$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: vh5RgXLFFDkMoSXe36lKCmj+eRuOPY4iTE8qsKX+w+M= Subject key identifier: C3:68:B6:F3:4F:1D:5E:A3:B1:F8:A7:B3:26:B0:CB:D1:45:08:FD:5C Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 1184 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1176 Signing time: Fri 24 Oct 2025 17:40:10 +0000 Manifest this update: Fri 24 Oct 2025 17:40:10 +0000 Manifest next update: Fri 31 Oct 2025 17:40:10 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: JhoxfpNvqV4HN/CzZ96a8kWOiGQO4ULBTHunPCWgeDM=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: VAzSuvDMIX7CvCig+o9VQChq5efkdgttCnjgseDhgh8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 17:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4484 (0x1184) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Oct 24 17:40:10 2025 GMT Not After : Oct 31 17:40:10 2025 GMT Subject: CN=68fbb9fa-943c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d0:21:a0:81:c8:da:4c:fe:d0:2f:f0:f1:a0: eb:eb:f5:78:6d:43:4e:32:05:b6:2d:c3:60:81:bd: 43:24:16:01:41:32:f6:34:fe:61:22:45:46:ca:04: bb:fb:6f:82:6e:46:8d:18:a7:08:b9:e5:1f:5f:07: eb:19:8e:e2:19:a8:ed:31:c3:0e:7d:05:ef:f4:aa: b2:95:11:21:11:93:60:e0:29:2a:70:f0:49:7f:41: 29:d6:e1:f5:09:bb:9e:47:e4:d1:bf:df:55:52:b0: 89:d7:4b:69:96:7f:bd:ff:73:34:57:8f:5a:55:5a: a9:4b:ca:2c:45:94:7b:6d:6f:8f:19:a0:33:27:99: b0:68:e0:f9:c2:c5:ec:9a:a7:98:39:d2:ca:47:69: bf:25:56:6d:bf:05:ea:5c:4f:25:3f:d3:0b:a9:e2: fa:35:73:38:94:93:17:db:cf:49:23:ae:f6:8c:09: d9:c4:0c:4f:25:e8:88:49:6c:37:85:ee:11:7d:12: c0:bd:59:b0:1e:86:04:5f:9f:c8:2f:07:84:48:a9: 00:9f:84:75:c7:c6:f4:ac:46:8e:36:8f:e9:86:6a: 98:99:33:76:15:98:f2:7b:f6:2c:ee:81:76:19:6e: 93:59:23:cf:59:e3:9c:15:2e:8f:f6:e0:db:1e:b4: 91:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:68:B6:F3:4F:1D:5E:A3:B1:F8:A7:B3:26:B0:CB:D1:45:08:FD:5C X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5b:a7:72:32:af:e1:20:29:9f:9a:8d:03:86:d2:81:0e:2e: e6:3a:4a:47:f2:68:49:28:42:43:e7:f4:12:f6:56:f9:97:9a: 49:6e:fe:5b:1a:a6:5d:a1:5c:af:63:51:b5:d3:40:83:87:eb: 02:69:20:9f:ad:b4:86:63:00:81:82:6f:d6:2a:76:24:59:ea: 91:4f:22:cd:59:6e:da:e6:6b:d6:8f:af:4c:91:91:ac:b2:8d: 3e:e0:bf:c5:5f:78:ed:24:13:8a:bb:ee:81:96:27:8e:6a:b7: f1:4d:52:6d:7d:8c:51:95:ea:67:17:ed:2c:cc:9f:e7:f7:9d: 17:b0:7b:0f:0f:02:b0:93:2b:84:46:6a:8d:39:c4:67:35:32: 54:c5:bf:06:1c:54:c1:09:d0:3e:f1:3a:c6:cd:8f:a7:6e:cd: d3:81:9d:e7:26:13:49:8d:63:b2:d2:6f:62:0c:66:40:16:fd: 9c:1b:04:dd:6c:99:c9:cd:ef:8c:44:af:ee:78:8a:38:83:18: f2:e4:22:b8:21:46:de:2e:a8:37:64:6e:2f:2c:37:0b:32:c0: d8:5c:f2:bc:0b:6b:18:9f:2a:43:22:03:36:1d:a1:d5:64:5a: 69:25:aa:32:c7:91:15:90:82:28:b5:19:b6:f8:c2:89:20:f4: cd:b2:35:ab -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEYQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUxMDI0MTc0MDEwWhcNMjUxMDMxMTc0MDEwWjAYMRYwFAYD VQQDEw02OGZiYjlmYS05NDNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt9AhoIHI2kz+0C/w8aDr6/V4bUNOMgW2LcNggb1DJBYBQTL2NP5hIkVGygS7 +2+CbkaNGKcIueUfXwfrGY7iGajtMcMOfQXv9KqylREhEZNg4CkqcPBJf0Ep1uH1 CbueR+TRv99VUrCJ10tpln+9/3M0V49aVVqpS8osRZR7bW+PGaAzJ5mwaOD5wsXs mqeYOdLKR2m/JVZtvwXqXE8lP9MLqeL6NXM4lJMX289JI672jAnZxAxPJeiISWw3 he4RfRLAvVmwHoYEX5/ILweESKkAn4R1x8b0rEaONo/phmqYmTN2FZjye/Ys7oF2 GW6TWSPPWeOcFS6P9uDbHrSR7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMNotvNP HV6jsfinsyawy9FFCP1cMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuW6dyMq/hICmfmo0DhtKBDi7mOkpH8mhJKEJD5/QS9lb5l5pJbv5b GqZdoVyvY1G100CDh+sCaSCfrbSGYwCBgm/WKnYkWeqRTyLNWW7a5mvWj69MkZGs so0+4L/FX3jtJBOKu+6BlieOarfxTVJtfYxRlepnF+0szJ/n950XsHsPDwKwkyuE RmqNOcRnNTJUxb8GHFTBCdA+8TrGzY+nbs3TgZ3nJhNJjWOy0m9iDGZAFv2cGwTd bJnJze+MRK/ueIo4gxjy5CK4IUbeLqg3ZG4vLDcLMsDYXPK8C2sYnypDIgM2HaHV ZFppJaoyx5EVkIIotRm2+MKJIPTNsjWr -----END CERTIFICATE-----Generated at Sat Oct 25 17:21:25 2025 by rpki-client