$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: cN7aWjJslVCfu5wd8eMqNcfTA7VQgWJuK1U7t4SguEM= Subject key identifier: 1A:92:BC:AB:5A:8D:1B:92:B8:85:29:C6:52:C8:84:5D:56:59:4B:F6 Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0C0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0C05 Signing time: Tue 04 Nov 2025 18:54:45 +0000 Manifest this update: Tue 04 Nov 2025 18:54:44 +0000 Manifest next update: Tue 11 Nov 2025 18:54:44 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: udfhDWdWUg1dzaut8zb9AsI4I1165Dqpy7CCu0zIUdo=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: bvU87sPankSR4y/0B0suj/VghvgnUkOI9EyFZQQUQyE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:54:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3085 (0xc0d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Nov 4 18:54:44 2025 GMT Not After : Nov 11 18:54:44 2025 GMT Subject: CN=690a4bf5-3fc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:01:a4:19:30:1b:89:1c:f5:36:11:8f:6c:f1: e2:0e:fe:61:43:8f:a2:63:3f:9f:2a:79:b9:6c:3a: d0:c7:09:a8:67:80:f3:0a:52:80:32:78:fb:5d:b6: 1b:fa:d3:25:aa:ae:c8:63:6f:20:39:f7:b1:a7:6c: a0:cb:a2:1f:1d:ce:85:39:b2:5a:b9:b0:6d:7d:c1: 02:79:89:76:1f:e5:bb:b9:d9:a1:71:e5:e9:6b:a8: 73:56:b6:a5:7f:00:3d:11:46:e2:e9:c3:df:41:c2: 83:93:56:d5:88:e2:e2:0e:06:1a:6e:1e:77:fc:97: 1f:d0:5a:4d:21:e9:15:4b:32:24:fd:96:db:b7:30: c7:0a:e1:a6:97:40:41:27:3f:f7:88:39:62:fc:4c: 21:5c:40:2b:bc:54:a1:24:b5:48:e5:00:db:48:d7: fd:a3:e4:b8:36:bb:ae:c6:3c:9a:fe:39:da:83:01: 20:a6:cd:de:e8:45:1a:2a:c4:33:3c:73:37:52:7d: 32:79:52:de:d2:59:e3:e2:bc:2c:ce:76:f1:38:82: fa:4e:5e:80:bc:cc:e6:15:75:e1:6e:f6:cf:29:86: 5b:05:15:bc:f5:e3:2f:11:e4:a4:4a:bd:cb:c6:3a: 38:36:3f:0b:c1:a6:9d:59:63:de:1f:9e:ba:1d:9e: bb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:92:BC:AB:5A:8D:1B:92:B8:85:29:C6:52:C8:84:5D:56:59:4B:F6 X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:3c:36:e9:3b:aa:41:f2:27:87:ab:5f:5e:6d:46:16:a5:14: 7e:24:13:85:36:b4:6d:ef:aa:eb:0b:ca:ba:49:74:fd:c4:a4: 6f:9e:1c:25:ba:ba:b6:f7:15:7a:5c:ce:84:ba:9f:4c:42:9c: 84:17:3a:92:68:8e:3d:b5:0f:ea:19:96:03:d0:35:13:c7:ef: c6:40:83:7c:13:75:67:75:6d:20:fd:0d:e0:9c:80:9f:45:9d: cb:5d:5b:92:4c:86:4e:6f:1a:fd:11:38:ef:5a:27:e4:50:7b: a7:03:9e:28:02:cf:eb:d2:c1:3b:a0:3c:5b:d8:e2:62:e7:23: ef:e1:5d:5e:d9:d6:2e:5d:80:4b:8a:fc:c9:5b:74:81:ba:59: 46:e7:49:e6:e6:a3:5b:d8:ca:f8:60:48:6d:db:43:40:3e:86: 30:71:dd:7a:2c:6d:4a:23:8c:25:e5:e9:57:aa:9d:ce:60:0b: 7b:0c:13:31:18:2d:e9:65:1b:17:05:4f:a2:8c:70:32:33:fc: d4:aa:1e:1d:7a:6f:44:5c:dd:9a:1b:32:14:c1:9c:e2:92:6c: f0:d8:17:fa:9e:32:54:6f:8f:e8:eb:53:06:41:36:1c:8d:2a: 18:15:f8:e8:e3:ab:0d:b4:58:55:60:d6:f8:0c:35:fb:a2:ab: a7:ac:da:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDA0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUxMTA0MTg1NDQ0WhcNMjUxMTExMTg1NDQ0WjAYMRYwFAYD VQQDEw02OTBhNGJmNS0zZmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6gGkGTAbiRz1NhGPbPHiDv5hQ4+iYz+fKnm5bDrQxwmoZ4DzClKAMnj7XbYb +tMlqq7IY28gOfexp2ygy6IfHc6FObJaubBtfcECeYl2H+W7udmhceXpa6hzVral fwA9EUbi6cPfQcKDk1bViOLiDgYabh53/Jcf0FpNIekVSzIk/ZbbtzDHCuGml0BB Jz/3iDli/EwhXEArvFShJLVI5QDbSNf9o+S4Nruuxjya/jnagwEgps3e6EUaKsQz PHM3Un0yeVLe0lnj4rwsznbxOIL6Tl6AvMzmFXXhbvbPKYZbBRW89eMvEeSkSr3L xjo4Nj8LwaadWWPeH566HZ67hwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqSvKta jRuSuIUpxlLIhF1WWUv2MB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOPDbpO6pB8ieHq19ebUYWpRR+JBOFNrRt76rrC8q6SXT9xKRvnhwl urq29xV6XM6Eup9MQpyEFzqSaI49tQ/qGZYD0DUTx+/GQIN8E3VndW0g/Q3gnICf RZ3LXVuSTIZObxr9ETjvWifkUHunA54oAs/r0sE7oDxb2OJi5yPv4V1e2dYuXYBL ivzJW3SBullG50nm5qNb2Mr4YEht20NAPoYwcd16LG1KI4wl5elXqp3OYAt7DBMx GC3pZRsXBU+ijHAyM/zUqh4dem9EXN2aGzIUwZzikmzw2Bf6njJUb4/o61MGQTYc jSoYFfjo46sNtFhVYNb4DDX7oqunrNog -----END CERTIFICATE-----Generated at Wed Nov 5 11:56:23 2025 by rpki-client