$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: 3+jnYl4lflk46jls8ka6t3Ph6n1qJ3NQGow8OVmNtl0= Subject key identifier: 1A:D1:60:71:8D:4D:76:B7:86:B9:0D:2D:C8:61:BE:8C:C1:D7:0B:99 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: E1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: DC Signing time: Wed 23 Jul 2025 05:50:44 +0000 Manifest this update: Wed 23 Jul 2025 05:50:44 +0000 Manifest next update: Wed 30 Jul 2025 05:50:44 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: qESdCisTk7KWlaPgf7J4pTt4EpYtxWGtVdDIup1I3QM=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) 3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:50:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Jul 23 05:50:44 2025 GMT Not After : Jul 30 05:50:44 2025 GMT Subject: CN=68807834-89dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:45:b7:39:8e:21:85:28:1c:e0:1e:95:4c:2c: 25:52:ce:7f:9f:41:88:6f:f9:7b:f0:ef:28:9f:ba: fd:62:67:ac:3f:22:5e:b2:37:b4:a5:75:f2:4b:86: 7c:c2:c4:55:62:4b:5a:9b:cb:82:17:8e:d4:06:38: 8d:dc:01:e5:c7:f1:cc:7d:ef:a8:69:3c:d2:06:cc: 51:b2:54:c9:53:a4:9b:5e:f1:03:f3:21:be:4e:03: 42:d4:7c:d9:8f:0e:f7:98:a9:76:c3:58:43:fa:67: c0:c3:2f:e6:9f:7c:d1:61:d9:0f:47:9b:fd:17:d7: 60:95:dd:8e:57:bd:6c:83:dc:1c:60:79:eb:c4:f5: a2:53:35:94:2b:5e:ae:a3:f3:41:80:ad:83:1a:77: 38:d6:ce:64:6c:16:d0:34:4a:58:d6:8c:d7:33:92: 94:40:17:f6:66:c3:3f:ae:d8:e4:f0:fc:30:bc:15: 12:d4:0a:a4:52:0f:d9:c3:87:49:9f:5c:34:fe:17: 9f:54:98:35:92:f3:10:13:4f:7f:2c:4d:27:61:1e: 2b:06:65:7f:58:1b:d5:52:94:ce:6f:4d:95:b8:56: 38:f5:c8:47:da:f4:02:0e:4b:66:ae:f9:a3:c6:ec: c8:d1:6f:1e:32:86:85:e1:50:19:ea:13:59:c0:28: 4c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:D1:60:71:8D:4D:76:B7:86:B9:0D:2D:C8:61:BE:8C:C1:D7:0B:99 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption cd:14:22:7b:86:2c:a3:77:12:30:ac:ad:70:37:a2:c6:27:c6: 6b:89:6a:32:13:41:c3:e6:43:17:19:f8:b1:55:66:72:c7:20: 98:26:bd:7d:7e:6f:73:9e:f5:51:c0:8e:8f:21:3b:9f:be:1b: fe:2a:1b:fb:b8:70:e3:de:97:23:58:44:e6:b6:d9:b2:f8:45: a3:ec:b8:96:ce:d8:4e:8f:92:a8:f0:76:07:45:04:ae:c0:56: c8:34:25:73:2e:d8:04:42:1f:b2:69:ff:0f:e8:aa:74:89:ca: 34:c9:32:d4:8f:05:8c:03:da:1c:86:33:1f:68:b3:c7:fc:74: b3:af:39:78:7e:da:4f:de:33:2b:fd:c2:cf:24:09:eb:e9:b9: f3:df:f2:42:0b:2a:d1:8b:52:81:35:1c:8f:49:ba:33:ec:e3: 1a:98:dd:52:63:cf:a5:e7:9a:84:28:ac:c3:50:f7:c6:5e:5c: 86:94:cf:04:49:bf:53:be:cd:c6:bc:d9:c8:6c:f1:17:bb:6f: 97:e7:29:6d:b6:35:f2:19:2d:fa:41:74:b3:ae:63:bb:51:7e: 35:2b:dd:10:8c:07:f0:7f:c2:25:c7:72:99:f1:a7:f9:f5:08: 86:28:08:41:db:76:f6:c3:6e:3d:c8:af:88:71:18:85:a1:c1: de:68:e6:c2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUwNzIzMDU1MDQ0WhcNMjUwNzMwMDU1MDQ0WjAYMRYwFAYD VQQDEw02ODgwNzgzNC04OWRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmEW3OY4hhSgc4B6VTCwlUs5/n0GIb/l78O8on7r9YmesPyJesje0pXXyS4Z8 wsRVYktam8uCF47UBjiN3AHlx/HMfe+oaTzSBsxRslTJU6SbXvED8yG+TgNC1HzZ jw73mKl2w1hD+mfAwy/mn3zRYdkPR5v9F9dgld2OV71sg9wcYHnrxPWiUzWUK16u o/NBgK2DGnc41s5kbBbQNEpY1ozXM5KUQBf2ZsM/rtjk8PwwvBUS1AqkUg/Zw4dJ n1w0/hefVJg1kvMQE09/LE0nYR4rBmV/WBvVUpTOb02VuFY49chH2vQCDktmrvmj xuzI0W8eMoaF4VAZ6hNZwChM2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBrRYHGN TXa3hrkNLchhvozB1wuZMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDNFCJ7hiyjdxIwrK1wN6LGJ8ZriWoyE0HD5kMXGfixVWZyxyCYJr19 fm9znvVRwI6PITufvhv+Khv7uHDj3pcjWETmttmy+EWj7LiWzthOj5Ko8HYHRQSu wFbINCVzLtgEQh+yaf8P6Kp0ico0yTLUjwWMA9ochjMfaLPH/HSzrzl4ftpP3jMr /cLPJAnr6bnz3/JCCyrRi1KBNRyPSboz7OMamN1SY8+l55qEKKzDUPfGXlyGlM8E Sb9Tvs3GvNnIbPEXu2+X5ylttjXyGS36QXSzrmO7UX41K90QjAfwf8Ilx3KZ8af5 9QiGKAhB23b2w249yK+IcRiFocHeaObC -----END CERTIFICATE-----Generated at Wed Jul 23 12:21:56 2025 by rpki-client