$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: sEztXEWWevc2qIenCi1AkLj5S4GLCucDyLjyZjcemms= Subject key identifier: 84:A3:AC:A8:E3:6C:3A:4C:FF:4E:5B:45:0C:71:BC:26:7B:99:8E:55 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 015A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 0157 Signing time: Wed 05 Nov 2025 04:16:03 +0000 Manifest this update: Wed 05 Nov 2025 04:16:03 +0000 Manifest next update: Wed 12 Nov 2025 04:16:03 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: buT5SnxpBA0j5t++fB/Z6BNEV/v6/0gV49pXVdYLVzY=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 04:16:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 346 (0x15a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: Nov 5 04:16:03 2025 GMT Not After : Nov 12 04:16:03 2025 GMT Subject: CN=690acf83-de3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b3:a6:10:2a:fe:cb:71:7b:1b:87:2f:71:74: 01:36:60:eb:e2:d6:35:76:91:d9:d6:d1:f6:74:36: ac:77:4f:d0:78:5e:e8:7e:5c:15:79:c1:02:e2:32: 13:41:d9:eb:69:ae:86:22:3e:a3:0e:46:4c:03:f3: 79:ca:f9:e4:bf:cc:c5:1d:0b:73:4b:cf:1e:2b:02: 05:25:42:94:cb:76:84:c6:1c:48:f9:c3:6f:94:d4: c4:9d:61:9f:a9:9c:72:de:61:1b:22:57:37:c6:7b: 97:7a:dd:f1:b5:3c:0a:a0:d8:c7:27:70:43:59:38: 4e:44:b2:36:97:a6:1d:b1:ac:5b:8c:50:6a:f1:37: 47:d6:84:b0:ce:7d:2f:91:01:3c:cf:e4:a1:20:92: aa:02:bc:2f:f8:27:2a:f2:52:54:cf:49:7f:ed:c8: 20:e3:ad:cd:b9:d4:3a:ad:74:89:6b:4a:7d:80:37: bc:45:39:54:df:95:77:06:c8:7c:67:28:06:07:84: bb:ce:de:d0:28:a7:95:fb:0f:fb:b5:28:7b:71:a7: 8d:af:ca:27:d2:4e:0f:4b:2d:0f:3e:02:40:13:c5: ba:70:63:4a:9c:a3:25:f9:6d:c0:37:e4:a8:83:50: 1b:28:b8:b0:a8:0f:f9:62:6a:cf:70:ba:09:60:94: 40:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A3:AC:A8:E3:6C:3A:4C:FF:4E:5B:45:0C:71:BC:26:7B:99:8E:55 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d6:67:ec:a8:60:c2:5a:84:cd:ae:a5:74:8a:c6:7a:70:6e: e3:ce:b8:fe:9b:b5:98:03:71:c8:17:e4:3c:fb:ca:1b:aa:55: 66:a0:e6:42:d3:ef:87:e3:47:52:3c:e5:2e:c0:20:1f:13:89: 36:52:4d:ac:f5:2e:fd:4f:35:7f:d9:6d:da:46:a1:f3:6e:1f: 3f:86:55:19:41:7a:78:77:4c:37:e7:78:27:fd:14:75:f5:19: c7:d2:72:84:1d:ce:38:7d:94:38:12:8a:ff:39:ca:01:a9:fe: 6e:8f:c8:cf:0a:04:c3:9d:2c:38:95:04:09:df:bb:d3:52:6c: f9:2d:34:da:f9:a4:ba:d4:ac:25:a0:6a:be:23:19:e9:b0:25: e8:75:fc:d7:cb:7f:f8:6b:54:9c:68:ac:9c:4b:81:e8:93:4a: 51:16:82:a5:64:84:cd:53:d1:4c:11:fd:ae:b7:7c:63:a0:8c: fc:46:78:fb:79:cd:7f:8e:a6:3e:aa:13:0f:a2:5d:da:f2:49: 5d:10:ab:65:90:1b:82:23:d8:f1:8f:bf:45:c4:52:c0:bb:65: 6e:46:e1:30:7c:4c:ce:81:ed:4f:5a:34:86:6b:6f:95:72:bb: bf:fc:2d:04:23:7f:25:73:85:b1:b0:73:26:6e:0f:f8:39:9e: 7a:11:b3:8e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUxMTA1MDQxNjAzWhcNMjUxMTEyMDQxNjAzWjAYMRYwFAYD VQQDEw02OTBhY2Y4My1kZTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnbOmECr+y3F7G4cvcXQBNmDr4tY1dpHZ1tH2dDasd0/QeF7oflwVecEC4jIT Qdnraa6GIj6jDkZMA/N5yvnkv8zFHQtzS88eKwIFJUKUy3aExhxI+cNvlNTEnWGf qZxy3mEbIlc3xnuXet3xtTwKoNjHJ3BDWThORLI2l6YdsaxbjFBq8TdH1oSwzn0v kQE8z+ShIJKqArwv+Ccq8lJUz0l/7cgg463NudQ6rXSJa0p9gDe8RTlU35V3Bsh8 ZygGB4S7zt7QKKeV+w/7tSh7caeNr8on0k4PSy0PPgJAE8W6cGNKnKMl+W3AN+So g1AbKLiwqA/5YmrPcLoJYJRAGQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFISjrKjj bDpM/05bRQxxvCZ7mY5VMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAb1mfsqGDCWoTNrqV0isZ6cG7jzrj+m7WYA3HIF+Q8+8obqlVmoOZC 0++H40dSPOUuwCAfE4k2Uk2s9S79TzV/2W3aRqHzbh8/hlUZQXp4d0w353gn/RR1 9RnH0nKEHc44fZQ4Eor/OcoBqf5uj8jPCgTDnSw4lQQJ37vTUmz5LTTa+aS61Kwl oGq+IxnpsCXodfzXy3/4a1ScaKycS4Hok0pRFoKlZITNU9FMEf2ut3xjoIz8Rnj7 ec1/jqY+qhMPol3a8kldEKtlkBuCI9jxj79FxFLAu2VuRuEwfEzOge1PWjSGa2+V cru//C0EI38lc4WxsHMmbg/4OZ56EbOO -----END CERTIFICATE-----Generated at Wed Nov 5 17:58:32 2025 by rpki-client