$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft File: 6kGaeWKZYloHSmW3ys7_GLgGbIs.mft (raw, json) Hash identifier: 2ApQEaVjd0MFruU5ImM7TPTACzIXFH91Ts6acAgNQgs= Subject key identifier: 25:7B:76:C6:53:2D:83:F1:C8:5A:E7:41:87:66:01:2B:80:A6:09:7A Authority key identifier: EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B Certificate issuer: /CN=A91BEBB1/serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Certificate serial: 0207 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft Manifest number: 0202 Signing time: Mon 21 Jul 2025 02:23:58 +0000 Manifest this update: Mon 21 Jul 2025 02:23:57 +0000 Manifest next update: Mon 28 Jul 2025 02:23:57 +0000 Files and hashes: 1: 6kGaeWKZYloHSmW3ys7_GLgGbIs.crl (hash: 8rk7Hl+kxz624cluvKwH5wxkTF3ezCqY8PxJdJYcfw4=) 2: 8CD5FC2253A011EDAC40531BC4F9AE02.roa (hash: IlKGwFHV9ZEo1VbyiGg5B3egdFnPmqfH6pmscMBr3y0=) 3: FEDE61B6ED2C11EEBF8F3E49C4F9AE02.roa (hash: ceGnF1r8IOwVE50G1+2RnDibZLWap/obpLcH2ZWlhhY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 02:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 519 (0x207) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBB1, serialNumber=EA419A796299625A074A65B7CACEFF18B8066C8B Validity Not Before: Jul 21 02:23:57 2025 GMT Not After : Jul 28 02:23:57 2025 GMT Subject: CN=687da4bd-ad44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b9:4a:ec:69:b3:22:fe:87:7e:dd:dd:ee:52: 12:16:40:57:51:6b:7a:c2:98:e6:7f:0f:8c:79:0b: c3:d2:7f:48:71:38:0a:67:66:18:2b:76:b2:2b:b6: 40:be:ef:c7:21:a1:b0:b7:39:a8:ff:b5:da:f1:e1: d0:7b:79:45:7d:96:67:a0:ab:8f:c1:03:93:ba:fc: d0:2f:b2:44:bb:ac:dc:16:5e:e9:02:87:24:22:18: a9:36:2b:44:02:42:5e:16:af:d2:b0:74:94:0b:bc: 43:8b:96:d4:d2:a8:a8:c8:a2:40:d5:e2:5e:d6:90: 26:22:ac:fb:e6:a7:99:b8:3c:32:94:a5:fe:5c:06: 67:35:69:19:e2:cd:5d:8f:ce:d3:2f:3c:6b:13:a9: 9a:67:da:15:03:02:c8:54:bd:a4:98:99:76:61:7a: 05:f4:99:95:c4:74:e6:f2:a7:69:45:25:4d:c2:a9: 5f:da:ec:bc:6f:02:cc:c4:89:6c:df:cb:4e:c0:71: 1c:e8:e6:2c:21:fd:98:75:34:ca:26:96:ec:d9:2d: dc:a2:81:02:e3:7a:4e:a9:00:fa:ca:c1:ea:d1:b2: 5a:6e:b1:8d:33:bc:28:b7:f5:b7:6e:54:ce:7a:e5: cf:62:0f:29:aa:51:aa:12:6b:c4:cc:61:58:7d:94: 5f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:7B:76:C6:53:2D:83:F1:C8:5A:E7:41:87:66:01:2B:80:A6:09:7A X509v3 Authority Key Identifier: keyid:EA:41:9A:79:62:99:62:5A:07:4A:65:B7:CA:CE:FF:18:B8:06:6C:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6kGaeWKZYloHSmW3ys7_GLgGbIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBB1/67BEA406539C11EDAE004E17C4F9AE02/6kGaeWKZYloHSmW3ys7_GLgGbIs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:04:54:0f:fb:ba:bb:a7:9d:62:46:e9:72:75:46:2d:ea:e2: 7a:21:04:77:8f:56:84:d4:e3:00:bf:f2:64:8d:98:f9:d1:88: 3c:ff:25:0c:e8:26:cc:2f:c7:86:88:c1:95:d9:cb:7c:03:a9: 16:06:87:7a:e0:d7:0a:66:55:75:95:ab:bb:6a:36:fb:a7:1e: 5a:f7:1b:cd:87:64:85:3a:1b:bb:87:f0:6a:04:46:3b:47:68: 80:a4:ae:8d:f1:9a:70:b8:40:36:b4:61:ea:3a:cf:9b:c4:55: ac:0f:64:3d:f0:22:8f:57:59:78:88:c7:55:da:8c:4f:16:80: 6a:1b:85:6c:38:13:4e:7d:e0:30:c0:fb:ab:92:42:10:01:f8: e6:60:39:d1:00:ce:40:e3:8d:8f:b4:3e:2b:87:aa:8a:d6:23: 2d:0f:28:e1:6f:42:7d:de:3a:20:b4:cc:1e:4a:56:a9:61:a0: 10:07:6b:56:2a:b5:de:fb:e0:7e:bb:9f:da:d1:85:4a:78:a9: 22:58:60:e5:64:ed:21:ee:d7:de:de:cf:b4:a3:bb:0c:93:21: e2:45:e7:13:dd:08:23:a2:d2:12:9e:00:83:18:cc:c2:99:a5: 3b:5f:7c:de:a4:98:7f:82:41:44:99:54:ee:45:3a:d2:bc:2f: 03:41:b3:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCQjExMTAvBgNVBAUTKEVBNDE5QTc5NjI5OTYyNUEwNzRBNjVCN0NBQ0VGRjE4 QjgwNjZDOEIwHhcNMjUwNzIxMDIyMzU3WhcNMjUwNzI4MDIyMzU3WjAYMRYwFAYD VQQDEw02ODdkYTRiZC1hZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwLlK7GmzIv6Hft3d7lISFkBXUWt6wpjmfw+MeQvD0n9IcTgKZ2YYK3ayK7ZA vu/HIaGwtzmo/7Xa8eHQe3lFfZZnoKuPwQOTuvzQL7JEu6zcFl7pAockIhipNitE AkJeFq/SsHSUC7xDi5bU0qioyKJA1eJe1pAmIqz75qeZuDwylKX+XAZnNWkZ4s1d j87TLzxrE6maZ9oVAwLIVL2kmJl2YXoF9JmVxHTm8qdpRSVNwqlf2uy8bwLMxIls 38tOwHEc6OYsIf2YdTTKJpbs2S3cooEC43pOqQD6ysHq0bJabrGNM7wot/W3blTO euXPYg8pqlGqEmvEzGFYfZRfkwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCV7dsZT LYPxyFrnQYdmASuApgl6MB8GA1UdIwQYMBaAFOpBmnlimWJaB0plt8rO/xi4BmyL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJCMS82N0JFQTQwNjUz OUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWllsb0hTbVczeXM3X0dMZ0di SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZrR2FlV0taWWxvSFNtVzN5czdfR0xnR2JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUJCMS82N0JFQTQwNjUzOUMxMUVEQUUwMDRFMTdDNEY5QUUwMi82a0dhZVdLWlls b0hTbVczeXM3X0dMZ0diSXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALBFQP+7q7p51iRulydUYt6uJ6IQR3j1aE1OMAv/JkjZj50Yg8/yUM 6CbML8eGiMGV2ct8A6kWBod64NcKZlV1lau7ajb7px5a9xvNh2SFOhu7h/BqBEY7 R2iApK6N8ZpwuEA2tGHqOs+bxFWsD2Q98CKPV1l4iMdV2oxPFoBqG4VsOBNOfeAw wPurkkIQAfjmYDnRAM5A442PtD4rh6qK1iMtDyjhb0J93jogtMweSlapYaAQB2tW KrXe++B+u5/a0YVKeKkiWGDlZO0h7tfe3s+0o7sMkyHiRecT3QgjotISngCDGMzC maU7X3zepJh/gkFEmVTuRTrSvC8DQbPh -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:07 2025 by rpki-client