$ rpki-client -vvf rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft File: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft (raw, json) Hash identifier: bniJkPWUZI/9dQRkJmpyYwTg8+WjSZ+yCFAYzCSBCCg= Subject key identifier: 06:F9:B9:2D:5A:1B:44:96:AB:12:45:68:79:8F:90:0D:F0:09:09:4C Authority key identifier: B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 Certificate issuer: /CN=A91897BB/serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Certificate serial: 07BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft Manifest number: 07B7 Signing time: Sat 06 Sep 2025 21:31:48 +0000 Manifest this update: Sat 06 Sep 2025 21:31:47 +0000 Manifest next update: Sat 13 Sep 2025 21:31:47 +0000 Files and hashes: 1: tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl (hash: HQnlujxpVvovPSedFrD/H3HZftOXHYYtIWD7RgIgO00=) 2: E51ECC8610E711EBAD066E1DC4F9AE02.roa (hash: xKjoE/L7amuNhMSwGDrHGE81K3Mhyx0/ODd0Eq8CTmg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 21:31:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1981 (0x7bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897BB, serialNumber=B49E8EE81703A4A0BACCA82437802FB5C30B6568 Validity Not Before: Sep 6 21:31:47 2025 GMT Not After : Sep 13 21:31:47 2025 GMT Subject: CN=68bca844-f52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:55:23:34:eb:3c:f9:74:a8:e7:a7:5a:6e:4a: 07:fa:b4:eb:70:7c:cd:51:2d:1e:8c:fc:bb:30:72: 4f:10:95:34:69:49:ed:42:f1:8c:44:d0:4e:43:5c: 26:73:94:91:92:18:f7:06:c9:73:fa:29:64:cd:bf: be:fc:4f:4c:ea:46:80:28:20:e3:e2:30:68:17:c5: 96:2c:17:ff:f1:df:d0:63:69:d8:7f:98:62:64:aa: 77:cd:d3:1e:0c:63:55:cc:4d:8c:d6:ff:6f:27:e5: a3:07:ec:ef:41:ef:93:53:c6:f5:ea:21:19:94:90: 9b:33:d2:e4:0a:15:ad:1f:40:b9:a2:2c:e0:29:19: 21:45:70:dd:e3:5c:47:54:c8:6f:bc:5c:53:b1:c8: f7:57:5b:9a:d0:20:f2:21:97:50:b0:ec:89:12:12: e8:02:bf:81:ec:08:00:26:3c:f6:4a:f6:87:9c:65: 59:b6:eb:99:fe:ba:62:06:93:fd:1c:57:eb:81:05: a5:5e:6a:6e:b5:b8:1c:d8:44:9b:a2:1e:79:48:98: c6:87:7e:fc:cb:69:dc:e9:7d:63:9d:ca:5d:7c:a2: a1:40:c8:70:c5:15:fe:5f:c0:7a:a0:76:2a:7a:09: 2e:85:f3:4a:e8:b5:7f:19:39:07:63:df:88:5e:cd: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:F9:B9:2D:5A:1B:44:96:AB:12:45:68:79:8F:90:0D:F0:09:09:4C X509v3 Authority Key Identifier: keyid:B4:9E:8E:E8:17:03:A4:A0:BA:CC:A8:24:37:80:2F:B5:C3:0B:65:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897BB/FC73FA0610E611EBB4A2521DC4F9AE02/tJ6O6BcDpKC6zKgkN4AvtcMLZWg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:f1:21:e4:3e:e7:16:e1:9e:f1:30:89:d1:2e:e3:c2:eb:71: 27:72:26:24:31:c1:5d:a8:72:aa:f4:6a:b5:2f:eb:de:8d:39: a8:ba:a3:7d:a8:f1:6a:26:f1:7c:f6:a4:88:76:38:8a:75:07: 4d:90:1d:f7:0e:55:6c:88:87:d0:cc:e2:cd:b1:1b:64:90:d5: 1b:0e:c9:f8:9d:e6:c0:15:83:44:57:6e:10:ee:3e:31:ec:a9: d6:9e:ab:b8:37:b6:6a:2b:1f:38:65:1e:90:dc:11:d5:dc:e4: aa:ff:c3:e3:c1:3e:96:3d:c2:ae:0c:d8:29:12:e3:f0:6a:78: 47:b0:af:47:c7:03:25:98:8c:ea:16:7d:34:99:e6:36:7c:ef: 36:a8:38:77:5e:0a:32:de:6d:69:0a:a7:bc:22:6f:b2:9f:6b: 5a:a1:a0:e0:93:36:ea:8f:7a:47:7a:0c:11:f6:8b:20:04:8b: 45:6f:6c:95:53:21:81:55:3e:28:15:2e:14:38:54:84:c1:18: 95:76:da:5a:89:c8:0e:c1:33:4f:17:04:46:00:95:4c:36:fc: 36:1b:ce:a8:ab:0b:3e:dc:d4:e8:6c:db:a4:51:ae:fb:93:f0: 8f:86:50:79:19:3e:5c:36:66:e8:e5:2c:8c:b3:8d:10:c2:e1: df:a1:15:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QkIxMTAvBgNVBAUTKEI0OUU4RUU4MTcwM0E0QTBCQUNDQTgyNDM3ODAyRkI1 QzMwQjY1NjgwHhcNMjUwOTA2MjEzMTQ3WhcNMjUwOTEzMjEzMTQ3WjAYMRYwFAYD VQQDEw02OGJjYTg0NC1mNTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1UjNOs8+XSo56dabkoH+rTrcHzNUS0ejPy7MHJPEJU0aUntQvGMRNBOQ1wm c5SRkhj3Bslz+ilkzb++/E9M6kaAKCDj4jBoF8WWLBf/8d/QY2nYf5hiZKp3zdMe DGNVzE2M1v9vJ+WjB+zvQe+TU8b16iEZlJCbM9LkChWtH0C5oizgKRkhRXDd41xH VMhvvFxTscj3V1ua0CDyIZdQsOyJEhLoAr+B7AgAJjz2SvaHnGVZtuuZ/rpiBpP9 HFfrgQWlXmputbgc2ESboh55SJjGh378y2nc6X1jncpdfKKhQMhwxRX+X8B6oHYq egkuhfNK6LV/GTkHY9+IXs040wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAb5uS1a G0SWqxJFaHmPkA3wCQlMMB8GA1UdIwQYMBaAFLSejugXA6SgusyoJDeAL7XDC2Vo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCQi9GQzczRkEwNjEw RTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBLQzZ6S2drTjRBdnRjTUxa V2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RKNk82QmNEcEtDNnpLZ2tONEF2dGNNTFpXZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 OTdCQi9GQzczRkEwNjEwRTYxMUVCQjRBMjUyMURDNEY5QUUwMi90SjZPNkJjRHBL QzZ6S2drTjRBdnRjTUxaV2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB68SHkPucW4Z7xMInRLuPC63EnciYkMcFdqHKq9Gq1L+vejTmouqN9 qPFqJvF89qSIdjiKdQdNkB33DlVsiIfQzOLNsRtkkNUbDsn4nebAFYNEV24Q7j4x 7KnWnqu4N7ZqKx84ZR6Q3BHV3OSq/8PjwT6WPcKuDNgpEuPwanhHsK9HxwMlmIzq Fn00meY2fO82qDh3Xgoy3m1pCqe8Im+yn2taoaDgkzbqj3pHegwR9osgBItFb2yV UyGBVT4oFS4UOFSEwRiVdtpaicgOwTNPFwRGAJVMNvw2G86oqws+3NTobNukUa77 k/CPhlB5GT5cNmbo5SyMs40QwuHfoRUj -----END CERTIFICATE-----Generated at Sun Sep 7 14:22:33 2025 by rpki-client