$ rpki-client -vvf rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft File: dt6sBgRg9vilvVgpnFOryvmx01g.mft (raw, json) Hash identifier: OkTUWnjlB/wYsW9kY3qhEBpmh3Z+3V7P8NZ1c7epc4E= Subject key identifier: CC:7A:BC:4E:11:9E:62:83:64:EB:00:8C:A9:A6:12:61:3A:75:2B:88 Authority key identifier: 76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 Certificate issuer: /CN=A9171172/serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Certificate serial: 07D2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft Manifest number: 07C6 Signing time: Sun 16 Nov 2025 20:10:12 +0000 Manifest this update: Sun 16 Nov 2025 20:10:11 +0000 Manifest next update: Sun 23 Nov 2025 20:10:11 +0000 Files and hashes: 1: dt6sBgRg9vilvVgpnFOryvmx01g.crl (hash: e7W69gf5tKFnitd/8PR3xfBfQGBfeZGELbOCAMgBsc4=) 2: 0A94FC36198711EB80EAEF4CC4F9AE02.roa (hash: pSgSIQQUaLX2o2nTmQmGl/Qpmc9pAZuJpTvLRIL92IA=) 3: 6DEC60FC198811EBAD4C384FC4F9AE02.roa (hash: 00f5UezOFyyqRBMxbkiUS7o0hS0GGG4xnKYK/4mdm8c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 23 Nov 2025 20:10:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2002 (0x7d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171172, serialNumber=76DEAC060460F6F8A5BD58299C53ABCAF9B1D358 Validity Not Before: Nov 16 20:10:11 2025 GMT Not After : Nov 23 20:10:11 2025 GMT Subject: CN=691a2fa3-60aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d3:3b:c5:69:8a:1a:06:fd:c1:c4:ae:79:7c: 30:b7:7a:e5:74:21:2c:0d:27:ea:18:ab:c8:ce:98: a0:c7:51:9a:14:a0:57:bb:cc:9d:4b:06:46:40:b0: 5e:bc:55:16:fe:9f:39:27:fe:6c:66:cb:26:29:06: 5f:63:54:2d:70:37:8b:96:a5:d4:47:b9:f1:fb:6c: 40:79:c7:fa:8c:d3:ba:97:d4:35:75:f8:8a:9b:cb: 89:45:7b:4f:61:a2:52:b1:93:cf:ea:0d:bf:07:88: 15:2d:38:58:03:cc:29:a6:ab:0f:cb:b1:88:9e:bc: 69:8e:e1:68:4b:66:26:6f:13:4b:5c:57:d1:a0:6e: 21:da:04:49:19:be:24:5c:75:f0:5f:21:fb:35:c5: 9f:2c:79:88:48:28:15:a6:41:cd:da:d8:4d:28:d0: 99:cf:f4:75:f9:b5:03:9e:23:1b:38:a2:81:ae:b6: 98:e3:16:fa:e2:de:42:a2:14:f1:79:c0:00:2f:2e: 6f:ce:f9:b5:c3:90:74:fd:e1:f1:35:c7:8a:4e:c9: d7:36:b2:8e:9a:f4:86:08:8a:53:0a:61:f7:a1:32: ed:19:14:31:f2:2c:d5:d2:88:ba:21:86:f0:60:1b: 25:6c:b0:02:8c:74:4e:41:fe:8d:52:70:0a:a8:12: 4f:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:7A:BC:4E:11:9E:62:83:64:EB:00:8C:A9:A6:12:61:3A:75:2B:88 X509v3 Authority Key Identifier: keyid:76:DE:AC:06:04:60:F6:F8:A5:BD:58:29:9C:53:AB:CA:F9:B1:D3:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dt6sBgRg9vilvVgpnFOryvmx01g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171172/81583ABE18BE11EBAC10DE46C4F9AE02/dt6sBgRg9vilvVgpnFOryvmx01g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:83:4b:3b:d7:49:53:e8:bb:81:6a:83:92:86:63:b0:e7:ea: 9e:44:3a:a8:82:29:ec:8a:17:2c:59:77:86:fe:df:fc:09:7b: 6d:f8:93:c1:b7:af:66:5e:47:88:eb:6a:c3:bc:11:61:81:2e: f4:1e:78:b4:47:06:03:e2:83:fb:a2:89:e7:1b:77:a6:20:7f: 72:ff:81:72:47:d5:95:b7:74:ad:7d:06:5a:93:f9:ba:23:91: b5:3d:dc:93:e1:29:c4:95:33:41:40:43:b5:91:f5:4d:a8:4e: e3:0d:97:5c:0c:90:a6:7f:7a:1f:13:67:45:f6:51:ca:1f:2d: 87:0d:bb:09:d3:5c:47:b0:e9:d4:67:27:34:5f:9d:ca:31:ff: 9a:09:99:37:e5:50:c6:fe:fe:b9:a7:e4:45:76:64:77:9e:bb: 85:cf:db:02:23:bf:79:3c:54:fb:9d:22:41:6c:97:f6:7a:b5: 6a:4f:e3:f9:dc:c4:00:8a:a4:63:cb:b4:4f:c6:21:47:37:0f: 0f:99:14:78:75:dd:6a:f7:ed:48:63:73:90:02:55:73:50:2e: 0c:24:2b:84:61:f1:91:d8:1e:93:c7:78:47:3d:13:8d:11:cd: 12:3c:a2:5f:2c:a0:2d:8f:8c:4e:c8:0d:da:c2:61:a5:00:30: 6f:b5:f4:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzExNzIxMTAvBgNVBAUTKDc2REVBQzA2MDQ2MEY2RjhBNUJENTgyOTlDNTNBQkNB RjlCMUQzNTgwHhcNMjUxMTE2MjAxMDExWhcNMjUxMTIzMjAxMDExWjAYMRYwFAYD VQQDEw02OTFhMmZhMy02MGFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAztM7xWmKGgb9wcSueXwwt3rldCEsDSfqGKvIzpigx1GaFKBXu8ydSwZGQLBe vFUW/p85J/5sZssmKQZfY1QtcDeLlqXUR7nx+2xAecf6jNO6l9Q1dfiKm8uJRXtP YaJSsZPP6g2/B4gVLThYA8wppqsPy7GInrxpjuFoS2YmbxNLXFfRoG4h2gRJGb4k XHXwXyH7NcWfLHmISCgVpkHN2thNKNCZz/R1+bUDniMbOKKBrraY4xb64t5CohTx ecAALy5vzvm1w5B0/eHxNceKTsnXNrKOmvSGCIpTCmH3oTLtGRQx8izV0oi6IYbw YBslbLACjHROQf6NUnAKqBJP8wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMx6vE4R nmKDZOsAjKmmEmE6dSuIMB8GA1UdIwQYMBaAFHberAYEYPb4pb1YKZxTq8r5sdNY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTE3Mi84MTU4M0FCRTE4 QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2aWx2VmdwbkZPcnl2bXgw MWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R0NnNCZ1JnOXZpbHZWZ3BuRk9yeXZteDAxZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTE3Mi84MTU4M0FCRTE4QkUxMUVCQUMxMERFNDZDNEY5QUUwMi9kdDZzQmdSZzl2 aWx2VmdwbkZPcnl2bXgwMWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1g0s710lT6LuBaoOShmOw5+qeRDqoginsihcsWXeG/t/8CXtt+JPB t69mXkeI62rDvBFhgS70Hni0RwYD4oP7oonnG3emIH9y/4FyR9WVt3StfQZak/m6 I5G1PdyT4SnElTNBQEO1kfVNqE7jDZdcDJCmf3ofE2dF9lHKHy2HDbsJ01xHsOnU Zyc0X53KMf+aCZk35VDG/v65p+RFdmR3nruFz9sCI795PFT7nSJBbJf2erVqT+P5 3MQAiqRjy7RPxiFHNw8PmRR4dd1q9+1IY3OQAlVzUC4MJCuEYfGR2B6Tx3hHPRON Ec0SPKJfLKAtj4xOyA3awmGlADBvtfTc -----END CERTIFICATE-----Generated at Tue Nov 18 07:02:50 2025 by rpki-client