$ rpki-client -vvf rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft File: u6lOqRCj8jLfn98s1OOiejSZa3A.mft (raw, json) Hash identifier: oJ9F8HOcLBJifrrz/juUpjcUYVTWACVtSgegCdpESe0= Subject key identifier: 27:3B:3F:52:79:54:5D:81:59:6A:1E:D9:A7:2A:41:B8:4D:C5:35:C3 Authority key identifier: BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 Certificate issuer: /CN=A917BEB0/serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Certificate serial: 0485 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft Manifest number: 0481 Signing time: Mon 03 Nov 2025 00:04:32 +0000 Manifest this update: Mon 03 Nov 2025 00:04:31 +0000 Manifest next update: Mon 10 Nov 2025 00:04:31 +0000 Files and hashes: 1: u6lOqRCj8jLfn98s1OOiejSZa3A.crl (hash: 15D0FXXBaGmRJf1RXh9pMGJ6HwbXnWI59lyD3UkgXck=) 2: 4AEAB70C615D11ECAC75D44DC4F9AE02.roa (hash: WnBbCr/LbqKLlPeho3+8ztfmsdCgc5oHEWwkG3+ywSQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1157 (0x485) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917BEB0, serialNumber=BBA94EA910A3F232DF9FDF2CD4E3A27A34996B70 Validity Not Before: Nov 3 00:04:31 2025 GMT Not After : Nov 10 00:04:31 2025 GMT Subject: CN=6907f190-75ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:5c:20:98:da:49:a2:6a:3d:bd:14:e7:f5:b9: 24:ee:02:a7:05:84:df:55:1d:0c:3b:87:9d:ca:d1: 1a:92:30:2d:ad:14:43:10:a9:68:23:58:0b:7c:35: ba:c5:df:40:64:d7:44:cd:26:f3:3b:5e:16:b0:4c: 4d:2d:bb:9c:94:35:78:56:fb:bb:d5:cd:3b:a5:4b: 7c:d0:e7:7a:f3:cb:73:8e:23:48:f7:73:81:5e:21: 1e:54:ba:11:3a:ee:09:e7:5a:93:28:19:eb:54:f9: a0:11:ca:ba:35:1d:c3:3d:42:e0:d6:48:12:78:82: d5:20:b9:69:a3:b1:73:e3:77:3b:e2:05:d6:bb:3e: 9c:d1:91:8a:c8:4a:c6:c8:77:0b:12:24:6f:85:0e: 0c:53:0c:94:ca:ad:ec:c5:1f:cf:29:52:8b:d0:03: ab:57:01:04:33:30:e0:b4:23:89:ca:1d:56:84:25: a6:b1:7f:28:8b:fb:94:1d:8f:7b:62:9c:ce:26:b2: 79:48:09:d3:7a:b2:d3:16:c0:57:2a:10:d5:75:82: 87:37:4c:60:78:12:04:66:2d:ce:9f:f7:cd:b0:78: 1b:52:79:a2:d5:50:a5:63:d1:b4:5b:70:4e:6f:d1: 90:2b:ec:a4:48:a0:73:c6:01:13:74:40:bf:75:97: d0:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:3B:3F:52:79:54:5D:81:59:6A:1E:D9:A7:2A:41:B8:4D:C5:35:C3 X509v3 Authority Key Identifier: keyid:BB:A9:4E:A9:10:A3:F2:32:DF:9F:DF:2C:D4:E3:A2:7A:34:99:6B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6lOqRCj8jLfn98s1OOiejSZa3A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BEB0/18113D44615B11ECBD99D14CC4F9AE02/u6lOqRCj8jLfn98s1OOiejSZa3A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5c:9a:15:42:73:af:98:56:db:63:1e:5c:82:38:25:9d:d4:e7: 6c:d8:13:e9:8b:53:72:33:48:42:cd:62:e4:ce:1b:c0:cb:3f: ad:6e:21:7d:04:be:34:a6:e3:24:e8:3f:55:c4:e3:fc:08:59: 3f:59:13:70:5a:5a:b6:9b:87:b0:a2:7b:42:05:7e:24:55:0b: 24:85:e5:63:2b:c4:51:46:35:3f:e9:06:45:4e:04:c0:ac:65: 21:02:d7:da:7e:ff:64:4f:68:2b:ff:76:1c:7b:a4:53:28:02: 00:e8:0d:b9:86:ae:e8:4d:b6:72:36:e2:9f:c5:f8:2f:5d:01: 6b:e3:19:88:ff:7d:c1:a7:39:1a:71:f5:f2:75:8d:7f:e6:9d: dd:3c:0d:8d:ba:fa:8d:31:d4:11:46:06:fa:ce:cc:f8:d2:b5: 9c:8c:cd:65:c8:99:c6:1f:9b:a8:65:c1:06:6a:90:5f:63:81: 74:8a:f3:28:d0:5b:fb:01:9b:78:4f:42:0b:15:36:27:36:8f: e5:6c:02:91:23:a4:69:f5:8c:de:22:7a:33:96:c8:4b:4d:6d: 5c:4b:3b:07:f8:2a:8f:d9:a2:53:8c:4e:bb:35:35:b9:a5:e5: ee:f5:32:ad:18:b1:91:2d:24:dd:fe:6a:a1:4d:41:00:1b:86: 35:ee:cc:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0JFQjAxMTAvBgNVBAUTKEJCQTk0RUE5MTBBM0YyMzJERjlGREYyQ0Q0RTNBMjdB MzQ5OTZCNzAwHhcNMjUxMTAzMDAwNDMxWhcNMjUxMTEwMDAwNDMxWjAYMRYwFAYD VQQDEw02OTA3ZjE5MC03NWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnFwgmNpJomo9vRTn9bkk7gKnBYTfVR0MO4edytEakjAtrRRDEKloI1gLfDW6 xd9AZNdEzSbzO14WsExNLbuclDV4Vvu71c07pUt80Od688tzjiNI93OBXiEeVLoR Ou4J51qTKBnrVPmgEcq6NR3DPULg1kgSeILVILlpo7Fz43c74gXWuz6c0ZGKyErG yHcLEiRvhQ4MUwyUyq3sxR/PKVKL0AOrVwEEMzDgtCOJyh1WhCWmsX8oi/uUHY97 YpzOJrJ5SAnTerLTFsBXKhDVdYKHN0xgeBIEZi3On/fNsHgbUnmi1VClY9G0W3BO b9GQK+ykSKBzxgETdEC/dZfQiQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCc7P1J5 VF2BWWoe2acqQbhNxTXDMB8GA1UdIwQYMBaAFLupTqkQo/Iy35/fLNTjono0mWtw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QkVCMC8xODExM0Q0NDYx NUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhqTGZuOThzMU9PaWVqU1ph M0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3U2bE9xUkNqOGpMZm45OHMxT09pZWpTWmEzQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QkVCMC8xODExM0Q0NDYxNUIxMUVDQkQ5OUQxNENDNEY5QUUwMi91NmxPcVJDajhq TGZuOThzMU9PaWVqU1phM0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBcmhVCc6+YVttjHlyCOCWd1Ods2BPpi1NyM0hCzWLkzhvAyz+tbiF9 BL40puMk6D9VxOP8CFk/WRNwWlq2m4ewontCBX4kVQskheVjK8RRRjU/6QZFTgTA rGUhAtfafv9kT2gr/3Yce6RTKAIA6A25hq7oTbZyNuKfxfgvXQFr4xmI/33Bpzka cfXydY1/5p3dPA2NuvqNMdQRRgb6zsz40rWcjM1lyJnGH5uoZcEGapBfY4F0ivMo 0Fv7AZt4T0ILFTYnNo/lbAKRI6Rp9YzeInozlshLTW1cSzsH+CqP2aJTjE67NTW5 peXu9TKtGLGRLSTd/mqhTUEAG4Y17szo -----END CERTIFICATE-----Generated at Mon Nov 3 18:13:18 2025 by rpki-client