$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft File: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json) Hash identifier: K+16zxqlk5fSn+vgdPd4xgHNDIw1xtmOnjnOC/H22gI= Subject key identifier: 32:01:D8:8E:37:0A:10:D3:01:0F:CD:98:C3:36:11:8D:53:F4:54:78 Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Certificate serial: 0A97 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft Manifest number: 0A90 Signing time: Tue 04 Nov 2025 19:40:20 +0000 Manifest this update: Tue 04 Nov 2025 19:40:20 +0000 Manifest next update: Tue 11 Nov 2025 19:40:20 +0000 Files and hashes: 1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: mPru2eAVdBBSMNp6mJmnmcUmGoVN5rmHQlyVQuu4SjI=) 2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: J+JZoSjojOqJ1AwA5T/9H8nf3jJIVy6YAPw444KE/KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Validity Not Before: Nov 4 19:40:20 2025 GMT Not After : Nov 11 19:40:20 2025 GMT Subject: CN=690a56a4-43e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:85:7f:75:ec:4a:0d:05:2c:d2:4c:ed:b0: 49:b2:6a:05:d1:b1:b9:89:3c:bf:76:f1:c7:96:56: c5:58:d3:0b:32:03:61:83:09:09:13:1c:2d:76:df: 38:80:5e:41:27:cb:a3:90:b1:e3:3f:86:c7:a6:4a: 13:57:c8:c3:97:c6:2b:9a:ce:41:d4:f9:30:ae:3d: 02:62:7a:ee:12:1e:61:9a:33:ea:e7:59:5b:74:79: ea:37:a4:2d:ed:c1:1d:2f:d4:46:a6:45:6a:17:8a: c5:53:b8:ce:28:89:53:8d:9a:81:fb:37:18:c9:68: 67:91:77:8c:18:57:fc:c7:18:9a:7a:23:9b:74:a4: 50:36:5d:c7:99:27:99:40:75:05:53:ce:6e:9c:a7: 81:31:e5:11:79:ff:70:68:59:8a:cb:36:9b:df:11: 2c:5a:df:64:9d:e3:7a:b0:a9:c6:b6:6b:e7:97:9a: 05:21:64:84:71:58:bc:a1:8e:bf:62:67:b6:29:70: 2b:81:8b:91:d0:3d:ab:79:86:f6:ce:0c:a0:05:72: 15:7e:b4:34:cb:9f:8d:5a:0c:ae:73:55:57:50:b6: f8:b7:25:9a:84:4f:de:e5:79:d7:1a:21:5f:99:49: 28:1a:fa:d0:f0:e6:ba:11:04:68:b1:8e:9c:16:bd: 75:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:01:D8:8E:37:0A:10:D3:01:0F:CD:98:C3:36:11:8D:53:F4:54:78 X509v3 Authority Key Identifier: keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:e3:b0:e4:4d:19:81:8d:0b:c5:e2:c8:db:79:6b:75:7d:62: 47:15:fb:8e:b3:d1:0a:9f:57:7e:ba:75:89:69:7f:88:4a:6b: ad:d0:bb:78:74:30:74:87:e2:ef:d8:8b:c6:59:19:6a:5c:65: 35:64:76:f0:59:22:58:88:81:be:75:f8:69:f8:b8:78:27:f2: 35:2b:43:72:e8:75:80:10:15:08:f6:5b:6b:28:df:60:c0:92: 6a:24:1e:10:a8:8a:bb:49:07:2a:a2:da:4b:c9:be:76:3e:ae: a7:e7:a6:a6:51:60:06:dd:5e:2b:ea:1a:f4:dc:63:04:aa:50: 03:af:0f:41:03:e3:4c:71:8e:6d:25:66:79:cf:ee:aa:14:6c: e7:30:52:dc:90:87:e8:27:cf:6e:f0:12:ac:61:18:09:df:02: a5:f6:b3:ba:b1:3f:c2:b7:70:39:b9:b0:99:f4:60:f5:66:be: 1b:55:d5:5e:b7:97:cc:9e:19:4e:24:f9:7f:60:f2:c7:ab:ba: 77:f8:9f:1a:99:be:7d:7e:cb:37:7a:f8:f7:1f:4a:04:f7:a1: a9:f7:63:89:53:c5:ac:f6:9e:3b:58:a4:0d:22:f7:85:9c:f1: 09:42:42:f9:79:76:aa:d9:7e:94:de:64:53:0c:a2:77:76:40: 89:80:e5:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTQxMTAvBgNVBAUTKEVBQTc5MkY5Njg4NjNDM0ZGQjlFQkQxNjcxQTA2QzE0 NUExQjIxNjQwHhcNMjUxMTA0MTk0MDIwWhcNMjUxMTExMTk0MDIwWjAYMRYwFAYD VQQDEw02OTBhNTZhNC00M2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvceFf3XsSg0FLNJM7bBJsmoF0bG5iTy/dvHHllbFWNMLMgNhgwkJExwtdt84 gF5BJ8ujkLHjP4bHpkoTV8jDl8Yrms5B1Pkwrj0CYnruEh5hmjPq51lbdHnqN6Qt 7cEdL9RGpkVqF4rFU7jOKIlTjZqB+zcYyWhnkXeMGFf8xxiaeiObdKRQNl3HmSeZ QHUFU85unKeBMeURef9waFmKyzab3xEsWt9kneN6sKnGtmvnl5oFIWSEcVi8oY6/ Yme2KXArgYuR0D2reYb2zgygBXIVfrQ0y5+NWgyuc1VXULb4tyWahE/e5XnXGiFf mUkoGvrQ8Oa6EQRosY6cFr11VwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDIB2I43 ChDTAQ/NmMM2EY1T9FR4MB8GA1UdIwQYMBaAFOqnkvlohjw/+569FnGgbBRaGyFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFNC9GNjk4ODFERTY5 QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BEXzducjBXY2FCc0ZGb2JJ V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxZVMtV2lHUERfN25yMFdjYUJzRkZvYklXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFNC9GNjk4ODFERTY5QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BE XzducjBXY2FCc0ZGb2JJV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBY47DkTRmBjQvF4sjbeWt1fWJHFfuOs9EKn1d+unWJaX+ISmut0Lt4 dDB0h+Lv2IvGWRlqXGU1ZHbwWSJYiIG+dfhp+Lh4J/I1K0Ny6HWAEBUI9ltrKN9g wJJqJB4QqIq7SQcqotpLyb52Pq6n56amUWAG3V4r6hr03GMEqlADrw9BA+NMcY5t JWZ5z+6qFGznMFLckIfoJ89u8BKsYRgJ3wKl9rO6sT/Ct3A5ubCZ9GD1Zr4bVdVe t5fMnhlOJPl/YPLHq7p3+J8amb59fss3evj3H0oE96Gp92OJU8Ws9p47WKQNIveF nPEJQkL5eXaq2X6U3mRTDKJ3dkCJgOWZ -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:48 2025 by rpki-client