$ rpki-client -vvf rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft File: n6-DQWde9DiWQZk2JUJXLIkoVAw.mft (raw, json) Hash identifier: s4YeZKWz5/2ub1Mlfh2XlFVMEtVxC1jN9rq10EGRy/M= Subject key identifier: 51:48:BE:B0:DC:0F:95:97:E0:6F:A2:5C:08:34:45:F8:20:E8:2E:A9 Authority key identifier: 9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C Certificate issuer: /CN=A91B517C/serialNumber=9FAF8341675EF438964199362542572C8928540C Certificate serial: 012C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft Manifest number: 0123 Signing time: Tue 09 Sep 2025 04:52:56 +0000 Manifest this update: Tue 09 Sep 2025 04:52:56 +0000 Manifest next update: Tue 16 Sep 2025 04:52:56 +0000 Files and hashes: 1: n6-DQWde9DiWQZk2JUJXLIkoVAw.crl (hash: UcetEuq4j9a9O/Rn7vmkEeyZfBmCsMEsE5skuGkF6xE=) 2: 86019882E2A311EEA6A97425C4F9AE02.roa (hash: yaqGJ55mUP3MHEApA47X+44ZI9rv9+pSI8dIE6Q7v10=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 04:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 300 (0x12c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B517C, serialNumber=9FAF8341675EF438964199362542572C8928540C Validity Not Before: Sep 9 04:52:56 2025 GMT Not After : Sep 16 04:52:56 2025 GMT Subject: CN=68bfb2a8-4019 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:13:ef:9d:51:5f:2d:37:24:92:72:65:94:bb: 5f:90:21:97:8b:c0:46:1b:db:ea:2f:48:6b:f0:33: 9e:52:f0:99:66:19:ea:8f:ea:b5:c7:8e:a4:76:02: 4f:31:3d:af:8e:51:e5:d7:05:34:6e:60:d9:bb:98: 34:63:23:ef:f6:df:d2:4e:f9:62:0e:2a:8a:af:00: 55:9e:e8:2c:e9:0c:48:2f:d6:32:5b:05:b2:bd:9b: 1b:48:c5:69:ee:06:e8:12:15:fd:38:23:22:72:e4: 42:f0:7e:bd:2d:75:7a:70:a1:60:8c:bd:ee:88:b3: 51:cb:c7:12:01:16:39:8b:9d:06:a9:98:8d:06:e6: 2b:36:a8:06:fd:8f:4e:a3:a1:75:93:d5:ff:3e:bb: 3f:0a:b0:39:72:6c:c6:c2:6b:69:a7:2f:3c:28:8c: e0:88:a0:e3:01:a9:f7:b7:07:4c:50:e9:26:2b:56: 2c:2b:3b:03:a7:8f:be:34:c2:ee:d5:c8:f7:c9:f1: 68:fe:2a:60:39:f6:bd:81:a6:82:92:03:b8:66:d0: da:1f:f2:1d:ae:84:df:94:62:ea:df:75:ba:59:13: ee:76:f1:f5:36:43:23:e1:4b:31:2e:69:0c:f3:d5: f5:c7:73:b9:a1:4c:d9:84:7c:fc:f3:0d:da:f5:5f: 69:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:BE:B0:DC:0F:95:97:E0:6F:A2:5C:08:34:45:F8:20:E8:2E:A9 X509v3 Authority Key Identifier: keyid:9F:AF:83:41:67:5E:F4:38:96:41:99:36:25:42:57:2C:89:28:54:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6-DQWde9DiWQZk2JUJXLIkoVAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B517C/CD3763E6DCED11EEBDE00E30C4F9AE02/n6-DQWde9DiWQZk2JUJXLIkoVAw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:c0:15:72:e7:70:44:ca:58:74:b6:29:be:92:10:a2:70:33: 2d:c7:cc:ee:b8:0f:4a:e3:21:b7:2a:88:91:91:c5:1b:db:ca: 32:60:8b:32:36:30:50:92:45:71:7d:93:4a:26:86:5f:85:bb: 93:00:8e:d7:85:47:3b:b5:a1:d5:42:32:0a:6b:b5:0d:9e:19: 1c:84:03:5c:94:7b:32:33:fd:36:97:19:26:64:16:c2:fe:8e: 3f:63:06:d4:2a:33:9b:db:42:82:eb:27:d3:80:05:4a:b4:c8: 4b:c1:35:b5:9f:0b:90:49:bc:b7:24:33:f1:ee:f5:46:4e:15: 70:7c:1a:aa:47:c4:c6:0d:0e:a0:2a:14:26:5c:5e:e2:2d:35: 5d:13:68:fb:a8:6c:02:13:43:8d:0e:0c:61:32:5d:6a:b4:5d: bd:21:6a:11:71:c2:22:dc:38:d2:98:ab:37:59:10:84:e3:02: 00:17:d6:66:30:98:0b:9b:ca:fb:26:4f:34:e4:8b:28:ce:ab: ed:ea:df:c9:a0:39:c2:39:56:83:2c:fb:54:d5:ea:ff:50:60: ed:56:ea:74:94:73:ad:21:ed:3c:52:96:9b:db:ff:93:31:f1: c3:c9:f7:39:96:d8:54:e4:7c:07:81:aa:1a:fd:68:53:14:bc: 5e:bd:c8:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICASwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjUxN0MxMTAvBgNVBAUTKDlGQUY4MzQxNjc1RUY0Mzg5NjQxOTkzNjI1NDI1NzJD ODkyODU0MEMwHhcNMjUwOTA5MDQ1MjU2WhcNMjUwOTE2MDQ1MjU2WjAYMRYwFAYD VQQDEw02OGJmYjJhOC00MDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBPvnVFfLTckknJllLtfkCGXi8BGG9vqL0hr8DOeUvCZZhnqj+q1x46kdgJP MT2vjlHl1wU0bmDZu5g0YyPv9t/STvliDiqKrwBVnugs6QxIL9YyWwWyvZsbSMVp 7gboEhX9OCMicuRC8H69LXV6cKFgjL3uiLNRy8cSARY5i50GqZiNBuYrNqgG/Y9O o6F1k9X/Prs/CrA5cmzGwmtppy88KIzgiKDjAan3twdMUOkmK1YsKzsDp4++NMLu 1cj3yfFo/ipgOfa9gaaCkgO4ZtDaH/IdroTflGLq33W6WRPudvH1NkMj4UsxLmkM 89X1x3O5oUzZhHz88w3a9V9psQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFFIvrDc D5WX4G+iXAg0Rfgg6C6pMB8GA1UdIwQYMBaAFJ+vg0FnXvQ4lkGZNiVCVyyJKFQM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTE3Qy9DRDM3NjNFNkRD RUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlEaVdRWmsySlVKWExJa29W QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242LURRV2RlOURpV1FaazJKVUpYTElrb1ZBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTE3Qy9DRDM3NjNFNkRDRUQxMUVFQkRFMDBFMzBDNEY5QUUwMi9uNi1EUVdkZTlE aVdRWmsySlVKWExJa29WQXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+wBVy53BEylh0tim+khCicDMtx8zuuA9K4yG3KoiRkcUb28oyYIsy NjBQkkVxfZNKJoZfhbuTAI7XhUc7taHVQjIKa7UNnhkchANclHsyM/02lxkmZBbC /o4/YwbUKjOb20KC6yfTgAVKtMhLwTW1nwuQSby3JDPx7vVGThVwfBqqR8TGDQ6g KhQmXF7iLTVdE2j7qGwCE0ONDgxhMl1qtF29IWoRccIi3DjSmKs3WRCE4wIAF9Zm MJgLm8r7Jk805Isozqvt6t/JoDnCOVaDLPtU1er/UGDtVup0lHOtIe08Upab2/+T MfHDyfc5lthU5HwHgaoa/WhTFLxevcge -----END CERTIFICATE-----Generated at Tue Sep 9 17:28:53 2025 by rpki-client