$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: acTzJI0gwkEkqpg7xXqRpGPq96wGik6zja+fTY27Utc= Subject key identifier: F3:C6:40:F4:F1:26:DF:67:5B:EE:AB:F1:63:F1:33:8A:94:34:F6:96 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B98 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B90 Signing time: Tue 04 Nov 2025 19:06:52 +0000 Manifest this update: Tue 04 Nov 2025 19:06:51 +0000 Manifest next update: Tue 11 Nov 2025 19:06:51 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: LjxAeVMZGVe/Dni0+7jSrM8Qb9ylym+kHhOCVNOHcnY=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2968 (0xb98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Nov 4 19:06:51 2025 GMT Not After : Nov 11 19:06:51 2025 GMT Subject: CN=690a4ecb-ce4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:9d:8c:22:d8:d4:40:97:a2:39:f0:8c:28:5d: 32:ab:e1:2f:ea:8f:33:3c:91:87:1c:34:22:99:51: 8d:08:95:dc:b1:13:d5:71:fc:b4:a2:26:a9:b9:31: b8:61:de:ac:9f:30:f6:78:99:98:83:9f:15:eb:a6: 73:0a:06:0f:ea:aa:69:6f:a9:a6:bb:21:f8:c8:cb: bb:e2:1a:d7:e2:72:c2:34:6e:d8:a9:35:63:fb:07: 85:25:b1:a4:7b:de:4f:cc:b2:9f:a1:1b:57:0a:dc: 2a:9d:21:aa:9a:5b:04:ae:17:fb:a8:a6:c6:42:92: c2:db:fe:99:24:cb:6d:f6:10:2a:27:67:3f:8b:58: 37:f5:97:44:0b:93:de:7e:cc:ea:2b:98:3e:b5:9f: 12:fe:5c:8b:21:3a:44:38:f4:aa:0d:35:13:5d:b1: 82:70:03:7e:0c:c1:d5:77:a6:63:c6:67:48:99:3b: 6b:2d:52:62:bb:32:8b:7d:5f:1d:16:43:af:cc:34: a1:94:3e:a5:1b:9a:ef:64:fa:a5:6e:79:4e:dd:08: 0c:9b:ba:9c:b5:af:68:15:2b:28:96:a3:99:58:12: a1:42:71:90:b5:55:b0:d8:fb:85:ed:d9:3d:a1:56: 0a:86:86:c6:3f:8c:97:b7:a4:8d:d1:3f:aa:73:ef: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:C6:40:F4:F1:26:DF:67:5B:EE:AB:F1:63:F1:33:8A:94:34:F6:96 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:89:61:c9:82:7c:fb:d0:18:a4:26:74:22:a3:ec:35:c2:69: c0:36:4b:23:87:98:d6:33:db:cd:3f:a7:45:26:a0:40:24:83: 2d:e2:e6:01:a1:bf:0d:c7:7b:25:f0:4c:9e:2b:d1:b5:67:a5: 4b:3e:e8:d9:4b:7f:55:7e:16:d1:c5:5f:06:92:52:65:1f:6a: b0:38:7c:16:88:d1:b0:93:f7:9d:8c:80:45:29:96:ef:0a:f3: 85:7d:0c:41:bc:ec:b8:38:73:19:5a:22:b8:18:63:a5:92:e1: 28:2f:e4:f9:1e:17:ba:15:36:ad:ce:5f:1e:dc:68:a4:22:19: b5:41:99:23:4b:a5:52:48:7c:b0:fd:f3:09:3e:7d:72:11:86: d7:c1:0e:bf:9b:55:77:76:ed:70:cd:5d:9c:7d:f4:98:ec:88: 62:10:ed:64:53:14:e3:00:e8:38:28:c1:df:a9:34:42:f0:a1: b6:39:c7:4c:8c:6d:de:91:96:f0:0c:7f:31:1d:8c:cd:d0:07: 7a:e9:79:71:b5:0a:c4:f3:fa:dc:cb:38:92:3f:af:41:01:16: 1d:dc:90:01:67:e5:dc:ad:b8:45:24:4e:c9:e5:20:6e:e8:42: 0d:31:97:57:1f:aa:0a:87:8c:6f:6d:df:c8:1b:47:90:b7:f4: 95:a7:8e:99 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUxMTA0MTkwNjUxWhcNMjUxMTExMTkwNjUxWjAYMRYwFAYD VQQDEw02OTBhNGVjYi1jZTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJ2MItjUQJeiOfCMKF0yq+Ev6o8zPJGHHDQimVGNCJXcsRPVcfy0oiapuTG4 Yd6snzD2eJmYg58V66ZzCgYP6qppb6mmuyH4yMu74hrX4nLCNG7YqTVj+weFJbGk e95PzLKfoRtXCtwqnSGqmlsErhf7qKbGQpLC2/6ZJMtt9hAqJ2c/i1g39ZdEC5Pe fszqK5g+tZ8S/lyLITpEOPSqDTUTXbGCcAN+DMHVd6ZjxmdImTtrLVJiuzKLfV8d FkOvzDShlD6lG5rvZPqlbnlO3QgMm7qcta9oFSsolqOZWBKhQnGQtVWw2PuF7dk9 oVYKhobGP4yXt6SN0T+qc+/8QQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPPGQPTx Jt9nW+6r8WPxM4qUNPaWMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCKiWHJgnz70BikJnQio+w1wmnANksjh5jWM9vNP6dFJqBAJIMt4uYB ob8Nx3sl8EyeK9G1Z6VLPujZS39VfhbRxV8GklJlH2qwOHwWiNGwk/edjIBFKZbv CvOFfQxBvOy4OHMZWiK4GGOlkuEoL+T5Hhe6FTatzl8e3GikIhm1QZkjS6VSSHyw /fMJPn1yEYbXwQ6/m1V3du1wzV2cffSY7IhiEO1kUxTjAOg4KMHfqTRC8KG2OcdM jG3ekZbwDH8xHYzN0Ad66XlxtQrE8/rcyziSP69BARYd3JABZ+XcrbhFJE7J5SBu 6EINMZdXH6oKh4xvbd/IG0eQt/SVp46Z -----END CERTIFICATE-----Generated at Wed Nov 5 18:09:27 2025 by rpki-client