$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: BubXm8xLx2K9IrsdOYohi5Dz4/I4YFn5bs7wOy5b2PE= Subject key identifier: EA:86:A4:54:43:2E:8E:77:97:15:EB:73:93:B3:5C:63:78:B8:40:7B Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: A9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: A3 Signing time: Mon 03 Nov 2025 06:26:03 +0000 Manifest this update: Mon 03 Nov 2025 06:26:03 +0000 Manifest next update: Mon 10 Nov 2025 06:26:03 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: BFRnsDtTA6y52Bjv5NQ1kuFXzfHficnu+5L2RKSo98I=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 169 (0xa9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Nov 3 06:26:03 2025 GMT Not After : Nov 10 06:26:03 2025 GMT Subject: CN=69084afb-0ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:d4:2c:79:91:52:5c:db:cd:58:15:aa:84:b9: 61:df:17:61:98:24:53:7a:9d:e0:43:09:1f:4c:b0: 16:50:45:07:b3:94:4d:c8:11:2c:8a:e8:b8:fd:37: 7f:bd:08:e1:b0:00:80:26:ef:c1:df:34:22:80:71: 38:98:77:14:31:89:a5:f7:28:6a:cb:f0:27:f7:23: 65:f9:33:98:e9:02:58:8f:10:7c:77:da:19:3b:08: 53:b6:51:fc:f9:d2:76:92:5b:08:af:d9:2b:ff:00: e0:dc:78:aa:ec:24:d3:61:ef:07:fa:c9:4c:56:9f: 9f:3f:66:c1:b3:c8:1d:c8:db:d9:94:44:65:bc:79: 02:65:08:6e:01:bc:45:40:ea:3c:72:80:09:03:b6: 7b:60:e8:39:f4:ae:91:2d:1c:4d:cb:a6:29:55:22: 9b:4e:b3:a7:ad:e6:9a:17:89:86:ab:c5:69:ba:00: fb:7c:f1:11:14:25:af:b6:ad:d9:b2:0d:30:c3:4b: 84:8d:13:59:43:24:e2:0b:f6:c9:76:ca:a2:b8:57: b4:70:db:80:4b:08:8e:b8:f3:a0:28:d6:43:d2:91: d4:37:ac:2c:cb:09:62:5e:cd:86:bf:6d:78:6e:0f: 08:3e:92:99:68:57:65:4c:43:98:40:11:23:f9:d4: 9b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:86:A4:54:43:2E:8E:77:97:15:EB:73:93:B3:5C:63:78:B8:40:7B X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:22:e1:df:38:25:fe:98:91:b1:9e:8a:6d:be:5a:9b:86:d9: df:0f:ff:a0:64:e1:4c:b7:aa:c8:12:ea:4e:9e:79:49:51:f9: 8f:e0:75:54:f2:fb:50:42:d4:af:97:2b:4b:70:ca:eb:75:85: fa:6e:da:6b:7f:f6:2b:53:95:4d:a9:f5:e3:69:97:fa:8c:04: f2:4e:7d:03:ef:99:bd:cc:87:50:de:2f:19:f2:c1:23:55:81: ea:8b:3d:b6:66:a7:6e:2f:ff:45:22:87:2c:74:56:16:63:2d: 02:00:73:c9:e7:30:c1:71:35:da:df:86:6d:98:81:40:71:a9: 5a:c8:7b:a7:34:20:0e:c7:57:e2:96:07:09:36:3d:c1:15:a0: 1f:69:51:5d:9a:c6:d8:78:7e:72:13:d3:60:96:0b:ec:2f:85: 46:5e:63:e9:41:06:03:b5:ca:0d:84:54:8f:2e:51:5c:1d:a4: 2e:d6:4a:be:4c:44:01:de:19:e9:10:1f:16:6c:1c:0a:5d:63: bb:2a:48:28:15:5f:93:23:02:38:b5:d0:f0:25:72:55:3b:ad: ab:49:3a:ce:44:2d:2e:69:0a:53:2c:2e:19:75:67:4a:54:ec: 04:4f:7b:87:84:41:75:45:3c:5d:6a:8a:11:54:d6:63:76:27: 57:99:24:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND OEFCODI1RUEwHhcNMjUxMTAzMDYyNjAzWhcNMjUxMTEwMDYyNjAzWjAYMRYwFAYD VQQDEw02OTA4NGFmYi0wYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx9QseZFSXNvNWBWqhLlh3xdhmCRTep3gQwkfTLAWUEUHs5RNyBEsiui4/Td/ vQjhsACAJu/B3zQigHE4mHcUMYml9yhqy/An9yNl+TOY6QJYjxB8d9oZOwhTtlH8 +dJ2klsIr9kr/wDg3Hiq7CTTYe8H+slMVp+fP2bBs8gdyNvZlERlvHkCZQhuAbxF QOo8coAJA7Z7YOg59K6RLRxNy6YpVSKbTrOnreaaF4mGq8VpugD7fPERFCWvtq3Z sg0ww0uEjRNZQyTiC/bJdsqiuFe0cNuASwiOuPOgKNZD0pHUN6wsywliXs2Gv214 bg8IPpKZaFdlTEOYQBEj+dSb+wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOqGpFRD Lo53lxXrc5OzXGN4uEB7MB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTA4My9DMDZGMkU0MkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtj clJVUG94dEUzSlBJcTRKZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4IuHfOCX+mJGxnoptvlqbhtnfD/+gZOFMt6rIEupOnnlJUfmP4HVU 8vtQQtSvlytLcMrrdYX6btprf/YrU5VNqfXjaZf6jATyTn0D75m9zIdQ3i8Z8sEj VYHqiz22ZqduL/9FIocsdFYWYy0CAHPJ5zDBcTXa34ZtmIFAcalayHunNCAOx1fi lgcJNj3BFaAfaVFdmsbYeH5yE9NglgvsL4VGXmPpQQYDtcoNhFSPLlFcHaQu1kq+ TEQB3hnpEB8WbBwKXWO7KkgoFV+TIwI4tdDwJXJVO62rSTrORC0uaQpTLC4ZdWdK VOwET3uHhEF1RTxdaooRVNZjdidXmSRg -----END CERTIFICATE-----Generated at Wed Nov 5 00:21:59 2025 by rpki-client