$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft File: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft (raw, json) Hash identifier: 0He3U8h1JTqR/+Rc5IuSgtUMZpitc3OfKhVHgs+q3Nk= Subject key identifier: 69:2A:FC:8D:D8:B2:69:D4:66:74:8C:65:61:12:E3:95:64:AC:83:BC Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: 0100 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft Manifest number: FD Signing time: Mon 03 Nov 2025 05:09:10 +0000 Manifest this update: Mon 03 Nov 2025 05:09:09 +0000 Manifest next update: Mon 10 Nov 2025 05:09:09 +0000 Files and hashes: 1: 6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl (hash: IjZU6gcxs14xkzi+4klhnqyKhYQDebWhjWrid9AsUkU=) 2: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (hash: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:09:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: Nov 3 05:09:09 2025 GMT Not After : Nov 10 05:09:09 2025 GMT Subject: CN=690838f5-b009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:95:1f:c5:a6:8f:74:f4:65:ea:28:68:1b:c5: dd:5d:dd:66:b3:44:2e:ee:b2:0d:90:fa:af:1a:1f: 96:ce:4f:8c:e5:5a:a7:5c:98:f2:42:33:d5:ac:b4: cd:cf:4f:cf:3b:52:05:4e:b7:64:31:71:cf:2f:8f: 12:1c:62:f5:ed:4d:bd:01:a2:6b:c5:5b:8f:c8:02: f8:2f:52:c9:41:9a:91:4b:50:a2:76:d3:87:53:3e: 9f:00:cf:88:28:4c:96:cf:21:df:ba:31:9a:1e:a4: 41:51:df:59:c5:d7:2a:28:d9:66:8a:6b:2b:55:92: a1:b2:fc:11:54:fd:18:95:c1:f9:be:a0:74:3d:72: e7:c5:7e:77:6b:c9:ab:80:6c:fa:a3:1e:55:b3:bb: 72:7a:28:5f:75:7e:b2:35:75:16:1a:be:3c:0c:e0: 32:c6:c0:38:c7:b2:0a:c1:81:68:4f:f7:54:bd:3b: 05:ac:52:8d:bc:ed:7e:3b:b2:c6:a0:5d:37:c1:bd: 7a:de:98:9a:8e:08:cd:06:fb:d2:5c:07:17:d0:e9: 1d:50:54:0e:43:df:dd:fd:8c:92:36:0a:b9:49:8a: c3:72:39:a1:93:9a:46:10:d4:a6:83:c8:f9:70:f1: 5f:ab:64:e6:5d:03:50:8c:8e:da:25:9d:24:32:18: 49:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2A:FC:8D:D8:B2:69:D4:66:74:8C:65:61:12:E3:95:64:AC:83:BC X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 45:15:0c:59:f6:37:73:87:a1:55:1f:db:4d:06:4d:a7:ef:30: 7d:3f:db:44:01:50:b9:68:77:42:dc:b5:56:5e:29:07:93:55: f5:d4:4e:4a:9e:f5:84:ba:cf:34:a0:ae:bc:f3:8e:3a:19:1a: c0:06:49:dd:dc:b1:65:6e:4a:5a:04:9a:62:54:ad:b4:cf:6e: 69:be:cf:10:4a:77:78:8c:55:7f:93:46:23:c7:0d:a0:8f:89: 0f:5f:e4:26:50:b8:90:7f:fa:bb:85:4b:18:4b:b0:da:36:f1: f2:de:8a:f3:59:a2:d3:d8:72:21:1b:f0:f4:8e:b3:b2:71:c9: 8f:f1:6c:56:a1:46:36:41:bc:4b:f8:4b:1e:78:6e:81:9d:26: 56:f7:85:7a:db:60:e7:d0:57:72:3e:fb:26:78:da:49:03:49: ed:8e:ec:3f:31:64:29:42:12:27:cb:da:3d:38:92:ac:67:5b: b1:f5:44:46:e7:b9:04:e7:4f:67:19:55:8c:23:8a:04:92:db: 92:43:b3:ae:b0:a1:bd:98:95:01:ad:d0:2c:49:aa:04:b5:6f: 4b:25:23:ce:88:43:62:9a:d3:35:bc:c3:25:c9:ae:ac:7b:e8: a1:50:1f:7a:84:2b:93:2c:a7:14:23:fb:ff:dd:d4:e2:d2:bc: 0f:e1:47:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUxMTAzMDUwOTA5WhcNMjUxMTEwMDUwOTA5WjAYMRYwFAYD VQQDEw02OTA4MzhmNS1iMDA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApZUfxaaPdPRl6ihoG8XdXd1ms0Qu7rINkPqvGh+Wzk+M5VqnXJjyQjPVrLTN z0/PO1IFTrdkMXHPL48SHGL17U29AaJrxVuPyAL4L1LJQZqRS1CidtOHUz6fAM+I KEyWzyHfujGaHqRBUd9ZxdcqKNlmimsrVZKhsvwRVP0YlcH5vqB0PXLnxX53a8mr gGz6ox5Vs7tyeihfdX6yNXUWGr48DOAyxsA4x7IKwYFoT/dUvTsFrFKNvO1+O7LG oF03wb163piajgjNBvvSXAcX0OkdUFQOQ9/d/YySNgq5SYrDcjmhk5pGENSmg8j5 cPFfq2TmXQNQjI7aJZ0kMhhJoQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGkq/I3Y smnUZnSMZWES45VkrIO8MB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 QkMzQi9DNkJENTQ3QzM5RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFf a1RSU3pfemo3VUlJZ1NHbWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBFFQxZ9jdzh6FVH9tNBk2n7zB9P9tEAVC5aHdC3LVWXikHk1X11E5K nvWEus80oK688446GRrABknd3LFlbkpaBJpiVK20z25pvs8QSnd4jFV/k0Yjxw2g j4kPX+QmULiQf/q7hUsYS7DaNvHy3orzWaLT2HIhG/D0jrOyccmP8WxWoUY2QbxL +EseeG6BnSZW94V622Dn0FdyPvsmeNpJA0ntjuw/MWQpQhIny9o9OJKsZ1ux9URG 57kE509nGVWMI4oEktuSQ7OusKG9mJUBrdAsSaoEtW9LJSPOiENimtM1vMMlya6s e+ihUB96hCuTLKcUI/v/3dTi0rwP4UdT -----END CERTIFICATE-----Generated at Tue Nov 4 19:05:43 2025 by rpki-client