$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft File: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft (raw, json) Hash identifier: 95zg7azrmzMLNM2xuzcBcDh239J2sizur0VaJLGogwg= Subject key identifier: 7D:D6:D8:13:5A:92:3B:87:5D:18:95:57:C1:10:06:80:3F:59:26:19 Authority key identifier: 27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F Certificate issuer: /CN=A917A2E5/serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Certificate serial: 16 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft Manifest number: 15 Signing time: Fri 17 Oct 2025 11:41:32 +0000 Manifest this update: Fri 17 Oct 2025 11:41:31 +0000 Manifest next update: Fri 24 Oct 2025 11:41:31 +0000 Files and hashes: 1: J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl (hash: TJARZw3w+WUEPf7l1f2AXBcRGABt9ohnQ6hsobLH4/4=) 2: 173F9AAC8C9811F0B7F99E73C4F9AE02.roa (hash: FS6hEH/j55OHJQ+TqNcRwQCoVjVrvVyoMfAtx5CJ3gk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 11:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22 (0x16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A2E5, serialNumber=27A0A2DDF35C197D4FC26290C2957D4968CF158F Validity Not Before: Oct 17 11:41:31 2025 GMT Not After : Oct 24 11:41:31 2025 GMT Subject: CN=68f22b6c-5992 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:fc:00:f1:1f:f4:23:17:62:8d:6e:54:26:d1: 97:30:b8:ef:67:7a:cf:73:ee:9b:ab:57:02:9b:ef: 8c:93:cb:b4:61:2c:69:91:7b:32:14:b1:3e:b6:ee: 36:3d:5f:c7:a5:b5:f4:61:06:12:bb:22:23:1e:60: e2:da:db:55:3e:94:15:ca:b1:f2:36:97:c7:be:c9: 5a:53:0d:50:64:d5:16:f7:db:ea:c6:e9:ea:c2:2c: 2b:e3:cd:e6:70:dd:32:6e:e9:45:36:11:0f:b0:34: 40:ba:ea:21:29:18:84:70:e5:86:8b:ca:cc:95:c5: 02:2c:58:b1:2b:d5:34:2b:9c:7e:6a:66:ff:56:27: 79:33:0c:98:63:f6:0e:ac:84:dc:e9:79:96:5a:ed: e9:50:c3:2d:c0:b6:b7:25:bc:08:22:e1:1c:82:19: 23:45:35:ea:b1:2f:5b:52:10:48:cc:67:38:c0:17: 5e:2a:49:ee:99:da:b6:6e:6e:70:20:ce:c7:4c:01: e4:44:46:0a:52:d5:f8:f5:75:9b:41:3d:d1:8d:38: a3:0f:3e:08:40:f2:a0:f4:2e:8e:5a:d8:29:b2:52: 0e:aa:99:99:98:3a:d2:9c:8a:af:dc:6f:5e:91:5e: b6:00:83:03:5e:4d:ae:50:3f:05:e2:5d:0e:7c:ca: 60:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:D6:D8:13:5A:92:3B:87:5D:18:95:57:C1:10:06:80:3F:59:26:19 X509v3 Authority Key Identifier: keyid:27:A0:A2:DD:F3:5C:19:7D:4F:C2:62:90:C2:95:7D:49:68:CF:15:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/A6C540F68C9711F0A009D572C4F9AE02/J6Ci3fNcGX1PwmKQwpV9SWjPFY8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:1b:90:6e:bb:31:bb:bd:2e:ea:a3:2a:87:e0:17:62:63:2f: c6:33:d0:27:bf:05:57:95:cf:f0:64:15:7f:43:90:c4:f7:a4: 6b:2a:f6:65:c9:db:6e:92:f4:ad:bf:e5:9d:a9:06:da:6c:66: 2d:fc:ec:95:02:98:cf:63:7d:89:85:08:18:12:fc:6f:7a:1a: 5a:5b:83:1f:c8:aa:ba:bb:12:d0:61:10:5d:79:74:5b:36:94: 22:e3:d4:1d:9a:c9:b1:d1:73:36:3b:11:5c:d8:a8:f4:66:ec: 9a:66:51:50:13:34:ff:6c:55:46:e4:a5:2c:b0:93:1a:5f:42: dd:d3:d9:bb:08:1e:2b:04:2a:75:86:f4:83:ae:70:2e:2a:6e: 1a:32:a8:e6:ca:71:8c:2b:50:ee:22:c8:0f:f9:de:c9:b6:ec: 5b:2d:be:b8:45:88:01:f6:b3:68:70:55:2c:39:9b:dc:52:26: 13:f0:8a:67:a2:c0:23:be:09:64:25:6d:52:84:f9:47:f3:e7: 36:aa:23:91:a1:6b:bc:7b:3e:11:76:90:a7:c2:11:e3:85:b1: b1:6f:6c:c1:d5:8a:89:c5:1d:91:08:9d:33:07:00:9e:34:c1: d9:ef:de:ff:7f:03:b9:fd:15:1f:61:2d:0e:47:76:44:48:4f: 50:8c:6a:11 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QTJFNTExMC8GA1UEBRMoMjdBMEEyRERGMzVDMTk3RDRGQzI2MjkwQzI5NTdENDk2 OENGMTU4RjAeFw0yNTEwMTcxMTQxMzFaFw0yNTEwMjQxMTQxMzFaMBgxFjAUBgNV BAMTDTY4ZjIyYjZjLTU5OTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCk/ADxH/QjF2KNblQm0ZcwuO9nes9z7purVwKb74yTy7RhLGmRezIUsT627jY9 X8eltfRhBhK7IiMeYOLa21U+lBXKsfI2l8e+yVpTDVBk1Rb32+rG6erCLCvjzeZw 3TJu6UU2EQ+wNEC66iEpGIRw5YaLysyVxQIsWLEr1TQrnH5qZv9WJ3kzDJhj9g6s hNzpeZZa7elQwy3AtrclvAgi4RyCGSNFNeqxL1tSEEjMZzjAF14qSe6Z2rZubnAg zsdMAeRERgpS1fj1dZtBPdGNOKMPPghA8qD0Lo5a2CmyUg6qmZmYOtKciq/cb16R XrYAgwNeTa5QPwXiXQ58ymDVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUfdbYE1qS O4ddGJVXwRAGgD9ZJhkwHwYDVR0jBBgwFoAUJ6Ci3fNcGX1PwmKQwpV9SWjPFY8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdBMkU1L0E2QzU0MEY2OEM5 NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gxUHdtS1F3cFY5U1dqUEZZ OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSjZDaTNmTmNHWDFQd21LUXdwVjlTV2pQRlk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdB MkU1L0E2QzU0MEY2OEM5NzExRjBBMDA5RDU3MkM0RjlBRTAyL0o2Q2kzZk5jR1gx UHdtS1F3cFY5U1dqUEZZOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIYbkG67Mbu9LuqjKofgF2JjL8Yz0Ce/BVeVz/BkFX9DkMT3pGsq9mXJ 226S9K2/5Z2pBtpsZi387JUCmM9jfYmFCBgS/G96Glpbgx/Iqrq7EtBhEF15dFs2 lCLj1B2aybHRczY7EVzYqPRm7JpmUVATNP9sVUbkpSywkxpfQt3T2bsIHisEKnWG 9IOucC4qbhoyqObKcYwrUO4iyA/53sm27FstvrhFiAH2s2hwVSw5m9xSJhPwimei wCO+CWQlbVKE+Ufz5zaqI5Gha7x7PhF2kKfCEeOFsbFvbMHVionFHZEInTMHAJ40 wdnv3v9/A7n9FR9hLQ5HdkRIT1CMahE= -----END CERTIFICATE-----Generated at Sat Oct 18 18:01:19 2025 by rpki-client