$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft File: aq89m8Pfo6ElCCll2P8zuBKPKR8.mft (raw, json) Hash identifier: vnFLRWCIn8INTd6ZR+89HCBsXWX6ne49iTkwCbEKVfA= Subject key identifier: 97:47:98:32:CB:35:88:C8:F7:17:50:FF:7B:8D:51:77:C1:26:AB:C9 Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: 6F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft Manifest number: 6A Signing time: Sat 19 Jul 2025 07:13:57 +0000 Manifest this update: Sat 19 Jul 2025 07:13:57 +0000 Manifest next update: Sat 26 Jul 2025 07:13:57 +0000 Files and hashes: 1: aq89m8Pfo6ElCCll2P8zuBKPKR8.crl (hash: FgJDpnA+8wbL9LIdrI8G1yK/FthTdjRUdGvNM3sUdWQ=) 2: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (hash: mbcELb6wZjeLG0BTxotv3DMO41EhI/vPgN4q1POwi8s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Jul 19 07:13:57 2025 GMT Not After : Jul 26 07:13:57 2025 GMT Subject: CN=687b45b5-6506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ed:8c:6f:ab:01:5f:39:4d:9f:60:9a:56:f1: 5f:76:42:c9:8d:6f:42:99:b0:6e:c1:be:3d:a4:b8: 36:12:08:cb:e1:a4:bf:7f:a7:95:43:ce:b8:87:e9: 7e:4e:d7:bf:bc:d5:fc:18:bd:2e:58:ae:a2:bf:4d: d3:e5:e4:e6:85:7d:e1:cb:f1:33:45:49:f8:89:a1: 02:0d:6a:43:db:95:07:15:de:22:7d:8e:fb:5c:78: e1:ad:77:b0:f6:26:26:95:8d:cc:19:57:83:b6:b2: e1:42:3d:e8:fd:8d:32:6c:a0:37:c2:68:c0:66:e6: 09:17:83:e7:80:6f:cb:9b:d8:0f:54:8f:e3:8b:0f: 54:f3:b0:f3:28:15:ed:5e:f5:f5:5a:3f:cc:93:52: b6:ae:9c:a4:c2:55:c3:07:bf:ff:86:ee:be:8a:c3: 4b:44:b0:62:d2:1e:f8:0e:11:c3:79:89:62:2c:72: 0f:64:5e:2d:96:ae:d9:6f:ad:19:28:3e:7d:21:20: 31:10:21:4f:2d:b7:89:73:fa:6f:7f:59:5d:4b:d1: fd:c0:80:26:eb:cd:0e:7a:7b:fe:c6:cf:f9:60:3b: 26:8b:6b:37:1d:82:6e:95:3f:20:a1:8b:fe:86:05: 25:53:c8:8a:37:e5:46:07:16:21:89:97:9a:ee:c8: 75:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:47:98:32:CB:35:88:C8:F7:17:50:FF:7B:8D:51:77:C1:26:AB:C9 X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:01:f3:f1:82:d2:c4:2e:e2:aa:fa:a4:47:65:28:e5:fa:2c: 83:db:88:25:20:93:4c:c4:f4:78:ec:cb:f7:07:21:ac:14:84: 1f:6b:5f:bc:1d:5a:54:49:da:d1:1d:69:9b:c3:c4:2d:9c:cb: b9:fb:66:45:91:f8:fb:83:6b:e7:ec:a4:6a:11:2c:55:8e:45: c8:5a:67:8b:8f:c9:fe:ba:69:ed:8b:2b:83:6b:05:a5:8a:4b: b3:11:ce:63:a0:03:ff:54:cd:56:74:56:d8:7c:44:9e:d2:99: d3:24:f9:0c:81:d2:00:ce:3e:d9:1d:ab:b7:96:07:1f:ef:8f: 93:d8:3c:19:68:5b:88:aa:c8:76:be:8a:68:66:a0:cd:6f:e2: 33:23:f5:e1:7d:d3:28:a6:e8:20:00:04:91:4c:18:fc:6d:ba: 1b:af:aa:07:b5:bd:af:11:b6:4e:51:a3:77:7f:79:39:22:e5: c7:20:a5:76:c8:69:4e:a8:21:c6:40:2f:bf:f6:ae:c7:e5:71: a2:04:bf:3a:86:ae:cc:56:f6:bc:58:f6:9e:14:f4:11:74:e4: 6e:1e:e8:af:c7:48:19:84:b4:1a:f3:32:36:d4:93:81:36:c0: e0:87:ab:76:e6:4b:ba:ce:95:82:f0:b5:b8:99:b4:c2:f6:5c: 3b:ce:22:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NzZFMjExMC8GA1UEBRMoNkFBRjNEOUJDM0RGQTNBMTI1MDgyOTY1RDhGRjMzQjgx MjhGMjkxRjAeFw0yNTA3MTkwNzEzNTdaFw0yNTA3MjYwNzEzNTdaMBgxFjAUBgNV BAMTDTY4N2I0NWI1LTY1MDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDj7YxvqwFfOU2fYJpW8V92QsmNb0KZsG7Bvj2kuDYSCMvhpL9/p5VDzriH6X5O 17+81fwYvS5YrqK/TdPl5OaFfeHL8TNFSfiJoQINakPblQcV3iJ9jvtceOGtd7D2 JiaVjcwZV4O2suFCPej9jTJsoDfCaMBm5gkXg+eAb8ub2A9Uj+OLD1TzsPMoFe1e 9fVaP8yTUraunKTCVcMHv/+G7r6Kw0tEsGLSHvgOEcN5iWIscg9kXi2WrtlvrRko Pn0hIDEQIU8tt4lz+m9/WV1L0f3AgCbrzQ56e/7Gz/lgOyaLazcdgm6VPyChi/6G BSVTyIo35UYHFiGJl5ruyHVFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUl0eYMss1 iMj3F1D/e41Rd8Emq8kwHwYDVR0jBBgwFoAUaq89m8Pfo6ElCCll2P8zuBKPKR8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3NkUyLzNCNTQxRjIwQ0Iz RDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtS OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYXE4OW04UGZvNkVsQ0NsbDJQOHp1QktQS1I4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ3 NkUyLzNCNTQxRjIwQ0IzRDExRUY4NzAzRjc1QUM0RjlBRTAyL2FxODltOFBmbzZF bENDbGwyUDh6dUJLUEtSOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAL0B8/GC0sQu4qr6pEdlKOX6LIPbiCUgk0zE9Hjsy/cHIawUhB9rX7wd WlRJ2tEdaZvDxC2cy7n7ZkWR+PuDa+fspGoRLFWORchaZ4uPyf66ae2LK4NrBaWK S7MRzmOgA/9UzVZ0Vth8RJ7SmdMk+QyB0gDOPtkdq7eWBx/vj5PYPBloW4iqyHa+ imhmoM1v4jMj9eF90yim6CAABJFMGPxtuhuvqge1va8Rtk5Ro3d/eTki5ccgpXbI aU6oIcZAL7/2rsflcaIEvzqGrsxW9rxY9p4U9BF05G4e6K/HSBmEtBrzMjbUk4E2 wOCHq3bmS7rOlYLwtbiZtML2XDvOIi8= -----END CERTIFICATE-----Generated at Sun Jul 20 03:32:58 2025 by rpki-client