$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft File: 6t6GhZIRcEQyqBm4GJm2DF093os.mft (raw, json) Hash identifier: 4sfBZLJGQr9rJ8ahx7Q4qyliM2MTbZEK2MVIIGJP22A= Subject key identifier: 82:65:95:31:6D:13:66:E6:94:C0:8C:C9:F1:0D:DF:18:65:59:99:82 Authority key identifier: EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B Certificate issuer: /CN=A91A0432/serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Certificate serial: 03D7 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft Manifest number: 03D4 Signing time: Wed 05 Nov 2025 00:42:15 +0000 Manifest this update: Wed 05 Nov 2025 00:42:14 +0000 Manifest next update: Wed 12 Nov 2025 00:42:14 +0000 Files and hashes: 1: 6t6GhZIRcEQyqBm4GJm2DF093os.crl (hash: ESZaphT3s4SvddhYh28JWZn7Pjo2+aGepsAI6XihaL4=) 2: 7185135A61AE11EEA6D61C37C4F9AE02.roa (hash: c/Zvm427kENiAideE2yc17TlzEqhW1utfEK6NB9dveM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 983 (0x3d7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0432, serialNumber=EADE86859211704432A819B81899B60C5D3DDE8B Validity Not Before: Nov 5 00:42:14 2025 GMT Not After : Nov 12 00:42:14 2025 GMT Subject: CN=690a9d67-f0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b2:59:f9:57:e5:70:9f:d1:d7:8e:3c:ff:56: 6b:e9:f9:42:79:a3:cd:94:82:ea:56:25:38:82:83: 85:70:63:6a:98:55:c1:7b:36:2f:8e:6b:42:ab:2a: d3:c2:32:57:0d:ef:e1:7b:ab:b3:a9:09:aa:2b:7d: 9b:65:ce:e2:3c:e4:d5:5d:26:df:65:af:10:9c:3a: 29:4d:70:ff:b3:32:90:d1:f4:74:55:ac:ae:0d:b5: 73:df:ca:b8:ae:b7:6e:0f:46:e5:88:74:36:f7:be: ee:da:90:72:47:67:12:12:49:09:28:cd:59:dd:2c: aa:8a:b1:1c:b9:db:a2:43:b0:15:fe:83:6f:60:1b: 58:dd:4f:60:59:a2:4a:eb:af:10:b9:51:9a:49:c5: 00:0f:df:be:7b:fa:b7:da:37:6a:1f:98:1a:1a:81: 61:b9:ed:09:c1:c7:ab:b8:43:8a:d7:d2:f5:57:05: 53:a5:eb:51:0d:cd:71:d5:0e:2f:bc:36:c2:55:8b: 45:65:61:b2:b3:21:8b:e5:b3:46:d3:55:3e:47:e3: 55:07:bf:f3:69:69:37:7f:3f:c6:e1:e9:2c:22:df: cf:fd:f7:e4:a6:fa:f7:f2:e9:50:2e:c1:aa:fd:9c: e4:f8:d9:2c:c6:d4:25:ec:4b:a3:5f:2c:13:a9:fa: f8:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:65:95:31:6D:13:66:E6:94:C0:8C:C9:F1:0D:DF:18:65:59:99:82 X509v3 Authority Key Identifier: keyid:EA:DE:86:85:92:11:70:44:32:A8:19:B8:18:99:B6:0C:5D:3D:DE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6t6GhZIRcEQyqBm4GJm2DF093os.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0432/EC692F04A4CA11ECAC4E5744C4F9AE02/6t6GhZIRcEQyqBm4GJm2DF093os.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7d:31:a8:cf:6b:9f:f2:10:93:e7:f1:53:73:41:a6:83:41:4b: 74:9a:95:59:38:0e:7e:d3:92:4a:49:0e:9a:b1:da:b5:38:f2: 4f:d0:b0:0d:56:b6:c2:4c:c7:f5:ff:4f:12:d7:91:f1:c6:05: f8:a6:c0:c6:49:34:02:4e:b5:09:a3:dd:e7:d2:89:83:dd:8b: 16:e3:ef:34:0b:ea:3a:36:3e:99:bb:d2:cc:28:1b:e6:1b:ea: b8:be:5f:ea:1c:97:65:fa:2b:a9:62:bc:fb:93:0c:22:58:d5: 42:a3:23:fd:ab:e8:65:43:8d:9c:e3:17:03:b3:ee:ff:a1:1d: 2d:2e:4d:15:83:79:dd:1a:19:53:8c:5d:47:e1:79:a2:39:7c: 5b:88:b3:72:aa:ad:08:f6:ca:a0:dc:ba:59:41:d7:ba:a4:46: 9e:28:79:ae:a9:63:bc:57:dc:a1:02:91:a9:d7:6a:d5:a9:e8: 81:16:dc:31:95:d5:c7:7c:c4:3d:6c:83:c3:41:5e:41:62:83: 68:7e:7d:d2:c1:b6:31:32:f9:8b:c5:4d:27:a4:3c:c8:da:7e: 25:3b:1a:0b:2a:0e:91:11:5f:34:0e:fd:76:41:eb:d1:b9:a8: a6:f0:17:4a:a8:76:fa:40:81:a7:c3:66:c1:6f:dd:c2:a1:43: 64:56:0b:d7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA9cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0MzIxMTAvBgNVBAUTKEVBREU4Njg1OTIxMTcwNDQzMkE4MTlCODE4OTlCNjBD NUQzRERFOEIwHhcNMjUxMTA1MDA0MjE0WhcNMjUxMTEyMDA0MjE0WjAYMRYwFAYD VQQDEw02OTBhOWQ2Ny1mMGI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw7JZ+VflcJ/R1448/1Zr6flCeaPNlILqViU4goOFcGNqmFXBezYvjmtCqyrT wjJXDe/he6uzqQmqK32bZc7iPOTVXSbfZa8QnDopTXD/szKQ0fR0VayuDbVz38q4 rrduD0bliHQ2977u2pByR2cSEkkJKM1Z3SyqirEcuduiQ7AV/oNvYBtY3U9gWaJK 668QuVGaScUAD9++e/q32jdqH5gaGoFhue0JwceruEOK19L1VwVTpetRDc1x1Q4v vDbCVYtFZWGysyGL5bNG01U+R+NVB7/zaWk3fz/G4eksIt/P/ffkpvr38ulQLsGq /Zzk+NksxtQl7EujXywTqfr42QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIJllTFt E2bmlMCMyfEN3xhlWZmCMB8GA1UdIwQYMBaAFOrehoWSEXBEMqgZuBiZtgxdPd6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDQzMi9FQzY5MkYwNEE0 Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNFUXlxQm00R0ptMkRGMDkz b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZ0NkdoWklSY0VReXFCbTRHSm0yREYwOTNvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDQzMi9FQzY5MkYwNEE0Q0ExMUVDQUM0RTU3NDRDNEY5QUUwMi82dDZHaFpJUmNF UXlxQm00R0ptMkRGMDkzb3MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB9MajPa5/yEJPn8VNzQaaDQUt0mpVZOA5+05JKSQ6asdq1OPJP0LAN VrbCTMf1/08S15HxxgX4psDGSTQCTrUJo93n0omD3YsW4+80C+o6Nj6Zu9LMKBvm G+q4vl/qHJdl+iupYrz7kwwiWNVCoyP9q+hlQ42c4xcDs+7/oR0tLk0Vg3ndGhlT jF1H4XmiOXxbiLNyqq0I9sqg3LpZQde6pEaeKHmuqWO8V9yhApGp12rVqeiBFtwx ldXHfMQ9bIPDQV5BYoNofn3SwbYxMvmLxU0npDzI2n4lOxoLKg6REV80Dv12QevR uaim8BdKqHb6QIGnw2bBb93CoUNkVgvX -----END CERTIFICATE-----Generated at Wed Nov 5 22:08:36 2025 by rpki-client