$ rpki-client -vvf rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft File: 6mETfAkAkG5HSNHgfMVV5qfM4QA.mft (raw, json) Hash identifier: e8k9ur/z9Nx/SG+GqB91WvaE9pZDo47cz+uKTnIdFkA= Subject key identifier: 74:CD:66:5A:2C:BB:3A:E4:1A:D9:A0:70:9E:51:B8:23:FD:FE:6C:B7 Authority key identifier: EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 Certificate issuer: /CN=A91175BA/serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Certificate serial: 0157 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft Manifest number: 073E Signing time: Mon 08 Sep 2025 23:02:21 +0000 Manifest this update: Mon 08 Sep 2025 23:02:20 +0000 Manifest next update: Mon 15 Sep 2025 23:02:20 +0000 Files and hashes: 1: 6mETfAkAkG5HSNHgfMVV5qfM4QA.crl (hash: JKAL/e63NDqbTmbN3MCT1vdWDDAeeigy8ZHD2kMC8WA=) 2: 1F7ECC882AFA11F0BCBFBD71C4F9AE02.roa (hash: dZTRls4280/E4YN4c7nuR8VH/U9lXLY5JNfcW3Mega8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 343 (0x157) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91175BA, serialNumber=EA61137C0900906E4748D1E07CC555E6A7CCE100 Validity Not Before: Sep 8 23:02:20 2025 GMT Not After : Sep 15 23:02:20 2025 GMT Subject: CN=68bf607d-5341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:f5:fc:14:5a:58:3b:8a:c0:46:02:82:30: 53:30:f0:e7:a5:95:90:d0:28:5c:bd:2f:c4:b7:bc: 01:f2:58:7f:bb:fb:aa:79:ce:a0:40:17:e8:fb:22: 76:f5:0d:70:ef:7d:ab:22:18:d9:d8:e0:43:37:44: 4b:83:68:01:bf:d0:2c:c1:c2:e0:4c:f1:ca:b3:de: ab:0f:0a:1c:74:c7:77:0a:7e:55:8d:be:96:dc:e7: d9:8c:6f:3f:ad:ad:3b:b7:72:3a:cf:b7:b7:af:b7: 8e:1e:d4:a2:1b:93:a8:6c:2a:cd:34:8c:f2:5b:97: 00:39:e7:eb:4d:ff:59:2a:06:68:14:3f:a7:2f:ac: d7:19:dd:62:45:6f:98:96:f2:93:39:08:32:1c:c3: be:b7:92:6c:37:a0:bf:64:8e:5b:48:a5:85:04:bd: 74:f0:7d:66:9d:61:bd:f7:12:46:34:f3:07:14:0a: 5f:3b:33:97:d7:58:dc:84:dd:7c:a2:64:a3:e1:30: 68:cf:8d:9d:50:66:54:df:70:9e:1b:a3:92:4a:12: a8:db:34:88:22:cc:27:b9:0a:08:98:c4:c6:25:34: 6c:04:cf:b7:3b:58:ed:b8:f3:a2:90:a7:04:f7:59: a5:74:7b:0a:2b:d6:5f:69:7b:4c:63:b1:14:98:b1: d7:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:CD:66:5A:2C:BB:3A:E4:1A:D9:A0:70:9E:51:B8:23:FD:FE:6C:B7 X509v3 Authority Key Identifier: keyid:EA:61:13:7C:09:00:90:6E:47:48:D1:E0:7C:C5:55:E6:A7:CC:E1:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6mETfAkAkG5HSNHgfMVV5qfM4QA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91175BA/16C4D2B8C84D11EB9913D32DC4F9AE02/6mETfAkAkG5HSNHgfMVV5qfM4QA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 68:cd:25:e4:da:6c:f7:2d:8e:4c:07:22:45:1d:57:80:89:a4: 8e:45:8d:44:37:d6:c9:08:61:87:54:44:96:a5:b1:c4:39:e5: aa:eb:47:70:6a:4b:ae:af:af:4e:7f:75:70:b2:f4:19:4b:e3: 30:3a:02:23:ba:65:4e:58:e6:6b:89:11:a4:60:53:3b:18:b3: fb:36:51:85:5e:6a:f2:9c:f9:18:49:41:90:75:a1:ed:1e:6c: 32:9e:ca:f9:1b:8e:8e:13:ff:7e:54:6e:b0:ac:dc:4f:ab:ae: fe:11:74:dc:da:bb:a6:01:9e:55:ab:45:3c:17:9b:e9:46:d5: e9:ac:a7:0e:6e:a1:a5:24:aa:30:a4:88:40:ab:0b:2e:6c:db: 79:5c:1d:cc:46:00:26:62:bf:96:a2:be:1e:34:da:38:c6:9e: 5b:34:a3:10:c1:82:ec:08:56:67:00:c9:7d:9b:97:fe:72:b7: 3e:1c:5a:25:c5:5f:1a:85:d1:b7:62:8f:79:83:83:9e:0a:5a: 6a:95:7d:e5:b2:8c:c7:71:9b:c6:f8:0c:3e:6c:18:cc:41:70: be:fe:b5:cf:39:1b:fb:86:b9:88:5d:e1:12:d2:d4:e1:cb:d8: 69:59:eb:16:97:2d:80:93:f1:22:a1:dc:94:ee:6b:11:b2:e7: ee:0a:da:d0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAVcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc1QkExMTAvBgNVBAUTKEVBNjExMzdDMDkwMDkwNkU0NzQ4RDFFMDdDQzU1NUU2 QTdDQ0UxMDAwHhcNMjUwOTA4MjMwMjIwWhcNMjUwOTE1MjMwMjIwWjAYMRYwFAYD VQQDEw02OGJmNjA3ZC01MzQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2v1/BRaWDuKwEYCgjBTMPDnpZWQ0ChcvS/Et7wB8lh/u/uqec6gQBfo+yJ2 9Q1w732rIhjZ2OBDN0RLg2gBv9AswcLgTPHKs96rDwocdMd3Cn5Vjb6W3OfZjG8/ ra07t3I6z7e3r7eOHtSiG5OobCrNNIzyW5cAOefrTf9ZKgZoFD+nL6zXGd1iRW+Y lvKTOQgyHMO+t5JsN6C/ZI5bSKWFBL108H1mnWG99xJGNPMHFApfOzOX11jchN18 omSj4TBoz42dUGZU33CeG6OSShKo2zSIIswnuQoImMTGJTRsBM+3O1jtuPOikKcE 91mldHsKK9ZfaXtMY7EUmLHX2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHTNZlos uzrkGtmgcJ5RuCP9/my3MB8GA1UdIwQYMBaAFOphE3wJAJBuR0jR4HzFVeanzOEA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzVCQS8xNkM0RDJCOEM4 NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtHNUhTTkhnZk1WVjVxZk00 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZtRVRmQWtBa0c1SFNOSGdmTVZWNXFmTTRRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzVCQS8xNkM0RDJCOEM4NEQxMUVCOTkxM0QzMkRDNEY5QUUwMi82bUVUZkFrQWtH NUhTTkhnZk1WVjVxZk00UUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBozSXk2mz3LY5MByJFHVeAiaSORY1EN9bJCGGHVESWpbHEOeWq60dw akuur69Of3VwsvQZS+MwOgIjumVOWOZriRGkYFM7GLP7NlGFXmrynPkYSUGQdaHt Hmwynsr5G46OE/9+VG6wrNxPq67+EXTc2rumAZ5Vq0U8F5vpRtXprKcObqGlJKow pIhAqwsubNt5XB3MRgAmYr+Wor4eNNo4xp5bNKMQwYLsCFZnAMl9m5f+crc+HFol xV8ahdG3Yo95g4OeClpqlX3lsozHcZvG+Aw+bBjMQXC+/rXPORv7hrmIXeES0tTh y9hpWesWly2Ak/EiodyU7msRsufuCtrQ -----END CERTIFICATE-----Generated at Tue Sep 9 13:18:07 2025 by rpki-client