$ rpki-client -vvf rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft File: 6N-NXkyE2ofXKac8HE6GETgassE.mft (raw, json) Hash identifier: C1tgVxOeNaIcytr04M82GdIcga9DaSOVc1Z8cpnjrkM= Subject key identifier: A4:10:4B:09:F9:2B:7B:FA:E3:E7:89:60:10:E5:D7:41:B8:FB:C6:97 Authority key identifier: E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 Certificate issuer: /CN=A91B01C7/serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Certificate serial: 2A71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft Manifest number: 2A4B Signing time: Thu 18 Sep 2025 15:40:16 +0000 Manifest this update: Thu 18 Sep 2025 15:40:15 +0000 Manifest next update: Thu 25 Sep 2025 15:40:15 +0000 Files and hashes: 1: 6N-NXkyE2ofXKac8HE6GETgassE.crl (hash: YCQudsuqNDLbDwx1Dmma7lq+r5iCIJIO7b+YmhYToqI=) 2: 3785190EF0FE11EEA034D07EC4F9AE02.roa (hash: nsCF4rGbw9XGs9CgJZKLcahJ7vZuzL6jjWzwGBe2QfI=) 3: E86E188A795F11EFBF3B491CC4F9AE02.roa (hash: xkr6cXGQ/p7K1jYKezf1z+xt8LJrbP87Z5GaO3mC9Iw=) 4: 445DB498796011EFA7E9391DC4F9AE02.roa (hash: dA0s4TToOxTxCGWPhL3CMsQZBEq0Isrnu6dBhBWPJ8w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 15:40:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10865 (0x2a71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B01C7, serialNumber=E8DF8D5E4C84DA87D729A73C1C4E8611381AB2C1 Validity Not Before: Sep 18 15:40:15 2025 GMT Not After : Sep 25 15:40:15 2025 GMT Subject: CN=68cc27df-77dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:8c:6f:a3:dc:0f:77:fc:6b:72:d2:ec:33:fc: ea:70:93:f2:d2:aa:9a:4f:a8:7e:b0:89:c6:f5:09: 14:24:eb:61:95:9e:93:02:65:59:ec:f2:0b:21:e3: 4d:96:ef:35:17:ca:f2:77:ec:62:1a:08:77:a2:22: cb:c7:ab:8c:7c:f8:a0:9d:16:81:1f:91:16:3a:99: 71:9b:bc:d9:f9:8d:25:36:c4:b3:da:19:56:fd:8c: 26:78:05:aa:ca:b7:aa:db:6d:de:99:f0:6a:e8:7a: 70:77:e5:05:f3:95:a1:08:55:cf:6e:8f:d7:3a:f0: 13:5f:c8:c7:a7:a0:6e:72:45:08:c1:86:b8:ed:55: ea:60:97:52:00:32:44:87:dc:f3:a8:a7:e8:4c:28: a1:26:da:76:26:a6:34:34:77:6b:b5:ec:6c:06:34: 9f:37:1b:73:e2:14:2b:2e:56:9e:c1:bd:ad:55:9b: 86:8b:5f:af:e7:b7:46:ff:6a:d7:32:0e:94:9f:9f: 50:95:fa:9c:69:cc:ae:12:32:c2:38:47:d1:97:74: 4f:c4:9a:d0:20:05:d6:40:ff:97:db:51:04:e5:09: 71:71:24:a5:42:29:85:d8:1c:f2:a3:e4:ab:6e:dc: 2a:5e:85:e6:d3:ac:ef:ed:3b:53:40:43:8d:5a:05: 74:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:10:4B:09:F9:2B:7B:FA:E3:E7:89:60:10:E5:D7:41:B8:FB:C6:97 X509v3 Authority Key Identifier: keyid:E8:DF:8D:5E:4C:84:DA:87:D7:29:A7:3C:1C:4E:86:11:38:1A:B2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N-NXkyE2ofXKac8HE6GETgassE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B01C7/97CF20FA332311E4A6E74911C4F9AE02/6N-NXkyE2ofXKac8HE6GETgassE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5a:60:f8:ad:c0:dc:07:f2:93:5c:de:e5:8f:68:4c:c4:a4:74: 87:9c:a0:bc:52:8a:52:ce:83:f9:88:6d:93:b2:7e:6d:f5:76: 5f:5d:39:87:a7:ee:ca:99:d3:c6:cb:bd:00:a2:c7:09:d8:b8: 74:c0:85:b5:1f:ee:1f:e9:78:0a:81:29:c4:da:f6:6d:db:18: 42:86:97:d2:f4:85:a7:fd:3b:55:64:f6:ad:c1:03:23:4a:38: 4c:ba:ec:9b:97:a8:04:dd:20:1b:68:be:c8:7b:ed:fa:4f:4a: 2a:0c:4b:73:00:23:52:0c:f0:56:db:b0:07:77:8a:ea:27:b2: d8:6e:60:b7:1e:4e:b3:9a:0f:70:c2:48:3d:b9:06:b2:28:f9: 7f:ed:73:15:90:36:fe:dc:3c:e8:0e:7e:2b:e7:f4:2a:3a:53: 82:ba:62:00:08:96:bd:b8:70:62:d6:e7:09:f3:8f:03:f7:b8: 8e:c7:07:f7:18:15:a3:16:ae:f8:29:64:e4:cc:63:f4:9b:be: 55:46:d1:59:02:35:fa:ad:d6:20:10:0e:d5:b8:da:4a:71:18: 02:9e:99:b5:0e:4e:ba:95:1f:6f:51:c0:02:f3:d0:d2:99:43: 7a:90:ac:81:b1:23:6c:b9:d7:20:d8:c9:1a:21:3c:d1:cd:99: fb:f2:58:7d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjAxQzcxMTAvBgNVBAUTKEU4REY4RDVFNEM4NERBODdENzI5QTczQzFDNEU4NjEx MzgxQUIyQzEwHhcNMjUwOTE4MTU0MDE1WhcNMjUwOTI1MTU0MDE1WjAYMRYwFAYD VQQDEw02OGNjMjdkZi03N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Ixvo9wPd/xrctLsM/zqcJPy0qqaT6h+sInG9QkUJOthlZ6TAmVZ7PILIeNN lu81F8ryd+xiGgh3oiLLx6uMfPignRaBH5EWOplxm7zZ+Y0lNsSz2hlW/YwmeAWq yreq223emfBq6Hpwd+UF85WhCFXPbo/XOvATX8jHp6BuckUIwYa47VXqYJdSADJE h9zzqKfoTCihJtp2JqY0NHdrtexsBjSfNxtz4hQrLlaewb2tVZuGi1+v57dG/2rX Mg6Un59QlfqcacyuEjLCOEfRl3RPxJrQIAXWQP+X21EE5QlxcSSlQimF2Bzyo+Sr btwqXoXm06zv7TtTQEONWgV09QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKQQSwn5 K3v64+eJYBDl10G4+8aXMB8GA1UdIwQYMBaAFOjfjV5MhNqH1ymnPBxOhhE4GrLB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDFDNy85N0NGMjBGQTMz MjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJvZlhLYWM4SEU2R0VUZ2Fz c0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOLU5Ya3lFMm9mWEthYzhIRTZHRVRnYXNzRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MDFDNy85N0NGMjBGQTMzMjMxMUU0QTZFNzQ5MTFDNEY5QUUwMi82Ti1OWGt5RTJv ZlhLYWM4SEU2R0VUZ2Fzc0UubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBaYPitwNwH8pNc3uWPaEzEpHSHnKC8UopSzoP5iG2Tsn5t9XZfXTmH p+7KmdPGy70AoscJ2Lh0wIW1H+4f6XgKgSnE2vZt2xhChpfS9IWn/TtVZPatwQMj SjhMuuybl6gE3SAbaL7Ie+36T0oqDEtzACNSDPBW27AHd4rqJ7LYbmC3Hk6zmg9w wkg9uQayKPl/7XMVkDb+3DzoDn4r5/QqOlOCumIACJa9uHBi1ucJ848D97iOxwf3 GBWjFq74KWTkzGP0m75VRtFZAjX6rdYgEA7VuNpKcRgCnpm1Dk66lR9vUcAC89DS mUN6kKyBsSNsudcg2MkaITzRzZn78lh9 -----END CERTIFICATE-----Generated at Fri Sep 19 02:30:12 2025 by rpki-client