$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: 2czZHLF94Vctf36HzOLaeyHjzGifV5fZchF1L5v0Dro= Subject key identifier: 4C:EB:11:57:BF:FE:E1:80:7F:24:04:05:1F:57:31:E5:4F:EE:1B:79 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0C9E Signing time: Tue 22 Jul 2025 18:24:55 +0000 Manifest this update: Tue 22 Jul 2025 18:24:54 +0000 Manifest next update: Tue 29 Jul 2025 18:24:54 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: xjkre4GL83rySC+HwrdbuItLpWqBJe750K/1hIeC80Q=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: exEpVAv7OmSBv6nfn1Ng6Vrt5eD/dXr6N+PdK8CnaV0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 18:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Jul 22 18:24:54 2025 GMT Not After : Jul 29 18:24:54 2025 GMT Subject: CN=687fd777-5b19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a8:52:40:44:e0:e0:db:2f:06:08:c3:a8:d8: 1f:5e:e4:01:fc:12:d7:11:de:61:ea:98:8d:1d:48: f3:55:eb:7f:80:6f:0a:57:55:42:02:99:a7:66:ee: 89:b9:1f:7a:40:0f:ce:89:6d:64:bb:8d:4f:75:d2: 4e:24:d9:1f:c9:af:4e:d0:65:98:97:ad:2d:24:3e: cc:2a:30:26:67:75:06:44:3c:d1:2e:da:73:e3:b2: 78:dd:47:e1:87:47:df:17:8b:96:4f:16:48:30:d6: 21:2d:29:de:73:fd:e0:19:b2:10:12:9d:ed:83:c2: a6:e5:09:55:ba:57:db:22:9f:89:37:2b:d4:f8:21: ec:02:5f:f5:9a:f6:94:af:51:2a:0f:99:33:cc:ba: ce:2d:a1:69:b9:cd:6e:4d:d2:68:28:2b:72:1f:43: 16:87:be:28:49:41:e5:6d:7e:ce:2c:71:27:00:8c: 8c:f3:36:71:c5:0d:17:1a:5e:a0:89:4b:3a:80:5d: 00:d1:61:e7:84:f9:bf:3b:80:1f:ce:72:11:e5:ec: cc:d1:29:f3:53:92:31:b5:89:dc:0e:4f:52:c6:ad: 14:a9:81:9f:7e:9d:c2:ea:dd:6d:57:71:ce:8c:6c: 9f:54:5c:aa:7b:ea:ff:c4:50:75:15:aa:0b:5f:d8: fa:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:EB:11:57:BF:FE:E1:80:7F:24:04:05:1F:57:31:E5:4F:EE:1B:79 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:bf:1a:2b:6d:11:82:b8:1c:0d:bb:61:b5:9e:11:6d:ae:b2: bb:78:4c:7d:67:34:7d:5f:e8:f1:35:79:33:fa:ab:e4:54:37: 61:7b:09:ad:cf:ac:3b:35:6f:b7:ae:d3:9e:c5:b9:16:e0:3f: b1:55:64:e9:50:ad:55:97:ab:20:95:a6:5b:73:bf:07:4f:53: e1:fa:70:a6:a8:ab:35:42:ae:78:4a:80:c3:ba:a7:0a:bd:19: 2c:27:f2:49:84:04:c0:31:95:00:6f:f3:c2:62:5f:35:a6:8e: f7:6c:42:d9:d8:0f:c1:0d:f5:ee:12:83:25:97:d2:b3:22:19: 37:24:23:38:b6:e9:40:43:c4:ee:de:a1:42:38:1b:52:c7:6b: 29:ac:16:16:36:69:b9:ed:4c:f6:7a:e1:9c:50:7e:c0:fd:dc: 92:a9:96:71:4a:93:56:17:6d:f7:b5:f3:68:4b:1e:86:c4:d0: 19:17:77:36:ba:07:9a:1b:a1:06:67:be:2b:8e:8b:53:73:62: 6a:2c:17:e9:21:90:ca:3f:e7:af:02:e6:6c:78:b5:23:e3:0d: ea:66:6d:96:a8:52:79:80:30:fb:0b:7b:9b:b6:71:6d:32:6c: 48:2e:de:04:09:18:ba:31:0c:2d:6f:d3:22:17:0c:64:58:41: 0c:84:86:1d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwNzIyMTgyNDU0WhcNMjUwNzI5MTgyNDU0WjAYMRYwFAYD VQQDEw02ODdmZDc3Ny01YjE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1KhSQETg4NsvBgjDqNgfXuQB/BLXEd5h6piNHUjzVet/gG8KV1VCApmnZu6J uR96QA/OiW1ku41PddJOJNkfya9O0GWYl60tJD7MKjAmZ3UGRDzRLtpz47J43Ufh h0ffF4uWTxZIMNYhLSnec/3gGbIQEp3tg8Km5QlVulfbIp+JNyvU+CHsAl/1mvaU r1EqD5kzzLrOLaFpuc1uTdJoKCtyH0MWh74oSUHlbX7OLHEnAIyM8zZxxQ0XGl6g iUs6gF0A0WHnhPm/O4AfznIR5ezM0SnzU5IxtYncDk9Sxq0UqYGffp3C6t1tV3HO jGyfVFyqe+r/xFB1FaoLX9j6aQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEzrEVe/ /uGAfyQEBR9XMeVP7ht5MB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHvxorbRGCuBwNu2G1nhFtrrK7eEx9ZzR9X+jxNXkz+qvkVDdhewmt z6w7NW+3rtOexbkW4D+xVWTpUK1Vl6sglaZbc78HT1Ph+nCmqKs1Qq54SoDDuqcK vRksJ/JJhATAMZUAb/PCYl81po73bELZ2A/BDfXuEoMll9KzIhk3JCM4tulAQ8Tu 3qFCOBtSx2sprBYWNmm57Uz2euGcUH7A/dySqZZxSpNWF233tfNoSx6GxNAZF3c2 ugeaG6EGZ74rjotTc2JqLBfpIZDKP+evAuZseLUj4w3qZm2WqFJ5gDD7C3ubtnFt MmxILt4ECRi6MQwtb9MiFwxkWEEMhIYd -----END CERTIFICATE-----Generated at Wed Jul 23 12:56:35 2025 by rpki-client