$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: wPdnTe95qsvxxdGtdaAzOpjQkq3MdBBYG/ixG47BA7g= Subject key identifier: 87:B3:A7:20:27:39:51:82:C2:D1:2A:77:B5:DA:3B:DA:57:0D:51:71 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: C8 Signing time: Mon 03 Nov 2025 05:45:56 +0000 Manifest this update: Mon 03 Nov 2025 05:45:56 +0000 Manifest next update: Mon 10 Nov 2025 05:45:56 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: /mLLxm6OX4Eq7IrNCKZpk8axwVOAV2fMSZMptoDnZKc=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:45:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 201 (0xc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Nov 3 05:45:56 2025 GMT Not After : Nov 10 05:45:56 2025 GMT Subject: CN=69084194-c683 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ee:86:a9:03:a1:4d:3b:3c:5c:8b:ac:51:00: 02:b0:70:66:ba:b8:b2:2b:1f:16:ec:78:08:b0:ad: 76:e4:48:9c:a4:10:91:ce:08:da:9f:d6:2a:85:d8: fc:99:22:bf:9c:92:d5:3d:4e:1a:9b:d3:01:5f:94: 0a:3c:4d:6c:63:05:19:21:75:78:ba:91:76:c8:0e: 4f:15:20:4d:39:f3:d7:2a:0c:1d:10:1a:3a:5c:d3: a6:ee:8e:75:d0:f5:19:15:81:f0:dd:54:29:67:71: ec:7a:47:4f:b7:5a:44:91:01:ff:e5:10:3b:5b:19: 91:9b:f8:13:39:32:67:21:16:7d:de:ae:3b:3b:a0: b3:c5:0b:8e:ba:2a:b4:34:d9:69:b1:54:ac:72:86: 42:21:c5:f0:cd:cf:68:be:23:14:98:9b:f0:34:10: 42:16:d6:34:42:4a:2c:a9:d5:77:85:bf:4b:86:8e: d9:a8:93:15:4d:c7:80:d1:26:c4:57:9d:65:87:aa: 22:d7:2c:a3:95:7d:93:fb:bc:c7:3d:69:e4:9c:bb: 2d:e5:d3:b2:ad:9d:1c:e8:2a:61:14:d9:e7:12:9d: ca:96:b6:ab:a3:3f:c1:59:e7:ec:db:03:42:15:9b: be:c9:95:b8:c9:09:99:bf:5b:e2:2b:65:4a:09:87: 9a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:A7:20:27:39:51:82:C2:D1:2A:77:B5:DA:3B:DA:57:0D:51:71 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:72:b9:80:7b:a4:56:84:77:33:58:37:70:86:a2:bd:ac:53: ac:8e:6d:4f:e2:bc:cc:95:0b:29:bd:0d:5f:37:3b:fe:9b:ed: db:6e:90:61:77:dd:32:a6:d7:8c:b2:a9:cb:6d:0b:cc:a9:cb: c4:3c:a0:04:25:05:32:62:49:dc:59:b6:57:b3:53:4d:61:a7: f3:b4:ae:6d:ac:14:b5:13:0d:4d:da:33:db:6c:e5:f5:80:6b: 0b:c5:73:c0:cb:5b:86:51:31:d8:4a:5f:0a:a2:7d:3a:f9:c4: e8:44:5d:0c:3f:44:ff:1f:f4:e0:0f:af:1e:4b:74:9d:80:85: 87:da:83:ec:1b:9a:82:e4:47:8e:8e:7a:bd:79:9c:d1:45:e5: 0b:61:ec:67:88:33:ab:71:45:5f:1c:28:da:bb:4b:fd:da:e4: 9c:46:c7:79:13:a4:af:49:90:29:71:47:7e:f7:64:cb:5f:41: 24:31:8c:9f:d8:b3:f9:46:94:29:53:04:c5:d9:da:b9:57:46: cf:53:1e:58:db:f8:23:7a:6f:ea:d8:8b:b1:6e:22:0d:68:f4: 69:e6:84:2f:74:76:53:b6:5b:11:aa:28:c8:f8:63:13:0e:e5: c9:73:2f:01:95:d7:fd:7d:d3:3f:1a:bb:b5:e1:61:78:ee:93: 52:39:7f:bd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUxMTAzMDU0NTU2WhcNMjUxMTEwMDU0NTU2WjAYMRYwFAYD VQQDEw02OTA4NDE5NC1jNjgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApe6GqQOhTTs8XIusUQACsHBmuriyKx8W7HgIsK125EicpBCRzgjan9Yqhdj8 mSK/nJLVPU4am9MBX5QKPE1sYwUZIXV4upF2yA5PFSBNOfPXKgwdEBo6XNOm7o51 0PUZFYHw3VQpZ3HsekdPt1pEkQH/5RA7WxmRm/gTOTJnIRZ93q47O6CzxQuOuiq0 NNlpsVSscoZCIcXwzc9oviMUmJvwNBBCFtY0QkosqdV3hb9Lho7ZqJMVTceA0SbE V51lh6oi1yyjlX2T+7zHPWnknLst5dOyrZ0c6CphFNnnEp3Klraroz/BWefs2wNC FZu+yZW4yQmZv1viK2VKCYeaHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIezpyAn OVGCwtEqd7XaO9pXDVFxMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxcrmAe6RWhHczWDdwhqK9rFOsjm1P4rzMlQspvQ1fNzv+m+3bbpBh d90ypteMsqnLbQvMqcvEPKAEJQUyYkncWbZXs1NNYafztK5trBS1Ew1N2jPbbOX1 gGsLxXPAy1uGUTHYSl8Kon06+cToRF0MP0T/H/TgD68eS3SdgIWH2oPsG5qC5EeO jnq9eZzRReULYexniDOrcUVfHCjau0v92uScRsd5E6SvSZApcUd+92TLX0EkMYyf 2LP5RpQpUwTF2dq5V0bPUx5Y2/gjem/q2IuxbiINaPRp5oQvdHZTtlsRqijI+GMT DuXJcy8Bldf9fdM/Gru14WF47pNSOX+9 -----END CERTIFICATE-----Generated at Tue Nov 4 17:18:21 2025 by rpki-client