$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: F+2rfGbi4dTW0FFaPkvUUFMMyAPGmXuU10I0bmEwSRc= Subject key identifier: D2:D0:33:C1:AD:A8:89:38:EA:CC:22:AE:AA:23:21:C6:FF:53:FF:23 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0229 Signing time: Mon 03 Nov 2025 02:00:21 +0000 Manifest this update: Mon 03 Nov 2025 02:00:20 +0000 Manifest next update: Mon 10 Nov 2025 02:00:20 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: +n6CeyqunmU4c9ZyobJp+HfSa6lTdtjYpGnGxpgT4pQ=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Nov 3 02:00:20 2025 GMT Not After : Nov 10 02:00:20 2025 GMT Subject: CN=69080cb5-b1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:22:8f:45:71:d7:cd:fe:9a:a8:2b:72:f1: c7:16:12:15:8a:82:2e:d5:02:35:ff:7a:73:70:b5: 50:2f:40:83:c6:38:f4:49:d8:2e:5c:65:9d:36:ae: 39:21:89:ed:40:cc:f8:bf:47:db:79:4f:a7:c5:cb: 63:31:ea:34:e2:7a:61:84:1c:f1:ca:3b:24:46:15: 3d:49:b3:f2:44:9f:df:f0:4b:90:7e:15:ca:8d:5d: 3a:dd:30:c2:47:66:ba:f3:fa:ba:7a:37:95:77:11: 03:ef:6f:72:4b:18:31:b0:80:5e:29:f8:69:0c:84: 03:42:a9:2d:0a:f1:98:18:a4:67:0e:a3:af:07:c0: bf:77:06:75:0b:42:2c:62:67:64:46:b8:b1:16:c0: 48:3c:c6:fa:d5:d4:de:9e:4d:24:90:0f:30:17:c8: e6:6e:76:09:d3:88:e4:dd:3f:c7:82:22:55:2e:2d: 57:df:3b:4c:f0:0b:b7:96:c5:db:5f:b4:09:c4:85: 30:c4:23:0d:18:06:1a:56:29:ce:5e:21:59:e6:5c: 22:c5:22:69:34:3a:a5:da:85:d7:41:21:5b:92:9d: 24:7c:d7:11:3c:6e:12:e5:89:a4:78:a6:b0:c3:e7: 69:1b:af:50:6d:9b:d1:12:fb:71:70:c4:d1:9c:48: 30:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:D0:33:C1:AD:A8:89:38:EA:CC:22:AE:AA:23:21:C6:FF:53:FF:23 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:96:58:bb:10:8f:10:05:55:24:16:a3:a7:d2:1b:80:94:9c: 76:79:0a:43:40:47:6b:ed:d7:e9:5e:8a:fe:7b:83:78:92:a1: 3a:f1:45:c1:f3:3f:01:3b:da:e6:30:f4:dd:25:08:fb:73:80: ba:36:c8:24:d6:ea:a7:64:be:35:e8:ef:21:10:5b:93:1f:ab: 3f:95:dc:88:d0:d9:8e:a5:af:df:d8:aa:ab:4a:97:16:19:0f: 83:c7:ef:d5:2a:2b:d2:dc:2c:ea:eb:cc:ae:d2:53:3a:2e:a5: 2c:06:da:0e:f3:54:33:d5:d8:0e:b8:f5:87:b9:2a:8a:c4:86: 9b:65:8b:c6:d2:ac:66:2d:86:41:04:c0:f7:f7:44:dd:8f:1f: 91:a2:70:3e:1d:19:6d:8c:de:52:7c:e8:c7:e8:c8:25:43:4e: b5:34:ac:d6:d2:60:e0:83:82:ad:65:18:98:e2:65:82:5f:76: d7:a5:bb:86:2f:ac:7e:31:a9:44:e9:61:d4:e9:4c:4b:f3:8a: 7b:49:6e:4d:1b:fb:44:38:bc:66:ee:8a:b6:d4:7b:ea:72:8d: 7b:a0:25:45:c8:c4:34:85:23:5a:6b:d2:fd:20:40:8f:12:3c: 3a:f8:ef:2d:9a:52:e1:da:98:76:71:9c:48:14:cb:bf:e8:62: b1:11:18:ee -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUxMTAzMDIwMDIwWhcNMjUxMTEwMDIwMDIwWjAYMRYwFAYD VQQDEw02OTA4MGNiNS1iMWI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzDUij0Vx183+mqgrcvHHFhIVioIu1QI1/3pzcLVQL0CDxjj0SdguXGWdNq45 IYntQMz4v0fbeU+nxctjMeo04nphhBzxyjskRhU9SbPyRJ/f8EuQfhXKjV063TDC R2a68/q6ejeVdxED729ySxgxsIBeKfhpDIQDQqktCvGYGKRnDqOvB8C/dwZ1C0Is YmdkRrixFsBIPMb61dTenk0kkA8wF8jmbnYJ04jk3T/HgiJVLi1X3ztM8Au3lsXb X7QJxIUwxCMNGAYaVinOXiFZ5lwixSJpNDql2oXXQSFbkp0kfNcRPG4S5YmkeKaw w+dpG69QbZvREvtxcMTRnEgwHQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNLQM8Gt qIk46swirqojIcb/U/8jMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAVlli7EI8QBVUkFqOn0huAlJx2eQpDQEdr7dfpXor+e4N4kqE68UXB 8z8BO9rmMPTdJQj7c4C6Nsgk1uqnZL416O8hEFuTH6s/ldyI0NmOpa/f2KqrSpcW GQ+Dx+/VKivS3Czq68yu0lM6LqUsBtoO81Qz1dgOuPWHuSqKxIabZYvG0qxmLYZB BMD390Tdjx+RonA+HRltjN5SfOjH6MglQ061NKzW0mDgg4KtZRiY4mWCX3bXpbuG L6x+MalE6WHU6UxL84p7SW5NG/tEOLxm7oq21Hvqco17oCVFyMQ0hSNaa9L9IECP Ejw6+O8tmlLh2ph2cZxIFMu/6GKxERju -----END CERTIFICATE-----Generated at Mon Nov 3 18:20:04 2025 by rpki-client