$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: o9ZLbxNLCcvbL5JgX5+vk7IQSOx4erq6ERKiO/MmMak= Subject key identifier: 84:AD:42:6F:3D:BD:F3:E4:50:3B:7A:24:08:3D:80:63:E0:42:B9:28 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34A4 Signing time: Sun 20 Jul 2025 14:51:29 +0000 Manifest this update: Sun 20 Jul 2025 14:51:28 +0000 Manifest next update: Sun 27 Jul 2025 14:51:28 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: iUb8ayZb0+OyjwNWfxkJCPCNMx8Kk7qcZxkv+4AN3TI=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13480 (0x34a8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Jul 20 14:51:28 2025 GMT Not After : Jul 27 14:51:28 2025 GMT Subject: CN=687d0271-50da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:96:ff:71:45:ff:c0:4d:ca:00:3f:2f:5e: ea:88:80:a0:f9:43:61:50:ab:4b:c5:c9:69:5a:71: 38:51:3a:ac:13:02:33:9d:c5:8f:df:85:fb:c2:41: 37:1f:ee:65:c5:e1:b7:29:9d:54:57:9d:53:5e:9d: 31:07:c8:ef:b2:6c:78:4f:c5:0a:f8:c5:7a:e8:16: 65:2f:e1:38:f7:40:b3:04:11:66:1a:ff:6c:63:0a: a4:97:21:a8:ff:44:0a:26:91:4d:8b:46:8b:ec:55: 11:34:da:9f:56:88:ff:e3:0f:49:d6:61:64:a1:a8: eb:f5:a0:cf:c2:4d:f1:aa:91:a5:1e:c0:e8:26:8c: ae:08:0e:b7:79:3f:4f:48:e0:4d:ae:39:c4:83:d7: 36:f8:34:b6:19:74:8c:02:00:83:d4:75:d3:1e:50: 5b:5c:e4:d6:53:06:62:16:08:41:67:0f:1c:55:ee: 87:91:ca:6a:2d:6a:dc:15:1e:e5:89:a6:70:85:2c: c8:d0:58:54:ac:6f:cf:27:e5:01:d1:3b:dc:6f:2c: 65:8d:5c:bd:54:ba:aa:7b:8d:c1:26:af:4a:6b:55: 01:6c:aa:4a:7e:45:01:ec:ee:af:99:19:90:38:f0: db:f0:0e:88:75:4b:df:6f:80:a3:4d:42:a2:0c:f5: 19:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:AD:42:6F:3D:BD:F3:E4:50:3B:7A:24:08:3D:80:63:E0:42:B9:28 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:1d:3b:e7:4e:e3:85:e7:4f:61:3d:81:94:e0:88:29:e3:23: d7:36:29:c1:52:e2:35:fa:c6:f7:b1:85:82:ab:5d:24:37:95: 8a:63:15:39:45:e2:f2:d9:00:7b:5d:ea:89:3d:a7:07:a3:3e: 35:be:22:75:a6:d0:e8:fc:d9:da:3f:03:09:d5:61:5f:80:49: 97:eb:04:89:8c:92:8e:ae:ed:d0:0f:ba:a9:72:df:bc:da:1a: cc:32:b7:81:bc:65:2d:5e:55:78:2c:23:c9:ba:e6:86:f1:c7: 4d:e9:19:03:59:07:9d:06:45:ba:49:94:b5:4d:6c:3a:b3:bc: bc:40:96:68:40:78:1e:b6:75:c1:a4:8a:5d:90:7a:73:f7:38: c3:59:df:9c:ae:8a:b8:93:17:92:6a:37:fd:02:69:96:36:3c: 6c:01:ec:60:ae:2e:ae:65:1f:62:79:ea:04:9c:eb:d6:ec:58: c8:cb:15:c8:82:e5:48:e4:4d:24:0d:55:be:48:76:46:72:6d: 92:7d:84:ce:70:44:72:1c:cb:cd:a1:0f:21:20:f1:29:66:ad: ad:79:a0:ec:6c:46:44:58:5b:57:ea:93:4b:8a:c1:3e:48:31: 0d:7f:23:6a:b2:dd:c3:cf:78:82:45:e0:f3:61:f4:8b:9b:19: cb:52:2e:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwNzIwMTQ1MTI4WhcNMjUwNzI3MTQ1MTI4WjAYMRYwFAYD VQQDEw02ODdkMDI3MS01MGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDqW/3FF/8BNygA/L17qiICg+UNhUKtLxclpWnE4UTqsEwIzncWP34X7wkE3 H+5lxeG3KZ1UV51TXp0xB8jvsmx4T8UK+MV66BZlL+E490CzBBFmGv9sYwqklyGo /0QKJpFNi0aL7FURNNqfVoj/4w9J1mFkoajr9aDPwk3xqpGlHsDoJoyuCA63eT9P SOBNrjnEg9c2+DS2GXSMAgCD1HXTHlBbXOTWUwZiFghBZw8cVe6HkcpqLWrcFR7l iaZwhSzI0FhUrG/PJ+UB0TvcbyxljVy9VLqqe43BJq9Ka1UBbKpKfkUB7O6vmRmQ OPDb8A6IdUvfb4CjTUKiDPUZAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIStQm89 vfPkUDt6JAg9gGPgQrkoMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6HTvnTuOF509hPYGU4Igp4yPXNinBUuI1+sb3sYWCq10kN5WKYxU5 ReLy2QB7XeqJPacHoz41viJ1ptDo/NnaPwMJ1WFfgEmX6wSJjJKOru3QD7qpct+8 2hrMMreBvGUtXlV4LCPJuuaG8cdN6RkDWQedBkW6SZS1TWw6s7y8QJZoQHgetnXB pIpdkHpz9zjDWd+croq4kxeSajf9AmmWNjxsAexgri6uZR9ieeoEnOvW7FjIyxXI guVI5E0kDVW+SHZGcm2SfYTOcERyHMvNoQ8hIPEpZq2teaDsbEZEWFtX6pNLisE+ SDENfyNqst3Dz3iCReDzYfSLmxnLUi6K -----END CERTIFICATE-----Generated at Mon Jul 21 12:50:07 2025 by rpki-client