$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: 1Iky6/GY0KC/useDc3xGBYFY6wZdi4B/44+nxxjwcHQ= Subject key identifier: FF:72:26:26:CD:7C:99:3D:E0:C4:CD:80:79:5A:25:4A:A0:3C:9D:B0 Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 34D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 34D6 Signing time: Tue 04 Nov 2025 14:53:19 +0000 Manifest this update: Tue 04 Nov 2025 14:53:18 +0000 Manifest next update: Tue 11 Nov 2025 14:53:18 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: 8ErsH/oHE/B3VIdIKFZuQTpowDr6QC1H51fEmZz7sdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13526 (0x34d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Validity Not Before: Nov 4 14:53:18 2025 GMT Not After : Nov 11 14:53:18 2025 GMT Subject: CN=690a135e-4a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:76:8d:fc:c2:e5:16:2d:9b:f0:37:85:1c:50: 73:75:ee:5a:a9:43:72:7c:31:4e:13:77:bd:37:f1: c0:bf:17:9e:d6:98:93:ff:39:67:03:03:e2:fb:d1: d1:29:aa:56:7b:f0:11:c8:05:b8:fa:17:2d:0b:11: d6:e1:bb:65:e9:88:33:ba:e0:44:e0:d9:73:48:30: 12:79:af:9f:32:3c:28:44:a3:ac:c6:2b:9f:e1:53: 13:37:d2:cc:6a:33:47:75:bc:04:af:39:d6:31:1e: 10:36:a4:80:ec:b4:d6:f9:35:aa:93:43:a2:69:dc: 92:af:4a:71:ee:b8:76:7c:f4:30:d7:13:87:34:56: c9:5e:26:86:e1:1d:d9:5d:77:29:d3:4f:0e:19:c2: fe:4f:ae:dc:f7:d5:01:af:54:a7:68:f6:11:8a:71: ce:7a:81:1f:e5:40:7b:95:51:a8:c9:33:13:35:75: 7a:e6:7d:11:9f:22:3c:89:25:2d:b0:e3:47:e7:e7: 05:62:40:4d:17:53:37:c9:2d:9a:60:56:9d:4c:ab: 8a:b1:d2:f7:09:12:fe:0c:1c:84:8d:39:53:3a:b2: bc:3e:ea:d0:5d:f0:1e:f3:17:03:dc:99:dd:cf:07: d1:6b:d7:9e:dd:37:e3:7a:1b:c0:2f:ea:be:a2:6a: f2:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:72:26:26:CD:7C:99:3D:E0:C4:CD:80:79:5A:25:4A:A0:3C:9D:B0 X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:06:8d:c2:ba:6f:0d:d0:fa:35:6a:c3:8a:d6:4c:4d:5a:5f: 6b:6f:73:d0:2f:05:54:a2:96:7b:0d:e9:e8:e0:d8:c3:34:2c: 00:e2:10:f7:86:91:60:89:3b:1d:9b:00:be:b1:db:19:74:ff: cd:b4:3a:1d:d5:a9:cd:89:dc:43:79:e4:64:23:7b:c5:36:70: 6d:0f:6f:39:37:c8:d5:76:59:5e:e1:bd:07:5a:2b:20:b8:48: 03:58:26:a8:a0:8f:11:e7:21:8d:78:e5:ed:5d:74:49:5a:b2: e7:a0:e0:fb:00:d3:94:e6:af:9f:34:34:26:bf:2a:bf:48:34: 5a:d4:f0:7b:bc:fc:de:d8:df:26:6a:92:23:d5:cf:87:d0:b9: a9:81:91:23:91:cf:d3:c6:74:cf:b7:66:6f:22:b4:d7:d4:b6: f4:46:15:70:67:fa:97:0c:3f:b9:bc:62:9b:7f:09:76:3d:67: e4:b5:98:43:49:2d:1d:bc:4a:a5:88:a7:b6:5b:5d:4c:08:3e: 9a:8b:55:e0:ec:5a:00:e9:35:05:9a:35:99:e3:85:03:0c:ba: 46:ed:c6:2a:59:3c:66:dc:41:09:e6:ba:39:56:15:c3:0d:49: c9:39:d4:90:1c:68:9d:45:11:4b:65:aa:5d:51:94:45:29:f5: e7:f2:ee:31 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjUxMTA0MTQ1MzE4WhcNMjUxMTExMTQ1MzE4WjAYMRYwFAYD VQQDEw02OTBhMTM1ZS00YTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3aN/MLlFi2b8DeFHFBzde5aqUNyfDFOE3e9N/HAvxee1piT/zlnAwPi+9HR KapWe/ARyAW4+hctCxHW4btl6YgzuuBE4NlzSDASea+fMjwoRKOsxiuf4VMTN9LM ajNHdbwErznWMR4QNqSA7LTW+TWqk0OiadySr0px7rh2fPQw1xOHNFbJXiaG4R3Z XXcp008OGcL+T67c99UBr1SnaPYRinHOeoEf5UB7lVGoyTMTNXV65n0RnyI8iSUt sONH5+cFYkBNF1M3yS2aYFadTKuKsdL3CRL+DByEjTlTOrK8PurQXfAe8xcD3Jnd zwfRa9ee3TfjehvAL+q+omryMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP9yJibN fJk94MTNgHlaJUqgPJ2wMB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBBo3Cum8N0Po1asOK1kxNWl9rb3PQLwVUopZ7Deno4NjDNCwA4hD3 hpFgiTsdmwC+sdsZdP/NtDod1anNidxDeeRkI3vFNnBtD285N8jVdlle4b0HWisg uEgDWCaooI8R5yGNeOXtXXRJWrLnoOD7ANOU5q+fNDQmvyq/SDRa1PB7vPze2N8m apIj1c+H0LmpgZEjkc/TxnTPt2ZvIrTX1Lb0RhVwZ/qXDD+5vGKbfwl2PWfktZhD SS0dvEqliKe2W11MCD6ai1Xg7FoA6TUFmjWZ44UDDLpG7cYqWTxm3EEJ5ro5VhXD DUnJOdSQHGidRRFLZapdUZRFKfXn8u4x -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:32 2025 by rpki-client