$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: X49wa5M41mUYg/irof03YWIU0Z9NUh3nJxlusERtQIE= Subject key identifier: A5:61:C1:79:A4:41:46:F3:BB:AE:BE:5D:B6:31:70:B9:C0:A7:42:40 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: 8F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: 8E Signing time: Sat 19 Jul 2025 06:42:19 +0000 Manifest this update: Sat 19 Jul 2025 06:42:18 +0000 Manifest next update: Sat 26 Jul 2025 06:42:18 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: HIVBjLlvaQyKFcMwbVo8WWMbiPomBjKFIIyleBz5VfQ=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:42:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 143 (0x8f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Jul 19 06:42:18 2025 GMT Not After : Jul 26 06:42:18 2025 GMT Subject: CN=687b3e4a-2658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f4:bc:7f:26:93:d9:17:ea:bc:db:a6:e5:d7: 59:59:b1:e3:a1:8b:23:9c:3f:20:25:f0:48:e5:d8: 02:25:bb:26:23:82:8e:4b:72:f2:45:d3:39:e0:92: 1d:92:72:9c:10:46:30:2c:a0:f5:d3:c8:b4:20:e6: 8d:7b:85:9c:a8:63:e5:9e:87:9b:3c:24:fa:f1:9a: 92:63:e2:3e:6b:cc:a7:05:01:19:26:6a:2b:96:07: f9:70:a3:40:11:9d:ad:db:c5:05:6b:4e:1b:71:fa: 39:14:62:97:dd:34:97:05:77:df:39:9e:20:d2:37: 47:8a:4b:60:bc:6c:84:b7:8c:26:03:6f:69:95:d7: c5:80:2c:e7:72:c1:83:a2:5f:c2:e1:8c:29:af:0b: 8f:d9:6a:a2:a0:32:1a:80:4e:6b:eb:ff:28:c1:f2: ef:c0:8a:fd:03:be:4b:5b:ed:63:2a:85:21:f7:bc: 56:9a:87:ca:db:7a:39:a7:4d:a5:23:24:79:9d:64: 7e:64:46:97:46:54:53:31:72:e6:e1:fc:70:44:06: 2e:83:c6:c6:54:6a:6d:b3:14:c3:cb:98:fc:21:f4: 78:93:c8:74:39:d2:35:df:dd:44:41:ed:a4:57:42: 9c:fa:e8:fb:25:14:23:33:d6:98:c5:f5:c0:e6:84: b1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:C1:79:A4:41:46:F3:BB:AE:BE:5D:B6:31:70:B9:C0:A7:42:40 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:d0:26:db:b3:2f:7a:9e:4a:d0:2f:06:93:7d:fc:61:84: 73:88:38:3a:2a:52:1f:b3:aa:1e:a8:d4:34:cc:f6:a6:42:e8: e1:16:c6:9f:4d:b9:b2:08:93:0d:53:7a:23:02:66:ee:df:8e: 94:6b:46:1f:26:8e:b7:60:59:68:78:32:eb:45:9d:ae:1a:6b: 10:83:50:1c:a2:8f:21:18:c3:ce:13:83:24:48:5c:50:0b:67: dc:c6:56:93:e5:62:b4:10:9f:08:0f:6c:80:65:de:37:98:39: 08:f5:77:a3:c4:98:44:ad:09:20:cc:52:06:a1:6a:0f:79:cb: 12:5b:42:67:b1:2f:47:76:16:f1:cf:aa:63:e0:cb:6a:bd:c9: 3a:6c:4e:c1:7e:ca:f6:3a:f5:9f:26:0f:d4:d6:3a:75:e1:92: 34:75:89:ff:06:af:40:58:94:fe:3e:d7:6a:5b:49:65:79:4e: 6c:d0:a3:ac:b4:f6:c4:c1:47:4d:27:6a:73:fa:94:60:5c:18: a1:34:8b:b4:c5:a2:09:9e:2e:e4:74:b4:a2:3c:6a:51:11:bc: 35:e2:90:d7:ee:b4:88:f9:b8:78:c6:5a:45:62:eb:1a:11:3a: 9b:19:03:e9:a0:9a:a9:9b:ed:75:65:01:e6:90:48:bb:16:6b: bf:92:9a:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAI8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDkxMTAvBgNVBAUTKEZCQTI2RTNDRDdFMDgxOTlCM0ExOEYxNjM2NkE3NTdG MDRDREYwNTQwHhcNMjUwNzE5MDY0MjE4WhcNMjUwNzI2MDY0MjE4WjAYMRYwFAYD VQQDEw02ODdiM2U0YS0yNjU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfS8fyaT2RfqvNum5ddZWbHjoYsjnD8gJfBI5dgCJbsmI4KOS3LyRdM54JId knKcEEYwLKD108i0IOaNe4WcqGPlnoebPCT68ZqSY+I+a8ynBQEZJmorlgf5cKNA EZ2t28UFa04bcfo5FGKX3TSXBXffOZ4g0jdHiktgvGyEt4wmA29pldfFgCzncsGD ol/C4YwprwuP2WqioDIagE5r6/8owfLvwIr9A75LW+1jKoUh97xWmofK23o5p02l IyR5nWR+ZEaXRlRTMXLm4fxwRAYug8bGVGptsxTDy5j8IfR4k8h0OdI1391EQe2k V0Kc+uj7JRQjM9aYxfXA5oSxDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKVhwXmk QUbzu66+XbYxcLnAp0JAMB8GA1UdIwQYMBaAFPuibjzX4IGZs6GPFjZqdX8EzfBU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwOS84MTYyM0E0QThC QjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2dabXpvWThXTm1wMWZ3VE44 RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwOS84MTYyM0E0QThCQjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2da bXpvWThXTm1wMWZ3VE44RlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCE49Am27Mvep5K0C8Gk338YYRziDg6KlIfs6oeqNQ0zPamQujhFsaf TbmyCJMNU3ojAmbu346Ua0YfJo63YFloeDLrRZ2uGmsQg1Acoo8hGMPOE4MkSFxQ C2fcxlaT5WK0EJ8ID2yAZd43mDkI9XejxJhErQkgzFIGoWoPecsSW0JnsS9Hdhbx z6pj4Mtqvck6bE7Bfsr2OvWfJg/U1jp14ZI0dYn/Bq9AWJT+PtdqW0lleU5s0KOs tPbEwUdNJ2pz+pRgXBihNIu0xaIJni7kdLSiPGpREbw14pDX7rSI+bh4xlpFYusa ETqbGQPpoJqpm+11ZQHmkEi7Fmu/kppZ -----END CERTIFICATE-----Generated at Sun Jul 20 07:47:14 2025 by rpki-client