$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft File: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json) Hash identifier: MjzQxRphBEEbyOsxAqwJgWWK6g90DJAD6/Yvl6XUmOQ= Subject key identifier: DF:07:E0:AA:F3:7C:40:10:36:5C:59:2C:1D:98:A4:B8:B2:96:76:FC Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 Certificate issuer: /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Certificate serial: 34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft Manifest number: 31 Signing time: Mon 03 Nov 2025 07:39:16 +0000 Manifest this update: Mon 03 Nov 2025 07:39:15 +0000 Manifest next update: Mon 10 Nov 2025 07:39:15 +0000 Files and hashes: 1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: lmiza9sarAnugfMjnQPSSrw6jXrDIdFNRATz30o1g4c=) 2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: EWAFcedkF4KQQjCKc7J1r1NxEnBfI+A1I/eGLsYGq3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Validity Not Before: Nov 3 07:39:15 2025 GMT Not After : Nov 10 07:39:15 2025 GMT Subject: CN=69085c23-85fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c2:e6:69:76:bb:4c:e6:97:be:02:6d:3e:86: d7:91:51:78:29:52:47:15:84:b3:8e:aa:0e:5e:df: 62:d7:8b:7b:87:65:ae:8a:23:7f:16:6e:4b:76:1f: ca:72:01:0a:1b:ef:96:53:8d:4f:76:74:f8:e5:d6: e8:6c:46:fd:d2:2d:09:1f:df:6f:03:5c:60:66:34: ac:e8:a8:38:37:68:49:76:d6:01:45:41:da:00:0e: dd:f6:13:66:a9:dd:b6:c4:d9:12:22:8d:b7:f4:ea: f6:89:4d:7c:63:db:a4:e8:4c:47:b4:6b:75:d5:01: f0:cf:1f:78:01:ff:00:5c:2b:63:79:a5:19:d9:72: a2:84:ae:c8:6b:d2:33:8c:eb:89:50:d2:91:94:e7: 11:39:2d:ad:32:68:3a:36:c1:a2:b0:36:ce:b0:4a: 31:f4:f5:25:cf:99:c1:f2:e7:58:4d:5e:2b:5f:26: 01:7f:81:9f:c9:b0:b7:e2:38:a1:9e:1e:18:44:bc: 3a:48:9a:7e:08:99:3d:e2:da:dd:e6:ec:63:c2:98: 3e:52:79:f1:51:6d:f2:06:a4:48:31:a7:36:a2:d2: 42:4e:29:01:35:3d:67:3a:4d:72:9c:a8:97:c3:95: f9:e7:49:06:09:f3:46:5a:65:0a:88:db:57:cd:5a: 84:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:07:E0:AA:F3:7C:40:10:36:5C:59:2C:1D:98:A4:B8:B2:96:76:FC X509v3 Authority Key Identifier: keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:b5:63:39:41:b0:d2:7e:17:1c:22:b2:63:77:57:d7:7d:e5: 12:79:99:66:c9:65:a7:68:de:a6:e2:e7:c7:a7:6a:04:88:1a: 27:4d:76:dc:bb:14:be:50:9e:fc:35:ab:87:19:51:2b:cd:6c: a1:41:da:6c:ba:57:f1:91:0c:5f:68:e6:40:e8:42:b6:79:de: 69:44:d5:1c:e4:4b:4a:a5:ed:3e:83:39:22:42:4a:55:0e:18: 27:d5:69:7c:d0:68:59:23:ca:a3:c7:94:5d:be:eb:39:74:5c: d1:e8:b4:6d:38:3f:37:98:d1:9a:73:cb:f8:5f:ca:8e:7d:01: 92:3d:f6:1d:26:3b:28:5f:83:7e:69:d6:07:c5:09:59:f1:1f: e1:5c:34:dd:fe:82:31:d5:e1:d9:28:2a:49:ae:46:68:89:a2: fe:d3:91:58:07:02:d1:fd:f3:25:1f:3e:33:f1:02:07:fb:21: bc:ae:40:50:fa:a0:be:e7:71:65:0b:b9:69:48:55:c2:2f:e9: da:bb:2d:66:94:52:04:ac:5c:1f:ab:37:0d:f6:53:5f:73:7d: 29:d3:20:99:78:a5:79:e3:e1:ec:cf:2f:81:21:f2:42:45:de: 75:44:50:66:ee:f3:b3:c3:9c:d3:fa:b0:31:67:f9:61:ef:f1: f2:72:44:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkUwMTExMC8GA1UEBRMoRUEwNTY0OTk0NEEyNDA0MjM3MDAzQTdGOEJBNDFEOEQ4 NDIyRTcyMTAeFw0yNTExMDMwNzM5MTVaFw0yNTExMTAwNzM5MTVaMBgxFjAUBgNV BAMTDTY5MDg1YzIzLTg1ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDkwuZpdrtM5pe+Am0+hteRUXgpUkcVhLOOqg5e32LXi3uHZa6KI38Wbkt2H8py AQob75ZTjU92dPjl1uhsRv3SLQkf328DXGBmNKzoqDg3aEl21gFFQdoADt32E2ap 3bbE2RIijbf06vaJTXxj26ToTEe0a3XVAfDPH3gB/wBcK2N5pRnZcqKErshr0jOM 64lQ0pGU5xE5La0yaDo2waKwNs6wSjH09SXPmcHy51hNXitfJgF/gZ/JsLfiOKGe HhhEvDpImn4ImT3i2t3m7GPCmD5SefFRbfIGpEgxpzai0kJOKQE1PWc6TXKcqJfD lfnnSQYJ80ZaZQqI21fNWoSZAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU3wfgqvN8 QBA2XFksHZikuLKWdvwwHwYDVR0jBBgwFoAU6gVkmUSiQEI3ADp/i6QdjYQi5yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRTAxLzIzMjNBNDlDNzQ5 RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJM0FEcF9pNlFkallRaTV5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNmdWa21VU2lRRUkzQURwX2k2UWRqWVFpNXlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RTAxLzIzMjNBNDlDNzQ5RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJ M0FEcF9pNlFkallRaTV5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAE61YzlBsNJ+FxwismN3V9d95RJ5mWbJZado3qbi58enagSIGidNdty7 FL5Qnvw1q4cZUSvNbKFB2my6V/GRDF9o5kDoQrZ53mlE1RzkS0ql7T6DOSJCSlUO GCfVaXzQaFkjyqPHlF2+6zl0XNHotG04PzeY0Zpzy/hfyo59AZI99h0mOyhfg35p 1gfFCVnxH+FcNN3+gjHV4dkoKkmuRmiJov7TkVgHAtH98yUfPjPxAgf7IbyuQFD6 oL7ncWULuWlIVcIv6dq7LWaUUgSsXB+rNw32U19zfSnTIJl4pXnj4ezPL4Eh8kJF 3nVEUGbu87PDnNP6sDFn+WHv8fJyRNY= -----END CERTIFICATE-----Generated at Tue Nov 4 18:34:52 2025 by rpki-client