$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: 0eqTbxKoi/m9kLdBJov0c1OBTmwp3e6WSmj8464k9ig= Subject key identifier: 1A:54:A7:11:6E:D3:FE:1B:2D:A3:E5:77:04:F6:C1:0B:12:1C:E8:6F Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D4A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D3F Signing time: Wed 22 Oct 2025 18:30:54 +0000 Manifest this update: Wed 22 Oct 2025 18:30:53 +0000 Manifest next update: Wed 29 Oct 2025 18:30:53 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: F+zu3gpRK8VCS2a0EsDeQjZ1Hu0MKhZMZ5a3syl+IB8=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 18:30:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3402 (0xd4a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Oct 22 18:30:53 2025 GMT Not After : Oct 29 18:30:53 2025 GMT Subject: CN=68f922dd-3a08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:67:61:74:ed:aa:3d:f3:41:21:b1:49:67:b7: e4:17:bd:c9:09:45:c4:a0:8a:84:af:be:2b:ef:92: d7:e3:fb:8a:1e:fd:3f:03:fe:66:8e:c1:73:58:ac: 24:9d:34:f0:21:eb:43:47:19:1b:e3:6e:0b:14:3d: 2e:e6:6b:f4:f1:ac:da:c0:42:2e:e7:f6:42:3e:a1: ea:f4:11:eb:2c:ae:22:83:b0:da:a1:fa:04:e0:c3: 49:c0:b9:04:ce:ab:40:8c:32:b7:aa:63:9c:45:0e: 31:e8:10:d4:b8:db:61:9e:eb:6a:ee:33:ba:08:f0: 5a:0f:68:bb:de:e7:19:fd:64:c8:48:34:6a:3b:c8: 3c:3e:fc:14:8b:6e:fe:ed:91:29:ba:da:6a:fa:da: 61:65:61:7e:61:42:d4:9d:39:68:11:1f:65:03:ef: 2f:95:a4:5e:08:db:31:cb:c9:50:5d:0b:ef:22:94: 70:57:7a:a2:0c:88:55:de:a6:30:13:b2:ef:4d:19: eb:fc:dc:d1:26:72:6e:bc:8b:7f:e6:d6:ef:2b:ce: 80:a3:85:41:47:16:3e:2d:b4:bc:71:ec:0f:01:dc: f0:06:aa:55:aa:a8:e0:ed:39:f8:f7:fb:e1:c6:39: f9:e7:f6:c5:49:a2:21:06:a6:ed:7c:20:b4:9d:94: f9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:54:A7:11:6E:D3:FE:1B:2D:A3:E5:77:04:F6:C1:0B:12:1C:E8:6F X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a5:d5:e4:5a:41:3f:30:8e:78:f8:5b:cf:7f:a9:23:f2:2c:51: d7:29:32:40:31:cd:33:26:24:cf:b7:78:e4:50:dd:d8:e1:47: a6:63:17:fa:4d:97:f1:13:38:fa:ac:9f:06:c5:91:c7:bc:1e: 6b:fb:da:08:25:c6:17:65:48:32:78:f3:c6:cd:9b:72:2e:06: ae:41:40:60:7a:f6:36:9d:e0:ca:d1:36:ff:a7:b1:02:4e:b3: 47:2c:90:9f:1e:04:27:a2:49:cb:45:8e:ad:6f:b6:21:29:1c: 97:0b:e8:f2:cf:bc:6a:44:5b:f1:16:a9:dc:79:b6:d4:6f:2c: 7e:6d:0e:43:e5:4e:64:76:cc:7a:a7:bf:a7:de:4b:1a:c8:4f: a1:a7:b3:81:84:a0:77:99:e6:43:e5:55:2f:9b:86:ad:2b:ae: ff:43:c3:6d:b0:ca:b1:51:c2:85:89:df:2b:48:15:c5:8b:e2: fb:75:44:5a:8a:13:c2:f3:b8:e4:82:9b:10:4e:6a:7a:d7:0b: de:cd:45:2d:de:b8:fc:f0:9e:7b:b4:c7:c1:60:74:c0:9e:c7: e6:1c:76:78:d4:d4:01:f2:2e:56:b7:7c:bc:65:78:3f:8e:1c: 1f:e4:76:e5:9f:98:d9:ac:4e:fc:08:35:e5:d9:fb:e6:ae:99: 7f:16:3d:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUxMDIyMTgzMDUzWhcNMjUxMDI5MTgzMDUzWjAYMRYwFAYD VQQDEw02OGY5MjJkZC0zYTA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzmdhdO2qPfNBIbFJZ7fkF73JCUXEoIqEr74r75LX4/uKHv0/A/5mjsFzWKwk nTTwIetDRxkb424LFD0u5mv08azawEIu5/ZCPqHq9BHrLK4ig7DaofoE4MNJwLkE zqtAjDK3qmOcRQ4x6BDUuNthnutq7jO6CPBaD2i73ucZ/WTISDRqO8g8PvwUi27+ 7ZEputpq+tphZWF+YULUnTloER9lA+8vlaReCNsxy8lQXQvvIpRwV3qiDIhV3qYw E7LvTRnr/NzRJnJuvIt/5tbvK86Ao4VBRxY+LbS8cewPAdzwBqpVqqjg7Tn49/vh xjn55/bFSaIhBqbtfCC0nZT5yQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpUpxFu 0/4bLaPldwT2wQsSHOhvMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCl1eRaQT8wjnj4W89/qSPyLFHXKTJAMc0zJiTPt3jkUN3Y4UemYxf6 TZfxEzj6rJ8GxZHHvB5r+9oIJcYXZUgyePPGzZtyLgauQUBgevY2neDK0Tb/p7EC TrNHLJCfHgQnoknLRY6tb7YhKRyXC+jyz7xqRFvxFqncebbUbyx+bQ5D5U5kdsx6 p7+n3ksayE+hp7OBhKB3meZD5VUvm4atK67/Q8NtsMqxUcKFid8rSBXFi+L7dURa ihPC87jkgpsQTmp61wvezUUt3rj88J57tMfBYHTAnsfmHHZ41NQB8i5Wt3y8ZXg/ jhwf5Hbln5jZrE78CDXl2fvmrpl/Fj00 -----END CERTIFICATE-----Generated at Thu Oct 23 21:06:56 2025 by rpki-client