$ rpki-client -vvf rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft File: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft (raw, json) Hash identifier: LvEk+ZTmhqAyBylq+vqLTPGBkGNz9i2537A5CUlLo+s= Subject key identifier: 51:3D:8F:CB:89:E5:2B:E1:21:45:D4:CB:D4:D2:CC:C6:5F:F2:59:84 Authority key identifier: E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 Certificate issuer: /CN=A91889B6/serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Certificate serial: 34C0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft Manifest number: 34BC Signing time: Thu 04 Sep 2025 14:51:54 +0000 Manifest this update: Thu 04 Sep 2025 14:51:54 +0000 Manifest next update: Thu 11 Sep 2025 14:51:54 +0000 Files and hashes: 1: 6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl (hash: fnSh9gnO/36uj9cQ1g1sXlI+n5vOAQlkEJXdxjiaEEE=) 2: 8D57E1664D0911EEA9837D4AC4F9AE02.roa (hash: ANRth1hLqzWtOuNRps1oUpwLuw2TshWbOFj4QYFgW9U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 14:51:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13504 (0x34c0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91889B6, serialNumber=E93674B1F3B6916B2B6363B861D6B77B3905DDD8 Validity Not Before: Sep 4 14:51:54 2025 GMT Not After : Sep 11 14:51:54 2025 GMT Subject: CN=68b9a78a-1fe3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c4:ce:ca:97:34:a3:40:6a:93:6b:6b:58:49: 4d:6e:b7:e4:05:d3:f1:fd:8e:21:69:ea:1c:be:a7: 87:90:2f:08:24:90:f4:03:6f:26:85:74:df:b4:5a: 50:6d:f8:a1:c8:02:c4:69:13:01:58:f5:7f:c7:44: 89:9d:c3:3a:5c:59:92:60:f3:f3:29:5c:6e:98:6e: 30:cd:12:ca:00:57:0d:1a:35:5c:8e:c6:34:2b:4d: 16:21:15:33:fb:cd:13:46:eb:fb:1c:84:80:ab:8f: c4:48:0a:fb:9e:8b:fe:a3:9b:2c:39:9c:8a:d1:51: 72:00:2a:8a:0d:8f:13:a1:6a:48:b0:9d:76:65:22: 33:d6:de:33:6c:d0:f9:87:4a:82:23:7e:b3:08:49: 57:78:8c:a9:69:08:b3:d9:64:37:07:c1:34:4f:6f: b7:88:fc:60:f3:30:57:67:99:b6:fc:ce:a6:de:a6: bd:85:0a:1a:fd:00:4f:6f:09:75:90:8e:af:ef:c3: 7d:b5:bf:56:c9:81:18:29:66:3e:eb:58:bc:84:1d: 8c:0a:dd:d7:10:41:55:ae:2c:54:68:ad:c3:69:0e: 40:e1:0a:0b:8f:20:b2:83:10:29:3c:cf:fb:d4:cd: b0:83:0b:7d:4c:57:c4:fd:5a:8c:77:d2:3c:f6:69: f5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:3D:8F:CB:89:E5:2B:E1:21:45:D4:CB:D4:D2:CC:C6:5F:F2:59:84 X509v3 Authority Key Identifier: keyid:E9:36:74:B1:F3:B6:91:6B:2B:63:63:B8:61:D6:B7:7B:39:05:DD:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91889B6/2C4EF9761D9611E2A6548E7E08B02CD2/6TZ0sfO2kWsrY2O4Yda3ezkF3dg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 18:44:93:44:b3:c1:c7:57:05:d5:55:46:d1:61:b2:02:db:51: b8:54:52:2b:6e:a7:66:4f:8c:f5:a3:b4:2d:cb:b0:c0:8e:00: 31:b5:02:7d:af:55:e1:ef:32:b3:1a:a5:8a:b9:e3:9c:fd:02: c0:cb:3c:17:80:71:02:45:7e:6d:5f:59:22:ac:03:8b:b9:a2: bd:0b:50:ae:8d:2e:c1:33:2b:e8:68:bb:a7:c0:79:64:3e:9d: c5:1a:78:a0:cb:64:11:df:a7:5e:82:ff:29:c7:6d:e4:94:f4: 42:3c:f9:95:ec:2f:64:e8:6a:2f:e4:e7:0f:e7:d2:c4:c7:9e: 7b:2f:4d:f9:c4:d7:71:9f:9c:e2:2f:9b:3c:25:ac:b1:e6:44: f1:73:21:96:94:90:60:be:58:20:60:ad:12:0b:58:fc:4e:0e: 61:c4:02:37:15:44:a4:08:72:23:32:2b:09:c5:1a:4e:6d:05: 67:d8:56:ec:25:bc:75:80:d1:00:24:da:dc:4f:89:5d:ff:4a: ab:13:e4:fe:de:18:d7:03:0d:50:ec:c4:13:65:40:03:88:04: 1f:9c:1a:ae:36:7e:1f:8c:0d:00:5a:d1:0a:10:f8:34:98:76: 0d:70:81:e9:d0:69:a6:20:4f:16:07:e1:57:24:05:75:4a:be: 5c:25:b5:d4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODg5QjYxMTAvBgNVBAUTKEU5MzY3NEIxRjNCNjkxNkIyQjYzNjNCODYxRDZCNzdC MzkwNURERDgwHhcNMjUwOTA0MTQ1MTU0WhcNMjUwOTExMTQ1MTU0WjAYMRYwFAYD VQQDEw02OGI5YTc4YS0xZmUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs8TOypc0o0Bqk2trWElNbrfkBdPx/Y4haeocvqeHkC8IJJD0A28mhXTftFpQ bfihyALEaRMBWPV/x0SJncM6XFmSYPPzKVxumG4wzRLKAFcNGjVcjsY0K00WIRUz +80TRuv7HISAq4/ESAr7nov+o5ssOZyK0VFyACqKDY8ToWpIsJ12ZSIz1t4zbND5 h0qCI36zCElXeIypaQiz2WQ3B8E0T2+3iPxg8zBXZ5m2/M6m3qa9hQoa/QBPbwl1 kI6v78N9tb9WyYEYKWY+61i8hB2MCt3XEEFVrixUaK3DaQ5A4QoLjyCygxApPM/7 1M2wgwt9TFfE/VqMd9I89mn1rQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFE9j8uJ 5SvhIUXUy9TSzMZf8lmEMB8GA1UdIwQYMBaAFOk2dLHztpFrK2NjuGHWt3s5Bd3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODlCNi8yQzRFRjk3NjFE OTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtXc3JZMk80WWRhM2V6a0Yz ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZUWjBzZk8ya1dzclkyTzRZZGEzZXprRjNkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 ODlCNi8yQzRFRjk3NjFEOTYxMUUyQTY1NDhFN0UwOEIwMkNEMi82VFowc2ZPMmtX c3JZMk80WWRhM2V6a0YzZGcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAYRJNEs8HHVwXVVUbRYbIC21G4VFIrbqdmT4z1o7Qty7DAjgAxtQJ9 r1Xh7zKzGqWKueOc/QLAyzwXgHECRX5tX1kirAOLuaK9C1CujS7BMyvoaLunwHlk Pp3FGnigy2QR36degv8px23klPRCPPmV7C9k6Gov5OcP59LEx557L035xNdxn5zi L5s8Jayx5kTxcyGWlJBgvlggYK0SC1j8Tg5hxAI3FUSkCHIjMisJxRpObQVn2Fbs Jbx1gNEAJNrcT4ld/0qrE+T+3hjXAw1Q7MQTZUADiAQfnBquNn4fjA0AWtEKEPg0 mHYNcIHp0GmmIE8WB+FXJAV1Sr5cJbXU -----END CERTIFICATE-----Generated at Sat Sep 6 13:47:40 2025 by rpki-client