$ rpki-client -vvf rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft File: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft (raw, json) Hash identifier: oPnCoQe0n73gZlgaDJYB3aRlprZ3LnDubY30Tu7BYH4= Subject key identifier: A0:A4:A7:FF:BE:1E:BE:23:1C:93:26:A7:BC:4E:39:4D:1E:BC:AC:FA Authority key identifier: EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 Certificate issuer: /CN=A919A1BE/serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Certificate serial: 0B2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft Manifest number: 0B24 Signing time: Tue 04 Nov 2025 19:23:22 +0000 Manifest this update: Tue 04 Nov 2025 19:23:22 +0000 Manifest next update: Tue 11 Nov 2025 19:23:22 +0000 Files and hashes: 1: 6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl (hash: ZP2giSQOfts2QyiXpXikgvRR2reF0ITtuHWFSOC8GZ8=) 2: 0FFE5282122811F0AC9B4112C4F9AE02.roa (hash: qP7+uhy7LyLUv4jd3g7zWSe0a9FYblcgiMmuUDc4eAs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2861 (0xb2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A1BE, serialNumber=EAC271D6BDDD57C3319E71C811D85047534C4730 Validity Not Before: Nov 4 19:23:22 2025 GMT Not After : Nov 11 19:23:22 2025 GMT Subject: CN=690a52aa-534a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0a:3d:70:0d:32:26:2b:f5:31:ee:bc:7e:08: 4e:95:81:a3:53:99:49:38:a8:c5:65:e4:de:3a:5b: 9a:eb:be:d7:44:c6:e8:f6:ff:a1:44:05:8a:4b:63: 45:e6:55:f4:33:ba:ae:ab:53:55:ed:d3:46:b8:75: 47:f0:85:30:3e:46:1b:15:2a:e1:15:9d:c2:1d:bf: cf:d1:68:41:97:7d:14:df:f6:ad:21:95:fa:53:93: 1c:c8:b0:28:06:8f:37:df:de:4e:65:49:5d:ba:3b: 2a:70:84:51:11:e3:bf:c5:84:d5:74:96:56:a9:c3: 9d:c3:62:85:ca:cb:9e:8c:43:4c:b0:e7:d8:8a:98: 83:53:3a:24:7c:ce:65:e0:b7:e1:20:1a:17:7a:77: f2:3b:20:72:4d:88:ee:b0:29:13:49:29:29:96:42: e0:b0:ab:17:08:fb:2e:7b:18:f9:e6:f9:0c:9e:d3: ce:f2:5c:51:1b:87:56:70:f6:85:43:bf:6d:01:23: 59:f5:60:33:47:2e:b6:00:de:c5:24:b7:b3:07:ba: ce:81:9d:f4:db:7b:ae:58:b6:51:bf:95:08:99:d7: c1:fe:8d:9f:3b:6a:0e:f4:20:24:c5:95:17:ee:6c: 48:b0:45:0c:5c:28:08:07:bb:7a:3b:9e:db:ec:0f: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:A7:FF:BE:1E:BE:23:1C:93:26:A7:BC:4E:39:4D:1E:BC:AC:FA X509v3 Authority Key Identifier: keyid:EA:C2:71:D6:BD:DD:57:C3:31:9E:71:C8:11:D8:50:47:53:4C:47:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sJx1r3dV8MxnnHIEdhQR1NMRzA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A1BE/7008477E4D6011EAAB635374C4F9AE02/6sJx1r3dV8MxnnHIEdhQR1NMRzA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:a1:ee:9e:e9:a7:2a:c0:64:ed:7c:1d:13:b4:34:e1:20:42: f7:ca:b2:65:0d:97:0f:77:7d:9d:09:b0:3c:67:b8:25:cf:ed: df:c0:65:f1:03:cc:28:56:ec:7e:5c:3d:83:01:68:0e:64:19: 72:be:27:be:24:b7:2c:8b:fe:b2:e7:e7:6b:44:f8:37:36:bb: 72:9f:ee:ca:d7:d4:60:1d:8a:5f:20:4b:75:2f:38:2c:15:4a: a8:44:4e:1f:a2:e7:7e:d9:31:d2:18:19:79:c9:d4:a3:61:de: f2:74:fa:bb:b1:e0:18:5f:56:a7:c9:bf:00:cf:4a:25:45:5b: 55:98:2e:88:f8:05:1f:54:fd:e1:0e:bb:6b:86:66:de:97:16: 05:ed:b4:9c:1f:fc:65:ac:7b:83:14:f6:ff:43:c9:78:c9:d9: 17:39:01:5a:a8:5d:41:ea:c9:45:4c:77:b1:fe:62:59:bd:cd: 0a:74:4a:c0:67:33:0d:49:a5:e0:66:4e:63:21:71:df:30:35: 7a:f7:3b:10:60:bf:2e:38:02:a6:cb:d9:be:6f:99:d3:0e:85: b7:62:f0:65:2e:25:29:0e:e4:1b:f5:4a:46:c6:d4:35:4a:5b: 47:9e:76:ce:1d:f1:f3:dc:3c:6d:2c:64:50:a4:74:62:93:49: e1:5d:41:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCy0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUExQkUxMTAvBgNVBAUTKEVBQzI3MUQ2QkRERDU3QzMzMTlFNzFDODExRDg1MDQ3 NTM0QzQ3MzAwHhcNMjUxMTA0MTkyMzIyWhcNMjUxMTExMTkyMzIyWjAYMRYwFAYD VQQDEw02OTBhNTJhYS01MzRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wo9cA0yJiv1Me68fghOlYGjU5lJOKjFZeTeOlua677XRMbo9v+hRAWKS2NF 5lX0M7quq1NV7dNGuHVH8IUwPkYbFSrhFZ3CHb/P0WhBl30U3/atIZX6U5McyLAo Bo83395OZUldujsqcIRREeO/xYTVdJZWqcOdw2KFysuejENMsOfYipiDUzokfM5l 4LfhIBoXenfyOyByTYjusCkTSSkplkLgsKsXCPsuexj55vkMntPO8lxRG4dWcPaF Q79tASNZ9WAzRy62AN7FJLezB7rOgZ3023uuWLZRv5UImdfB/o2fO2oO9CAkxZUX 7mxIsEUMXCgIB7t6O57b7A+fDQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCkp/++ Hr4jHJMmp7xOOU0evKz6MB8GA1UdIwQYMBaAFOrCcda93VfDMZ5xyBHYUEdTTEcw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTFCRS83MDA4NDc3RTRE NjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4TXhubkhJRWRoUVIxTk1S ekEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzSngxcjNkVjhNeG5uSElFZGhRUjFOTVJ6QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QTFCRS83MDA4NDc3RTRENjAxMUVBQUI2MzUzNzRDNEY5QUUwMi82c0p4MXIzZFY4 TXhubkhJRWRoUVIxTk1SekEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAloe6e6acqwGTtfB0TtDThIEL3yrJlDZcPd32dCbA8Z7glz+3fwGXx A8woVux+XD2DAWgOZBlyvie+JLcsi/6y5+drRPg3Nrtyn+7K19RgHYpfIEt1Lzgs FUqoRE4foud+2THSGBl5ydSjYd7ydPq7seAYX1anyb8Az0olRVtVmC6I+AUfVP3h DrtrhmbelxYF7bScH/xlrHuDFPb/Q8l4ydkXOQFaqF1B6slFTHex/mJZvc0KdErA ZzMNSaXgZk5jIXHfMDV69zsQYL8uOAKmy9m+b5nTDoW3YvBlLiUpDuQb9UpGxtQ1 SltHnnbOHfHz3DxtLGRQpHRik0nhXUGO -----END CERTIFICATE-----Generated at Wed Nov 5 12:06:57 2025 by rpki-client