$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft File: 6_d1-2stKz-APD8za4MAqL5r6YU.mft (raw, json) Hash identifier: R69KUPtv2eppnmye9KH1xdxAGKS9g6d3SYyLoVXPpfw= Subject key identifier: 65:70:5F:81:9E:41:82:E5:86:20:74:73:DD:54:44:D1:25:9E:25:03 Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 Certificate issuer: /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft Manifest number: 0128 Signing time: Wed 05 Nov 2025 04:46:49 +0000 Manifest this update: Wed 05 Nov 2025 04:46:48 +0000 Manifest next update: Wed 12 Nov 2025 04:46:48 +0000 Files and hashes: 1: 6_d1-2stKz-APD8za4MAqL5r6YU.crl (hash: EESagoheFarGB25ZhFr9dqouzKFGekyHtmCzWiPKPiI=) 2: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (hash: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:46:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Validity Not Before: Nov 5 04:46:48 2025 GMT Not After : Nov 12 04:46:48 2025 GMT Subject: CN=690ad6b8-a8b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:c7:2f:fe:8c:66:a1:89:75:cc:d2:ff:e3: ed:21:f9:fc:95:8a:90:a1:f1:92:da:b1:cb:18:3d: fc:88:52:94:77:e6:86:e5:95:d3:e3:49:d3:96:2a: 91:27:45:97:c3:fa:4c:d2:be:d2:cb:dd:cb:7d:2a: d2:b4:6f:b2:77:f8:0f:52:8b:03:e6:71:5d:dd:02: 94:46:73:67:19:20:06:8b:8e:75:f5:d0:d8:c0:d6: e1:75:1b:b1:4f:ea:96:27:3f:40:b6:4b:8e:1f:41: 93:6a:36:29:8e:c8:2b:95:21:e1:e2:f8:c2:5b:31: 8f:92:b1:fe:1c:5c:07:af:ce:1f:48:1f:18:ff:1f: e7:6b:6c:a8:20:01:5a:e4:4d:f8:1e:57:ed:26:f2: b8:f8:45:e7:88:a9:3c:ae:8f:72:cd:d0:62:01:cb: 0f:50:e3:c0:60:c7:3c:d7:a1:69:0e:f6:81:14:b2: 69:d3:0d:51:2e:e3:1f:0f:47:90:a3:8d:45:89:a4: d7:ff:de:2d:2a:45:20:a6:73:15:a4:e1:20:40:e9: b1:4a:38:0a:d9:83:3d:7b:25:91:df:d4:d7:d7:51: 02:75:82:39:f1:6d:d7:13:6b:3d:ff:f5:8b:c5:bd: db:7f:99:1b:1d:0f:ea:d0:f8:39:52:ed:9e:5d:27: 74:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:70:5F:81:9E:41:82:E5:86:20:74:73:DD:54:44:D1:25:9E:25:03 X509v3 Authority Key Identifier: keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:3e:1b:de:5b:16:22:f4:ce:91:68:f3:41:7a:cc:82:d0:0a: 5e:db:b2:f2:5a:fd:a7:4f:41:9c:99:01:c3:2b:53:7c:0d:2d: 9e:c4:73:1e:3c:12:f3:da:d5:91:0d:76:d2:8b:72:5a:f6:75: e8:dc:6c:cc:df:d1:e0:f6:b4:c6:5d:b4:7d:db:60:6d:c5:dc: b9:27:dc:64:ae:da:fb:8a:53:06:9e:55:51:3a:bb:6e:7e:a5: 80:16:ea:ff:9f:43:51:6a:cb:bb:85:af:e7:5c:80:94:07:18: 00:d9:bc:0d:0a:0c:97:b1:e8:39:4c:37:59:4e:b4:51:64:fc: 2c:65:eb:71:0b:e2:e8:a3:a7:96:45:0f:34:8a:65:34:68:f5: 13:32:61:c9:a3:39:dc:b4:82:83:bb:3a:80:40:05:a2:2a:88: 5d:a6:bd:39:0d:8b:6a:96:cb:cb:3a:12:33:ad:0c:a4:43:95: b4:e2:2d:40:87:30:d4:68:f3:7c:0f:49:db:d3:2d:29:53:58: 4f:9d:76:e0:81:dd:a6:30:01:ff:a2:53:7c:57:9d:32:a7:32: 03:ca:06:58:fd:69:25:25:e0:d2:15:c8:d8:c0:2a:07:ff:df: ec:c0:7d:ba:7d:58:ed:69:08:dd:09:3b:82:a4:0b:f8:49:fd: c4:1b:ab:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1RTYxMTAvBgNVBAUTKEVCRjc3NUZCNkIyRDJCM0Y4MDNDM0YzMzZCODMwMEE4 QkU2QkU5ODUwHhcNMjUxMTA1MDQ0NjQ4WhcNMjUxMTEyMDQ0NjQ4WjAYMRYwFAYD VQQDEw02OTBhZDZiOC1hOGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwP3HL/6MZqGJdczS/+PtIfn8lYqQofGS2rHLGD38iFKUd+aG5ZXT40nTliqR J0WXw/pM0r7Sy93LfSrStG+yd/gPUosD5nFd3QKURnNnGSAGi4519dDYwNbhdRux T+qWJz9AtkuOH0GTajYpjsgrlSHh4vjCWzGPkrH+HFwHr84fSB8Y/x/na2yoIAFa 5E34HlftJvK4+EXniKk8ro9yzdBiAcsPUOPAYMc816FpDvaBFLJp0w1RLuMfD0eQ o41FiaTX/94tKkUgpnMVpOEgQOmxSjgK2YM9eyWR39TX11ECdYI58W3XE2s9//WL xb3bf5kbHQ/q0Pg5Uu2eXSd01wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGVwX4Ge QYLlhiB0c91URNElniUDMB8GA1UdIwQYMBaAFOv3dftrLSs/gDw/M2uDAKi+a+mF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVFNi9BODRCQzNCOEYw QTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6LUFQRDh6YTRNQXFMNXI2 WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZfZDEtMnN0S3otQVBEOHphNE1BcUw1cjZZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NjVFNi9BODRCQzNCOEYwQTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6 LUFQRDh6YTRNQXFMNXI2WVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1PhveWxYi9M6RaPNBesyC0Ape27LyWv2nT0GcmQHDK1N8DS2exHMe PBLz2tWRDXbSi3Ja9nXo3GzM39Hg9rTGXbR922Btxdy5J9xkrtr7ilMGnlVROrtu fqWAFur/n0NRasu7ha/nXICUBxgA2bwNCgyXseg5TDdZTrRRZPwsZetxC+Loo6eW RQ80imU0aPUTMmHJoznctIKDuzqAQAWiKohdpr05DYtqlsvLOhIzrQykQ5W04i1A hzDUaPN8D0nb0y0pU1hPnXbggd2mMAH/olN8V50ypzIDygZY/WklJeDSFcjYwCoH /9/swH26fVjtaQjdCTuCpAv4Sf3EG6v3 -----END CERTIFICATE-----Generated at Wed Nov 5 14:57:20 2025 by rpki-client