$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: tBiBIhclxn/9YWjWfHh3TMu2thzDHSwy2gmPqk3T524= Subject key identifier: A7:A7:B3:1E:55:05:49:E0:F6:AE:B2:CE:17:DF:F1:B0:CE:B7:1E:59 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 0145 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 013D Signing time: Mon 03 Nov 2025 04:31:48 +0000 Manifest this update: Mon 03 Nov 2025 04:31:48 +0000 Manifest next update: Mon 10 Nov 2025 04:31:48 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: tDVDfcZ5PSse+AAVx/P3N6fVwhyp4MpQlKJYWZz2Iw0=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 04:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 325 (0x145) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Nov 3 04:31:48 2025 GMT Not After : Nov 10 04:31:48 2025 GMT Subject: CN=69083034-1a22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:06:17:9f:cc:9d:ea:b7:05:92:95:7f:54: e2:df:aa:7f:2f:7e:0c:12:e8:13:bb:9b:eb:bd:b3: 2c:af:89:7c:36:2a:ae:34:44:e3:12:eb:33:82:eb: c5:88:db:71:a6:e1:0b:39:fe:54:03:33:02:40:0a: cf:08:13:38:2b:1b:50:f2:c7:55:ff:44:31:48:4c: b9:44:e8:39:85:a5:9b:45:ac:e3:ba:99:b4:28:e4: 48:8c:54:b1:16:30:0b:76:48:b3:23:b7:6a:de:2f: 9d:64:c2:4f:a5:4a:46:11:a8:73:e8:6c:2d:8e:ee: 83:67:d5:0c:9c:66:22:f0:a4:3e:13:65:50:a4:f2: 5a:ba:8e:cd:bd:80:eb:cd:79:31:80:f6:b8:df:0a: b2:1b:e6:22:0c:27:02:45:66:5c:d7:75:bb:5c:23: 7f:67:d8:90:c5:ab:56:23:60:19:57:ba:8b:d8:f6: c4:00:06:6a:38:11:98:9d:d5:e4:1c:dd:d9:35:d5: e7:06:72:d6:4f:8d:0f:52:a0:aa:a7:14:ba:7a:20: 3c:35:db:83:be:05:c0:eb:0a:d9:d4:1b:66:da:33: 8c:4d:7f:41:54:ad:c9:8c:22:19:55:f0:ae:cb:7a: 99:5b:d2:84:9b:1e:98:97:08:6e:cb:9e:ad:50:bb: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:A7:B3:1E:55:05:49:E0:F6:AE:B2:CE:17:DF:F1:B0:CE:B7:1E:59 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:8c:31:aa:ad:10:aa:ad:a8:71:f9:7a:35:4e:d8:56:a3:d1: a5:cf:e6:9b:68:d8:2e:39:25:4f:d1:09:1d:ac:ca:2f:c6:26: 37:a8:28:9f:9f:22:ec:f5:9d:e4:41:80:68:61:3e:45:58:1f: 19:82:75:d7:a4:22:11:68:da:84:81:90:fb:7e:f3:a0:2b:47: 87:96:c0:15:db:da:59:de:9a:6f:60:c9:30:29:70:4c:aa:2f: 36:5b:03:53:e9:11:90:cd:37:ed:fa:b6:c0:46:9a:6a:b1:f9: 74:9a:14:34:f3:e7:1a:1d:83:d7:97:3a:82:84:b3:7b:09:60: a3:1b:1d:3c:9a:dc:27:8b:cc:51:44:74:be:07:69:56:14:91: f3:9d:8f:91:54:b4:20:69:0f:75:15:62:bb:ba:ef:52:8a:21: de:ed:8f:1a:67:a6:e0:49:6e:0c:aa:be:de:8b:52:9f:e4:54: 12:58:a2:1b:d5:34:7f:69:fc:2c:57:a0:75:48:ef:cf:e8:e5: 25:21:b0:4f:6b:f8:6c:09:1f:50:25:b3:81:72:25:87:10:ee: 75:5d:fc:3e:90:c5:3e:26:0b:26:05:d6:cf:42:47:b8:79:24: aa:6b:2c:c1:7a:f9:f9:b3:56:47:e3:82:ed:23:c1:27:66:10: 4f:ce:3d:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUxMTAzMDQzMTQ4WhcNMjUxMTEwMDQzMTQ4WjAYMRYwFAYD VQQDEw02OTA4MzAzNC0xYTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJEGF5/Mneq3BZKVf1Ti36p/L34MEugTu5vrvbMsr4l8NiquNETjEuszguvF iNtxpuELOf5UAzMCQArPCBM4KxtQ8sdV/0QxSEy5ROg5haWbRazjupm0KORIjFSx FjALdkizI7dq3i+dZMJPpUpGEahz6Gwtju6DZ9UMnGYi8KQ+E2VQpPJauo7NvYDr zXkxgPa43wqyG+YiDCcCRWZc13W7XCN/Z9iQxatWI2AZV7qL2PbEAAZqOBGYndXk HN3ZNdXnBnLWT40PUqCqpxS6eiA8NduDvgXA6wrZ1Btm2jOMTX9BVK3JjCIZVfCu y3qZW9KEmx6Ylwhuy56tULtrewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKensx5V BUng9q6yzhff8bDOtx5ZMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAvjDGqrRCqrahx+Xo1TthWo9Glz+abaNguOSVP0QkdrMovxiY3qCif nyLs9Z3kQYBoYT5FWB8ZgnXXpCIRaNqEgZD7fvOgK0eHlsAV29pZ3ppvYMkwKXBM qi82WwNT6RGQzTft+rbARppqsfl0mhQ08+caHYPXlzqChLN7CWCjGx08mtwni8xR RHS+B2lWFJHznY+RVLQgaQ91FWK7uu9SiiHe7Y8aZ6bgSW4Mqr7ei1Kf5FQSWKIb 1TR/afwsV6B1SO/P6OUlIbBPa/hsCR9QJbOBciWHEO51Xfw+kMU+JgsmBdbPQke4 eSSqayzBevn5s1ZH44LtI8EnZhBPzj1g -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:42 2025 by rpki-client