$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: zBCYSp35+uPWEonZSr8QCBiWMTaQcBWvcC19bvvxbwI= Subject key identifier: F0:C4:0A:16:06:94:82:25:CD:87:AE:E4:08:48:BC:29:F1:FC:5F:8F Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D2E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0CF8 Signing time: Sun 26 Oct 2025 18:31:20 +0000 Manifest this update: Sun 26 Oct 2025 18:31:19 +0000 Manifest next update: Sun 02 Nov 2025 18:31:19 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: +MtM+4d5mEZ25XQD+sMrovQ3rtKDUf4KOFMmxMNccDE=) 2: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=) 3: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=) 6: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 18:31:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3374 (0xd2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Oct 26 18:31:19 2025 GMT Not After : Nov 2 18:31:19 2025 GMT Subject: CN=68fe68f8-d661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:99:f6:4f:ae:47:c3:6d:f3:b6:f8:d0:45: a4:7f:68:cd:49:02:17:7a:96:d0:6f:c9:6d:bb:e9: 9f:05:2a:3d:98:e9:19:19:81:93:22:21:14:93:c1: a8:c9:73:45:d0:c3:69:a0:8f:ab:a8:df:b4:23:73: e9:9e:2d:be:cf:fe:06:9d:ba:26:43:6d:11:be:79: c3:65:f3:8b:c3:f7:39:2d:61:9e:f0:4e:13:12:c4: 35:41:55:c7:cd:cf:0f:56:fe:f8:67:5c:96:4e:95: 14:2f:d1:8b:6e:e8:26:63:0e:95:cc:0f:a0:ee:b8: e6:11:98:d1:e9:04:f1:ee:6d:61:a4:dc:cc:c8:e6: a0:f1:3c:8c:72:5c:91:be:97:31:db:26:29:b7:66: 1a:88:98:e7:3c:db:d1:2c:e0:1a:26:db:2d:e0:65: 74:60:c9:e0:db:36:8a:e2:0c:1c:a2:11:de:ba:83: d3:5a:88:52:ed:0c:75:f0:36:aa:cd:c5:6b:3c:29: 25:48:94:9c:67:e3:d0:4a:03:66:9b:3d:8a:e0:c4: 14:18:67:a5:ad:54:e4:33:0e:d8:2c:cb:00:a7:e2: 8e:c3:14:33:a7:e7:e7:2d:a8:af:d8:f4:8c:f6:09: 6c:b3:d8:3b:5a:1b:1d:b9:da:b6:c0:0a:c2:39:7a: 54:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:C4:0A:16:06:94:82:25:CD:87:AE:E4:08:48:BC:29:F1:FC:5F:8F X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:e9:e9:71:23:ba:d8:eb:99:87:bc:b5:36:13:54:d8:a2:fd: 36:76:de:14:5f:e0:b5:e6:ad:5a:e3:bc:d3:1b:81:b3:98:1f: c4:5e:97:70:9d:3c:38:26:22:ce:56:40:25:46:23:6b:54:2b: 03:64:45:72:f8:a2:9f:c8:cc:41:70:3a:37:91:21:b8:68:5d: 99:43:43:fc:53:2b:fb:6a:45:ab:e0:03:66:3f:9f:bf:ce:2d: ba:59:37:f2:27:78:ef:68:7b:66:c5:e5:97:f9:79:f1:c1:f5: 7a:c5:f7:c3:5b:f8:09:9b:92:97:d0:6b:95:29:47:32:02:94: ff:c5:2d:93:86:a5:f2:d0:03:d0:6f:ea:ce:09:9c:6c:97:ae: 5c:c5:bd:07:dc:74:41:88:52:2a:26:79:86:de:a2:2a:c9:67: b0:c9:7b:cc:0a:84:5d:1b:00:ea:09:7e:0c:fb:1b:28:45:c5: 6d:c8:18:80:c8:6f:f1:d0:49:2a:fc:78:b0:8f:97:3b:fc:c4: e2:88:ae:f7:77:62:53:5f:33:92:fb:fc:38:fd:49:21:9a:a3: f4:06:41:70:db:55:ba:87:93:ad:cd:d0:3c:5f:5f:ee:88:c0: 76:38:99:19:bb:0c:50:b8:ab:70:67:40:c8:16:fc:36:86:a0: d6:e0:c9:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUxMDI2MTgzMTE5WhcNMjUxMTAyMTgzMTE5WjAYMRYwFAYD VQQDEw02OGZlNjhmOC1kNjYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAssSZ9k+uR8Nt87b40EWkf2jNSQIXepbQb8ltu+mfBSo9mOkZGYGTIiEUk8Go yXNF0MNpoI+rqN+0I3Ppni2+z/4GnbomQ20RvnnDZfOLw/c5LWGe8E4TEsQ1QVXH zc8PVv74Z1yWTpUUL9GLbugmYw6VzA+g7rjmEZjR6QTx7m1hpNzMyOag8TyMclyR vpcx2yYpt2YaiJjnPNvRLOAaJtst4GV0YMng2zaK4gwcohHeuoPTWohS7Qx18Daq zcVrPCklSJScZ+PQSgNmmz2K4MQUGGelrVTkMw7YLMsAp+KOwxQzp+fnLaiv2PSM 9glss9g7Whsdudq2wArCOXpUjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPDEChYG lIIlzYeu5AhIvCnx/F+PMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBw6elxI7rY65mHvLU2E1TYov02dt4UX+C15q1a47zTG4GzmB/EXpdw nTw4JiLOVkAlRiNrVCsDZEVy+KKfyMxBcDo3kSG4aF2ZQ0P8Uyv7akWr4ANmP5+/ zi26WTfyJ3jvaHtmxeWX+XnxwfV6xffDW/gJm5KX0GuVKUcyApT/xS2ThqXy0APQ b+rOCZxsl65cxb0H3HRBiFIqJnmG3qIqyWewyXvMCoRdGwDqCX4M+xsoRcVtyBiA yG/x0Ekq/Hiwj5c7/MTiiK73d2JTXzOS+/w4/UkhmqP0BkFw21W6h5OtzdA8X1/u iMB2OJkZuwxQuKtwZ0DIFvw2hqDW4MkV -----END CERTIFICATE-----Generated at Tue Oct 28 18:09:39 2025 by rpki-client