$ rpki-client -vvf rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft File: PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft (raw, json) Hash identifier: YRFZ9Q2TOXvgnZWYM5jsLtKeALe1zYG7LqnPcaB+uoM= Subject key identifier: 9A:13:EA:F6:C6:13:AD:55:83:93:05:E2:DA:FF:C2:8A:27:16:E4:A0 Authority key identifier: 3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 Certificate issuer: /CN=A918D663/serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft Manifest number: 6A Signing time: Wed 05 Nov 2025 07:10:23 +0000 Manifest this update: Wed 05 Nov 2025 07:10:23 +0000 Manifest next update: Wed 12 Nov 2025 07:10:23 +0000 Files and hashes: 1: PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl (hash: uy55DtfTQGppPfi9/1EH7vewTXyNAiFb+m/wiSh6hfA=) 2: 8BACF000172811F0B074151EC4F9AE02.roa (hash: ZKoMpxvl06JDEHPwPvY04s64aILLwwH0kpQN+XzmWw8=) 3: 8C215ED6172811F0B074151EC4F9AE02.roa (hash: QaVxitn1fI1JNxNdOxFRN5URfiNEZoLOemGjg0zo0Tg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:10:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918D663, serialNumber=3CAAEAF1B0D4BF6317AE4F1E546379BFF346CFD3 Validity Not Before: Nov 5 07:10:23 2025 GMT Not After : Nov 12 07:10:23 2025 GMT Subject: CN=690af85f-417f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ce:f3:c6:d2:cb:7e:11:32:bc:78:52:87:1f: 14:43:a2:e0:18:33:ee:7f:ad:09:4a:21:b8:af:8a: 9b:56:88:86:ed:9c:cb:01:04:32:fc:f0:ba:e4:69: 1c:f2:7d:04:eb:22:91:36:1d:0b:a1:28:2e:91:51: ca:60:72:a6:34:c2:d1:fd:b8:25:71:ba:a0:80:bb: 98:fe:6d:93:1a:76:93:26:64:32:19:b2:6c:90:6f: 0e:52:64:99:f3:c7:3d:a1:e3:0f:f8:72:0f:fc:87: 09:2d:dd:88:84:c2:70:10:40:5c:9a:86:bf:13:71: f9:28:78:4f:55:da:da:ba:7c:d0:1a:c0:fb:a3:c3: 7f:e9:22:16:b2:9e:51:4d:f7:db:6d:e6:d8:d4:bb: e1:43:a1:ab:d3:c0:bf:83:b0:31:fd:67:0e:31:04: 6d:68:01:e7:a8:6d:bc:e6:10:ef:71:75:65:35:e8: 97:26:de:76:2a:f7:38:7b:66:ae:ea:e4:37:4e:a3: f6:12:a6:e5:f9:00:92:35:d0:8b:5f:2c:83:a7:e5: 82:46:ee:61:ff:67:68:5d:5a:af:c1:19:27:65:fd: aa:0a:eb:a5:6c:eb:11:64:ba:10:67:41:5a:d4:e5: 7b:be:10:51:9a:a6:5d:a2:83:7b:a8:b8:05:15:e5: 6c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:13:EA:F6:C6:13:AD:55:83:93:05:E2:DA:FF:C2:8A:27:16:E4:A0 X509v3 Authority Key Identifier: keyid:3C:AA:EA:F1:B0:D4:BF:63:17:AE:4F:1E:54:63:79:BF:F3:46:CF:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PKrq8bDUv2MXrk8eVGN5v_NGz9M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D663/7AC9679E172011F0B742234EC4F9AE02/PKrq8bDUv2MXrk8eVGN5v_NGz9M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 10:fb:a6:16:ca:31:00:51:3c:a6:66:70:83:29:6e:c5:25:a2: 98:7e:b0:e1:7e:2c:8e:ba:ec:4a:7a:cd:ec:4d:79:c9:31:ba: 1a:86:f9:cd:fd:91:a5:69:63:c7:14:81:36:1f:1c:62:27:eb: 33:01:cc:d8:34:59:b6:cc:4c:1d:f2:7b:4f:91:3f:b5:a4:8a: 38:4a:6f:11:0b:88:be:4a:69:fa:0a:35:44:10:a4:3e:10:d1: 44:fe:0c:81:d3:89:81:23:2b:be:d1:fd:7e:48:4c:11:53:e6: 43:80:f1:28:0b:c4:9a:9b:33:13:18:1a:aa:02:2a:50:fa:19: 1e:42:23:41:08:5c:4d:e1:59:c9:94:8c:98:8b:98:4f:37:c7: d3:82:55:bb:83:a1:58:68:f7:87:d9:b4:d6:cf:4e:54:d8:06: 88:a3:d9:af:ab:47:44:f2:f2:db:37:54:e9:e5:e0:7f:a5:fc: 67:68:cb:61:b5:b0:64:59:9a:9d:a0:a4:af:4f:00:9b:ef:17: c9:30:90:20:9f:71:aa:c0:1f:8f:34:37:fa:6d:50:26:69:06: f2:5e:50:6b:4e:57:c6:a2:8c:7e:15:c8:65:ec:fe:03:59:0d: 1f:76:0f:2d:fc:b3:3c:ac:d7:07:f5:88:9d:6c:4e:38:63:f1: 18:55:a2:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RDY2MzExMC8GA1UEBRMoM0NBQUVBRjFCMEQ0QkY2MzE3QUU0RjFFNTQ2Mzc5QkZG MzQ2Q0ZEMzAeFw0yNTExMDUwNzEwMjNaFw0yNTExMTIwNzEwMjNaMBgxFjAUBgNV BAMTDTY5MGFmODVmLTQxN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCvzvPG0st+ETK8eFKHHxRDouAYM+5/rQlKIbiviptWiIbtnMsBBDL88LrkaRzy fQTrIpE2HQuhKC6RUcpgcqY0wtH9uCVxuqCAu5j+bZMadpMmZDIZsmyQbw5SZJnz xz2h4w/4cg/8hwkt3YiEwnAQQFyahr8TcfkoeE9V2tq6fNAawPujw3/pIhaynlFN 99tt5tjUu+FDoavTwL+DsDH9Zw4xBG1oAeeobbzmEO9xdWU16Jcm3nYq9zh7Zq7q 5DdOo/YSpuX5AJI10ItfLIOn5YJG7mH/Z2hdWq/BGSdl/aoK66Vs6xFkuhBnQVrU 5Xu+EFGapl2ig3uouAUV5WydAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUmhPq9sYT rVWDkwXi2v/CiicW5KAwHwYDVR0jBBgwFoAUPKrq8bDUv2MXrk8eVGN5v/NGz9Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThENjYzLzdBQzk2NzlFMTcy MDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJNWHJrOGVWR041dl9OR3o5 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUEtycThiRFV2Mk1Ycms4ZVZHTjV2X05HejlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThE NjYzLzdBQzk2NzlFMTcyMDExRjBCNzQyMjM0RUM0RjlBRTAyL1BLcnE4YkRVdjJN WHJrOGVWR041dl9OR3o5TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABD7phbKMQBRPKZmcIMpbsUloph+sOF+LI667Ep6zexNeckxuhqG+c39 kaVpY8cUgTYfHGIn6zMBzNg0WbbMTB3ye0+RP7WkijhKbxELiL5KafoKNUQQpD4Q 0UT+DIHTiYEjK77R/X5ITBFT5kOA8SgLxJqbMxMYGqoCKlD6GR5CI0EIXE3hWcmU jJiLmE83x9OCVbuDoVho94fZtNbPTlTYBoij2a+rR0Ty8ts3VOnl4H+l/Gdoy2G1 sGRZmp2gpK9PAJvvF8kwkCCfcarAH480N/ptUCZpBvJeUGtOV8aijH4VyGXs/gNZ DR92Dy38szys1wf1iJ1sTjhj8RhVogg= -----END CERTIFICATE-----Generated at Wed Nov 5 21:59:08 2025 by rpki-client