$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: 0iGWJ6nFQQSBGlZ0ffxV/HVwIuJEp8286ilXBMN+N7o= Subject key identifier: AF:5A:63:AD:32:10:B9:F2:31:C3:6A:BF:02:C9:E6:DA:D7:3F:B2:87 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: FC Signing time: Mon 03 Nov 2025 05:08:46 +0000 Manifest this update: Mon 03 Nov 2025 05:08:46 +0000 Manifest next update: Mon 10 Nov 2025 05:08:46 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: AOfV1GTVZle2VYsEmu6ZQsM3Klqp3XNHg4iIDhQr2P4=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: uz9vSc9mw92nL6Ktvm9xgb3SiGv4W99WeVuYNZ1qMcs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 255 (0xff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Nov 3 05:08:46 2025 GMT Not After : Nov 10 05:08:46 2025 GMT Subject: CN=690838de-85b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:75:ba:95:c4:44:5d:3c:54:97:a2:ad:d8:16: f7:ae:cb:71:a2:07:e1:32:6b:fc:1b:5f:8c:75:45: ae:04:fa:52:03:35:0c:d8:ae:18:32:3c:68:0c:3e: db:3a:cf:03:6a:3f:de:57:34:4b:d5:ae:03:37:96: 4a:8f:09:fe:ab:f6:53:c4:b4:0e:2c:d6:0a:5f:8b: e4:58:64:93:e7:23:5a:c2:40:b2:9e:f9:6d:d4:66: 37:7f:9c:63:cd:10:7c:e1:fa:41:2a:e7:8e:ee:9a: e9:a1:24:d8:1b:7d:a7:92:24:98:07:b0:c3:c4:29: 5b:20:16:d9:19:69:51:3f:e0:e8:2a:b5:93:13:ae: 77:77:27:f9:13:63:da:bb:4a:87:c2:5c:af:c2:1e: 4d:75:71:05:82:56:15:66:c3:38:52:b9:76:22:f9: 81:38:11:43:40:60:0a:c4:74:f5:e4:72:71:dc:ce: f0:14:c5:70:3e:57:88:0f:9b:1b:da:59:4b:56:33: 2f:c8:c3:39:98:6c:8a:c0:98:52:9c:68:a4:97:a4: b2:86:14:f5:fe:a8:f8:52:cd:39:ae:96:03:c1:1c: 14:11:2a:58:73:b5:29:b8:45:b2:5a:78:bb:22:9f: 2f:06:3e:f5:60:f1:7d:6f:5a:70:89:ee:3d:9e:10: 0d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:5A:63:AD:32:10:B9:F2:31:C3:6A:BF:02:C9:E6:DA:D7:3F:B2:87 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 52:b1:55:34:27:d7:82:1a:5f:43:f9:6c:2e:c5:83:36:f9:96: 81:ea:ee:9c:0f:48:80:a4:48:52:80:64:23:61:eb:40:91:4f: b6:2c:25:82:25:4a:92:61:b7:da:94:f4:eb:83:1b:fe:dc:47: 44:94:df:de:c7:f9:44:29:1e:55:3f:94:cc:6c:19:e2:38:b8: 15:cc:5f:77:e4:ee:40:cd:93:ef:7f:17:cf:29:3f:3d:1a:04: f4:d8:14:f5:29:f0:c0:05:bf:24:67:f0:f8:69:9a:ce:34:be: b8:4f:ef:31:2e:79:09:51:41:6c:fb:5e:00:23:12:e9:6d:ab: 4a:ba:b8:ab:1f:0b:c7:be:af:6b:c0:9a:e9:3a:5c:fe:bc:ea: d3:6f:38:3e:7a:fe:e5:c7:20:b9:e1:95:86:0d:77:14:9b:47: 79:a4:1f:83:16:2d:fb:0a:87:10:22:32:00:2c:07:6b:76:b0: b4:e3:18:f5:bd:cb:de:9f:7c:d8:a0:14:36:66:c2:40:a3:8c: cd:6e:c4:05:ed:b5:5a:6d:00:94:4a:8e:05:55:ee:1e:54:3b: 42:0b:b9:75:b8:1f:f4:b8:2e:89:20:93:40:e2:cb:8d:3c:bd: 6f:b9:3c:a2:25:69:15:d6:20:cf:f4:28:33:48:0d:8b:93:9e: 32:c9:30:6b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUxMTAzMDUwODQ2WhcNMjUxMTEwMDUwODQ2WjAYMRYwFAYD VQQDEw02OTA4MzhkZS04NWI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApXW6lcREXTxUl6Kt2Bb3rstxogfhMmv8G1+MdUWuBPpSAzUM2K4YMjxoDD7b Os8Daj/eVzRL1a4DN5ZKjwn+q/ZTxLQOLNYKX4vkWGST5yNawkCynvlt1GY3f5xj zRB84fpBKueO7prpoSTYG32nkiSYB7DDxClbIBbZGWlRP+DoKrWTE653dyf5E2Pa u0qHwlyvwh5NdXEFglYVZsM4Url2IvmBOBFDQGAKxHT15HJx3M7wFMVwPleID5sb 2llLVjMvyMM5mGyKwJhSnGikl6SyhhT1/qj4Us05rpYDwRwUESpYc7UpuEWyWni7 Ip8vBj71YPF9b1pwie49nhANWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK9aY60y ELnyMcNqvwLJ5trXP7KHMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBSsVU0J9eCGl9D+WwuxYM2+ZaB6u6cD0iApEhSgGQjYetAkU+2LCWC JUqSYbfalPTrgxv+3EdElN/ex/lEKR5VP5TMbBniOLgVzF935O5AzZPvfxfPKT89 GgT02BT1KfDABb8kZ/D4aZrONL64T+8xLnkJUUFs+14AIxLpbatKurirHwvHvq9r wJrpOlz+vOrTbzg+ev7lxyC54ZWGDXcUm0d5pB+DFi37CocQIjIALAdrdrC04xj1 vcven3zYoBQ2ZsJAo4zNbsQF7bVabQCUSo4FVe4eVDtCC7l1uB/0uC6JIJNA4suN PL1vuTyiJWkV1iDP9CgzSA2Lk54yyTBr -----END CERTIFICATE-----Generated at Tue Nov 4 19:04:21 2025 by rpki-client