$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: tWRYjU0fqeEx5luv9hWIgCaZjQoMt14hwgQeJ76cnAQ= Subject key identifier: C6:6B:E5:9E:A3:92:25:A5:D3:6B:15:B3:D4:C5:41:80:1B:70:CD:AE Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 14EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 14E3 Signing time: Sun 20 Jul 2025 16:51:45 +0000 Manifest this update: Sun 20 Jul 2025 16:51:44 +0000 Manifest next update: Sun 27 Jul 2025 16:51:44 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: IkCikQW8KYHxVJrNwDF8z+CkMitpxbUfiH753Q2jOe0=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 16:51:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5358 (0x14ee) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Jul 20 16:51:44 2025 GMT Not After : Jul 27 16:51:44 2025 GMT Subject: CN=687d1ea1-8f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e0:a6:6f:1e:aa:13:55:ba:53:2d:8a:01:7c: 5d:f9:18:4f:83:8a:50:c4:87:d7:70:04:08:36:da: 7f:d9:f3:50:19:e5:d2:b2:bd:ae:bb:e4:dd:12:45: 68:d0:01:97:0d:5c:85:39:12:3b:4e:17:c7:ba:ce: c9:2a:5a:ab:19:52:10:88:b6:38:95:29:34:77:84: 08:12:94:5d:45:81:50:61:33:54:6c:fa:4d:b4:16: a6:16:56:8f:11:e5:18:3d:7e:6c:b5:81:48:06:9d: 57:33:1e:63:31:00:6f:d4:21:13:01:fc:13:c0:aa: 60:97:24:93:1b:7c:c3:7f:0b:c8:01:39:29:ff:39: a5:8b:90:bf:8d:8e:43:88:3d:14:9c:01:fb:b6:c0: 9a:4b:5f:30:36:9a:09:06:8c:66:77:8f:1b:bc:eb: 20:b6:88:07:ba:30:4b:ce:95:bb:0f:13:75:eb:ec: c6:4f:5d:2c:ce:ba:88:38:6a:17:ec:4b:ba:f9:9b: 9d:45:d7:19:28:b5:e6:1d:9e:69:b3:31:48:48:9c: 3b:15:e3:a3:cd:3f:5a:c6:98:20:49:57:f8:60:bd: f4:2c:21:c9:44:d0:6e:2d:77:6c:69:5f:7a:54:f8: 8b:77:de:07:a0:64:f3:4e:ee:17:a9:ee:5a:45:e9: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:6B:E5:9E:A3:92:25:A5:D3:6B:15:B3:D4:C5:41:80:1B:70:CD:AE X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 32:ec:d4:17:31:05:b9:f1:a9:3a:b2:8c:5a:71:31:c9:5d:57: 7a:1a:e5:d0:ee:22:c3:89:cd:7b:2a:69:6c:85:e2:a6:83:1d: 70:96:b3:76:e9:df:91:b3:94:a7:0f:02:b5:26:8a:b7:ce:d9: 52:58:a6:61:bf:c0:68:6d:8d:0f:a1:ab:e5:c1:8e:b8:e7:9e: 9a:0b:1f:69:08:33:7c:3a:e3:5d:15:81:e3:df:ab:70:66:b3: 61:09:d8:da:77:e9:60:7f:d2:a0:4c:0f:5e:36:e3:db:55:85: 7a:53:84:84:ef:82:59:b3:c1:f7:18:55:76:30:b7:1a:75:b1: c7:e4:75:97:16:63:81:af:07:90:51:aa:39:d0:b5:8b:cb:f8: 05:03:92:d2:1f:90:b4:63:dc:3e:d8:2e:e2:63:a5:52:57:97: 75:2d:f8:a7:0b:17:4b:3c:1d:c6:89:90:1f:85:ea:50:dc:eb: 4b:5e:74:36:5f:55:5a:c9:14:b1:44:57:0d:93:a0:1a:28:9f: 67:6b:17:83:ed:2e:1a:f3:62:02:07:06:b5:5e:26:6a:c1:0a: 19:f7:cd:c6:a9:b9:7f:27:da:0c:eb:a3:1a:a6:01:0f:6b:73: ef:6d:6e:97:6e:c1:bd:56:d2:df:11:7b:c1:7a:e2:fa:56:7d: 3e:01:a3:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFO4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwNzIwMTY1MTQ0WhcNMjUwNzI3MTY1MTQ0WjAYMRYwFAYD VQQDEw02ODdkMWVhMS04ZjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7OCmbx6qE1W6Uy2KAXxd+RhPg4pQxIfXcAQINtp/2fNQGeXSsr2uu+TdEkVo 0AGXDVyFORI7ThfHus7JKlqrGVIQiLY4lSk0d4QIEpRdRYFQYTNUbPpNtBamFlaP EeUYPX5stYFIBp1XMx5jMQBv1CETAfwTwKpglySTG3zDfwvIATkp/zmli5C/jY5D iD0UnAH7tsCaS18wNpoJBoxmd48bvOsgtogHujBLzpW7DxN16+zGT10szrqIOGoX 7Eu6+ZudRdcZKLXmHZ5pszFISJw7FeOjzT9axpggSVf4YL30LCHJRNBuLXdsaV96 VPiLd94HoGTzTu4Xqe5aRennAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMZr5Z6j kiWl02sVs9TFQYAbcM2uMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAy7NQXMQW58ak6soxacTHJXVd6GuXQ7iLDic17KmlsheKmgx1wlrN2 6d+Rs5SnDwK1Joq3ztlSWKZhv8BobY0PoavlwY64556aCx9pCDN8OuNdFYHj36tw ZrNhCdjad+lgf9KgTA9eNuPbVYV6U4SE74JZs8H3GFV2MLcadbHH5HWXFmOBrweQ Uao50LWLy/gFA5LSH5C0Y9w+2C7iY6VSV5d1LfinCxdLPB3GiZAfhepQ3OtLXnQ2 X1VayRSxRFcNk6AaKJ9naxeD7S4a82ICBwa1XiZqwQoZ983Gqbl/J9oM66MapgEP a3PvbW6XbsG9VtLfEXvBeuL6Vn0+AaMF -----END CERTIFICATE-----Generated at Mon Jul 21 06:56:12 2025 by rpki-client