$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: Ru9QkRrdtwIeGq+gwZC20+iD1lMHmVpkk+BwAjlyOGU= Subject key identifier: 61:B5:99:57:42:9A:DD:91:4E:A0:62:D8:65:5B:A6:7B:4C:CF:71:3B Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 24 Signing time: Sat 19 Jul 2025 08:04:22 +0000 Manifest this update: Sat 19 Jul 2025 08:04:21 +0000 Manifest next update: Sat 26 Jul 2025 08:04:21 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: HYLfYW5KzG2uhF6KavUJS7+iok9QamQUBqlkNV2QhnI=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Jul 19 08:04:21 2025 GMT Not After : Jul 26 08:04:21 2025 GMT Subject: CN=687b5185-a07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:9a:47:44:02:a0:3c:e0:0a:26:73:4b:49: f7:1d:9e:92:f8:bd:c9:ec:62:6d:0a:4e:5f:10:3b: 92:c8:01:24:36:23:29:01:1f:aa:49:b2:17:6f:6f: c5:58:25:ae:ac:10:79:f2:9b:8c:ee:b6:2a:41:e6: ee:70:a6:23:8c:31:24:bb:04:52:5b:8e:ed:e5:71: ad:4f:fd:ed:e6:0a:56:78:83:b5:06:34:d2:2c:11: 10:5e:42:09:7a:ab:ba:11:a8:b1:54:dc:7c:04:00: 7e:21:5b:97:f0:c8:54:2b:5a:d7:a5:ba:e2:32:cc: 36:52:df:57:73:19:7a:d7:e8:9e:3e:d4:c6:c8:c2: 65:30:4b:21:97:93:50:a8:9d:4e:a9:78:b7:c8:61: 96:20:cb:e1:65:82:b6:b4:79:f5:c9:36:c0:d1:dd: d3:bc:c4:7b:22:bf:c9:15:e2:a6:88:e8:f1:c8:fa: 73:eb:ad:24:2e:6d:99:e9:27:4d:44:e9:9f:eb:46: bb:88:44:ba:a3:60:c6:ad:8b:60:27:d2:15:fc:b7: e5:bc:81:9c:3c:bf:df:40:68:f1:97:f0:9c:f5:04: c1:42:42:49:89:4e:4e:84:2f:13:eb:ff:33:2b:5c: 93:3c:85:cd:d6:7b:7e:e5:61:21:37:27:f8:8e:19: 5f:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:B5:99:57:42:9A:DD:91:4E:A0:62:D8:65:5B:A6:7B:4C:CF:71:3B X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:99:99:46:3a:53:ee:ff:e5:53:88:f9:d0:38:12:99:7d:0a: ba:c8:cb:9f:03:e5:f2:3a:16:53:a3:a1:25:ed:34:be:86:6d: 71:5e:37:a9:70:aa:01:22:05:3d:26:f0:53:81:53:da:1c:ed: 76:84:88:8f:50:23:6e:71:29:52:24:33:db:3a:7a:8e:ad:16: d7:2c:e7:9e:0d:9f:16:75:5f:a3:78:07:8c:41:6b:07:5b:28: 33:60:7f:ee:e8:a0:12:a9:dc:48:56:74:ea:dc:68:a9:b7:cf: 0b:94:1e:e3:f6:da:a4:f2:06:db:61:ae:b9:1c:e7:6c:25:d0: 57:cc:15:ac:00:cf:57:53:2c:14:21:1a:a3:99:c7:de:e2:d0: 66:b7:20:2d:91:a7:e8:83:f7:33:36:82:b7:aa:67:4d:30:f9: b9:b9:5e:f4:04:a6:b4:93:7a:a1:5a:e3:af:43:4f:fa:b7:13: b6:a7:19:4d:98:96:14:03:77:6a:ae:76:ad:b6:e2:5c:6b:20: bb:d9:cc:0b:0d:88:b8:84:1d:45:c4:43:70:c6:64:a7:af:d7: 5c:cd:74:a2:09:a8:91:5c:a1:aa:a6:c9:c1:4e:20:11:49:7b: 4b:ef:f8:7b:05:75:3b:ee:fc:3f:1e:77:3c:a1:7f:db:6a:99: f4:f6:31:8b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTA3MTkwODA0MjFaFw0yNTA3MjYwODA0MjFaMBgxFjAUBgNV BAMTDTY4N2I1MTg1LWEwN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCuz5pHRAKgPOAKJnNLSfcdnpL4vcnsYm0KTl8QO5LIASQ2IykBH6pJshdvb8VY Ja6sEHnym4zutipB5u5wpiOMMSS7BFJbju3lca1P/e3mClZ4g7UGNNIsERBeQgl6 q7oRqLFU3HwEAH4hW5fwyFQrWteluuIyzDZS31dzGXrX6J4+1MbIwmUwSyGXk1Co nU6peLfIYZYgy+Flgra0efXJNsDR3dO8xHsiv8kV4qaI6PHI+nPrrSQubZnpJ01E 6Z/rRruIRLqjYMati2An0hX8t+W8gZw8v99AaPGX8Jz1BMFCQkmJTk6ELxPr/zMr XJM8hc3We37lYSE3J/iOGV/FAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUYbWZV0Ka 3ZFOoGLYZVume0zPcTswHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIuZmUY6U+7/5VOI+dA4Epl9CrrIy58D5fI6FlOjoSXtNL6GbXFeN6lw qgEiBT0m8FOBU9oc7XaEiI9QI25xKVIkM9s6eo6tFtcs554NnxZ1X6N4B4xBawdb KDNgf+7ooBKp3EhWdOrcaKm3zwuUHuP22qTyBtthrrkc52wl0FfMFawAz1dTLBQh GqOZx97i0Ga3IC2Rp+iD9zM2greqZ00w+bm5XvQEprSTeqFa469DT/q3E7anGU2Y lhQDd2qudq224lxrILvZzAsNiLiEHUXEQ3DGZKev11zNdKIJqJFcoaqmycFOIBFJ e0vv+HsFdTvu/D8edzyhf9tqmfT2MYs= -----END CERTIFICATE-----Generated at Mon Jul 21 06:59:37 2025 by rpki-client