$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: GmUqMnYsZgbVUUK6oPDNx6yhKHUChwlnBXkqf1S8diI= Subject key identifier: 12:A7:CC:6A:02:A6:87:F3:0B:AB:7D:2F:2C:E5:0C:8F:83:95:9E:AC Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 023E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 0235 Signing time: Mon 03 Nov 2025 01:58:45 +0000 Manifest this update: Mon 03 Nov 2025 01:58:45 +0000 Manifest next update: Mon 10 Nov 2025 01:58:45 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: OdmeYDAAqEMmbENX+uabPtzoY691XfcBOBRKwj9wfgw=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 01:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 574 (0x23e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Nov 3 01:58:45 2025 GMT Not After : Nov 10 01:58:45 2025 GMT Subject: CN=69080c55-b72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:75:26:1a:d4:e9:a7:7b:27:2d:f5:7c:22:99: 5e:0f:89:5d:8f:4d:1a:a7:4f:cf:1c:f9:e3:d9:97: b1:37:3f:8d:ef:fb:36:9d:e7:cf:86:ff:45:49:51: 8b:ce:cc:c8:6d:5a:9e:7a:82:1d:8a:86:51:cb:bf: 05:3d:2b:8a:0d:61:dc:66:44:26:dd:f1:42:3f:fd: 1e:87:6a:9e:32:6e:c3:92:93:ee:b7:0b:ed:1f:ab: 3c:97:b1:7f:29:3e:2a:e4:16:e0:b3:8c:97:2f:6c: 50:c9:bb:82:72:71:86:50:35:e6:87:9a:cf:88:2e: 58:67:60:45:a7:d0:33:c6:5f:fa:08:05:c9:63:ef: 9a:4d:a4:0a:ea:2e:eb:d2:c9:24:a4:6a:28:9c:eb: af:fa:38:d7:bc:e7:b9:6a:ab:42:3a:27:34:cd:74: 31:49:6c:4d:c0:02:3a:82:41:57:2d:7d:b0:a8:73: 39:6a:0c:86:cc:0a:cd:b1:ea:94:2b:1d:b9:28:ba: bb:ee:eb:05:c5:3f:15:be:6c:b6:73:6b:1b:25:6d: 78:aa:65:ab:08:8e:c4:b4:cf:a0:01:3a:90:07:6f: d3:8f:b0:b5:26:9a:9f:b9:5b:47:3e:5a:23:aa:cc: 2b:de:c1:68:3f:2d:4c:d4:4f:9e:7b:3d:72:e8:e3: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A7:CC:6A:02:A6:87:F3:0B:AB:7D:2F:2C:E5:0C:8F:83:95:9E:AC X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:87:ad:20:58:c4:1d:62:e0:ee:c9:68:9b:68:43:70:59:14: 7c:06:ae:c8:fa:10:40:e7:17:68:1d:66:c0:85:14:25:c3:f6: 48:23:fc:d3:36:7e:45:b2:50:fc:2d:49:21:07:f6:78:2d:b6: df:72:2b:6d:d4:4f:a6:0f:1d:a3:7a:8b:f9:66:9b:64:e1:1e: 2e:44:81:0d:ca:69:26:89:77:03:07:b7:cd:f4:1b:9e:62:69: 7a:51:9c:aa:65:ca:1c:50:c5:d0:84:2a:75:3e:62:17:53:75: 3e:73:02:a7:ed:3d:d1:72:49:25:05:e4:a1:fd:09:33:49:83: 4f:f5:66:73:97:aa:76:aa:1e:01:5d:02:25:10:e8:f3:82:ec: f6:a0:97:b9:53:dd:36:fc:d2:64:fd:71:73:1c:aa:59:a6:e4: 7b:f6:f8:7d:63:b7:75:12:0a:20:34:82:41:e8:d8:7d:26:01: 99:8f:00:61:fc:9a:09:f9:be:87:0a:d2:d5:7e:0b:f1:3e:b0: 43:3e:47:2c:8f:30:82:58:b5:d5:f5:fc:89:db:ba:39:10:df: fd:98:0f:9b:8d:e0:62:83:80:1e:ea:95:48:c5:63:ba:d1:2c: 8f:42:a6:ee:17:4c:54:53:d6:50:77:4c:71:e8:8a:da:69:b8: db:80:04:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAj4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUxMTAzMDE1ODQ1WhcNMjUxMTEwMDE1ODQ1WjAYMRYwFAYD VQQDEw02OTA4MGM1NS1iNzJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1XUmGtTpp3snLfV8IpleD4ldj00ap0/PHPnj2ZexNz+N7/s2nefPhv9FSVGL zszIbVqeeoIdioZRy78FPSuKDWHcZkQm3fFCP/0eh2qeMm7DkpPutwvtH6s8l7F/ KT4q5Bbgs4yXL2xQybuCcnGGUDXmh5rPiC5YZ2BFp9Azxl/6CAXJY++aTaQK6i7r 0skkpGoonOuv+jjXvOe5aqtCOic0zXQxSWxNwAI6gkFXLX2wqHM5agyGzArNseqU Kx25KLq77usFxT8Vvmy2c2sbJW14qmWrCI7EtM+gATqQB2/Tj7C1JpqfuVtHPloj qswr3sFoPy1M1E+eez1y6OPNcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKnzGoC pofzC6t9LyzlDI+DlZ6sMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCEh60gWMQdYuDuyWibaENwWRR8Bq7I+hBA5xdoHWbAhRQlw/ZII/zT Nn5FslD8LUkhB/Z4Lbbfcitt1E+mDx2jeov5Zptk4R4uRIENymkmiXcDB7fN9Bue Yml6UZyqZcocUMXQhCp1PmIXU3U+cwKn7T3RckklBeSh/QkzSYNP9WZzl6p2qh4B XQIlEOjzguz2oJe5U902/NJk/XFzHKpZpuR79vh9Y7d1EgogNIJB6Nh9JgGZjwBh /JoJ+b6HCtLVfgvxPrBDPkcsjzCCWLXV9fyJ27o5EN/9mA+bjeBig4Ae6pVIxWO6 0SyPQqbuF0xUU9ZQd0xx6IraabjbgASr -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:03 2025 by rpki-client