$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: Ij3BnxePu+G4BZK0HAG3qYjoazhq0JDyZQ43PIKlrcs= Subject key identifier: 38:73:3B:1D:5C:88:F3:92:5A:5B:A4:9B:2F:85:5E:8B:47:CB:35:03 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1291 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 128A Signing time: Sun 02 Nov 2025 17:05:07 +0000 Manifest this update: Sun 02 Nov 2025 17:05:06 +0000 Manifest next update: Sun 09 Nov 2025 17:05:06 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: Mlq56c7NJ6S/jaOuQTgtQSsvF4vLmCDe8z/Xomnwq9A=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 17:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4753 (0x1291) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Nov 2 17:05:06 2025 GMT Not After : Nov 9 17:05:06 2025 GMT Subject: CN=69078f42-68cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:35:f6:52:47:bc:b5:eb:a6:46:74:60:0c:f5: 16:a9:89:d7:1d:c6:6c:12:9d:5c:9a:97:44:6c:eb: 13:9d:c1:96:6f:5a:79:b2:99:67:4a:e8:5d:b5:a2: 0d:24:00:a3:37:e5:74:3f:9a:1b:da:b9:6f:8f:8a: ad:8e:52:a3:e4:a1:f4:ce:90:eb:87:0e:96:0b:dd: 28:26:ae:2e:63:a1:6c:17:3b:4a:35:92:87:e9:d9: f3:03:fe:ad:35:c7:2a:6f:49:c1:e6:a7:f6:db:73: d6:a3:94:a2:58:c5:0f:9f:48:41:d4:25:53:a3:77: 41:d1:25:1c:48:59:8f:a3:ef:ac:4f:a4:f1:74:6a: 9e:fe:a3:09:c2:8f:25:17:d9:02:7d:3b:e0:73:1c: 0d:5b:93:35:39:a3:54:14:c4:99:5b:15:f8:36:0b: 8b:b8:05:45:35:76:65:aa:ec:c1:55:91:2d:70:9e: 93:07:22:0b:24:86:99:dd:ac:f1:91:5f:6c:71:fe: 97:88:6b:38:dd:13:1e:a7:a7:dc:c0:33:46:7a:21: c3:48:06:3c:4e:d6:63:dc:aa:27:36:83:81:b1:b2: 48:c0:26:9f:6d:a2:9f:1c:c2:a9:7b:4b:3f:2d:0a: 09:d9:2e:a1:55:d7:e6:e3:5f:95:36:91:c1:d5:72: 20:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:73:3B:1D:5C:88:F3:92:5A:5B:A4:9B:2F:85:5E:8B:47:CB:35:03 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 58:18:53:54:c6:50:be:62:5c:2f:55:eb:3f:fe:e4:78:7c:9b: 15:68:cf:75:ba:c9:18:d8:4b:e3:66:7c:d2:ec:b4:08:c2:d7: 8a:3e:44:eb:ac:9f:3f:d2:2f:71:ea:d2:68:c6:81:74:71:5b: 70:2f:3d:b8:ea:6a:c1:b8:14:9d:be:a8:13:89:8c:c7:86:e0: 01:c5:e2:42:1b:09:f7:50:0b:55:12:64:28:e2:5c:70:70:ac: f8:7f:89:d7:7f:a3:8c:ae:3d:a8:a0:98:d5:04:32:a4:d8:b4: 3f:c1:0e:df:eb:1d:d9:d2:fc:e4:00:ff:38:56:50:59:26:39: ce:11:ba:e6:1e:19:56:ae:ac:d3:dd:37:7b:5a:b3:54:24:28: 61:a3:24:d3:ee:aa:b9:15:29:b0:84:a8:02:56:be:69:45:03: a1:ae:53:37:49:5a:66:81:ec:60:bd:bb:97:1e:18:eb:d9:49: 7a:ea:54:de:68:fb:fb:01:43:33:3b:7c:b0:9a:96:f1:32:f7: 39:a4:70:9c:f7:df:f9:4f:60:b0:5e:88:73:53:dd:2f:b7:1c: ca:46:e5:eb:1a:64:73:9e:1d:ee:2a:54:0f:c1:2e:67:2e:61: a7:82:e2:a1:7f:83:70:2a:16:a3:b7:6c:40:6f:7e:e6:63:ee: 1a:da:39:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEpEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUxMTAyMTcwNTA2WhcNMjUxMTA5MTcwNTA2WjAYMRYwFAYD VQQDEw02OTA3OGY0Mi02OGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDX2Uke8teumRnRgDPUWqYnXHcZsEp1cmpdEbOsTncGWb1p5splnSuhdtaIN JACjN+V0P5ob2rlvj4qtjlKj5KH0zpDrhw6WC90oJq4uY6FsFztKNZKH6dnzA/6t Nccqb0nB5qf223PWo5SiWMUPn0hB1CVTo3dB0SUcSFmPo++sT6TxdGqe/qMJwo8l F9kCfTvgcxwNW5M1OaNUFMSZWxX4NguLuAVFNXZlquzBVZEtcJ6TByILJIaZ3azx kV9scf6XiGs43RMep6fcwDNGeiHDSAY8TtZj3KonNoOBsbJIwCafbaKfHMKpe0s/ LQoJ2S6hVdfm41+VNpHB1XIgbwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDhzOx1c iPOSWlukmy+FXotHyzUDMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBYGFNUxlC+YlwvVes//uR4fJsVaM91uskY2EvjZnzS7LQIwteKPkTr rJ8/0i9x6tJoxoF0cVtwLz246mrBuBSdvqgTiYzHhuABxeJCGwn3UAtVEmQo4lxw cKz4f4nXf6OMrj2ooJjVBDKk2LQ/wQ7f6x3Z0vzkAP84VlBZJjnOEbrmHhlWrqzT 3Td7WrNUJChhoyTT7qq5FSmwhKgCVr5pRQOhrlM3SVpmgexgvbuXHhjr2Ul66lTe aPv7AUMzO3ywmpbxMvc5pHCc99/5T2CwXohzU90vtxzKRuXrGmRznh3uKlQPwS5n LmGnguKhf4NwKhajt2xAb37mY+4a2jkd -----END CERTIFICATE-----Generated at Mon Nov 3 18:07:17 2025 by rpki-client