$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: 9CMNZMI8qy1nB+lexDSuhObwetemznCsxEfmC+MpY6Q= Subject key identifier: B6:C4:E5:E4:14:61:6E:59:0D:BD:A0:C1:9C:E4:CC:0A:94:68:07:E3 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 022F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 022A Signing time: Wed 05 Nov 2025 02:07:36 +0000 Manifest this update: Wed 05 Nov 2025 02:07:35 +0000 Manifest next update: Wed 12 Nov 2025 02:07:35 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: ItNZbXExfV6SsPeN5V2hwDrwdeHfICHu5eB9gyhD4eM=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 02:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 559 (0x22f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Nov 5 02:07:35 2025 GMT Not After : Nov 12 02:07:35 2025 GMT Subject: CN=690ab167-9fd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:74:4b:ba:bb:97:45:03:5a:9a:31:da:19: 33:a6:4a:bd:31:5e:7c:ff:82:8f:f0:92:63:63:4d: 58:21:30:86:48:09:f3:2e:a6:c1:9b:aa:99:6a:a3: 3d:4d:0c:f4:a6:6f:5e:de:b9:27:5f:18:4b:2e:ec: 80:eb:ee:33:b6:f8:17:91:a9:66:d1:ad:47:f8:b0: cc:44:44:b3:cd:10:ff:cd:5a:69:80:aa:48:cb:18: ac:85:2f:d2:6b:5d:70:9f:f0:fa:70:e8:3d:8b:33: 17:10:16:06:fd:a6:45:29:3c:ae:8e:52:65:b0:a5: 66:fe:84:22:a3:6d:f6:da:6b:27:14:a8:7a:15:61: 70:bb:6e:f1:de:cd:bd:45:47:28:20:28:75:14:c5: dd:f6:ff:67:85:6b:d4:7a:32:f4:ba:ec:e8:d0:bf: 44:20:03:e4:52:5f:cc:60:84:23:1c:b2:ea:35:90: 29:a7:14:02:c1:ef:1e:84:0f:20:04:b3:dd:d9:ea: 3e:f3:70:d4:49:5d:03:2e:78:f7:e8:78:f1:95:c2: ed:a7:4b:33:15:ee:66:cc:46:33:3b:df:52:3b:12: e4:9f:a3:a8:2f:02:e2:50:21:0e:77:47:f6:04:ef: f6:8d:17:c5:bc:32:47:12:bb:fb:31:cd:b0:00:38: 38:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C4:E5:E4:14:61:6E:59:0D:BD:A0:C1:9C:E4:CC:0A:94:68:07:E3 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:ec:5a:cf:80:19:e6:96:9a:7c:53:53:18:a0:c8:71:c8:5e: 59:77:28:62:fc:d8:e1:b1:67:49:61:2d:44:3a:7c:f3:0e:15: f6:3c:f2:96:ab:63:cd:c7:60:de:93:8e:80:18:84:9d:31:ef: 49:8f:7a:4f:c2:c6:52:32:07:40:eb:af:96:2e:67:bd:56:30: 68:46:b7:cb:5a:0d:a3:86:f4:4a:97:ec:2f:86:b0:7a:fd:c2: 56:e9:4a:c2:ef:89:c0:83:c9:20:2c:7e:c1:f6:6c:56:1a:f8: f6:00:96:db:f6:81:91:11:f5:06:b8:b3:33:09:41:37:b6:4c: 9f:f9:9f:a9:13:6b:92:c0:ff:0e:c8:b8:6b:d5:f2:69:29:a2: 25:42:bb:1a:4b:d7:15:05:a2:b7:70:1a:de:cc:89:bb:4b:c7: c1:01:66:4c:14:ef:fc:8e:14:49:ed:51:79:ab:58:ae:04:b0: 15:82:c9:a2:4a:8c:36:21:c1:d4:e7:10:d8:93:6c:24:9e:35: 6e:8a:9f:0d:d2:b6:b7:5d:70:b2:50:18:0d:f0:24:a6:63:b5: 1f:93:87:97:77:f0:19:ef:78:ac:d5:66:e2:f7:42:97:c4:e8: c8:6e:d0:dc:ac:48:4e:9d:85:aa:70:4d:7d:c7:6d:1e:f1:a5: e6:04:0f:27 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUxMTA1MDIwNzM1WhcNMjUxMTEyMDIwNzM1WjAYMRYwFAYD VQQDEw02OTBhYjE2Ny05ZmQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuZV0S7q7l0UDWpox2hkzpkq9MV58/4KP8JJjY01YITCGSAnzLqbBm6qZaqM9 TQz0pm9e3rknXxhLLuyA6+4ztvgXkalm0a1H+LDMRESzzRD/zVppgKpIyxishS/S a11wn/D6cOg9izMXEBYG/aZFKTyujlJlsKVm/oQio2322msnFKh6FWFwu27x3s29 RUcoICh1FMXd9v9nhWvUejL0uuzo0L9EIAPkUl/MYIQjHLLqNZAppxQCwe8ehA8g BLPd2eo+83DUSV0DLnj36HjxlcLtp0szFe5mzEYzO99SOxLkn6OoLwLiUCEOd0f2 BO/2jRfFvDJHErv7Mc2wADg4WQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLbE5eQU YW5ZDb2gwZzkzAqUaAfjMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi7FrPgBnmlpp8U1MYoMhxyF5Zdyhi/NjhsWdJYS1EOnzzDhX2PPKW q2PNx2Dek46AGISdMe9Jj3pPwsZSMgdA66+WLme9VjBoRrfLWg2jhvRKl+wvhrB6 /cJW6UrC74nAg8kgLH7B9mxWGvj2AJbb9oGREfUGuLMzCUE3tkyf+Z+pE2uSwP8O yLhr1fJpKaIlQrsaS9cVBaK3cBrezIm7S8fBAWZMFO/8jhRJ7VF5q1iuBLAVgsmi Sow2IcHU5xDYk2wknjVuip8N0ra3XXCyUBgN8CSmY7Ufk4eXd/AZ73is1Wbi90KX xOjIbtDcrEhOnYWqcE19x20e8aXmBA8n -----END CERTIFICATE-----Generated at Wed Nov 5 05:49:46 2025 by rpki-client