$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: U5Rg34oWgxsAJACdifH/tKcHFd4sPQDUuDDu0WWUe9w= Subject key identifier: 8A:59:9C:97:AB:3B:36:D7:1C:49:AD:92:AC:D2:0B:6E:4D:1A:2F:EF Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: 010F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: 010A Signing time: Thu 23 Oct 2025 06:54:18 +0000 Manifest this update: Thu 23 Oct 2025 06:54:18 +0000 Manifest next update: Thu 30 Oct 2025 06:54:18 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: SYOAYTl98ciRafvuFl9QFtPWtTvg+jP/bctFGo2x3IY=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) 3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 06:54:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 271 (0x10f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Oct 23 06:54:18 2025 GMT Not After : Oct 30 06:54:18 2025 GMT Subject: CN=68f9d11a-3b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:69:92:e6:31:1a:01:d7:cb:17:43:d3:3a: 4d:ce:23:74:f7:e6:39:37:ca:0a:4c:14:52:58:19: 9e:46:53:e3:82:a9:c9:28:63:6a:51:ff:26:d6:3a: 48:11:66:b8:dd:fb:4a:dd:8f:a7:69:40:5a:b7:dd: 55:cb:4a:96:85:00:7d:1d:1a:c9:6a:4b:d0:40:54: 68:21:8b:30:cf:11:85:d0:92:f7:6c:42:e9:65:bf: eb:3c:81:7a:a9:7c:16:29:e3:2c:6b:e8:9d:0c:b1: 2b:29:ab:a8:85:57:d3:3f:21:2d:e3:c3:e9:51:51: 15:f6:85:db:3e:9a:24:c7:61:ad:c3:f5:f0:a4:7e: 35:7d:67:4d:1b:0c:ae:ed:07:8d:30:23:8b:3e:6a: 0d:00:49:71:31:96:43:d9:66:f6:e3:43:49:1d:9b: 80:f2:2c:50:79:4c:99:96:fc:ea:d3:d8:35:34:78: 17:fa:79:50:e2:85:42:c6:78:da:c6:e5:83:29:7c: eb:f7:de:54:70:09:97:3d:fa:3e:4b:3d:3c:8c:c8: 58:bf:65:a6:63:b7:2f:41:b2:bb:96:ba:fe:51:8b: db:ca:39:3d:ce:35:96:f0:78:be:95:72:96:7b:c4: 9c:e4:5e:cf:57:81:f1:39:55:bf:9e:ab:8f:3e:03: 8f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:59:9C:97:AB:3B:36:D7:1C:49:AD:92:AC:D2:0B:6E:4D:1A:2F:EF X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:54:fd:66:5c:10:eb:25:01:13:ca:0b:42:6d:a5:c5:43:5e: c4:db:8a:25:6c:f7:8c:38:89:41:1a:f0:29:74:b1:ac:4f:e3: 9a:11:32:dd:df:45:c5:1b:93:27:b8:26:5a:39:c7:f9:3e:79: 58:ab:70:71:6e:f1:77:26:87:32:f5:5f:61:9f:0d:f7:78:3f: db:19:ac:41:bd:a4:8e:2a:f1:9c:38:c8:d3:9b:e6:45:bb:3b: 92:c6:e8:b6:3d:e4:37:3c:06:64:e3:09:27:01:60:44:89:e7: bd:8b:f6:61:34:88:e2:03:2a:a8:d7:54:11:51:69:25:25:9d: 3d:c2:27:ea:5e:79:ce:d2:79:c2:63:37:75:44:fb:63:f6:f7: e3:3b:fe:a1:d3:28:17:ed:93:c0:c1:da:65:a1:62:34:61:d2: c8:64:e7:b1:7e:89:ef:9c:4c:62:cc:7e:51:cd:5b:08:9f:48: 60:b2:1f:8f:41:2c:f9:06:a0:30:b5:a8:ff:46:d0:2a:4e:20: 58:4f:4c:72:e8:71:2f:66:ee:9c:07:e2:b5:03:18:74:77:f0: db:04:1b:2a:96:f9:9b:0a:c8:8c:b0:bb:aa:11:6b:71:b6:1d: 24:94:67:c1:f6:8f:82:fc:e5:06:f6:81:91:65:36:78:26:cb: 93:60:7f:54 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUxMDIzMDY1NDE4WhcNMjUxMDMwMDY1NDE4WjAYMRYwFAYD VQQDEw02OGY5ZDExYS0zYjc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3/VpkuYxGgHXyxdD0zpNziN09+Y5N8oKTBRSWBmeRlPjgqnJKGNqUf8m1jpI EWa43ftK3Y+naUBat91Vy0qWhQB9HRrJakvQQFRoIYswzxGF0JL3bELpZb/rPIF6 qXwWKeMsa+idDLErKauohVfTPyEt48PpUVEV9oXbPpokx2Gtw/XwpH41fWdNGwyu 7QeNMCOLPmoNAElxMZZD2Wb240NJHZuA8ixQeUyZlvzq09g1NHgX+nlQ4oVCxnja xuWDKXzr995UcAmXPfo+Sz08jMhYv2WmY7cvQbK7lrr+UYvbyjk9zjWW8Hi+lXKW e8Sc5F7PV4HxOVW/nquPPgOPQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIpZnJer OzbXHEmtkqzSC25NGi/vMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANVP1mXBDrJQETygtCbaXFQ17E24olbPeMOIlBGvApdLGsT+OaETLd 30XFG5MnuCZaOcf5PnlYq3BxbvF3Jocy9V9hnw33eD/bGaxBvaSOKvGcOMjTm+ZF uzuSxui2PeQ3PAZk4wknAWBEiee9i/ZhNIjiAyqo11QRUWklJZ09wifqXnnO0nnC Yzd1RPtj9vfjO/6h0ygX7ZPAwdploWI0YdLIZOexfonvnExizH5RzVsIn0hgsh+P QSz5BqAwtaj/RtAqTiBYT0xy6HEvZu6cB+K1Axh0d/DbBBsqlvmbCsiMsLuqEWtx th0klGfB9o+C/OUG9oGRZTZ4JsuTYH9U -----END CERTIFICATE-----Generated at Sat Oct 25 04:38:53 2025 by rpki-client