$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: twP7B3AltS/Z+Q6eRD/E9fHGGBdHA51VDG7AFdrbEHQ= Subject key identifier: E4:36:47:A2:6C:5D:F7:EA:CF:8E:70:A7:5A:71:F0:34:42:F8:BC:39 Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03B6 Signing time: Mon 21 Jul 2025 00:56:53 +0000 Manifest this update: Mon 21 Jul 2025 00:56:52 +0000 Manifest next update: Mon 28 Jul 2025 00:56:52 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: faCxFjBE1D0oKZCNZ1lXI3DN6Pd9U/Pe5aqAefI/f+w=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 00:56:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 954 (0x3ba) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Jul 21 00:56:52 2025 GMT Not After : Jul 28 00:56:52 2025 GMT Subject: CN=687d9055-8a9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c0:f0:a6:d2:c9:dd:9c:f7:76:34:e9:ba:c9: d1:aa:d5:c0:4c:d5:26:5a:12:d9:7d:42:a4:34:0e: 93:a5:e4:5d:e7:99:23:9f:9c:b8:0e:82:d5:0b:9d: 0c:c9:78:ef:a6:11:b1:81:5c:8b:d1:1b:c2:e5:24: a1:1d:cf:84:05:b2:ba:5d:1b:72:c5:bc:b8:07:fe: 37:61:50:06:19:87:fd:6d:fa:eb:94:71:d7:00:1e: 2d:b8:76:d4:2d:65:29:ef:3b:95:40:e0:e2:d2:b3: 9a:2a:c8:2a:e6:da:2a:a5:cc:80:1a:2a:9e:66:74: 6a:08:78:3e:f0:e4:ab:45:df:9b:0c:a4:f0:90:ee: 5a:8f:72:57:60:e1:9b:c7:6e:e0:0b:86:04:c5:12: 9a:0a:9d:ca:cd:fa:d1:12:9a:24:25:ce:b4:33:d0: a0:48:f8:d1:97:a6:43:b2:4d:2f:7e:66:e9:fb:68: 12:d4:4a:5b:73:65:24:82:21:bb:74:01:02:70:71: ff:b0:2f:2b:ec:0e:3e:f1:54:6a:78:b4:d1:9c:a2: b8:71:f9:6f:32:a7:56:40:c0:82:2f:dd:06:c9:9a: 1e:94:fa:89:e7:27:3b:db:be:c9:81:7f:f5:63:32: 0c:71:7e:5c:7b:0e:c0:05:38:3d:88:56:f1:8f:aa: dc:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:36:47:A2:6C:5D:F7:EA:CF:8E:70:A7:5A:71:F0:34:42:F8:BC:39 X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 13:4d:e6:09:37:65:bf:dd:49:28:f4:e0:0b:fe:71:68:e7:fe: 92:98:c2:f2:b6:ce:3c:ff:ec:c7:c8:cd:40:62:7a:63:73:6e: 70:f1:86:3b:6a:78:2e:3c:83:c9:de:d1:83:c7:88:86:d1:f1: 5a:35:45:3b:88:27:ae:81:d9:9f:b9:6a:0b:3f:24:8c:0e:75: 0c:43:5c:7d:1d:4c:3e:37:49:dd:b1:81:ff:c8:21:1c:63:4e: bb:66:6e:79:23:97:10:35:91:3a:e4:d6:f8:b4:f7:48:70:df: c3:c6:c0:2a:18:6e:63:2c:1d:24:39:29:a0:7d:0d:f4:d1:5e: d2:29:4d:89:46:75:6d:0e:f3:fd:ec:61:6c:d0:c1:a1:2f:60: 4a:a9:3f:e6:c7:4f:c2:a9:4b:33:f4:4e:72:93:0f:7f:71:76: 02:e3:00:23:42:d5:46:96:4f:f6:4c:a1:7e:26:33:53:6d:62: c2:fc:6a:6b:1a:4f:fe:32:b5:2f:51:98:e2:90:c1:06:39:99: e0:ae:4f:01:9a:13:c3:7c:18:e3:93:a8:74:66:f5:c9:f4:76: 5f:98:78:2c:c1:37:c5:99:47:bb:e8:e4:2c:0c:ac:6f:3e:f8: 81:c4:f1:f9:03:47:5f:b5:83:b1:d8:1b:25:e5:0c:d4:2a:66: 5b:e5:a2:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUwNzIxMDA1NjUyWhcNMjUwNzI4MDA1NjUyWjAYMRYwFAYD VQQDEw02ODdkOTA1NS04YTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtsDwptLJ3Zz3djTpusnRqtXATNUmWhLZfUKkNA6TpeRd55kjn5y4DoLVC50M yXjvphGxgVyL0RvC5SShHc+EBbK6XRtyxby4B/43YVAGGYf9bfrrlHHXAB4tuHbU LWUp7zuVQODi0rOaKsgq5toqpcyAGiqeZnRqCHg+8OSrRd+bDKTwkO5aj3JXYOGb x27gC4YExRKaCp3KzfrREpokJc60M9CgSPjRl6ZDsk0vfmbp+2gS1Epbc2UkgiG7 dAECcHH/sC8r7A4+8VRqeLTRnKK4cflvMqdWQMCCL90GyZoelPqJ5yc7277JgX/1 YzIMcX5cew7ABTg9iFbxj6rcuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQ2R6Js Xffqz45wp1px8DRC+Lw5MB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQATTeYJN2W/3Uko9OAL/nFo5/6SmMLyts48/+zHyM1AYnpjc25w8YY7 anguPIPJ3tGDx4iG0fFaNUU7iCeugdmfuWoLPySMDnUMQ1x9HUw+N0ndsYH/yCEc Y067Zm55I5cQNZE65Nb4tPdIcN/DxsAqGG5jLB0kOSmgfQ300V7SKU2JRnVtDvP9 7GFs0MGhL2BKqT/mx0/CqUsz9E5ykw9/cXYC4wAjQtVGlk/2TKF+JjNTbWLC/Gpr Gk/+MrUvUZjikMEGOZngrk8BmhPDfBjjk6h0ZvXJ9HZfmHgswTfFmUe76OQsDKxv PviBxPH5A0dftYOx2Bsl5QzUKmZb5aIV -----END CERTIFICATE-----Generated at Tue Jul 22 05:10:52 2025 by rpki-client