$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: 1+jBeudg3Vb774fbryAVlGbu7ANDABTSEnsuFkssk7w= Subject key identifier: 21:3B:17:12:C3:59:A1:4B:4A:04:AD:3E:A4:FC:6A:07:E6:70:DD:EB Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0440 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 0435 Signing time: Thu 23 Oct 2025 01:30:34 +0000 Manifest this update: Thu 23 Oct 2025 01:30:34 +0000 Manifest next update: Thu 30 Oct 2025 01:30:34 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: bHZ90JR1lyzbFG5FHdRpSr1I0JIMjN/TXHyLKBHvLOo=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 01:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1088 (0x440) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Oct 23 01:30:34 2025 GMT Not After : Oct 30 01:30:34 2025 GMT Subject: CN=68f9853a-b02d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:19:36:97:f6:13:97:f2:a9:f9:6d:2c:92:72: 67:8b:2b:c4:94:fb:cf:f4:42:4e:1d:b1:73:8c:13: c4:05:2d:ed:02:10:52:04:b9:6a:8d:2f:be:4e:33: 3f:62:b0:b9:4e:41:68:92:8e:b2:b1:c8:2b:de:90: 7f:e5:1b:f4:68:83:24:cc:2b:aa:08:25:3c:5d:4d: 05:82:f6:5e:76:dc:f8:ed:11:5b:2a:e6:70:2d:d2: 54:16:b3:76:0a:3b:9a:a2:8f:6a:f3:e5:2c:b1:16: d3:f8:f7:44:1b:db:77:7d:e3:50:ab:fa:72:c0:7d: d5:c6:ac:b7:bc:6e:75:e4:e4:66:f5:36:5d:7c:8d: aa:25:b5:d7:d8:28:36:a6:b8:b3:6b:0b:28:fb:b1: b8:45:05:a6:b6:c1:d3:14:42:f5:60:91:f4:a4:01: b3:23:30:68:34:18:23:4c:cc:01:06:4e:7f:0f:de: 7e:57:b0:36:a7:89:4c:f7:3b:0c:88:3e:ca:98:c4: d1:7e:29:79:cd:3b:97:9a:16:75:98:61:44:02:21: 2a:2f:e5:72:f3:f5:8b:93:2e:89:c6:0a:0a:13:79: 9c:2b:0c:21:ba:65:d4:62:f8:7c:cf:58:8a:0c:43: cd:4e:0d:11:6c:0c:67:77:55:0a:78:40:2c:eb:eb: 22:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3B:17:12:C3:59:A1:4B:4A:04:AD:3E:A4:FC:6A:07:E6:70:DD:EB X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:44:f3:7b:66:99:4a:d9:1a:71:2c:63:71:62:74:13:b0:7c: d3:21:c6:a6:ac:57:4f:d0:bd:84:ee:f1:85:41:7a:37:cf:b7: 0f:4e:81:f5:28:55:90:f5:0e:08:f5:ae:e6:05:59:f8:9f:c4: e2:8e:00:17:a8:d2:65:3a:48:4d:04:ca:90:f5:9e:02:21:7c: 38:5b:41:66:2b:10:c9:80:3b:04:40:fc:d1:7e:cc:02:3c:de: 66:5e:7f:f1:f9:da:72:3b:03:19:62:f7:8f:01:55:4b:cb:0f: 88:22:5f:2a:28:fd:81:81:3b:bc:ca:d5:2e:f1:28:71:5e:d5: dd:3a:06:d8:88:49:09:31:be:a1:a8:25:ba:de:9c:25:16:e7: b7:20:fa:9d:6e:7f:55:9e:34:dd:d2:e5:d2:b1:22:fe:1c:49: fc:90:77:9d:9e:7a:77:e7:1e:76:88:07:69:73:6b:47:c1:0d: ee:2e:4b:5b:ab:17:f4:9e:09:81:0d:82:ee:da:e9:21:5d:26: 13:42:40:de:53:03:c3:ec:13:8c:89:18:c7:15:06:e6:b5:02: bf:41:1e:7a:0c:97:87:b2:0b:0c:1c:16:c6:dc:d3:b6:c2:ac: 68:d1:be:99:99:ab:de:f5:2c:a4:95:a5:15:45:db:c7:ac:0f: e1:39:44:36 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBEAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUxMDIzMDEzMDM0WhcNMjUxMDMwMDEzMDM0WjAYMRYwFAYD VQQDEw02OGY5ODUzYS1iMDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4hk2l/YTl/Kp+W0sknJniyvElPvP9EJOHbFzjBPEBS3tAhBSBLlqjS++TjM/ YrC5TkFoko6yscgr3pB/5Rv0aIMkzCuqCCU8XU0FgvZedtz47RFbKuZwLdJUFrN2 Cjuaoo9q8+UssRbT+PdEG9t3feNQq/pywH3Vxqy3vG515ORm9TZdfI2qJbXX2Cg2 prizawso+7G4RQWmtsHTFEL1YJH0pAGzIzBoNBgjTMwBBk5/D95+V7A2p4lM9zsM iD7KmMTRfil5zTuXmhZ1mGFEAiEqL+Vy8/WLky6JxgoKE3mcKwwhumXUYvh8z1iK DEPNTg0RbAxnd1UKeEAs6+si9wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCE7FxLD WaFLSgStPqT8agfmcN3rMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC5RPN7ZplK2RpxLGNxYnQTsHzTIcamrFdP0L2E7vGFQXo3z7cPToH1 KFWQ9Q4I9a7mBVn4n8TijgAXqNJlOkhNBMqQ9Z4CIXw4W0FmKxDJgDsEQPzRfswC PN5mXn/x+dpyOwMZYvePAVVLyw+IIl8qKP2BgTu8ytUu8ShxXtXdOgbYiEkJMb6h qCW63pwlFue3IPqdbn9VnjTd0uXSsSL+HEn8kHednnp35x52iAdpc2tHwQ3uLktb qxf0ngmBDYLu2ukhXSYTQkDeUwPD7BOMiRjHFQbmtQK/QR56DJeHsgsMHBbG3NO2 wqxo0b6Zmave9SyklaUVRdvHrA/hOUQ2 -----END CERTIFICATE-----Generated at Thu Oct 23 20:01:36 2025 by rpki-client