$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft File: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft (raw, json) Hash identifier: HB6YeoT718M9zEmqOiWcrwaeCyTgU9cNG/PGY275jNE= Subject key identifier: FE:7C:49:C4:67:10:E2:E5:30:91:6C:70:07:34:E7:11:3C:B5:F4:2C Authority key identifier: EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 Certificate issuer: /CN=A91AB3E4/serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Certificate serial: 0A8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft Manifest number: 0A88 Signing time: Mon 20 Oct 2025 20:21:41 +0000 Manifest this update: Mon 20 Oct 2025 20:21:40 +0000 Manifest next update: Mon 27 Oct 2025 20:21:40 +0000 Files and hashes: 1: 6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl (hash: a1KVLoo+8XrK1nMwCGD/BinaoT1O1rM3EWI0/406z0A=) 2: 685E441A69BC11EA97D4FE67C4F9AE02.roa (hash: J+JZoSjojOqJ1AwA5T/9H8nf3jJIVy6YAPw444KE/KA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 20:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2703 (0xa8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB3E4, serialNumber=EAA792F968863C3FFB9EBD1671A06C145A1B2164 Validity Not Before: Oct 20 20:21:40 2025 GMT Not After : Oct 27 20:21:40 2025 GMT Subject: CN=68f699d4-a449 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:20:02:da:a3:0c:16:0a:de:35:5f:da:0f: 97:3d:08:87:d9:6e:bb:35:7a:2c:43:47:f0:5c:6d: b3:04:7f:69:7d:42:2c:3d:5c:07:e3:f4:25:21:2c: 45:16:d3:19:c3:d2:fe:70:65:28:b8:1d:d5:30:e3: 69:0a:84:3b:22:2b:dd:77:ea:5b:4c:10:7f:98:bd: 01:77:a8:11:9c:d1:63:06:0a:2e:f1:20:a6:b1:ce: 32:56:7f:81:ed:36:ab:12:5a:28:d9:99:5a:9a:ff: b4:fa:d4:19:c3:fe:6f:18:bc:19:f6:d6:ec:e3:b1: ce:62:90:79:b3:5b:56:4d:29:dc:52:57:46:c0:d8: ee:f4:80:fa:1f:3c:80:65:5a:e1:65:ae:ee:8b:e3: 3f:48:81:f7:c8:f4:9f:14:a9:9a:01:2c:4d:d9:1d: 53:ca:94:76:d2:d9:58:fb:37:e5:17:09:7f:b0:80: c5:19:51:31:56:92:84:19:e4:47:93:a9:f6:c8:27: 33:53:25:59:61:90:73:d2:55:6f:aa:13:4c:cf:a5: 52:c4:ba:f1:58:99:79:90:06:34:4c:32:f3:29:fe: 20:53:07:d9:33:6b:e5:94:49:cc:06:bb:d7:9e:2f: 7d:2f:19:f4:96:de:d6:34:56:aa:94:ce:26:4e:aa: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:7C:49:C4:67:10:E2:E5:30:91:6C:70:07:34:E7:11:3C:B5:F4:2C X509v3 Authority Key Identifier: keyid:EA:A7:92:F9:68:86:3C:3F:FB:9E:BD:16:71:A0:6C:14:5A:1B:21:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qeS-WiGPD_7nr0WcaBsFFobIWQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB3E4/F69881DE69BA11EAA65DF764C4F9AE02/6qeS-WiGPD_7nr0WcaBsFFobIWQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4a:43:d3:34:0c:e2:6e:4e:c2:23:cf:a1:f9:03:25:5f:a8:c5: f3:42:6e:71:40:4e:07:d1:ed:e7:ef:45:43:78:56:e1:19:0c: ee:85:55:48:5e:90:df:12:25:fe:19:f6:c4:35:2d:d2:a8:c0: 72:82:9c:a8:50:12:a7:c0:bb:53:b5:a2:95:03:a9:39:3e:d4: 09:fb:a9:e7:a4:6a:95:44:40:0f:72:c9:5b:7b:5a:b2:d4:a8: 8a:6a:5b:fb:85:0f:bd:88:72:70:98:89:60:01:4c:f6:b2:8e: 20:c2:2c:00:07:28:9e:87:5a:2a:30:88:2d:ba:35:f4:33:66: 76:09:24:64:61:94:28:72:a7:83:eb:61:00:1e:7e:d6:3a:2a: 9f:bd:13:b6:d3:ad:18:d0:e7:26:f4:22:7a:5e:83:f7:83:81: bc:e9:d9:5e:68:64:7e:c8:57:97:3a:b3:d1:4c:b4:0f:76:17: b3:c9:2a:e0:61:a3:3f:5d:c7:27:a7:f4:50:3a:f3:12:d7:78: 8b:dd:78:e9:a2:f0:53:ab:4b:da:57:f1:7f:5f:66:8b:3d:3d: 1b:21:b0:ed:d1:a6:4d:75:61:90:a1:02:78:55:fb:43:d5:5e: 06:a2:36:14:76:71:93:4d:0f:4e:12:b0:fc:6f:a2:b4:6b:d8: 90:36:8d:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIzRTQxMTAvBgNVBAUTKEVBQTc5MkY5Njg4NjNDM0ZGQjlFQkQxNjcxQTA2QzE0 NUExQjIxNjQwHhcNMjUxMDIwMjAyMTQwWhcNMjUxMDI3MjAyMTQwWjAYMRYwFAYD VQQDEw02OGY2OTlkNC1hNDQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyhEgAtqjDBYK3jVf2g+XPQiH2W67NXosQ0fwXG2zBH9pfUIsPVwH4/QlISxF FtMZw9L+cGUouB3VMONpCoQ7Iivdd+pbTBB/mL0Bd6gRnNFjBgou8SCmsc4yVn+B 7TarEloo2Zlamv+0+tQZw/5vGLwZ9tbs47HOYpB5s1tWTSncUldGwNju9ID6HzyA ZVrhZa7ui+M/SIH3yPSfFKmaASxN2R1TypR20tlY+zflFwl/sIDFGVExVpKEGeRH k6n2yCczUyVZYZBz0lVvqhNMz6VSxLrxWJl5kAY0TDLzKf4gUwfZM2vllEnMBrvX ni99Lxn0lt7WNFaqlM4mTqqyQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP58ScRn EOLlMJFscAc05xE8tfQsMB8GA1UdIwQYMBaAFOqnkvlohjw/+569FnGgbBRaGyFk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjNFNC9GNjk4ODFERTY5 QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BEXzducjBXY2FCc0ZGb2JJ V1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxZVMtV2lHUERfN25yMFdjYUJzRkZvYklXUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QjNFNC9GNjk4ODFERTY5QkExMUVBQTY1REY3NjRDNEY5QUUwMi82cWVTLVdpR1BE XzducjBXY2FCc0ZGb2JJV1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBKQ9M0DOJuTsIjz6H5AyVfqMXzQm5xQE4H0e3n70VDeFbhGQzuhVVI XpDfEiX+GfbENS3SqMBygpyoUBKnwLtTtaKVA6k5PtQJ+6nnpGqVREAPcslbe1qy 1KiKalv7hQ+9iHJwmIlgAUz2so4gwiwAByieh1oqMIgtujX0M2Z2CSRkYZQocqeD 62EAHn7WOiqfvRO2060Y0Ocm9CJ6XoP3g4G86dleaGR+yFeXOrPRTLQPdhezySrg YaM/Xccnp/RQOvMS13iL3XjpovBTq0vaV/F/X2aLPT0bIbDt0aZNdWGQoQJ4VftD 1V4GojYUdnGTTQ9OErD8b6K0a9iQNo19 -----END CERTIFICATE-----Generated at Tue Oct 21 05:29:35 2025 by rpki-client