$ rpki-client -vvf rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft File: a51l6unGl9ohy0vuv030zgpBkyE.mft (raw, json) Hash identifier: B3LDN5l2yYQ3UsyjXoqbJgQihMG6F1VoQ6YzmjoyPTg= Subject key identifier: 9F:BF:C0:FF:68:55:3D:A2:65:C5:A6:17:28:66:A5:B4:B3:EE:1F:89 Authority key identifier: 6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 Certificate issuer: /CN=A9141FD6/serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Certificate serial: 3510 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft Manifest number: 34F5 Signing time: Sun 02 Nov 2025 14:43:34 +0000 Manifest this update: Sun 02 Nov 2025 14:43:34 +0000 Manifest next update: Sun 09 Nov 2025 14:43:34 +0000 Files and hashes: 1: a51l6unGl9ohy0vuv030zgpBkyE.crl (hash: ZRXG6IQaHKC3wef+Jomfw/njhx089i8nG0kLeFVsr+4=) 2: 6215E9C089CF11ECA1DA1810C4F9AE02.roa (hash: o3Ceb2MSjRakfXXsxsrz1v3BRN+sMCeTig6Z0QGV2lg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 14:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13584 (0x3510) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9141FD6, serialNumber=6B9D65EAE9C697DA21CB4BEEBF4DF4CE0A419321 Validity Not Before: Nov 2 14:43:34 2025 GMT Not After : Nov 9 14:43:34 2025 GMT Subject: CN=69076e16-858a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:1b:b8:7f:85:f2:7f:32:cc:e6:c1:d1:fd:0e: fe:44:8b:e7:6d:c0:ac:53:65:ad:be:67:6c:4e:0c: 28:fc:78:8a:8a:ee:bf:59:e6:b8:2b:f3:0f:15:01: dd:04:ed:31:79:5b:b3:32:22:91:f2:a6:bb:c6:99: 20:b6:fa:45:9a:16:b3:69:14:e0:09:d5:ef:39:1b: 40:81:38:9e:d7:f3:2a:eb:ba:c5:ac:9c:06:6d:49: 76:21:66:dc:01:88:e4:c0:aa:4d:88:92:10:28:1a: 0d:46:35:97:e0:5b:7c:40:4b:bd:01:30:d0:8e:2b: ea:e1:8c:f6:bf:1f:5b:82:41:d7:ce:6f:22:a0:37: 32:69:f0:ef:f3:7b:cf:46:1a:89:9f:3e:7e:68:ad: 5f:b3:0f:a2:97:82:78:27:92:08:e1:2b:e0:d6:b7: bd:a3:fd:b1:d9:a7:e4:8d:c7:48:3c:6c:c1:e8:f0: 33:5c:e5:48:b7:26:6d:0a:1f:f3:fc:d4:ef:99:af: c0:8a:84:fb:90:d8:53:f6:f8:b2:e7:50:f7:df:62: f0:54:37:c2:52:f5:6a:8b:b5:67:99:da:20:7d:53: 10:50:04:f8:4f:9a:bc:df:eb:3e:33:6f:16:55:63: 06:c5:53:21:70:44:b5:a2:33:6c:61:ab:f5:98:df: b6:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:C0:FF:68:55:3D:A2:65:C5:A6:17:28:66:A5:B4:B3:EE:1F:89 X509v3 Authority Key Identifier: keyid:6B:9D:65:EA:E9:C6:97:DA:21:CB:4B:EE:BF:4D:F4:CE:0A:41:93:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a51l6unGl9ohy0vuv030zgpBkyE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141FD6/6EEC64301D9111E2B687A5F308B02CD2/a51l6unGl9ohy0vuv030zgpBkyE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0c:1c:d5:5d:f5:17:3a:9c:c8:06:04:ad:bd:a4:2c:c8:e1:fe: d1:8a:aa:a8:aa:20:98:05:c7:86:0c:bd:99:2b:2d:ef:b9:12: be:2e:f4:67:ab:30:f0:d0:84:e9:ec:96:15:e4:7e:5b:a7:0f: b4:70:f6:13:5b:6a:f0:f1:ba:04:64:df:aa:33:f9:84:7b:c5: 93:d7:1e:a1:5b:ca:7a:1e:e4:bc:d8:ea:4f:f9:17:73:f3:5f: 33:fb:5e:90:45:17:a4:91:26:00:39:50:32:2d:3e:90:94:e2: 9c:d2:18:35:5b:ff:da:84:af:38:5f:9c:30:76:7c:e8:d6:9f: 15:1d:b9:2a:11:8c:c1:f7:5b:5a:a4:92:c8:7f:d8:46:8c:b1: 96:f5:47:ba:bb:3e:7b:25:a5:2e:d7:0e:ab:f4:a9:40:f3:20: 41:02:2e:b3:bc:97:7a:04:4a:7d:d5:a3:10:9a:47:31:7b:61: 82:1d:3e:e0:c6:51:61:88:da:b2:8b:1b:f3:db:51:80:70:10: 1b:44:85:5b:1e:30:45:32:16:fe:f0:a6:56:03:8c:1a:5d:f3: 55:78:4c:81:75:ef:63:bf:94:64:b9:c3:e1:fb:b6:18:1c:39: f0:ff:e5:ff:52:08:aa:54:ed:b6:61:85:1e:83:92:0a:1b:a2: ec:fb:58:8c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNRAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDFGRDYxMTAvBgNVBAUTKDZCOUQ2NUVBRTlDNjk3REEyMUNCNEJFRUJGNERGNENF MEE0MTkzMjEwHhcNMjUxMTAyMTQ0MzM0WhcNMjUxMTA5MTQ0MzM0WjAYMRYwFAYD VQQDEw02OTA3NmUxNi04NThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzxu4f4XyfzLM5sHR/Q7+RIvnbcCsU2WtvmdsTgwo/HiKiu6/Wea4K/MPFQHd BO0xeVuzMiKR8qa7xpkgtvpFmhazaRTgCdXvORtAgTie1/Mq67rFrJwGbUl2IWbc AYjkwKpNiJIQKBoNRjWX4Ft8QEu9ATDQjivq4Yz2vx9bgkHXzm8ioDcyafDv83vP RhqJnz5+aK1fsw+il4J4J5II4Svg1re9o/2x2afkjcdIPGzB6PAzXOVItyZtCh/z /NTvma/AioT7kNhT9viy51D332LwVDfCUvVqi7VnmdogfVMQUAT4T5q83+s+M28W VWMGxVMhcES1ojNsYav1mN+2AwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ+/wP9o VT2iZcWmFyhmpbSz7h+JMB8GA1UdIwQYMBaAFGudZerpxpfaIctL7r9N9M4KQZMh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MUZENi82RUVDNjQzMDFE OTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5b2h5MHZ1djAzMHpncEJr eUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E1MWw2dW5HbDlvaHkwdnV2MDMwemdwQmt5RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MUZENi82RUVDNjQzMDFEOTExMUUyQjY4N0E1RjMwOEIwMkNEMi9hNTFsNnVuR2w5 b2h5MHZ1djAzMHpncEJreUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAMHNVd9Rc6nMgGBK29pCzI4f7RiqqoqiCYBceGDL2ZKy3vuRK+LvRn qzDw0ITp7JYV5H5bpw+0cPYTW2rw8boEZN+qM/mEe8WT1x6hW8p6HuS82OpP+Rdz 818z+16QRRekkSYAOVAyLT6QlOKc0hg1W//ahK84X5wwdnzo1p8VHbkqEYzB91ta pJLIf9hGjLGW9Ue6uz57JaUu1w6r9KlA8yBBAi6zvJd6BEp91aMQmkcxe2GCHT7g xlFhiNqyixvz21GAcBAbRIVbHjBFMhb+8KZWA4waXfNVeEyBde9jv5RkucPh+7YY HDnw/+X/UgiqVO22YYUeg5IKG6Ls+1iM -----END CERTIFICATE-----Generated at Mon Nov 3 18:17:55 2025 by rpki-client