$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: TItxM2ONCHcxmnHWe10+9uV89kcFlnMW+kT78TFlxFw= Subject key identifier: 54:8F:C4:7F:9E:B5:FC:5E:61:60:7D:11:1C:DC:29:7B:75:7C:D6:52 Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: 012A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: 0128 Signing time: Mon 03 Nov 2025 04:37:33 +0000 Manifest this update: Mon 03 Nov 2025 04:37:32 +0000 Manifest next update: Mon 10 Nov 2025 04:37:32 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: J0rdwaLd8EAQ5OvfI87YBdJuFLE00t14cwIOXjo09IY=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: Nov 3 04:37:32 2025 GMT Not After : Nov 10 04:37:32 2025 GMT Subject: CN=6908318c-6032 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c5:36:f4:c3:63:6c:cc:49:d6:ad:1e:9d:d1: d4:3e:65:77:a9:c9:c6:4b:59:c0:f7:e3:a4:96:78: f1:84:39:fc:f5:7d:a2:e1:74:9d:f6:c0:ed:fd:54: b4:09:78:59:d9:73:4f:c3:89:37:10:80:5b:9e:80: ec:49:4c:8e:51:b7:43:c0:63:c2:55:5a:9a:29:67: 3a:0d:d2:bc:c7:dc:a8:81:d0:20:09:a2:99:bc:be: 6c:0d:0b:03:c9:7d:f7:35:9b:40:41:44:d2:d1:fe: 50:d1:21:53:ed:76:20:bc:04:d3:45:af:86:56:35: 1e:46:a6:fc:ed:68:19:06:e7:94:65:c5:a3:0b:a7: e7:df:d9:a9:a0:a8:d1:90:ec:ec:de:af:61:be:db: 83:76:7e:a9:0a:ec:91:13:d7:94:1e:1f:d2:70:6e: 07:29:b8:d4:10:bf:09:2c:c9:f3:ec:a1:b2:fd:21: 67:9b:ea:00:a0:db:23:ba:8b:fb:0b:e3:9d:05:78: c2:6f:a9:b1:9e:ea:04:d0:4c:65:93:fb:89:74:d7: b6:e9:b5:41:ea:7b:ad:b1:83:b4:cd:b1:dc:6c:0d: 6c:61:de:c4:2c:1d:ab:96:36:d1:f0:f5:eb:bd:75: 6b:e2:df:1f:b3:58:20:6c:4f:31:0a:80:cf:ea:3a: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8F:C4:7F:9E:B5:FC:5E:61:60:7D:11:1C:DC:29:7B:75:7C:D6:52 X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6f:58:8f:9d:e0:4e:37:dd:83:fd:f8:20:04:36:d0:98:18: 15:e3:fb:69:2e:a6:15:38:c6:68:93:82:ce:32:51:a0:bd:19: e9:0a:e1:c0:54:16:d6:48:2e:51:7c:95:f8:80:34:41:61:87: ee:46:2c:7a:5f:c2:e7:d7:0f:f0:28:44:2a:27:99:69:10:36: b3:52:d3:2a:1f:f5:1f:cd:4c:0e:3b:3e:8f:7f:59:0c:65:db: 3b:4b:34:e4:6e:1b:04:3c:a2:96:44:ae:29:ef:8b:51:ef:60: 88:74:3c:58:c1:ff:6d:e1:0d:10:64:95:02:ac:9a:5a:f6:0a: c0:ad:2c:02:8a:38:15:15:e8:67:47:4e:3f:a5:18:3c:22:c5: 88:26:11:52:f1:20:37:ff:7a:18:79:15:7a:2b:da:b7:46:3f: 21:8d:1c:18:54:26:86:74:6c:7d:5e:b1:be:ea:83:e1:74:8e: 7a:38:56:28:b6:0f:ae:98:8e:d5:4b:49:0b:c6:49:15:49:f1: 56:a5:d5:81:ba:4f:16:b8:dd:85:5f:94:c5:4c:cf:d8:97:e3: 1a:73:f2:79:4f:be:53:a5:41:a4:52:f8:b8:8c:3a:b4:45:f1: 6a:7c:bc:bd:bb:d0:c7:df:fe:00:6e:6d:f8:d4:7a:04:e1:ae: a5:8a:d5:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg2RDMxMTAvBgNVBAUTKEVBQ0E4MkFFNTJBNEZGMTgwRDMzNjE3OUY4Mzk1MEE1 QUIwQkM3QjMwHhcNMjUxMTAzMDQzNzMyWhcNMjUxMTEwMDQzNzMyWjAYMRYwFAYD VQQDEw02OTA4MzE4Yy02MDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1MU29MNjbMxJ1q0endHUPmV3qcnGS1nA9+OklnjxhDn89X2i4XSd9sDt/VS0 CXhZ2XNPw4k3EIBbnoDsSUyOUbdDwGPCVVqaKWc6DdK8x9yogdAgCaKZvL5sDQsD yX33NZtAQUTS0f5Q0SFT7XYgvATTRa+GVjUeRqb87WgZBueUZcWjC6fn39mpoKjR kOzs3q9hvtuDdn6pCuyRE9eUHh/ScG4HKbjUEL8JLMnz7KGy/SFnm+oAoNsjuov7 C+OdBXjCb6mxnuoE0Exlk/uJdNe26bVB6nutsYO0zbHcbA1sYd7ELB2rljbR8PXr vXVr4t8fs1ggbE8xCoDP6jqi2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFSPxH+e tfxeYWB9ERzcKXt1fNZSMB8GA1UdIwQYMBaAFOrKgq5SpP8YDTNhefg5UKWrC8ez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODZEMy8xRkEyOTExNEVF QzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194Z05NMkY1LURsUXBhc0x4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODZEMy8xRkEyOTExNEVFQzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194 Z05NMkY1LURsUXBhc0x4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbb1iPneBON92D/fggBDbQmBgV4/tpLqYVOMZok4LOMlGgvRnpCuHA VBbWSC5RfJX4gDRBYYfuRix6X8Ln1w/wKEQqJ5lpEDazUtMqH/UfzUwOOz6Pf1kM Zds7SzTkbhsEPKKWRK4p74tR72CIdDxYwf9t4Q0QZJUCrJpa9grArSwCijgVFehn R04/pRg8IsWIJhFS8SA3/3oYeRV6K9q3Rj8hjRwYVCaGdGx9XrG+6oPhdI56OFYo tg+umI7VS0kLxkkVSfFWpdWBuk8WuN2FX5TFTM/Yl+Mac/J5T75TpUGkUvi4jDq0 RfFqfLy9u9DH3/4Abm341HoE4a6litUG -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:19 2025 by rpki-client