$ rpki-client -vvf rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft File: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft (raw, json) Hash identifier: TBdpUhRCNCGqiUZkayYp6FmfEQnQoEClr5iOonP8a0A= Subject key identifier: 19:EC:92:6A:A2:C1:C2:A8:B3:4B:5F:C5:ED:07:2C:87:CA:CF:68:5E Authority key identifier: 1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 Certificate issuer: /CN=A918770D/serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Certificate serial: 1C6B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft Manifest number: 1C5D Signing time: Sun 02 Nov 2025 16:11:53 +0000 Manifest this update: Sun 02 Nov 2025 16:11:53 +0000 Manifest next update: Sun 09 Nov 2025 16:11:53 +0000 Files and hashes: 1: G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl (hash: vNpgqx71TxYWNL9Exb6FM9SLPJT1s8AEpS6HZnNrJ60=) 2: 6C5A7912ED2311E680140D19C4F9AE02.roa (hash: w+6iR/F583nwtLejN1ZMM4mivM5f0eBnZv1CsfpH8hw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 16:11:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7275 (0x1c6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918770D, serialNumber=1BAF8251D1A13F4188060AB19A030D36CAA7ABD4 Validity Not Before: Nov 2 16:11:53 2025 GMT Not After : Nov 9 16:11:53 2025 GMT Subject: CN=690782c9-e776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6d:2a:f6:91:30:13:9c:9d:af:2f:d2:c4:20: 92:2b:d8:3e:17:ec:05:ce:64:7a:50:a2:ed:29:79: 30:6c:8a:f0:84:d2:07:a6:59:67:63:ac:3e:9f:f9: 60:0f:69:dd:cb:4e:21:6f:a6:00:3e:c2:36:a6:7e: 17:b5:11:70:72:7f:8e:b3:5c:44:d3:b2:af:d3:83: c7:8c:df:7d:39:06:79:d9:ef:d9:4c:35:f7:1c:70: 30:62:c2:3c:38:27:99:55:dd:6f:f1:d0:53:83:42: 02:df:a8:1c:fc:58:db:fd:69:31:67:59:3c:01:9a: d2:84:75:34:51:d3:fd:c1:02:52:6b:cd:2a:cd:ab: c2:f7:b9:e3:24:e2:0b:f6:06:7c:59:13:c1:a1:06: 71:77:d2:fd:97:4e:62:a8:1b:fe:93:60:85:4b:89: 95:90:f2:f4:0c:42:9d:73:7e:5d:ac:ce:1c:aa:04: 17:32:9d:17:fa:1f:46:fc:eb:09:74:80:3c:84:35: c3:25:09:98:af:2d:52:b1:1d:6b:9e:a3:ba:7b:68: 82:97:84:62:28:56:e2:ff:eb:ec:2e:23:ba:cd:86: 96:3e:8d:62:bd:26:be:5a:11:2a:0e:6a:a4:63:92: 27:7a:f4:2d:20:7b:b8:89:7e:30:42:2e:32:f0:ce: ce:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:EC:92:6A:A2:C1:C2:A8:B3:4B:5F:C5:ED:07:2C:87:CA:CF:68:5E X509v3 Authority Key Identifier: keyid:1B:AF:82:51:D1:A1:3F:41:88:06:0A:B1:9A:03:0D:36:CA:A7:AB:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918770D/176D4114ED2311E6938FD318C4F9AE02/G6-CUdGhP0GIBgqxmgMNNsqnq9Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:c1:25:73:59:60:dd:eb:6d:b0:03:9a:b5:70:40:32:2f:fa: 14:35:b5:bd:a9:fc:4e:00:3e:b5:29:cf:eb:66:fb:79:bf:5f: 58:45:06:a4:24:e6:61:b3:4c:fb:ed:10:26:26:df:d8:84:9b: b4:fe:dc:c8:6f:17:b2:d7:32:1e:75:f3:fb:d2:33:89:ea:7e: 3e:03:c3:91:91:62:88:d7:83:88:17:98:ec:e4:92:6c:eb:0c: ca:51:fb:00:a1:2f:f0:48:b9:07:d6:04:f4:94:f1:b0:91:ad: 31:88:96:f4:f5:71:10:44:e8:fe:3c:b1:30:60:bf:63:d4:ee: fd:50:76:77:a5:ff:e8:f6:43:34:64:05:13:1e:64:a7:f0:21: 74:32:53:f4:bd:63:c1:d0:8c:51:38:fe:f2:c6:04:1f:62:c5: ee:5a:92:22:6a:df:a8:37:70:cd:ee:5f:3e:cb:c6:80:0f:fd: 65:81:c0:62:dc:bd:2f:13:25:b8:68:66:ec:74:4c:2a:f3:91: e6:02:1c:a0:8a:63:91:52:58:52:78:79:22:ec:1b:6a:37:95: 75:95:77:ed:6f:26:77:3a:b3:a0:fe:7f:f0:2f:03:23:02:7d: 2d:96:a0:7f:0c:0f:69:82:89:0d:6a:9c:0a:95:db:90:3b:f5: 5c:a0:64:14 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc3MEQxMTAvBgNVBAUTKDFCQUY4MjUxRDFBMTNGNDE4ODA2MEFCMTlBMDMwRDM2 Q0FBN0FCRDQwHhcNMjUxMTAyMTYxMTUzWhcNMjUxMTA5MTYxMTUzWjAYMRYwFAYD VQQDEw02OTA3ODJjOS1lNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzW0q9pEwE5ydry/SxCCSK9g+F+wFzmR6UKLtKXkwbIrwhNIHpllnY6w+n/lg D2ndy04hb6YAPsI2pn4XtRFwcn+Os1xE07Kv04PHjN99OQZ52e/ZTDX3HHAwYsI8 OCeZVd1v8dBTg0IC36gc/Fjb/WkxZ1k8AZrShHU0UdP9wQJSa80qzavC97njJOIL 9gZ8WRPBoQZxd9L9l05iqBv+k2CFS4mVkPL0DEKdc35drM4cqgQXMp0X+h9G/OsJ dIA8hDXDJQmYry1SsR1rnqO6e2iCl4RiKFbi/+vsLiO6zYaWPo1ivSa+WhEqDmqk Y5InevQtIHu4iX4wQi4y8M7OdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBnskmqi wcKos0tfxe0HLIfKz2heMB8GA1UdIwQYMBaAFBuvglHRoT9BiAYKsZoDDTbKp6vU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzcwRC8xNzZENDExNEVE MjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAwR0lCZ3F4bWdNTk5zcW5x OVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c2LUNVZEdoUDBHSUJncXhtZ01OTnNxbnE5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NzcwRC8xNzZENDExNEVEMjMxMUU2OTM4RkQzMThDNEY5QUUwMi9HNi1DVWRHaFAw R0lCZ3F4bWdNTk5zcW5xOVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBswSVzWWDd622wA5q1cEAyL/oUNbW9qfxOAD61Kc/rZvt5v19YRQak JOZhs0z77RAmJt/YhJu0/tzIbxey1zIedfP70jOJ6n4+A8ORkWKI14OIF5js5JJs 6wzKUfsAoS/wSLkH1gT0lPGwka0xiJb09XEQROj+PLEwYL9j1O79UHZ3pf/o9kM0 ZAUTHmSn8CF0MlP0vWPB0IxROP7yxgQfYsXuWpIiat+oN3DN7l8+y8aAD/1lgcBi 3L0vEyW4aGbsdEwq85HmAhygimORUlhSeHki7BtqN5V1lXftbyZ3OrOg/n/wLwMj An0tlqB/DA9pgokNapwKlduQO/VcoGQU -----END CERTIFICATE-----Generated at Mon Nov 3 18:06:58 2025 by rpki-client