$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json) Hash identifier: qQpxvqOTr4Yj80KMvMWBFWgfI+s9zqMmi4ODAxRT3R0= Subject key identifier: 7C:10:BB:7D:DC:42:47:FE:E0:A5:97:86:47:FE:97:9E:48:E6:38:F9 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft Manifest number: 0240 Signing time: Wed 05 Nov 2025 02:37:00 +0000 Manifest this update: Wed 05 Nov 2025 02:37:00 +0000 Manifest next update: Wed 12 Nov 2025 02:36:59 +0000 Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: wJX0+zyvmq5TxB+YV8rqKKW/hMn+n0KCjCnT+NO6a+A=) 2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Nov 5 02:37:00 2025 GMT Not After : Nov 12 02:36:59 2025 GMT Subject: CN=690ab84c-b5e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:38:51:34:0e:cf:7a:27:2f:88:bb:75:c0:58: 61:7e:89:0e:49:23:77:71:4c:16:da:23:56:46:c2: fd:3b:68:a1:a9:96:2a:0e:ea:33:26:fc:0d:fc:be: 56:7e:e1:1f:de:e3:eb:59:54:7f:04:bd:33:e6:e1: 6a:57:42:14:d9:b5:13:8e:b7:1d:b0:8b:b1:06:7e: 38:3b:ee:f8:f7:56:fb:da:5f:5e:1e:c6:91:8e:ab: 1c:85:f6:eb:99:ec:20:b5:2a:76:e8:64:b2:0a:17: c4:40:db:94:63:f7:37:9c:51:05:d7:fe:53:1b:c2: a3:10:c9:79:3b:c6:cc:5c:87:a6:78:94:c1:7d:21: f1:4f:20:47:b0:57:eb:4d:c4:6e:78:ac:aa:e3:13: 1a:37:9d:1a:d3:e4:93:b0:08:6d:4b:f7:da:b8:8b: 52:d2:69:29:34:ef:a3:21:5b:e3:f1:b0:24:9f:22: e7:13:fa:a0:18:f0:6e:9c:11:0b:05:ef:b6:5d:6d: 22:f8:5c:a5:1b:1a:02:33:7c:d5:ab:d4:34:3f:01: b1:1e:0f:83:b3:1c:e5:a1:87:94:53:68:1b:09:da: 14:ae:74:92:0c:b0:95:a4:ef:a1:b9:0d:7b:47:df: 61:45:47:76:6a:ec:3b:d8:cd:1f:b7:5e:d2:a7:75: 2b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:10:BB:7D:DC:42:47:FE:E0:A5:97:86:47:FE:97:9E:48:E6:38:F9 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:36:cc:01:2b:66:e8:2e:a6:30:f4:3f:e1:d5:53:c2:e2:56: 84:db:2d:f6:b0:5d:66:d0:7b:af:c1:77:30:65:95:67:e8:f5: c6:71:88:63:a9:74:5c:58:a8:93:88:c9:b7:a9:12:e0:64:4d: 1d:aa:18:38:6d:f1:a6:71:27:81:a4:b0:e7:90:11:99:24:a7: 7a:94:93:c3:fc:17:75:cc:af:41:8c:04:b7:d5:c3:34:8a:d4: 61:28:45:e9:3e:d5:6f:b0:ac:10:b2:52:51:a7:cc:62:cd:b1: 4b:d0:9b:5b:0e:b8:f6:3a:37:31:8d:d3:ef:c8:29:a3:0e:8b: 93:6f:ad:fe:ea:cf:32:4f:50:23:00:f3:6c:b2:94:e5:6b:56: 76:a6:f8:aa:3a:c4:ff:a4:b8:aa:5d:eb:40:c3:ad:f0:bb:39: a2:d8:e7:d0:7d:d6:26:da:24:00:e3:c0:1a:92:06:bb:51:47: fd:79:f3:c0:05:d4:13:59:2e:3f:75:fc:96:8d:84:13:5e:4a: f1:52:f3:0d:a1:b9:93:c5:11:8a:82:c2:3b:c3:d0:50:09:23: 14:32:31:49:49:67:62:7a:f0:f4:3a:79:83:39:ae:9c:45:dd: 32:1a:7c:95:dc:af:cf:9c:f0:11:48:70:a5:b3:13:20:c4:83: 47:ff:36:db -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTExMDUwMjM3MDBaFw0yNTExMTIwMjM2NTlaMBgxFjAUBgNV BAMTDTY5MGFiODRjLWI1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeOFE0Ds96Jy+Iu3XAWGF+iQ5JI3dxTBbaI1ZGwv07aKGplioO6jMm/A38vlZ+ 4R/e4+tZVH8EvTPm4WpXQhTZtROOtx2wi7EGfjg77vj3VvvaX14expGOqxyF9uuZ 7CC1KnboZLIKF8RA25Rj9zecUQXX/lMbwqMQyXk7xsxch6Z4lMF9IfFPIEewV+tN xG54rKrjExo3nRrT5JOwCG1L99q4i1LSaSk076MhW+PxsCSfIucT+qAY8G6cEQsF 77ZdbSL4XKUbGgIzfNWr1DQ/AbEeD4OzHOWhh5RTaBsJ2hSudJIMsJWk76G5DXtH 32FFR3Zq7DvYzR+3XtKndSvxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfBC7fdxC R/7gpZeGR/6XnkjmOPkwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MkFGL0YzRUZCODk4QkNCQTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xX QjYzakRtQzhkNFNwS1lBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKY2zAErZugupjD0P+HVU8LiVoTbLfawXWbQe6/BdzBllWfo9cZxiGOp dFxYqJOIybepEuBkTR2qGDht8aZxJ4GksOeQEZkkp3qUk8P8F3XMr0GMBLfVwzSK 1GEoRek+1W+wrBCyUlGnzGLNsUvQm1sOuPY6NzGN0+/IKaMOi5Nvrf7qzzJPUCMA 82yylOVrVnam+Ko6xP+kuKpd60DDrfC7OaLY59B91ibaJADjwBqSBrtRR/1588AF 1BNZLj91/JaNhBNeSvFS8w2huZPFEYqCwjvD0FAJIxQyMUlJZ2J68PQ6eYM5rpxF 3TIafJXcr8+c8BFIcKWzEyDEg0f/Nts= -----END CERTIFICATE-----Generated at Wed Nov 5 11:37:13 2025 by rpki-client