$ rpki-client -vvf rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft File: AG_6MenQAhaRnYn4s-fb7ffvlrM.mft (raw, json) Hash identifier: uMN3M+dtJeZedGu6mz+5Bhw1YCER+6hXa0KPABKEPw8= Subject key identifier: D5:83:E6:55:CA:53:75:A1:70:12:31:3E:D3:8F:03:27:F3:64:95:2B Authority key identifier: 00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 Certificate issuer: /CN=A9196DC9/serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Certificate serial: 0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft Manifest number: 0B Signing time: Mon 03 Nov 2025 08:01:23 +0000 Manifest this update: Mon 03 Nov 2025 08:01:23 +0000 Manifest next update: Mon 10 Nov 2025 08:01:23 +0000 Files and hashes: 1: AG_6MenQAhaRnYn4s-fb7ffvlrM.crl (hash: WGYCveSD57gCHgPGIUFo0mQB12eWVimk2oZIlvrAjeU=) 2: 473BC6AAAE5C11F089298455C4F9AE02.roa (hash: 1DDzPpe+WSx+Jj7KjmakEhVYtPTGv6AwRf317rIDpEw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 08:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9196DC9, serialNumber=006FFA31E9D00216919D89F8B3E7DBEDF7EF96B3 Validity Not Before: Nov 3 08:01:23 2025 GMT Not After : Nov 10 08:01:23 2025 GMT Subject: CN=69086153-09f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:2b:d9:27:16:b3:f6:87:01:f6:b7:ab:2f:7d: 26:41:f7:89:c3:99:3b:81:e9:71:ad:2e:b4:dd:df: 09:38:77:31:7a:64:71:e7:8f:25:26:d2:dd:39:5e: 91:20:14:96:c2:d5:16:35:d6:15:a9:11:02:66:52: d2:3b:d5:7f:9d:34:f7:0c:d1:88:30:92:4a:f5:90: 00:e6:0c:ea:12:bb:56:25:8a:36:d8:84:34:cb:c6: 6e:03:44:0c:92:f0:cc:69:e2:a0:af:26:c7:ba:bc: f7:30:f9:f2:d0:d0:f8:d2:5f:b6:7d:31:44:b3:45: ac:44:c8:fc:10:42:58:b4:c8:48:b5:89:1a:44:17: 24:19:6f:ab:be:ac:0c:be:65:a3:ab:54:50:4e:44: 6c:e9:f3:9f:32:78:89:75:f2:87:64:d4:06:8b:50: 5a:9c:b7:c9:a3:a0:0a:8f:e2:fb:03:eb:1b:7d:9d: c4:ce:ad:25:f3:d8:32:ce:8d:a7:92:f9:8d:ec:3c: eb:c9:0e:d3:6b:cc:11:e1:92:e7:90:e8:2b:13:98: 48:59:f1:67:30:b6:a3:03:d0:e5:c3:67:23:a4:3a: ce:46:b7:66:3d:a2:6f:20:b0:38:43:86:b4:aa:5b: c0:2c:7e:55:1e:22:e5:94:99:28:39:95:fd:3b:dd: ac:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:83:E6:55:CA:53:75:A1:70:12:31:3E:D3:8F:03:27:F3:64:95:2B X509v3 Authority Key Identifier: keyid:00:6F:FA:31:E9:D0:02:16:91:9D:89:F8:B3:E7:DB:ED:F7:EF:96:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AG_6MenQAhaRnYn4s-fb7ffvlrM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9196DC9/1806239AAE5B11F08C7CAC53C4F9AE02/AG_6MenQAhaRnYn4s-fb7ffvlrM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:68:b6:94:dc:a9:c3:1c:0c:95:14:e3:a3:5b:11:3d:a3:4e: c0:24:6d:d4:fe:b2:88:66:7d:bf:80:c7:e3:36:f2:9e:3f:a6: 86:aa:cc:8f:d4:95:9c:2e:65:c6:d2:e5:8a:2e:1a:8d:f9:c9: 20:21:4d:99:b4:64:7f:26:e2:9b:69:76:18:2d:bd:b4:e3:1b: b3:e3:75:e4:8d:0f:29:31:c3:92:f0:2b:7d:02:42:bc:25:2a: b1:6d:60:6c:2a:01:33:de:29:64:2c:01:9e:a0:7f:61:fa:23: f1:01:25:ce:2a:48:7b:05:10:48:f4:f4:0e:ae:c5:13:3f:e2: e2:c9:fe:76:84:6b:49:1f:a1:d9:de:12:7c:f3:46:3b:95:ca: 2a:e9:59:c0:13:3c:a6:56:fa:96:49:85:37:c7:b1:90:45:e9: ea:a0:37:47:52:9e:3a:5d:22:58:2c:00:dc:aa:b7:ff:71:ae: 79:f8:7b:43:9a:b4:d6:c0:b6:c6:8f:77:a1:d2:c1:13:74:c0: f7:a2:dc:af:e7:f4:6b:b9:12:5d:38:9d:39:14:c5:5f:54:72: 1c:63:d9:0c:6f:e0:40:6c:4d:78:50:b7:86:91:c2:be:db:2e: cd:60:0a:73:dc:f4:d4:4d:29:17:4a:53:98:fc:22:ea:a2:4d: 69:02:28:c2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NkRDOTExMC8GA1UEBRMoMDA2RkZBMzFFOUQwMDIxNjkxOUQ4OUY4QjNFN0RCRURG N0VGOTZCMzAeFw0yNTExMDMwODAxMjNaFw0yNTExMTAwODAxMjNaMBgxFjAUBgNV BAMTDTY5MDg2MTUzLTA5ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClK9knFrP2hwH2t6svfSZB94nDmTuB6XGtLrTd3wk4dzF6ZHHnjyUm0t05XpEg FJbC1RY11hWpEQJmUtI71X+dNPcM0Ygwkkr1kADmDOoSu1YlijbYhDTLxm4DRAyS 8Mxp4qCvJse6vPcw+fLQ0PjSX7Z9MUSzRaxEyPwQQli0yEi1iRpEFyQZb6u+rAy+ ZaOrVFBORGzp858yeIl18odk1AaLUFqct8mjoAqP4vsD6xt9ncTOrSXz2DLOjaeS +Y3sPOvJDtNrzBHhkueQ6CsTmEhZ8WcwtqMD0OXDZyOkOs5Gt2Y9om8gsDhDhrSq W8AsflUeIuWUmSg5lf073azBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1YPmVcpT daFwEjE+048DJ/NklSswHwYDVR0jBBgwFoAUAG/6MenQAhaRnYn4s+fb7ffvlrMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2REM5LzE4MDYyMzlBQUU1 QjExRjA4QzdDQUM1M0M0RjlBRTAyL0FHXzZNZW5RQWhhUm5ZbjRzLWZiN2Zmdmxy TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQUdfNk1lblFBaGFSblluNHMtZmI3ZmZ2bHJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk2 REM5LzE4MDYyMzlBQUU1QjExRjA4QzdDQUM1M0M0RjlBRTAyL0FHXzZNZW5RQWhh Um5ZbjRzLWZiN2ZmdmxyTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEBotpTcqcMcDJUU46NbET2jTsAkbdT+sohmfb+Ax+M28p4/poaqzI/U lZwuZcbS5YouGo35ySAhTZm0ZH8m4ptpdhgtvbTjG7PjdeSNDykxw5LwK30CQrwl KrFtYGwqATPeKWQsAZ6gf2H6I/EBJc4qSHsFEEj09A6uxRM/4uLJ/naEa0kfodne EnzzRjuVyirpWcATPKZW+pZJhTfHsZBF6eqgN0dSnjpdIlgsANyqt/9xrnn4e0Oa tNbAtsaPd6HSwRN0wPei3K/n9Gu5El04nTkUxV9Uchxj2Qxv4EBsTXhQt4aRwr7b Ls1gCnPc9NRNKRdKU5j8IuqiTWkCKMI= -----END CERTIFICATE-----Generated at Mon Nov 3 18:09:46 2025 by rpki-client