$ rpki-client -vvf rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft File: 6VE3HeTcsQAlSE0vFP3NosZFW5E.mft (raw, json) Hash identifier: krVChikRaw113wW9vk1N3amyU1z8FZL1QBgs2gCgEq4= Subject key identifier: 48:80:F2:4A:4E:1C:C3:C8:60:41:0D:D9:09:9A:94:3E:03:0B:2F:39 Authority key identifier: E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 Certificate issuer: /CN=A9195FCB/serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Certificate serial: 07B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft Manifest number: 07A8 Signing time: Tue 04 Nov 2025 21:29:22 +0000 Manifest this update: Tue 04 Nov 2025 21:29:21 +0000 Manifest next update: Tue 11 Nov 2025 21:29:21 +0000 Files and hashes: 1: 6VE3HeTcsQAlSE0vFP3NosZFW5E.crl (hash: fmmjEluRSp1xEi/Ifore+SsdokEQscEynZNOrE89tB0=) 2: A3E98D0E22A911EB96014E82C4F9AE02.roa (hash: sWE9LUdizataLAzmIhBLPntdutpqhdEosVPOQbEaHm0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 21:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1969 (0x7b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9195FCB, serialNumber=E951371DE4DCB10025484D2F14FDCDA2C6455B91 Validity Not Before: Nov 4 21:29:21 2025 GMT Not After : Nov 11 21:29:21 2025 GMT Subject: CN=690a7031-2abe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:db:ec:ca:12:1c:e6:86:3d:da:7e:43:f0: 39:d0:e4:b3:78:d3:aa:1b:f1:70:ca:8a:ee:f9:b8: b5:c2:b1:94:77:26:a9:ef:dd:36:71:98:7d:d6:cd: c3:47:20:5f:66:b9:54:c0:0e:c8:be:90:0d:46:bb: ac:54:c5:b2:d4:3a:01:86:67:ba:73:10:d9:87:5c: b6:4b:0d:92:a3:14:aa:6f:e5:1a:3a:8f:6a:1f:c6: 1b:e6:8d:78:3b:7f:a2:2d:71:d7:2d:72:18:d6:9b: 80:26:71:b4:24:56:e7:f0:a5:a2:a9:d5:a6:59:bd: dd:ea:6f:e8:ba:a8:bd:99:1a:b6:cc:e7:f5:67:9c: fb:be:76:3d:10:cb:09:07:f8:7b:82:70:44:61:61: f0:c8:3e:8e:03:11:c5:1e:c3:92:9b:38:98:9f:ea: 2d:a7:5e:b0:0b:d4:76:ff:31:3a:6a:1a:d1:3f:7b: 71:1d:12:94:34:c8:6f:5e:49:90:3f:b4:7d:2a:dc: 8c:cd:7d:f4:82:9e:f9:99:fb:85:09:08:0c:5f:cb: a8:0e:aa:7a:dc:cb:82:1b:0f:1b:ff:1a:ac:f5:92: 10:a6:55:32:25:4f:83:e1:07:9c:63:12:21:a2:46: 29:44:ef:ff:24:a8:e7:fc:b0:28:21:f8:22:5d:ac: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:80:F2:4A:4E:1C:C3:C8:60:41:0D:D9:09:9A:94:3E:03:0B:2F:39 X509v3 Authority Key Identifier: keyid:E9:51:37:1D:E4:DC:B1:00:25:48:4D:2F:14:FD:CD:A2:C6:45:5B:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6VE3HeTcsQAlSE0vFP3NosZFW5E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195FCB/880E634022A711EBB406CE7CC4F9AE02/6VE3HeTcsQAlSE0vFP3NosZFW5E.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:db:ab:9e:00:51:90:af:10:e5:1b:c9:0a:8e:b1:ab:90:7e: 41:7d:43:09:c9:e5:47:c9:3a:f0:a7:11:22:4a:da:e9:1a:4d: 6d:9e:7c:c4:90:0a:07:9a:0f:53:3f:88:07:40:86:f6:09:1c: 83:50:03:db:65:31:77:16:d9:7b:09:d4:23:39:ff:72:bd:6b: b6:b3:38:07:af:43:d1:b6:13:b1:27:0d:0d:63:36:43:36:64: 87:fb:fa:c2:84:40:92:ee:ff:87:ad:f0:b2:54:1b:54:43:a9: 4e:7a:37:17:cb:cc:1b:48:26:4d:23:a8:02:6d:cf:bc:99:22: 7e:a8:68:d0:b9:f8:50:dc:bf:53:95:b4:b6:8c:62:e1:fb:2b: e7:27:b7:8c:01:30:97:a6:44:62:20:41:6a:f0:e0:22:00:d7: e8:d0:22:d9:87:1d:17:84:86:31:64:54:d0:b1:96:65:2d:07: 33:a4:90:61:f6:77:5f:2d:08:4a:45:f5:96:ae:b9:12:00:c0: 7f:b9:61:60:82:fb:af:01:ea:16:0d:a2:ff:4f:42:c8:39:ad: f7:58:1d:d0:8a:e6:81:0c:77:ce:7a:6e:7f:e7:45:ff:50:2c: 11:4c:92:d5:e6:0a:c5:64:4c:f5:f2:fc:4e:1d:6b:e4:b1:18: bd:9d:7c:10 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB7EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTVGQ0IxMTAvBgNVBAUTKEU5NTEzNzFERTREQ0IxMDAyNTQ4NEQyRjE0RkRDREEy QzY0NTVCOTEwHhcNMjUxMTA0MjEyOTIxWhcNMjUxMTExMjEyOTIxWjAYMRYwFAYD VQQDEw02OTBhNzAzMS0yYWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsxLb7MoSHOaGPdp+Q/A50OSzeNOqG/Fwyoru+bi1wrGUdyap7902cZh91s3D RyBfZrlUwA7IvpANRrusVMWy1DoBhme6cxDZh1y2Sw2SoxSqb+UaOo9qH8Yb5o14 O3+iLXHXLXIY1puAJnG0JFbn8KWiqdWmWb3d6m/ouqi9mRq2zOf1Z5z7vnY9EMsJ B/h7gnBEYWHwyD6OAxHFHsOSmziYn+otp16wC9R2/zE6ahrRP3txHRKUNMhvXkmQ P7R9KtyMzX30gp75mfuFCQgMX8uoDqp63MuCGw8b/xqs9ZIQplUyJU+D4QecYxIh okYpRO//JKjn/LAoIfgiXawwGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEiA8kpO HMPIYEEN2QmalD4DCy85MB8GA1UdIwQYMBaAFOlRNx3k3LEAJUhNLxT9zaLGRVuR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NUZDQi84ODBFNjM0MDIy QTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NRQWxTRTB2RlAzTm9zWkZX NUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZWRTNIZVRjc1FBbFNFMHZGUDNOb3NaRlc1RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NUZDQi84ODBFNjM0MDIyQTcxMUVCQjQwNkNFN0NDNEY5QUUwMi82VkUzSGVUY3NR QWxTRTB2RlAzTm9zWkZXNUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC526ueAFGQrxDlG8kKjrGrkH5BfUMJyeVHyTrwpxEiStrpGk1tnnzE kAoHmg9TP4gHQIb2CRyDUAPbZTF3Ftl7CdQjOf9yvWu2szgHr0PRthOxJw0NYzZD NmSH+/rChECS7v+HrfCyVBtUQ6lOejcXy8wbSCZNI6gCbc+8mSJ+qGjQufhQ3L9T lbS2jGLh+yvnJ7eMATCXpkRiIEFq8OAiANfo0CLZhx0XhIYxZFTQsZZlLQczpJBh 9ndfLQhKRfWWrrkSAMB/uWFggvuvAeoWDaL/T0LIOa33WB3QiuaBDHfOem5/50X/ UCwRTJLV5grFZEz18vxOHWvksRi9nXwQ -----END CERTIFICATE-----Generated at Wed Nov 5 05:48:04 2025 by rpki-client