$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: sipA17t5MXp8ygKcdHFJoy4v7jM6qYALJV8cETIOvY4= Subject key identifier: 2B:EA:66:C6:AB:87:D4:31:EE:5F:5D:A1:30:0C:7C:60:EA:A6:69:63 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0860 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 0856 Signing time: Fri 31 Oct 2025 20:52:34 +0000 Manifest this update: Fri 31 Oct 2025 20:52:34 +0000 Manifest next update: Fri 07 Nov 2025 20:52:34 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: GZEms2za4FKCkTC8KPJuZnKTH+bwE1orCX7hKrWUJbo=) 2: 82001182986511EFBFE02134C4F9AE02.roa (hash: TLQPV8U5lGZB70Fi67w4+2isfFUOL9hf77z3nqbL1o8=) 3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: 6OWIgJkNxstxhvie89g5RYpzHfbz0XePQatIfAXwpWw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 20:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2144 (0x860) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Oct 31 20:52:34 2025 GMT Not After : Nov 7 20:52:34 2025 GMT Subject: CN=69052192-01ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:57:f8:97:df:b2:cb:40:9f:a0:66:7b:70:05: 39:c7:f2:0b:b7:54:70:a6:92:58:ee:9c:5f:9f:e4: 77:cb:ed:fd:89:1a:3c:f0:49:f0:52:21:24:8c:8a: 16:70:23:97:52:94:ff:12:e1:b0:24:56:35:4b:97: 1f:5c:d7:7c:86:ec:44:fb:1a:19:ee:a6:c1:99:6d: 91:56:94:d7:b2:47:3c:5e:36:3b:71:e5:cd:79:fd: 01:5a:74:4b:28:1f:ce:0f:65:f2:95:de:6c:da:5c: 37:c1:79:cd:87:9b:6d:e9:2e:57:e5:00:db:53:b2: f5:1b:66:d1:44:67:f2:7a:28:72:a1:e4:2d:09:07: 51:12:9c:a6:c5:65:ca:16:cd:ee:c5:2e:39:ac:29: ac:cf:df:0e:75:07:f3:6e:b0:4a:f9:0e:57:40:d9: de:f5:0d:ab:7f:0d:24:e0:7b:c2:e0:9a:08:de:4a: 84:80:96:e5:69:6c:7e:fc:a1:50:35:58:33:63:55: 86:97:12:41:08:0e:80:65:9f:72:4c:cb:54:05:b9: a2:5e:2f:d8:d2:03:2b:7d:a6:a2:ab:9a:fc:b2:38: 3a:ab:3b:24:ce:41:b4:4b:e3:2f:cf:10:66:cd:06: b3:4c:43:b1:ba:3e:6f:c9:67:52:a7:1e:8a:9e:9c: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EA:66:C6:AB:87:D4:31:EE:5F:5D:A1:30:0C:7C:60:EA:A6:69:63 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:3b:b3:14:84:3b:03:83:ea:7e:c3:b4:a0:59:4a:83:6b:c6: b8:73:5f:31:de:57:6f:ed:52:73:16:31:ee:a2:c5:0e:12:a8: ae:9b:50:5d:8d:72:18:19:c8:a0:60:db:ad:63:93:8d:62:05: e5:41:1e:3a:a7:a6:5b:34:2a:3e:b5:bb:7b:8a:08:82:a3:84: 58:96:52:0e:c0:40:15:0d:a0:2c:87:a1:3e:5f:16:9b:49:7e: 72:a3:56:61:5b:d1:58:c6:26:ef:15:ae:34:11:64:c1:75:1b: 4b:de:eb:5c:66:bc:48:d9:7a:cf:1c:38:8e:4f:dc:d8:0b:50: ed:09:a5:8e:57:50:4a:7b:4e:c4:b3:30:e3:01:ea:b2:8e:98: 9a:78:3e:3d:ff:8b:bd:81:51:72:a7:d3:2c:9e:3b:be:53:4f: 6e:e9:e5:67:14:e1:74:44:0d:0c:91:4f:62:66:33:89:2a:ea: 60:20:39:9a:27:43:61:59:e2:4c:0d:82:50:c5:24:9c:66:f2: f4:cd:0f:44:1c:7e:65:48:7a:8f:de:b6:58:99:7b:dd:75:5a: 53:45:ab:71:8b:00:91:06:0a:08:84:d1:e0:a7:69:38:5c:4e: a2:8f:40:17:3a:99:c5:3e:45:9a:fd:17:9c:5f:ed:be:f4:44: ee:f9:09:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUxMDMxMjA1MjM0WhcNMjUxMTA3MjA1MjM0WjAYMRYwFAYD VQQDEw02OTA1MjE5Mi0wMWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlf4l9+yy0CfoGZ7cAU5x/ILt1RwppJY7pxfn+R3y+39iRo88EnwUiEkjIoW cCOXUpT/EuGwJFY1S5cfXNd8huxE+xoZ7qbBmW2RVpTXskc8XjY7ceXNef0BWnRL KB/OD2Xyld5s2lw3wXnNh5tt6S5X5QDbU7L1G2bRRGfyeihyoeQtCQdREpymxWXK Fs3uxS45rCmsz98OdQfzbrBK+Q5XQNne9Q2rfw0k4HvC4JoI3kqEgJblaWx+/KFQ NVgzY1WGlxJBCA6AZZ9yTMtUBbmiXi/Y0gMrfaaiq5r8sjg6qzskzkG0S+MvzxBm zQazTEOxuj5vyWdSpx6KnpxOBQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCvqZsar h9Qx7l9doTAMfGDqpmljMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRO7MUhDsDg+p+w7SgWUqDa8a4c18x3ldv7VJzFjHuosUOEqium1Bd jXIYGcigYNutY5ONYgXlQR46p6ZbNCo+tbt7igiCo4RYllIOwEAVDaAsh6E+Xxab SX5yo1ZhW9FYxibvFa40EWTBdRtL3utcZrxI2XrPHDiOT9zYC1DtCaWOV1BKe07E szDjAeqyjpiaeD49/4u9gVFyp9Msnju+U09u6eVnFOF0RA0MkU9iZjOJKupgIDma J0NhWeJMDYJQxSScZvL0zQ9EHH5lSHqP3rZYmXvddVpTRatxiwCRBgoIhNHgp2k4 XE6ij0AXOpnFPkWa/RecX+2+9ETu+Qkb -----END CERTIFICATE-----Generated at Sat Nov 1 18:24:04 2025 by rpki-client