$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: PEz+Qu85ZEGxpUMvlB4TOQ/zr2euJEpxGfPfNQE0Q8U= Subject key identifier: 41:E8:F4:BA:48:9E:B6:59:80:65:63:12:1A:AF:E1:A8:F1:85:87:ED Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0B6B Signing time: Tue 04 Nov 2025 19:13:34 +0000 Manifest this update: Tue 04 Nov 2025 19:13:33 +0000 Manifest next update: Tue 11 Nov 2025 19:13:33 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: NVEl4ZNkzNF3ySvZb/p9QuZjpujnRwWDW0wVWVHZw6w=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: r6EZfgS+MNX15zv4SICPHGBrLVEvUmwdpMwfkn3cpaw=) 3: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: uHf9Btq3MJt37Vq5aqsFdn/fYNVnxqQKLBiHXrC8d80=) 4: 84210E0A9AAB11F0AFE54B2AC4F9AE02.roa (hash: Bv2IplNL1D5PujypOS2WcUekz015LvYisApNXIOts/U=) 5: 1FCC64AC719511F090F7F83BC4F9AE02.roa (hash: +qiRWdfwGXcRGa6NIVUYddvy0ip5kmJS9wXziS3iiJs=) 6: 83B1E1429AAB11F0AFE54B2AC4F9AE02.roa (hash: Icni8QrD3hEMnP73pFsXdDlj1WFuqvMCFG34iC1Bf2Y=) 7: 4F153D60719511F0A684963CC4F9AE02.roa (hash: Qdk0XM/e7CFwGkgkffYJcSQIfyDDrObbUxfebzUoWFI=) 8: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: fR2YAjPxFZ36Ip34nvz0aeWSm0X69E60A4S3LMNBagU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:13:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2967 (0xb97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Nov 4 19:13:33 2025 GMT Not After : Nov 11 19:13:33 2025 GMT Subject: CN=690a505e-2580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fc:09:22:5d:6a:f9:f3:9a:7d:4d:9b:84:08: 2c:b6:9f:82:a6:af:c9:30:94:09:a7:1e:db:f4:41: 09:93:1a:d6:52:7d:6c:60:b9:d4:7b:16:6f:62:f9: f7:57:93:17:16:b2:3b:31:2e:2e:f2:bc:28:19:d3: b4:79:c2:d8:78:e9:f0:53:e8:b8:43:0f:82:7c:27: 77:7c:9d:ad:e8:94:78:ac:3b:88:7b:0a:22:32:a6: 55:47:df:ee:59:0a:a6:b3:83:1f:2b:d4:7a:b5:02: d3:b6:25:12:7a:ca:b6:41:1d:07:9e:57:15:b5:62: e0:7d:20:8e:76:89:75:70:2b:49:f4:5a:4c:0d:07: b3:75:92:5d:73:22:4e:5c:f4:38:aa:15:ae:7e:f3: ee:d8:18:fe:c3:d9:3d:1c:ea:8b:d0:ec:52:67:bd: ed:20:a0:11:0b:da:63:5b:ba:29:b0:42:05:a0:f0: 22:38:cb:93:c5:fe:e3:24:a1:c4:9e:39:14:e8:d6: 75:ee:c4:45:6f:94:98:28:48:5a:1d:42:52:50:a4: b7:68:aa:37:61:f8:0a:c0:c3:53:55:ea:0b:e3:4d: 76:c8:4f:3c:e3:79:f3:39:c1:85:9a:d0:ae:40:d5: 9e:04:a6:da:14:25:e4:9b:51:93:a3:ad:2b:00:6c: 1e:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E8:F4:BA:48:9E:B6:59:80:65:63:12:1A:AF:E1:A8:F1:85:87:ED X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0e:95:e1:53:6e:33:4a:70:3b:a0:f0:65:fb:61:62:1b:09:57: 0d:ca:de:7c:20:e2:5b:fb:82:19:98:73:1e:e5:be:38:22:e2: bf:e5:e0:ff:50:20:08:95:b2:2d:91:b2:c6:4f:7e:ea:13:77: 0b:62:c8:7f:73:aa:35:4e:3c:75:c1:a2:6b:d4:30:04:60:49: 42:3b:1a:46:c0:25:0c:32:0c:3d:11:8c:56:2a:af:2d:d7:10: 54:f6:9b:3b:b5:9b:8a:a4:9b:d7:fe:0b:bf:ed:d8:1e:43:55: 78:61:ce:38:89:47:64:f2:3f:15:9e:7e:4f:c8:46:7c:3b:b4: 9d:7b:59:56:6c:73:39:0d:dd:31:f3:8d:8d:b9:e1:88:10:63: e7:cb:84:0c:8f:64:d7:37:bb:1b:42:4c:20:7b:b9:85:16:b9: b7:34:47:39:06:94:2d:e5:bb:13:b3:c0:09:bf:52:97:ab:30: 67:4b:72:58:2a:09:fa:5a:a6:59:cd:c6:07:32:d4:f2:49:e6: e2:f3:56:1a:ad:9c:08:9e:c1:4f:e5:80:12:39:1d:43:19:69: d0:f5:a8:48:23:cd:22:97:5c:eb:84:c5:b4:c3:8a:01:91:53: d6:9d:be:34:05:b7:14:78:f1:41:2f:ff:a8:a8:3b:1d:ed:dd: 65:87:96:04 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUxMTA0MTkxMzMzWhcNMjUxMTExMTkxMzMzWjAYMRYwFAYD VQQDEw02OTBhNTA1ZS0yNTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3fwJIl1q+fOafU2bhAgstp+Cpq/JMJQJpx7b9EEJkxrWUn1sYLnUexZvYvn3 V5MXFrI7MS4u8rwoGdO0ecLYeOnwU+i4Qw+CfCd3fJ2t6JR4rDuIewoiMqZVR9/u WQqms4MfK9R6tQLTtiUSesq2QR0HnlcVtWLgfSCOdol1cCtJ9FpMDQezdZJdcyJO XPQ4qhWufvPu2Bj+w9k9HOqL0OxSZ73tIKARC9pjW7opsEIFoPAiOMuTxf7jJKHE njkU6NZ17sRFb5SYKEhaHUJSUKS3aKo3YfgKwMNTVeoL4012yE8843nzOcGFmtCu QNWeBKbaFCXkm1GTo60rAGwelQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHo9LpI nrZZgGVjEhqv4ajxhYftMB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAOleFTbjNKcDug8GX7YWIbCVcNyt58IOJb+4IZmHMe5b44IuK/5eD/ UCAIlbItkbLGT37qE3cLYsh/c6o1Tjx1waJr1DAEYElCOxpGwCUMMgw9EYxWKq8t 1xBU9ps7tZuKpJvX/gu/7dgeQ1V4Yc44iUdk8j8Vnn5PyEZ8O7Sde1lWbHM5Dd0x 842NueGIEGPny4QMj2TXN7sbQkwge7mFFrm3NEc5BpQt5bsTs8AJv1KXqzBnS3JY Kgn6WqZZzcYHMtTySebi81YarZwInsFP5YASOR1DGWnQ9ahII80il1zrhMW0w4oB kVPWnb40BbcUePFBL/+oqDsd7d1lh5YE -----END CERTIFICATE-----Generated at Wed Nov 5 10:03:45 2025 by rpki-client