$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: bnNvEFeDhstW//Z6gHP6km/yqbsaP9uK6na1N7jiuY0= Subject key identifier: 0E:ED:5B:F5:89:D7:F0:1F:CA:B3:92:D6:16:08:A7:30:86:50:F4:19 Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1AD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1AB9 Signing time: Tue 22 Jul 2025 16:27:08 +0000 Manifest this update: Tue 22 Jul 2025 16:27:07 +0000 Manifest next update: Tue 29 Jul 2025 16:27:07 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: JfPfhpkkjaXz2yKzXETb6r/p8cnBXfoLASM5TPH3DL0=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:27:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6866 (0x1ad2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Jul 22 16:27:07 2025 GMT Not After : Jul 29 16:27:07 2025 GMT Subject: CN=687fbbdc-b406 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d3:07:10:9a:09:da:3b:bf:68:92:b0:40:d2: 5d:97:1f:d3:99:e9:1f:13:bc:70:d7:4a:90:d9:23: a8:6e:fc:36:dc:45:c1:ed:9a:e8:3f:68:85:7f:71: 0f:f2:bd:9c:3f:4c:09:e9:76:b3:13:19:87:9b:d4: 33:74:b0:9d:e8:1e:15:e6:2f:5b:82:20:2f:cc:59: e9:e1:73:01:6d:52:71:f7:c4:5d:82:57:83:5b:00: 93:90:78:75:ad:b4:16:24:0c:eb:97:cc:43:0d:ca: 4e:82:ae:99:f4:36:85:90:35:06:f0:a9:51:a7:b7: 35:a3:7a:55:75:51:38:86:af:4b:4d:2b:7f:64:8a: 96:37:c6:84:5b:2e:9f:43:4a:d8:09:b5:87:3b:46: 82:16:2c:5a:4b:bf:3a:44:6f:4c:4b:d0:68:13:91: e6:94:c8:27:a3:7d:2e:dc:73:be:9f:ba:52:79:56: 73:11:2c:63:3a:94:d5:b7:63:f1:62:e4:4d:f6:17: 78:9d:d6:63:b9:c5:37:f5:5b:25:57:63:53:34:24: 2a:90:01:e8:46:a9:c5:b5:9a:5f:d2:f8:52:4b:09: f1:a1:03:49:0d:61:4b:80:64:4a:80:d7:74:f2:83: 33:fa:47:76:b6:2c:cd:fd:8c:e4:50:fa:f6:88:38: 3a:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:ED:5B:F5:89:D7:F0:1F:CA:B3:92:D6:16:08:A7:30:86:50:F4:19 X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 87:38:5e:ff:cd:d7:ff:8d:0b:1c:4e:6c:65:25:03:d2:b3:3a: e3:66:81:4b:29:5f:b2:51:2b:1e:8b:0d:42:b9:26:c1:cc:d9: 5f:08:c9:f1:21:2d:93:13:bb:53:6e:83:2f:db:ec:a2:56:92: 60:3c:e5:17:5c:fe:21:8e:30:82:20:53:80:94:d9:09:7a:a9: 3f:0d:fd:e3:af:53:5e:da:43:d4:45:cd:e4:0d:86:c1:d9:ae: 81:46:c9:2b:20:3b:4b:09:37:86:82:d7:85:b7:ac:f7:b2:bc: 8d:40:8c:6b:b8:f6:0d:14:4b:4c:66:7c:97:c7:f4:be:a3:8b: 65:2a:44:f0:ca:a0:b1:9a:1b:46:84:b7:5c:e6:06:33:7c:98: b3:58:90:78:a1:40:74:15:e6:b6:9a:05:6a:2e:e5:22:08:87: b6:c1:f7:91:77:a5:8b:40:27:97:a0:9e:31:80:84:15:4e:cf: 8a:27:cc:c4:b8:a4:73:39:e0:ee:23:2c:03:d3:d4:c7:05:47: 27:0e:1f:4d:1e:03:d1:94:17:bf:dd:c1:3d:63:7f:2d:8b:ab: 8d:52:5b:d6:e7:5f:0f:8d:8e:f3:c8:af:f5:e3:5c:dd:1a:5b: 36:0e:46:19:6f:84:1c:70:46:29:87:20:31:96:bf:68:79:79: ed:1a:5c:a6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjUwNzIyMTYyNzA3WhcNMjUwNzI5MTYyNzA3WjAYMRYwFAYD VQQDEw02ODdmYmJkYy1iNDA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz9MHEJoJ2ju/aJKwQNJdlx/TmekfE7xw10qQ2SOobvw23EXB7ZroP2iFf3EP 8r2cP0wJ6XazExmHm9QzdLCd6B4V5i9bgiAvzFnp4XMBbVJx98RdgleDWwCTkHh1 rbQWJAzrl8xDDcpOgq6Z9DaFkDUG8KlRp7c1o3pVdVE4hq9LTSt/ZIqWN8aEWy6f Q0rYCbWHO0aCFixaS786RG9MS9BoE5HmlMgno30u3HO+n7pSeVZzESxjOpTVt2Px YuRN9hd4ndZjucU39VslV2NTNCQqkAHoRqnFtZpf0vhSSwnxoQNJDWFLgGRKgNd0 8oMz+kd2tizN/YzkUPr2iDg6rwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA7tW/WJ 1/AfyrOS1hYIpzCGUPQZMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCHOF7/zdf/jQscTmxlJQPSszrjZoFLKV+yUSseiw1CuSbBzNlfCMnx IS2TE7tTboMv2+yiVpJgPOUXXP4hjjCCIFOAlNkJeqk/Df3jr1Ne2kPURc3kDYbB 2a6BRskrIDtLCTeGgteFt6z3sryNQIxruPYNFEtMZnyXx/S+o4tlKkTwyqCxmhtG hLdc5gYzfJizWJB4oUB0Fea2mgVqLuUiCIe2wfeRd6WLQCeXoJ4xgIQVTs+KJ8zE uKRzOeDuIywD09THBUcnDh9NHgPRlBe/3cE9Y38ti6uNUlvW518PjY7zyK/141zd Gls2DkYZb4QccEYphyAxlr9oeXntGlym -----END CERTIFICATE-----Generated at Wed Jul 23 12:13:08 2025 by rpki-client