$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: 39+kLjkO1GcSsU636yDlZR3rSammF0qBi9mfNtGqgUs= Subject key identifier: 03:14:18:2C:63:71:80:8E:66:12:AB:CD:82:F1:33:CE:A8:2A:B6:54 Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0CD5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0CBF Signing time: Sun 02 Nov 2025 18:12:30 +0000 Manifest this update: Sun 02 Nov 2025 18:12:30 +0000 Manifest next update: Sun 09 Nov 2025 18:12:30 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: EtF1yWLhCKalyzIBe6mqsl6afF8q/UMrNJM9Yph1L1w=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 18:12:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3285 (0xcd5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: Nov 2 18:12:30 2025 GMT Not After : Nov 9 18:12:30 2025 GMT Subject: CN=69079f0e-659c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:1e:04:fc:ab:71:dd:f9:35:73:31:8e:80:b0: b5:27:d9:7f:a9:66:a4:a8:07:a1:5f:35:1c:ed:a9: c7:df:6d:b1:7e:ec:9d:ab:85:41:19:b5:a6:5d:92: 6e:58:d2:72:2e:d7:15:22:a7:3e:99:63:a9:33:29: 09:39:36:65:4a:0a:92:6a:0a:b8:98:75:b7:73:82: f3:8a:7f:35:92:85:c2:9f:e3:cf:c0:d8:a5:6e:85: d7:30:8c:b0:89:08:02:6a:8a:8c:e7:b4:95:8c:d5: ea:68:a6:1f:f4:2a:9c:52:c6:f6:73:43:11:10:de: b6:8a:e3:85:45:05:12:43:90:09:14:31:d2:f5:93: 8b:05:fe:db:1a:a7:f3:37:46:85:b5:17:7f:ff:70: 96:db:b5:e4:d1:47:da:2d:c8:e3:b5:4e:eb:28:1d: 6a:2f:f3:38:ef:33:a7:78:29:1a:9a:be:e3:d3:ae: ee:33:bd:a3:99:8e:b6:ba:fa:d8:89:f7:78:87:93: 73:8e:95:89:ac:8a:30:5a:a9:12:32:fe:f8:c8:49: 4e:5f:7f:d7:3a:36:c3:32:1d:bf:3d:a6:e3:a4:b1: 19:ed:cb:f4:2a:0b:94:65:76:d0:62:0c:99:04:43: 7c:c2:23:65:3d:e2:ac:e0:db:a0:13:4c:9f:49:ac: c1:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:14:18:2C:63:71:80:8E:66:12:AB:CD:82:F1:33:CE:A8:2A:B6:54 X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b5:e4:b7:37:08:20:17:6c:41:a6:66:dc:d0:ed:97:c6:55:12: 45:b5:ee:4a:34:a9:8a:d4:b4:5d:e6:9c:aa:25:c0:77:0b:a5: 6b:fd:fc:93:5e:1f:f7:9d:2f:f5:70:1f:92:fe:86:9c:c6:9f: 4b:11:11:ed:dd:4e:31:2c:28:a6:77:e1:32:c4:de:69:85:3a: cf:e8:97:db:45:9b:ba:a5:e2:7a:ad:7a:5f:63:6a:35:b1:f9: e0:86:9b:3f:42:2a:40:da:2e:06:1a:ad:2e:81:e2:7f:d3:fa: f8:ea:90:55:00:4f:f0:55:fc:b1:bf:6b:26:df:02:c0:4f:78: 43:51:cc:44:aa:a2:ce:f0:8e:e1:c6:12:07:83:1f:15:95:c0: 92:80:7b:25:76:d6:e5:d6:7f:9a:3e:6c:3d:3b:fa:d4:e1:f6: 32:23:73:d4:7c:f5:b9:19:4b:33:94:bd:5a:5f:83:65:18:31: d2:6f:01:e7:a4:05:2c:c3:08:f8:25:89:88:9b:3f:d6:9c:f9: a4:0a:67:18:d0:2c:a5:88:bb:b5:7e:14:f6:cf:34:78:eb:75: 4e:f2:55:0b:72:97:6a:01:38:ad:29:5b:c0:b9:34:63:04:d7: 35:84:ce:2e:dd:6b:f9:a9:59:28:f3:5d:6f:81:0c:4e:2a:83: f5:e8:4f:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUxMTAyMTgxMjMwWhcNMjUxMTA5MTgxMjMwWjAYMRYwFAYD VQQDEw02OTA3OWYwZS02NTljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7h4E/Ktx3fk1czGOgLC1J9l/qWakqAehXzUc7anH322xfuydq4VBGbWmXZJu WNJyLtcVIqc+mWOpMykJOTZlSgqSagq4mHW3c4Lzin81koXCn+PPwNilboXXMIyw iQgCaoqM57SVjNXqaKYf9CqcUsb2c0MREN62iuOFRQUSQ5AJFDHS9ZOLBf7bGqfz N0aFtRd//3CW27Xk0UfaLcjjtU7rKB1qL/M47zOneCkamr7j067uM72jmY62uvrY ifd4h5NzjpWJrIowWqkSMv74yElOX3/XOjbDMh2/PabjpLEZ7cv0KguUZXbQYgyZ BEN8wiNlPeKs4NugE0yfSazB1QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMUGCxj cYCOZhKrzYLxM86oKrZUMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC15Lc3CCAXbEGmZtzQ7ZfGVRJFte5KNKmK1LRd5pyqJcB3C6Vr/fyT Xh/3nS/1cB+S/oacxp9LERHt3U4xLCimd+EyxN5phTrP6JfbRZu6peJ6rXpfY2o1 sfnghps/QipA2i4GGq0ugeJ/0/r46pBVAE/wVfyxv2sm3wLAT3hDUcxEqqLO8I7h xhIHgx8VlcCSgHsldtbl1n+aPmw9O/rU4fYyI3PUfPW5GUszlL1aX4NlGDHSbwHn pAUswwj4JYmImz/WnPmkCmcY0CyliLu1fhT2zzR463VO8lULcpdqATitKVvAuTRj BNc1hM4u3Wv5qVko811vgQxOKoP16E8y -----END CERTIFICATE-----Generated at Mon Nov 3 18:19:35 2025 by rpki-client