$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: R17DvALxXnUiF0yOlbtwgA+n7kN1NJv2heMFKXm4tQ8= Subject key identifier: C9:F3:8E:92:29:FE:0E:C3:35:1D:E3:7F:F1:48:C3:8B:4B:0A:66:D8 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34DD Signing time: Tue 04 Nov 2025 14:53:29 +0000 Manifest this update: Tue 04 Nov 2025 14:53:29 +0000 Manifest next update: Tue 11 Nov 2025 14:53:29 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: lNWkCW7PawaFwR0ycwvHeNFb2ib7HzZuAnV02pt1cos=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: mbjRZ38hTmzNJxu5Qy/hpIsa9dhCLIHmpMwMWiWa89U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13538 (0x34e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Nov 4 14:53:29 2025 GMT Not After : Nov 11 14:53:29 2025 GMT Subject: CN=690a1369-f2c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c8:bc:ca:36:c2:33:c7:75:86:3c:e9:c9:95: 7d:c0:74:fd:b9:38:ec:48:2e:05:e1:74:35:6c:8d: 68:f6:36:3e:4e:68:c1:96:12:ed:7c:60:a3:be:0d: d0:70:53:f0:cc:a3:9b:2c:7e:b3:22:54:06:1e:ad: f3:21:70:72:f9:10:06:29:bd:27:be:48:39:8b:92: 7c:be:3f:54:de:4e:26:d2:02:eb:7d:57:50:4f:ba: 7e:2a:c6:f9:93:0d:6c:88:40:33:ea:a9:43:b7:14: b9:47:c8:de:b7:21:13:1c:21:64:80:30:b9:53:7f: 8d:53:03:80:2e:ca:1c:48:82:f5:f8:b7:70:f8:36: 69:ff:f4:de:90:f1:77:71:b1:c2:aa:87:a2:02:a9: ae:ee:d7:05:37:0f:9e:72:2a:b9:04:0a:86:11:a7: b8:89:64:73:40:94:f2:43:5b:cd:3d:52:50:cd:24: 14:45:7d:09:ca:89:15:47:f4:5b:92:ce:ea:90:86: 2f:7c:0a:8a:23:45:25:f8:9e:35:d9:3c:af:7d:d2: 77:b7:f9:72:8c:47:dc:1a:df:f0:c3:88:49:85:9d: 3a:77:80:f8:26:95:1f:1f:58:61:e2:40:22:1c:72: 50:4e:00:7c:bf:6d:7b:df:f7:3f:7b:56:96:15:48: 78:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F3:8E:92:29:FE:0E:C3:35:1D:E3:7F:F1:48:C3:8B:4B:0A:66:D8 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:7b:52:d6:3e:2c:91:54:48:c3:db:7d:49:2e:36:05:34:da: 1f:c8:23:66:9b:62:fc:08:69:38:f3:2c:46:7c:60:24:92:19: bd:8f:12:9d:69:56:66:65:b4:25:73:e4:74:04:71:f1:0b:15: 00:60:9c:1e:3b:18:1d:b1:b3:63:03:ec:4c:0f:32:58:f6:7d: 53:77:73:18:43:da:90:63:25:0b:d0:61:02:5a:21:ec:30:5d: 86:3b:69:48:5c:60:2e:cb:e8:6e:15:e7:06:1f:6d:04:f3:76: 4d:ab:c0:7c:69:db:f0:fd:25:39:1f:88:db:1c:03:72:29:80: b9:ba:21:b7:70:09:c2:11:7c:d6:73:2c:d7:46:95:2d:d9:7b: 78:c7:43:52:06:4a:8f:27:fe:92:1a:af:8b:76:42:c2:18:cd: eb:ef:33:45:c0:fa:ff:66:20:18:be:1e:df:da:68:3b:73:f7: b3:8b:94:cf:f7:1b:62:41:04:ed:f9:c8:48:87:de:95:3c:ad: 23:17:ff:16:fd:72:d3:c8:be:a5:3d:a6:af:49:05:c8:be:00: 21:b8:8e:23:87:11:79:6d:c9:21:d0:6c:39:cf:98:ef:e7:d3: ca:c2:b0:db:19:65:77:bb:a4:64:9b:8f:36:4e:a0:07:ea:fa: b8:d8:19:3e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUxMTA0MTQ1MzI5WhcNMjUxMTExMTQ1MzI5WjAYMRYwFAYD VQQDEw02OTBhMTM2OS1mMmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzci8yjbCM8d1hjzpyZV9wHT9uTjsSC4F4XQ1bI1o9jY+TmjBlhLtfGCjvg3Q cFPwzKObLH6zIlQGHq3zIXBy+RAGKb0nvkg5i5J8vj9U3k4m0gLrfVdQT7p+Ksb5 kw1siEAz6qlDtxS5R8jetyETHCFkgDC5U3+NUwOALsocSIL1+Ldw+DZp//TekPF3 cbHCqoeiAqmu7tcFNw+eciq5BAqGEae4iWRzQJTyQ1vNPVJQzSQURX0JyokVR/Rb ks7qkIYvfAqKI0Ul+J412TyvfdJ3t/lyjEfcGt/ww4hJhZ06d4D4JpUfH1hh4kAi HHJQTgB8v2173/c/e1aWFUh4FQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMnzjpIp /g7DNR3jf/FIw4tLCmbYMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC1e1LWPiyRVEjD231JLjYFNNofyCNmm2L8CGk48yxGfGAkkhm9jxKd aVZmZbQlc+R0BHHxCxUAYJweOxgdsbNjA+xMDzJY9n1Td3MYQ9qQYyUL0GECWiHs MF2GO2lIXGAuy+huFecGH20E83ZNq8B8advw/SU5H4jbHANyKYC5uiG3cAnCEXzW cyzXRpUt2Xt4x0NSBkqPJ/6SGq+LdkLCGM3r7zNFwPr/ZiAYvh7f2mg7c/ezi5TP 9xtiQQTt+chIh96VPK0jF/8W/XLTyL6lPaavSQXIvgAhuI4jhxF5bckh0Gw5z5jv 59PKwrDbGWV3u6Rkm482TqAH6vq42Bk+ -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:47 2025 by rpki-client