2:20:59:15:b6:10: 3d:7b:25:a3:0a:03:d4:af:05:00:33:92:f1:a9:07:40:1c:76: 77:76:10:45:3a:49:5f:52:4a:9d:a8:e8:9e:cb:04:b2:6a:49: d5:ee:a5:eb:ef:03:b8:db:ba:49:6f:09:af:6c:4c:27:20:c8: 1d:0c:b3:f4:71:41:13:13:f4:58:a5:d5:40:b3:dd:36:18:6c: 79:cb:c4:5c:3c:e4:c5:85:b0:dd:a2:03:46:51:ca:9e:5b:25: 59:7e:f9:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUxMTA0MTkzNjA0WhcNMjUxMTExMTkzNjA0WjAYMRYwFAYD VQQDEw02OTBhNTVhNS01N2JmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAstZkfaZt4rSGv7Cj4yHezvHiwVo5kDKlF6eYZH9t2av7d9fMmMBCU9I58AFG 3F3kaV07+4V/QtZJ//4atyqKeVZw7lRfR7Xg/em8GBmwkBaG4sFleQxgYUdE763B 3UkVQk2ubQZzah1LoteF7iUwCCLFj9F4LF58g0QTMNUzzW2RttIIJnsS5/Lw/cag mjHg3CyvxwwovM56lNTt3oZZKq/KtFx6QtLIGSgLvwLSz/nMjRQI5q02VV188MGH ZryIUechnxnH6S+UFHlVQvg1vSNMwFr+/MWrsTpIlDl9fhcnWW4qSbWAN6247Ekj hLX42FXHnq3mRzWHeDZk1QhsFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIy7bb7T KDpPa2sO7gm5mbMQ3EbzMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzVNnOkdmwVrQNNOMrETscPBxDdgH2QgkRYZdMHp3HD+kMdidEMVjC v/uHkM0j5Pfar49D9r9meSmJMMKO8C0Lvk7lkSJd/GDR0iAXO74NSVbU65qG9JaE AlqPRN+wbly7Ra9bZ7l1PtCKxpP1gUe9XRw/5vPDOmK6Wgrc18v0QeJwO80tntQY yfEmNj4vkCxDdzuns7yA7uOJhArSIFkVthA9eyWjCgPUrwUAM5LxqQdAHHZ3dhBF OklfUkqdqOieywSyaknV7qXr7wO427pJbwmvbEwnIMgdDLP0cUETE/RYpdVAs902 GGx5y8RcPOTFhbDdogNGUcqeWyVZfvmn -----END CERTIFICATE-----Generated at Wed Nov 5 17:08:39 2025 by rpki-client