$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: oSD1gPiIGsOe8MtHRym1VV8uWJ97WYTsrE39KbMbTcM= Subject key identifier: EB:A9:A0:F4:C2:D4:31:4F:00:D1:82:D9:87:B2:F5:FC:04:0A:58:7F Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0CFD Signing time: Tue 04 Nov 2025 18:14:07 +0000 Manifest this update: Tue 04 Nov 2025 18:14:06 +0000 Manifest next update: Tue 11 Nov 2025 18:14:06 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: nILjMN4fYQYCo9pMAbkOLXG7SM6gee/ydEaBZVv+cUI=) 2: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=) 3: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=) 6: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 18:14:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Nov 4 18:14:06 2025 GMT Not After : Nov 11 18:14:06 2025 GMT Subject: CN=690a426e-e736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d1:61:6b:90:c0:04:26:ec:35:90:9a:45:dd: 0e:6e:bf:25:cd:01:df:b7:15:11:a3:c7:72:87:82: 38:7a:8f:ae:2f:3d:26:48:33:98:ed:03:dc:36:a0: 60:ab:97:d9:3b:37:4d:f2:cd:cb:3b:01:46:d0:35: 51:69:43:0d:d2:8f:d7:62:bf:88:6c:12:bb:b4:a5: 36:ef:77:f9:0b:2d:e6:50:03:6a:c2:91:56:a2:1e: 82:d2:d1:bc:36:ca:54:0b:a2:12:81:38:56:2a:71: ee:25:5e:f2:7b:2d:0f:90:cd:a5:c8:fb:f2:07:55: 99:c1:89:c6:f3:4a:5c:83:b3:f5:3d:ba:96:f1:8c: 15:98:b7:1e:69:47:9d:10:eb:26:15:64:88:60:6a: ba:c4:fe:73:8f:4d:3e:8a:dc:a2:86:a1:d4:49:15: f5:1d:10:7b:63:6b:ad:63:ed:01:85:b8:83:ca:4e: 85:b9:c5:32:d8:a0:2e:02:76:63:90:26:e4:f0:f1: fa:7e:44:3e:29:2a:dc:fb:e0:a6:36:11:32:c1:0d: 04:84:5c:52:af:cd:22:21:af:76:94:12:c6:15:cf: 65:7c:d0:98:6b:49:19:11:ba:5c:d9:f4:e2:0d:0d: 50:37:49:5a:96:d7:66:f9:e2:36:e1:9b:f7:76:05: 63:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:A9:A0:F4:C2:D4:31:4F:00:D1:82:D9:87:B2:F5:FC:04:0A:58:7F X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8d:5c:e9:a1:7e:40:79:75:ca:78:2f:84:5c:0f:9e:58:ba:b8: 36:15:d6:0a:f4:f4:82:21:95:d0:21:7e:7f:eb:0a:55:dd:f1: 72:ea:45:fe:42:cb:19:4d:4b:4d:01:a2:86:22:9e:14:e6:66: ae:68:5f:4a:d3:67:69:f1:0b:6e:a2:2d:13:b5:27:89:04:90: f9:fb:e4:4a:26:40:bc:dc:ca:1c:15:a2:77:3b:94:70:e2:f9: 41:ae:c3:db:0c:ea:a5:79:03:dd:2b:1e:96:1f:a6:38:36:f5: 5a:e9:52:1b:87:a8:ae:11:3a:44:85:0d:40:2d:d5:c9:3b:d8: ef:5a:e9:6e:76:a8:0f:ff:fd:d9:c8:c2:13:86:a9:bc:21:b0: 58:1f:fd:25:31:67:3d:5c:ec:51:0b:1e:ee:23:e7:e0:f1:68: 69:4f:6f:de:a5:69:43:65:24:87:81:ca:35:18:4c:e6:d0:dd: 26:48:f9:e3:43:0e:2e:15:b7:26:2b:9e:51:64:69:03:91:e6: b4:41:96:49:4a:30:9e:52:2e:1b:ad:ff:cc:ab:6f:28:66:f5: 15:ec:0e:d1:7d:e3:1b:4f:41:98:d0:cc:71:1a:2c:b2:37:e3: 4c:89:7c:14:36:22:7c:bc:7a:fb:7b:dc:4a:96:a9:a4:56:1b: 98:e4:60:ce -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUxMTA0MTgxNDA2WhcNMjUxMTExMTgxNDA2WjAYMRYwFAYD VQQDEw02OTBhNDI2ZS1lNzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNFha5DABCbsNZCaRd0Obr8lzQHftxURo8dyh4I4eo+uLz0mSDOY7QPcNqBg q5fZOzdN8s3LOwFG0DVRaUMN0o/XYr+IbBK7tKU273f5Cy3mUANqwpFWoh6C0tG8 NspUC6ISgThWKnHuJV7yey0PkM2lyPvyB1WZwYnG80pcg7P1PbqW8YwVmLceaUed EOsmFWSIYGq6xP5zj00+ityihqHUSRX1HRB7Y2utY+0BhbiDyk6FucUy2KAuAnZj kCbk8PH6fkQ+KSrc++CmNhEywQ0EhFxSr80iIa92lBLGFc9lfNCYa0kZEbpc2fTi DQ1QN0laltdm+eI24Zv3dgVjowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOupoPTC 1DFPANGC2Yey9fwEClh/MB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCNXOmhfkB5dcp4L4RcD55Yurg2FdYK9PSCIZXQIX5/6wpV3fFy6kX+ QssZTUtNAaKGIp4U5mauaF9K02dp8Qtuoi0TtSeJBJD5++RKJkC83MocFaJ3O5Rw 4vlBrsPbDOqleQPdKx6WH6Y4NvVa6VIbh6iuETpEhQ1ALdXJO9jvWuludqgP//3Z yMIThqm8IbBYH/0lMWc9XOxRCx7uI+fg8WhpT2/epWlDZSSHgco1GEzm0N0mSPnj Qw4uFbcmK55RZGkDkea0QZZJSjCeUi4brf/Mq28oZvUV7A7RfeMbT0GY0MxxGiyy N+NMiXwUNiJ8vHr7e9xKlqmkVhuY5GDO -----END CERTIFICATE-----Generated at Wed Nov 5 01:26:39 2025 by rpki-client