$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: PlLey0sKe0uyZhhnqjdV2mJ/o3yj9cnPtUx+s8L/93w= Subject key identifier: 39:56:EB:23:9B:19:9E:A9:1D:9D:FB:2C:76:82:9E:4A:31:2E:28:9F Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 01D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 01D2 Signing time: Mon 03 Nov 2025 02:48:19 +0000 Manifest this update: Mon 03 Nov 2025 02:48:18 +0000 Manifest next update: Mon 10 Nov 2025 02:48:18 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: 1vBbvYiFWJos34OoJATC/vD2FgmR1f9JcLdgcUptLWw=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:48:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 470 (0x1d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Nov 3 02:48:18 2025 GMT Not After : Nov 10 02:48:18 2025 GMT Subject: CN=690817f2-e30b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a9:0d:3c:dc:ba:99:60:b0:32:fb:5b:30:f8: 2c:c3:a7:01:4b:71:e8:f7:a4:5f:6e:ea:4d:05:48: e7:3d:4d:aa:cc:a8:78:13:0b:40:d1:62:05:cc:17: ed:29:9a:00:07:58:bf:59:56:be:3a:aa:ce:99:9d: fd:08:5a:c1:ae:31:57:93:fd:d1:06:b2:bb:a5:aa: 94:7e:1b:90:94:74:c5:02:36:1d:af:82:75:24:94: b9:0a:e5:8e:58:1b:48:59:58:ef:0a:95:fc:78:83: 78:b2:9f:08:a2:3f:02:da:dc:95:96:a5:5c:fc:05: 7c:6f:14:bd:7e:16:26:15:a2:70:37:64:3b:d3:68: ad:ec:58:4c:06:b4:ae:e7:29:58:b1:89:5c:a6:bc: ad:7f:7d:4b:97:48:40:4a:bc:cc:94:46:64:9b:16: 85:f5:13:c0:26:46:27:e4:a6:f2:78:ba:42:38:4d: b9:06:33:a8:2b:da:ab:01:1f:ad:92:40:49:dd:75: d5:a5:8d:ee:69:54:55:f3:e7:18:b7:11:cc:39:bb: cf:6d:19:c9:1e:42:f1:66:b2:a9:8f:33:ac:8d:f2: 2d:52:5a:c6:43:1e:8c:9d:ca:3c:cd:14:1f:a4:48: 3e:7d:fa:37:89:6d:c5:f8:36:71:81:26:2b:7f:16: 77:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:56:EB:23:9B:19:9E:A9:1D:9D:FB:2C:76:82:9E:4A:31:2E:28:9F X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:49:bd:34:1d:03:5d:a4:44:84:88:d1:90:05:83:dc:de:f2: 76:a1:4c:a9:f0:5d:f5:e8:57:cc:e1:d4:e1:56:90:fe:18:70: c9:8b:67:8e:2e:62:1e:87:3f:53:63:23:3e:ee:32:f1:a3:cc: 8e:e8:4b:04:25:c6:60:9b:22:7d:59:a9:52:82:f2:ab:dd:e8: 83:c5:e0:c8:a7:93:da:fd:a7:f8:f3:77:eb:9d:ca:ca:86:04: 65:21:8d:c9:11:a3:68:ee:d9:cd:e2:bf:40:88:b2:d5:4f:91: 35:d0:fd:cf:0d:b9:56:6d:70:c9:34:37:b8:8d:10:3f:1c:3f: 16:3f:31:ff:f2:01:32:0c:a1:48:c5:57:f7:2d:07:9e:c6:9c: 89:42:77:cf:ea:80:1e:a4:16:af:b1:2f:aa:68:82:a6:f2:6f: 9d:2a:61:3d:e6:13:0e:92:2d:22:4b:d8:b7:5c:a0:33:e6:be: 32:2d:4f:0e:39:59:80:32:27:46:65:52:e6:cf:0b:73:9d:09: 1a:fa:1d:30:ab:6f:00:dd:66:ae:b6:84:b1:9e:c7:83:37:45: c9:c6:ff:70:2d:80:d2:e3:c1:b3:f6:99:14:26:76:9c:e9:08: bd:41:3a:9e:d9:92:d4:79:bc:d3:11:42:2a:00:74:7a:a1:b7: a0:ad:10:92 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjUxMTAzMDI0ODE4WhcNMjUxMTEwMDI0ODE4WjAYMRYwFAYD VQQDEw02OTA4MTdmMi1lMzBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy6kNPNy6mWCwMvtbMPgsw6cBS3Ho96RfbupNBUjnPU2qzKh4EwtA0WIFzBft KZoAB1i/WVa+OqrOmZ39CFrBrjFXk/3RBrK7paqUfhuQlHTFAjYdr4J1JJS5CuWO WBtIWVjvCpX8eIN4sp8Ioj8C2tyVlqVc/AV8bxS9fhYmFaJwN2Q702it7FhMBrSu 5ylYsYlcprytf31Ll0hASrzMlEZkmxaF9RPAJkYn5KbyeLpCOE25BjOoK9qrAR+t kkBJ3XXVpY3uaVRV8+cYtxHMObvPbRnJHkLxZrKpjzOsjfItUlrGQx6Mnco8zRQf pEg+ffo3iW3F+DZxgSYrfxZ3rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDlW6yOb GZ6pHZ37LHaCnkoxLiifMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSSb00HQNdpESEiNGQBYPc3vJ2oUyp8F316FfM4dThVpD+GHDJi2eO LmIehz9TYyM+7jLxo8yO6EsEJcZgmyJ9WalSgvKr3eiDxeDIp5Pa/af483frncrK hgRlIY3JEaNo7tnN4r9AiLLVT5E10P3PDblWbXDJNDe4jRA/HD8WPzH/8gEyDKFI xVf3LQeexpyJQnfP6oAepBavsS+qaIKm8m+dKmE95hMOki0iS9i3XKAz5r4yLU8O OVmAMidGZVLmzwtznQka+h0wq28A3WautoSxnseDN0XJxv9wLYDS48Gz9pkUJnac 6Qi9QTqe2ZLUebzTEUIqAHR6obegrRCS -----END CERTIFICATE-----Generated at Mon Nov 3 18:08:17 2025 by rpki-client