$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: WTdnRWLPRjHJVtq6WZ1ehBdW2YQHSGTIgpJDH2Ch7Iw= Subject key identifier: 63:80:3C:FE:6D:D7:1C:DE:D1:05:AE:43:C6:C7:5E:AF:3F:6A:9C:85 Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AD8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0AB9 Signing time: Sun 26 Oct 2025 20:01:55 +0000 Manifest this update: Sun 26 Oct 2025 20:01:54 +0000 Manifest next update: Sun 02 Nov 2025 20:01:54 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: G/nXhGBpNYkFNiRrSd2sMh/qokI6N/gp+0CbXXg1FE0=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 20:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2776 (0xad8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Oct 26 20:01:54 2025 GMT Not After : Nov 2 20:01:54 2025 GMT Subject: CN=68fe7e32-15d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:3a:3f:8e:d1:db:4d:e7:93:b6:4d:48:ab:a6: 7a:16:ac:98:94:19:be:4b:50:71:67:34:6e:58:2d: e5:98:c1:57:db:63:da:17:87:19:1a:54:b7:47:c3: 6f:2d:85:0d:23:ff:19:d7:d3:3a:17:66:b6:b4:0c: f7:6b:61:a2:44:e3:25:ab:7e:49:aa:43:c6:d8:2a: 62:c8:6e:18:a3:0b:94:b4:15:49:e2:7e:4d:99:14: ba:24:39:1e:43:a1:51:ee:48:f4:da:b1:76:96:33: 92:4a:5e:78:69:9a:f9:b3:64:47:dc:be:5b:d3:7b: 70:f3:7c:9e:78:a9:10:32:1a:16:2f:4a:98:95:d9: b2:45:4e:01:b0:b2:dc:07:1e:a2:ca:75:b4:62:0e: d1:c6:ee:1e:39:03:95:06:7b:e8:99:d9:f3:7c:67: 52:c7:24:b5:7e:d5:fb:2b:65:e2:81:e5:c1:55:ae: fe:7d:9a:ba:d3:a3:a9:bf:e1:0b:6e:63:54:21:52: 68:36:ea:c1:cf:3a:a2:5c:08:04:4d:66:d7:7d:70: 84:58:01:8f:48:40:c1:3b:ab:08:d9:0a:7d:9d:af: 8b:00:88:22:22:36:fd:5a:0b:73:45:8c:70:bf:8d: ca:b1:bd:f4:74:b2:cb:fe:ba:35:2d:f8:99:c4:45: 92:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:80:3C:FE:6D:D7:1C:DE:D1:05:AE:43:C6:C7:5E:AF:3F:6A:9C:85 X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:7a:12:4b:62:a3:17:05:9e:bb:08:d7:08:4f:46:33:51:db: 88:97:53:1e:8c:bc:ca:4c:8d:80:d2:e8:62:56:ca:87:fe:23: f3:86:01:2a:b6:36:65:4a:11:c5:e7:27:3b:2e:b7:82:71:2e: c2:e2:99:ae:4c:50:2b:20:99:1a:0a:d6:32:14:2f:09:46:3b: d6:64:84:a8:e8:20:d7:c3:04:28:c6:6b:5e:a3:a8:30:50:01: 7b:b1:8f:88:61:b9:a4:60:ab:5c:2d:fd:0a:b3:af:14:a1:af: 0d:d7:b5:99:c5:b3:84:58:92:64:e2:12:cf:5b:40:c3:7e:35: 9c:ae:cd:d6:4e:e5:33:79:9f:69:8c:3c:fa:c7:49:5d:9f:2a: 68:9f:fc:61:3c:49:c8:f7:04:dd:6a:25:c4:9c:f4:07:79:2e: a4:0c:68:ee:45:4f:c0:60:40:1b:82:5f:d3:98:56:a1:0e:3c: 7b:dd:6e:57:6f:c7:3d:11:46:9f:d5:69:4e:22:fe:da:b6:e7: 4b:5b:88:08:97:20:5b:21:da:16:e4:e3:eb:14:db:8a:a4:7b: c3:80:00:55:b9:3d:18:6d:d3:43:53:a4:d6:f6:1f:83:62:49: 97:d7:62:30:a0:56:cd:3a:7f:94:40:a6:3c:a9:f1:4f:c8:fd: ee:03:00:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUxMDI2MjAwMTU0WhcNMjUxMTAyMjAwMTU0WjAYMRYwFAYD VQQDEw02OGZlN2UzMi0xNWQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Do/jtHbTeeTtk1Iq6Z6FqyYlBm+S1BxZzRuWC3lmMFX22PaF4cZGlS3R8Nv LYUNI/8Z19M6F2a2tAz3a2GiROMlq35JqkPG2CpiyG4YowuUtBVJ4n5NmRS6JDke Q6FR7kj02rF2ljOSSl54aZr5s2RH3L5b03tw83yeeKkQMhoWL0qYldmyRU4BsLLc Bx6iynW0Yg7Rxu4eOQOVBnvomdnzfGdSxyS1ftX7K2XigeXBVa7+fZq606Opv+EL bmNUIVJoNurBzzqiXAgETWbXfXCEWAGPSEDBO6sI2Qp9na+LAIgiIjb9WgtzRYxw v43Ksb30dLLL/ro1LfiZxEWSXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGOAPP5t 1xze0QWuQ8bHXq8/apyFMB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBpehJLYqMXBZ67CNcIT0YzUduIl1MejLzKTI2A0uhiVsqH/iPzhgEq tjZlShHF5yc7LreCcS7C4pmuTFArIJkaCtYyFC8JRjvWZISo6CDXwwQoxmteo6gw UAF7sY+IYbmkYKtcLf0Ks68Uoa8N17WZxbOEWJJk4hLPW0DDfjWcrs3WTuUzeZ9p jDz6x0ldnypon/xhPEnI9wTdaiXEnPQHeS6kDGjuRU/AYEAbgl/TmFahDjx73W5X b8c9EUaf1WlOIv7atudLW4gIlyBbIdoW5OPrFNuKpHvDgABVuT0YbdNDU6TW9h+D YkmX12IwoFbNOn+UQKY8qfFPyP3uAwAb -----END CERTIFICATE-----Generated at Tue Oct 28 18:43:00 2025 by rpki-client