$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: C/hKYf/kO4LrQkk+EJr8WlG2GTzb6JMCK16PiHA0/g8= Subject key identifier: 16:4D:12:7E:50:8D:8F:B1:B7:D8:76:F5:A8:45:A7:22:13:94:3A:1C Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1292 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 128B Signing time: Tue 04 Nov 2025 17:10:54 +0000 Manifest this update: Tue 04 Nov 2025 17:10:54 +0000 Manifest next update: Tue 11 Nov 2025 17:10:54 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: ysSAvJ9DMhX2g9M92aQma+0ZIBf/B0slb7YKug8RJbQ=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 17:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4754 (0x1292) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Nov 4 17:10:54 2025 GMT Not After : Nov 11 17:10:54 2025 GMT Subject: CN=690a339e-d358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:67:fb:70:df:40:37:77:a1:0b:2c:f3:0c:a4: e8:5a:e6:3b:df:13:5e:67:e3:a8:b1:29:31:2e:ac: 20:ee:3f:bc:d7:2e:03:c1:56:70:f4:fe:c3:3b:bd: 06:b5:6b:f4:55:9a:96:96:7c:f0:03:d7:80:2a:bd: 32:8c:12:56:82:95:5f:4c:47:59:30:c3:74:c4:91: bf:46:d0:3e:f5:1e:35:ed:fd:a7:cd:a9:be:39:85: e1:f2:b4:65:13:d3:c8:5e:ed:83:99:ac:fc:63:d1: 8f:a7:2f:23:df:3f:de:5b:c1:33:1b:97:0d:91:04: d0:24:49:10:bd:fb:e9:0b:ff:ad:5e:5f:29:f4:ac: a3:20:93:f6:8e:3b:85:a5:47:4b:84:a0:01:cd:f0: c0:9e:b1:cf:e2:4c:a8:e8:df:c1:0f:d5:39:e7:c7: 47:ac:76:aa:dd:07:2a:6f:49:b2:47:cd:8a:80:40: 62:8c:9b:1f:b0:5f:14:e9:50:a2:82:71:d8:10:8b: b2:20:2f:84:5c:87:b8:6f:e7:fb:50:89:94:61:b2: a4:24:ed:e2:a5:6e:27:65:96:0f:8b:54:34:01:1b: c2:6b:ad:65:2f:ec:80:f1:2a:9f:17:81:91:6f:e3: 8f:4e:fe:59:f2:95:06:a1:cf:9b:50:4d:01:bf:67: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:4D:12:7E:50:8D:8F:B1:B7:D8:76:F5:A8:45:A7:22:13:94:3A:1C X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:c7:b2:6a:28:60:e4:e4:57:23:f6:e1:a4:65:87:f7:18:4f: 1b:ee:0b:65:51:3c:52:22:d3:eb:fc:2e:58:75:7c:dc:34:9a: 2d:2a:7a:f7:36:c2:f2:4f:3c:60:cd:69:97:0b:89:f0:4e:1b: 44:f5:45:14:26:cd:6d:61:9d:78:8d:91:09:83:a9:ba:b8:e0: 02:f4:87:3f:c0:22:50:f3:dd:ac:47:a0:14:3f:4e:bc:d3:f6: ea:d9:b0:34:a5:58:7e:60:4b:77:88:6b:2a:9d:c1:5c:f5:f3: 9e:88:f8:77:90:7f:4b:f8:ee:a7:02:f2:7f:ed:6d:07:eb:32: 91:15:83:f4:ca:6e:ee:a0:d5:37:7d:d4:4a:f5:4f:44:74:6b: 2f:68:d2:ec:c9:c0:38:85:ed:75:2f:c2:ab:f7:ca:7f:45:ac: f3:f0:ee:7e:90:bb:8b:f6:ed:4b:0f:cd:cf:97:51:1b:42:68: c6:8d:c8:7b:52:97:a8:c4:4a:27:96:29:bd:3c:34:29:fa:83: f8:44:3d:54:1d:dd:3d:80:27:b5:96:9f:6a:99:e9:d2:51:4c: 22:c8:7d:27:da:e3:d6:ea:bb:dd:78:17:23:95:16:c6:07:ad: aa:4e:58:86:1e:74:56:a2:59:5a:a5:81:ed:d6:5d:95:95:78: b9:6b:32:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUxMTA0MTcxMDU0WhcNMjUxMTExMTcxMDU0WjAYMRYwFAYD VQQDEw02OTBhMzM5ZS1kMzU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2f7cN9AN3ehCyzzDKToWuY73xNeZ+OosSkxLqwg7j+81y4DwVZw9P7DO70G tWv0VZqWlnzwA9eAKr0yjBJWgpVfTEdZMMN0xJG/RtA+9R417f2nzam+OYXh8rRl E9PIXu2Dmaz8Y9GPpy8j3z/eW8EzG5cNkQTQJEkQvfvpC/+tXl8p9KyjIJP2jjuF pUdLhKABzfDAnrHP4kyo6N/BD9U558dHrHaq3Qcqb0myR82KgEBijJsfsF8U6VCi gnHYEIuyIC+EXIe4b+f7UImUYbKkJO3ipW4nZZYPi1Q0ARvCa61lL+yA8SqfF4GR b+OPTv5Z8pUGoc+bUE0Bv2dMwQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBZNEn5Q jY+xt9h29ahFpyITlDocMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBox7JqKGDk5Fcj9uGkZYf3GE8b7gtlUTxSItPr/C5YdXzcNJotKnr3 NsLyTzxgzWmXC4nwThtE9UUUJs1tYZ14jZEJg6m6uOAC9Ic/wCJQ892sR6AUP068 0/bq2bA0pVh+YEt3iGsqncFc9fOeiPh3kH9L+O6nAvJ/7W0H6zKRFYP0ym7uoNU3 fdRK9U9EdGsvaNLsycA4he11L8Kr98p/Razz8O5+kLuL9u1LD83Pl1EbQmjGjch7 UpeoxEonlim9PDQp+oP4RD1UHd09gCe1lp9qmenSUUwiyH0n2uPW6rvdeBcjlRbG B62qTliGHnRWollapYHt1l2VlXi5azIp -----END CERTIFICATE-----Generated at Wed Nov 5 05:45:23 2025 by rpki-client