$ rpki-client -vvf rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft File: 6yX--P-P_HFEQDc2nK2vr2zYklI.mft (raw, json) Hash identifier: 6rkUjKS3qWmnDMNwtFy/r+shVcYnG3R8XDmi+s3fbPQ= Subject key identifier: 86:B3:67:3A:23:2B:29:60:3A:1C:9B:13:51:4E:8C:B2:44:B0:6C:87 Authority key identifier: EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 Certificate issuer: /CN=A9185456/serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Certificate serial: 01E8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft Manifest number: 01E4 Signing time: Mon 03 Nov 2025 02:39:34 +0000 Manifest this update: Mon 03 Nov 2025 02:39:34 +0000 Manifest next update: Mon 10 Nov 2025 02:39:34 +0000 Files and hashes: 1: 6yX--P-P_HFEQDc2nK2vr2zYklI.crl (hash: 2PmrGOjJZ5tceGMJ0Z8YBcpbw4skeKxvr7KsNGiv31o=) 2: 7E156BA0D46511EDBFC00C87C4F9AE02.roa (hash: FRRfK4hKeTw9lsBnsIsSbgs7rIXetSWQ2flb/qNJQ7k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:39:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 488 (0x1e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185456, serialNumber=EB25FEF8FF8FFC71444037369CADAFAF6CD89252 Validity Not Before: Nov 3 02:39:34 2025 GMT Not After : Nov 10 02:39:34 2025 GMT Subject: CN=690815e6-2350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:10:b0:b7:86:bd:0d:d8:e9:6f:7f:01:73:18: a8:b8:fd:8a:76:7c:18:37:6c:85:00:68:39:18:83: 8a:36:d8:40:53:4a:53:f4:9f:6d:27:b2:6b:34:e0: 89:16:71:66:89:02:1c:12:cc:ff:28:f3:68:c0:01: 1c:2f:ef:44:1a:3f:9d:9f:fd:fd:d9:33:84:d1:0c: 83:fb:45:71:05:70:46:75:df:ea:42:2d:0f:ab:f2: f5:02:b5:b3:31:0c:48:85:2a:c8:ae:fc:43:3c:fc: 3d:05:e1:35:df:7b:36:d9:ba:71:84:31:19:f2:0c: fe:23:c7:21:d0:b6:e9:03:64:83:7f:0a:c7:8f:fd: a5:67:a5:fd:bf:fe:f4:ad:66:cc:72:a6:4a:9f:0f: e1:bf:8f:dc:33:d9:31:8e:b4:04:d4:f0:44:86:e4: bd:d6:8a:91:49:01:3b:8e:06:d7:98:dd:84:4c:8c: 96:65:e8:b0:74:a2:3b:bb:c3:f9:9a:62:4e:32:e5: 58:55:ee:3b:71:e6:1d:b9:2c:c1:24:7d:45:8d:b4: a1:70:d1:e1:6d:16:c5:6a:d7:34:a8:4a:96:bd:ba: 2f:c6:24:61:05:57:ea:72:24:49:f2:7c:75:e2:96: a2:56:f6:0c:24:41:a1:f9:21:4b:ef:d7:21:bd:81: ac:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:B3:67:3A:23:2B:29:60:3A:1C:9B:13:51:4E:8C:B2:44:B0:6C:87 X509v3 Authority Key Identifier: keyid:EB:25:FE:F8:FF:8F:FC:71:44:40:37:36:9C:AD:AF:AF:6C:D8:92:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6yX--P-P_HFEQDc2nK2vr2zYklI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185456/052E2C48D46211EDA7DC6E51C4F9AE02/6yX--P-P_HFEQDc2nK2vr2zYklI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:b5:de:30:36:c5:f0:f2:71:6b:b3:5e:19:01:f9:e7:f2:fa: 0d:42:92:95:cb:3b:49:a3:92:ca:f6:a6:8d:a6:42:f0:6f:bf: 79:96:90:0e:d5:c6:4f:50:3d:53:43:98:e6:59:77:5b:85:bc: 37:b1:5f:33:28:47:df:6b:26:3b:fa:92:8a:31:fa:79:ec:18: a1:59:7d:e4:2e:59:fb:a3:e9:5f:8c:90:03:42:26:51:b2:27: f5:0b:55:fe:40:3c:b8:1a:4f:4a:33:8f:b8:99:95:36:29:a4: 17:a5:06:d5:94:e8:2b:83:46:04:07:61:c9:6d:f7:89:6e:53: 50:f4:e0:f2:9e:6a:77:d3:71:8a:56:fd:4b:39:26:f8:bb:e9: ff:c9:fa:a0:de:64:f0:9b:e7:77:e1:a9:0c:2d:da:16:0d:75: 10:7f:10:6c:d5:88:5a:ac:52:82:69:03:ca:c0:b5:65:f8:98: 72:30:df:7d:7b:96:2e:82:05:a1:9d:16:e8:10:2f:12:93:8b: 73:53:b4:fa:4a:9d:72:7d:51:bb:8f:50:be:7b:89:69:9e:8f: f6:fa:c2:a2:67:d3:f1:5c:9e:e2:ee:82:05:26:d0:f0:b4:41: e1:d1:9f:dc:99:5f:8a:4d:03:88:ba:36:ac:21:e2:ab:11:72: 26:2e:4b:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODU0NTYxMTAvBgNVBAUTKEVCMjVGRUY4RkY4RkZDNzE0NDQwMzczNjlDQURBRkFG NkNEODkyNTIwHhcNMjUxMTAzMDIzOTM0WhcNMjUxMTEwMDIzOTM0WjAYMRYwFAYD VQQDEw02OTA4MTVlNi0yMzUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzBCwt4a9Ddjpb38BcxiouP2KdnwYN2yFAGg5GIOKNthAU0pT9J9tJ7JrNOCJ FnFmiQIcEsz/KPNowAEcL+9EGj+dn/392TOE0QyD+0VxBXBGdd/qQi0Pq/L1ArWz MQxIhSrIrvxDPPw9BeE133s22bpxhDEZ8gz+I8ch0LbpA2SDfwrHj/2lZ6X9v/70 rWbMcqZKnw/hv4/cM9kxjrQE1PBEhuS91oqRSQE7jgbXmN2ETIyWZeiwdKI7u8P5 mmJOMuVYVe47ceYduSzBJH1FjbShcNHhbRbFatc0qEqWvbovxiRhBVfqciRJ8nx1 4paiVvYMJEGh+SFL79chvYGsaQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIazZzoj KylgOhybE1FOjLJEsGyHMB8GA1UdIwQYMBaAFOsl/vj/j/xxREA3Npytr69s2JJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTQ1Ni8wNTJFMkM0OEQ0 NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9IRkVRRGMybksydnIyellr bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5WC0tUC1QX0hGRVFEYzJuSzJ2cjJ6WWtsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NTQ1Ni8wNTJFMkM0OEQ0NjIxMUVEQTdEQzZFNTFDNEY5QUUwMi82eVgtLVAtUF9I RkVRRGMybksydnIyellrbEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDItd4wNsXw8nFrs14ZAfnn8voNQpKVyztJo5LK9qaNpkLwb795lpAO 1cZPUD1TQ5jmWXdbhbw3sV8zKEffayY7+pKKMfp57BihWX3kLln7o+lfjJADQiZR sif1C1X+QDy4Gk9KM4+4mZU2KaQXpQbVlOgrg0YEB2HJbfeJblNQ9ODynmp303GK Vv1LOSb4u+n/yfqg3mTwm+d34akMLdoWDXUQfxBs1YharFKCaQPKwLVl+JhyMN99 e5YuggWhnRboEC8Sk4tzU7T6Sp1yfVG7j1C+e4lpno/2+sKiZ9PxXJ7i7oIFJtDw tEHh0Z/cmV+KTQOIujasIeKrEXImLktr -----END CERTIFICATE-----Generated at Tue Nov 4 21:34:56 2025 by rpki-client