$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: 7fTtkqu+FgH68dCfvvxsYRvvwJBH/viGA8MhEWk5Qvw= Subject key identifier: 71:02:2C:40:B4:3C:2F:9C:43:6F:26:A1:EB:4A:B8:1B:E9:1C:7F:58 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34D4 Signing time: Wed 22 Oct 2025 14:54:29 +0000 Manifest this update: Wed 22 Oct 2025 14:54:28 +0000 Manifest next update: Wed 29 Oct 2025 14:54:28 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: ZRaKEm4RXLNZ8SVWMx8BLhd+6EHaBjViTkGcz1uzbnQ=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Oct 2025 14:54:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13528 (0x34d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Oct 22 14:54:28 2025 GMT Not After : Oct 29 14:54:28 2025 GMT Subject: CN=68f8f024-155c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1d:9c:e9:1d:b5:19:0b:0e:35:9f:5c:b9:85: a7:5e:95:14:49:fa:76:d4:85:b6:a9:6c:98:0d:47: 88:04:df:2f:9b:e1:a9:62:28:07:a7:67:a2:8c:b1: e1:8f:b8:c2:25:f6:45:e2:81:46:33:31:e8:da:61: e5:1d:f4:33:a8:c6:9a:9d:62:90:2a:12:68:72:bc: 6e:a3:f7:85:f5:5e:0b:44:7f:5c:09:7b:43:17:60: d9:47:81:4a:c1:57:71:ad:9c:6b:88:ed:52:44:d1: a0:b6:e9:5c:76:92:71:3c:ec:24:e0:99:72:d1:e8: 2d:f0:18:9f:32:a6:c8:f2:41:3d:27:32:13:04:29: a9:85:97:47:29:11:34:f5:14:08:55:7f:bb:fc:4d: 9e:a7:3d:05:a6:67:88:8d:20:5e:3d:7b:20:a4:d8: a3:79:69:2d:f7:04:a0:15:c5:8c:38:e1:e1:3e:49: b3:27:16:57:17:87:5c:4a:89:3f:2e:36:db:b6:69: 41:37:06:d4:74:ba:a4:ae:ea:5a:1f:1b:ee:41:3a: 51:6d:7a:2d:d2:c2:cc:29:4d:72:32:6d:a5:ff:7d: 48:2a:29:86:64:5b:52:e7:f9:51:e8:50:84:71:f1: 15:8d:7b:04:85:24:4a:d6:a6:a3:ac:10:2e:b3:b5: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:02:2C:40:B4:3C:2F:9C:43:6F:26:A1:EB:4A:B8:1B:E9:1C:7F:58 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:38:2c:2c:e9:81:c4:87:cf:b4:68:5d:ad:11:ea:e2:52:a9: a2:5e:1c:69:9c:d6:9f:f7:0a:87:88:05:a0:6b:78:f5:f0:e2: 3d:d6:9d:a2:2c:fa:ee:9b:b0:da:f6:57:76:dd:d7:e4:88:3b: 2e:29:30:bf:5d:7b:f8:7b:81:9d:ad:f8:53:47:4d:ad:92:e4: 0a:3b:e1:51:b7:a9:fa:b2:5c:8a:e3:97:c7:ca:f9:9e:20:89: 66:74:01:bd:91:8b:65:eb:ed:5c:7e:4e:14:ed:b7:fc:fd:a8: 51:6d:bc:7b:49:0f:c3:95:63:50:ea:f3:1b:6d:27:cb:dc:dd: 9a:4e:f5:93:26:77:71:22:e1:cd:b2:bc:19:85:71:e1:5e:48: d6:d9:6b:bb:2c:92:ca:47:15:76:62:a3:b2:ea:95:6c:26:af: 35:f6:94:8d:30:0d:af:a2:de:e6:af:25:58:21:20:79:6e:a0: db:63:cd:c2:77:9c:d3:90:7a:7d:6a:a2:34:fa:57:68:4e:49: ff:e5:c9:6f:62:1f:7a:27:ac:6d:d9:bd:ff:16:ef:45:3a:67: fb:98:0e:d0:ec:e6:5a:76:5a:04:17:da:1b:2e:13:36:5b:da: bd:f7:f9:b6:51:74:9c:69:99:f7:61:08:da:2a:d7:cc:0a:f7: 0b:9f:61:43 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUxMDIyMTQ1NDI4WhcNMjUxMDI5MTQ1NDI4WjAYMRYwFAYD VQQDEw02OGY4ZjAyNC0xNTVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvB2c6R21GQsONZ9cuYWnXpUUSfp21IW2qWyYDUeIBN8vm+GpYigHp2eijLHh j7jCJfZF4oFGMzHo2mHlHfQzqMaanWKQKhJocrxuo/eF9V4LRH9cCXtDF2DZR4FK wVdxrZxriO1SRNGgtulcdpJxPOwk4Jly0egt8BifMqbI8kE9JzITBCmphZdHKRE0 9RQIVX+7/E2epz0FpmeIjSBePXsgpNijeWkt9wSgFcWMOOHhPkmzJxZXF4dcSok/ LjbbtmlBNwbUdLqkrupaHxvuQTpRbXot0sLMKU1yMm2l/31IKimGZFtS5/lR6FCE cfEVjXsEhSRK1qajrBAus7XmlQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHECLEC0 PC+cQ28moetKuBvpHH9YMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCPOCws6YHEh8+0aF2tEeriUqmiXhxpnNaf9wqHiAWga3j18OI91p2i LPrum7Da9ld23dfkiDsuKTC/XXv4e4GdrfhTR02tkuQKO+FRt6n6slyK45fHyvme IIlmdAG9kYtl6+1cfk4U7bf8/ahRbbx7SQ/DlWNQ6vMbbSfL3N2aTvWTJndxIuHN srwZhXHhXkjW2Wu7LJLKRxV2YqOy6pVsJq819pSNMA2vot7mryVYISB5bqDbY83C d5zTkHp9aqI0+ldoTkn/5clvYh96J6xt2b3/Fu9FOmf7mA7Q7OZadloEF9obLhM2 W9q99/m2UXScaZn3YQjaKtfMCvcLn2FD -----END CERTIFICATE-----Generated at Thu Oct 23 20:32:23 2025 by rpki-client