$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: H0g/2eZFWpYny/nih7yKv62Q0cMdN45+fMdZxGKpF5w= Subject key identifier: 6E:CB:E4:84:B1:26:64:E3:F3:BA:2C:5E:78:77:AE:7A:A7:46:7E:AE Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 1767 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 175D Signing time: Tue 04 Nov 2025 16:42:11 +0000 Manifest this update: Tue 04 Nov 2025 16:42:10 +0000 Manifest next update: Tue 11 Nov 2025 16:42:10 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: xThX504TR1vPIEXPS108VE1KbTSO/3cO1/WuDIH91P4=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5991 (0x1767) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Nov 4 16:42:10 2025 GMT Not After : Nov 11 16:42:10 2025 GMT Subject: CN=690a2ce2-2f0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7c:17:56:3f:30:4b:86:6b:ed:48:a8:1b:a1: 08:fd:9b:4f:e3:89:77:98:fd:dd:4f:81:83:62:d9: 01:79:38:0b:1a:50:36:09:e9:0c:1f:4b:5f:aa:8c: f8:c9:85:8b:c4:37:4a:f4:aa:3a:a1:25:1b:f2:a1: f2:4b:2a:df:31:09:8b:41:56:46:45:b6:6c:94:eb: 18:da:f0:93:a7:1b:02:ef:70:15:57:81:51:b5:a0: e3:8c:66:4c:1a:3a:7d:3c:80:47:ab:c4:9b:97:32: 9b:82:20:a5:a9:57:05:a4:14:d9:bf:ac:28:b2:40: 20:bb:e1:f1:49:26:aa:27:eb:2d:20:39:8d:4e:4a: 17:8d:2e:a2:0a:e3:ee:48:b1:fe:82:92:cd:67:fc: 3e:bc:37:38:01:3c:23:4b:2b:51:d0:c0:8d:93:62: be:9b:1d:1b:9a:5c:bc:2f:ec:c9:f9:d7:8b:d3:a0: a6:e8:57:af:dd:26:92:e8:b6:33:bc:d0:c5:0a:ef: a4:ed:ce:dd:13:9c:6b:ae:65:a3:8a:81:3d:06:69: 41:d5:bd:45:b6:09:ee:f1:f5:b8:d3:d1:eb:21:44: f1:f0:74:6c:0d:df:c1:0c:e6:a4:ed:0d:f8:88:18: a2:f5:cc:3d:76:f5:ba:e7:91:a1:7b:ee:c6:c8:39: 92:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CB:E4:84:B1:26:64:E3:F3:BA:2C:5E:78:77:AE:7A:A7:46:7E:AE X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:87:1b:c6:22:8b:a8:6e:f9:c5:a9:95:e3:b5:1f:86:44: ec:80:77:be:59:9a:a7:e4:33:d7:4e:c3:e6:fe:98:c4:0f:9c: 48:f2:7c:c9:8d:de:ce:3c:1c:0c:d4:2b:cd:01:d1:1b:4f:30: 1d:9c:24:68:15:98:96:46:c1:2e:76:45:8d:f6:79:4c:d5:9f: 54:c4:b0:01:b0:c5:1c:c9:53:f6:c5:8e:3d:de:74:6a:41:56: 8a:34:ea:72:e7:d0:78:01:17:6f:c3:03:04:33:3a:53:81:21: 67:af:c0:dd:16:94:78:c6:02:c6:53:78:70:85:ce:e6:dc:0b: fc:82:71:26:4e:ad:2e:63:72:6b:6a:d6:a9:f5:78:41:30:47: 27:0a:be:bd:e6:c7:a7:54:b0:35:14:6e:81:47:ae:d9:84:17: a0:ef:b5:c3:6f:61:9b:77:03:21:da:e8:b4:8e:a8:37:51:fc: a0:73:61:b7:50:c4:2c:08:c8:fc:df:db:b4:6e:a0:c2:18:f6: 91:66:df:ae:3b:a1:49:05:25:5d:78:a0:ea:a5:94:ab:8c:b5: 6a:e1:5b:ff:52:42:24:79:9c:b5:c2:bf:d3:f5:5b:a3:f5:f5: 9a:99:9d:2d:4b:38:2d:25:38:a8:9d:b1:90:c1:c8:d3:ee:fd: 93:77:de:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF2cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUxMTA0MTY0MjEwWhcNMjUxMTExMTY0MjEwWjAYMRYwFAYD VQQDEw02OTBhMmNlMi0yZjBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwXwXVj8wS4Zr7UioG6EI/ZtP44l3mP3dT4GDYtkBeTgLGlA2CekMH0tfqoz4 yYWLxDdK9Ko6oSUb8qHySyrfMQmLQVZGRbZslOsY2vCTpxsC73AVV4FRtaDjjGZM Gjp9PIBHq8SblzKbgiClqVcFpBTZv6woskAgu+HxSSaqJ+stIDmNTkoXjS6iCuPu SLH+gpLNZ/w+vDc4ATwjSytR0MCNk2K+mx0bmly8L+zJ+deL06Cm6Fev3SaS6LYz vNDFCu+k7c7dE5xrrmWjioE9BmlB1b1Ftgnu8fW409HrIUTx8HRsDd/BDOak7Q34 iBii9cw9dvW655Ghe+7GyDmSpQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG7L5ISx JmTj87osXnh3rnqnRn6uMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMnIcbxiKLqG75xamV47UfhkTsgHe+WZqn5DPXTsPm/pjED5xI8nzJ jd7OPBwM1CvNAdEbTzAdnCRoFZiWRsEudkWN9nlM1Z9UxLABsMUcyVP2xY493nRq QVaKNOpy59B4ARdvwwMEMzpTgSFnr8DdFpR4xgLGU3hwhc7m3Av8gnEmTq0uY3Jr atap9XhBMEcnCr695senVLA1FG6BR67ZhBeg77XDb2GbdwMh2ui0jqg3Ufygc2G3 UMQsCMj839u0bqDCGPaRZt+uO6FJBSVdeKDqpZSrjLVq4Vv/UkIkeZy1wr/T9Vuj 9fWamZ0tSzgtJTionbGQwcjT7v2Td97C -----END CERTIFICATE-----Generated at Wed Nov 5 13:27:42 2025 by rpki-client