$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft File: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft (raw, json) Hash identifier: y3L33oZ9HTHqFjHiEgUPVsy5+UBVF26iqeTzEODzMA0= Subject key identifier: BA:4F:E0:B6:BA:E9:8D:38:B6:29:0E:DD:73:E2:CB:19:66:46:47:7B Authority key identifier: E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 Certificate issuer: /CN=A91A2359/serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Certificate serial: 0B4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft Manifest number: 0B2C Signing time: Sun 20 Jul 2025 19:19:00 +0000 Manifest this update: Sun 20 Jul 2025 19:18:59 +0000 Manifest next update: Sun 27 Jul 2025 19:18:59 +0000 Files and hashes: 1: 6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl (hash: Hu2cADfGXrXyJkBHZANZSHPfUyFFa7btHTe8JXp0Ri4=) 2: 6DADCA1C2F1C11EDA3E29B09C4F9AE02.roa (hash: XVeZDTc69uGCDdXez9QUlyk7cBcd+qKHtk4lz+fH2Nk=) 3: 23BA9D7CBEEB11EDA7945F4BC4F9AE02.roa (hash: SZF4jNnIB2QVKz5/EX+jPuidzyWfheujHP0W7HxZhfM=) 4: 6B3307CE4D8411EFBAD45B86C4F9AE02.roa (hash: Q55EbY5POWYTdePCItnDLlFfKKISUoO3fBrl7W8p8yg=) 5: A39B24D2975511EF85448840C4F9AE02.roa (hash: BIsgdAgqtk3wodS0abcXx+V3UWlTiBSPXxRaU3Y5Enw=) 6: D5955AB6975511EF94255C5EC4F9AE02.roa (hash: WPJAjv2UMHwWfs/KA/8g2VypUekjjpz/btCbDPwTPLs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 19:18:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2891 (0xb4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2359, serialNumber=E991A5A2DD9D1F2A243DF6AA24B9F50E1CB8FEE5 Validity Not Before: Jul 20 19:18:59 2025 GMT Not After : Jul 27 19:18:59 2025 GMT Subject: CN=687d4123-f4ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:e3:9a:6c:4a:eb:30:d4:61:2a:86:22:f6: 6c:63:a7:43:d4:bf:c8:a3:a8:30:32:25:25:c3:0f: 58:e6:74:52:63:58:ac:b2:ef:9f:ca:44:30:04:98: 6d:a1:4e:53:c2:ef:6f:3e:26:e0:69:aa:28:27:39: 19:8a:72:62:84:23:14:fa:45:22:8e:7d:0d:80:4c: 12:65:0d:be:2d:b7:08:6b:e8:68:90:83:6b:df:1a: e0:9e:fa:a3:b6:af:d5:ab:19:8c:cd:9c:77:97:d0: bb:c9:70:18:41:5c:3e:80:d3:53:38:ce:99:88:ff: 4d:2f:5e:8e:12:18:22:cc:f0:0a:f5:33:c6:fb:97: 3d:44:04:a7:9b:20:7e:98:c0:7a:bd:28:2e:b9:1a: 50:f6:6f:8f:98:f2:a4:0a:d5:93:ed:3e:e2:58:52: e3:ce:3a:95:5a:28:93:41:80:b9:4a:79:a5:85:9a: 4b:a2:4f:90:6d:d1:b2:cc:5b:21:ed:7c:40:3d:e6: 54:ce:58:ac:2f:57:cf:32:54:e3:33:63:3a:91:99: 97:28:f5:71:68:c2:7a:c3:38:c7:95:a9:7f:16:f8: 74:f7:3f:68:4a:11:19:56:ba:a8:c3:e2:ea:e2:b0: e3:49:32:eb:81:15:8a:04:4e:3c:c1:bd:e7:99:6c: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4F:E0:B6:BA:E9:8D:38:B6:29:0E:DD:73:E2:CB:19:66:46:47:7B X509v3 Authority Key Identifier: keyid:E9:91:A5:A2:DD:9D:1F:2A:24:3D:F6:AA:24:B9:F5:0E:1C:B8:FE:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZGlot2dHyokPfaqJLn1Dhy4_uU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2359/FC298DEA417011EA98DE656AC4F9AE02/6ZGlot2dHyokPfaqJLn1Dhy4_uU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 09:6b:a2:9c:b5:f0:13:39:76:f0:87:e3:60:aa:18:da:41:2b: df:92:12:cf:b8:e1:53:49:02:44:5f:89:85:05:b9:20:e1:eb: 61:40:7d:e2:8b:1f:eb:8c:83:a1:d1:c4:8e:03:35:31:22:3f: da:b9:ed:f8:df:56:ee:83:62:f9:01:ef:cd:87:14:34:3c:1e: 11:af:d0:66:c1:c1:37:28:f2:2e:e2:d9:67:a3:89:fb:12:7a: e1:5c:00:c0:f1:c5:87:ff:68:1d:14:91:e2:e8:d6:92:d1:44: 6a:66:ce:72:16:69:31:8d:c3:1e:ef:1b:6f:98:bb:32:62:5a: a7:ed:c1:4a:64:d3:86:15:b5:d6:c8:02:12:1f:f9:c4:26:0d: 83:42:00:cc:b7:35:59:3d:58:2b:dd:5f:68:fd:70:30:0f:7b: aa:82:95:63:cb:1e:c6:cb:53:60:e6:da:7c:21:f5:42:c2:c5: d7:97:e4:38:a4:5b:d7:17:f3:fb:c4:fa:fd:f0:26:62:ed:30: dd:e8:ab:31:fc:68:ca:7f:db:86:7c:83:4c:e1:19:d3:69:78: 9d:a8:37:fb:35:4e:1e:e3:c1:75:1d:96:15:1d:67:4a:e1:6f: 18:fe:0d:92:e3:6e:41:1a:3f:32:06:c1:aa:63:26:1b:85:4b: 00:ca:a9:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC0swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTIzNTkxMTAvBgNVBAUTKEU5OTFBNUEyREQ5RDFGMkEyNDNERjZBQTI0QjlGNTBF MUNCOEZFRTUwHhcNMjUwNzIwMTkxODU5WhcNMjUwNzI3MTkxODU5WjAYMRYwFAYD VQQDEw02ODdkNDEyMy1mNGVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1qnjmmxK6zDUYSqGIvZsY6dD1L/Io6gwMiUlww9Y5nRSY1issu+fykQwBJht oU5Twu9vPibgaaooJzkZinJihCMU+kUijn0NgEwSZQ2+LbcIa+hokINr3xrgnvqj tq/VqxmMzZx3l9C7yXAYQVw+gNNTOM6ZiP9NL16OEhgizPAK9TPG+5c9RASnmyB+ mMB6vSguuRpQ9m+PmPKkCtWT7T7iWFLjzjqVWiiTQYC5SnmlhZpLok+QbdGyzFsh 7XxAPeZUzlisL1fPMlTjM2M6kZmXKPVxaMJ6wzjHlal/Fvh09z9oShEZVrqow+Lq 4rDjSTLrgRWKBE48wb3nmWxscQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLpP4La6 6Y04tikO3XPiyxlmRkd7MB8GA1UdIwQYMBaAFOmRpaLdnR8qJD32qiS59Q4cuP7l MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjM1OS9GQzI5OERFQTQx NzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5b2tQZmFxSkxuMURoeTRf dVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaR2xvdDJkSHlva1BmYXFKTG4xRGh5NF91VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjM1OS9GQzI5OERFQTQxNzAxMUVBOThERTY1NkFDNEY5QUUwMi82Wkdsb3QyZEh5 b2tQZmFxSkxuMURoeTRfdVUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAJa6KctfATOXbwh+NgqhjaQSvfkhLPuOFTSQJEX4mFBbkg4ethQH3i ix/rjIOh0cSOAzUxIj/aue3431bug2L5Ae/NhxQ0PB4Rr9BmwcE3KPIu4tlno4n7 EnrhXADA8cWH/2gdFJHi6NaS0URqZs5yFmkxjcMe7xtvmLsyYlqn7cFKZNOGFbXW yAISH/nEJg2DQgDMtzVZPVgr3V9o/XAwD3uqgpVjyx7Gy1Ng5tp8IfVCwsXXl+Q4 pFvXF/P7xPr98CZi7TDd6Ksx/GjKf9uGfINM4RnTaXidqDf7NU4e48F1HZYVHWdK 4W8Y/g2S425BGj8yBsGqYyYbhUsAyqke -----END CERTIFICATE-----Generated at Mon Jul 21 12:41:02 2025 by rpki-client