$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft File: a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft (raw, json) Hash identifier: BG56WXPSAuOdZny83kaG9nHMgd8z1Up8o8FGji+SWLA= Subject key identifier: F7:63:B3:37:FD:29:51:2D:17:F3:C3:6A:F8:FE:7B:07:56:04:31:44 Authority key identifier: 6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 Certificate issuer: /CN=A91B5418/serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Certificate serial: 0D16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft Manifest number: 0CE0 Signing time: Tue 09 Sep 2025 11:02:26 +0000 Manifest this update: Tue 09 Sep 2025 11:02:25 +0000 Manifest next update: Tue 16 Sep 2025 11:02:25 +0000 Files and hashes: 1: a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl (hash: DbP0Xogy9tZwCshM0SrCqtAw8eZb+K5Cp421R7gUX64=) 2: 7545D7688D6C11F0AB7BFE70C4F9AE02.roa (hash: Gso7riR6mhTBetdxhvBcEVx4lP0fazKGiY4D6n5IxPQ=) 3: 584733B48D6C11F09980DA5EC4F9AE02.roa (hash: h29koSbtR2J5ejxH0g/g8JKXTU/n2VhgMI8p7KUTTRI=) 4: 0D036EB680BC11EBAF2A1C0EC4F9AE02.roa (hash: 1TLr5oM7v/qdbXCuWglO9MT2WfClZILhcDQljm7O2lk=) 5: F8C3F402870A11F0A015612EC4F9AE02.roa (hash: XvrYP38xvdCgdawfCh7HadAKH1aRcApDaLO6IdzBa/w=) 6: 7617F5408D6C11F0AB7BFE70C4F9AE02.roa (hash: c7Vsr0eRAEmxWhobNGyEno1B5Pvs5ja8tO1BeT/ckVk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 11:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3350 (0xd16) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B5418, serialNumber=6B5EBFE98A378764C1B12DCB6904E4610B50AC57 Validity Not Before: Sep 9 11:02:25 2025 GMT Not After : Sep 16 11:02:25 2025 GMT Subject: CN=68c00941-b3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:58:be:9d:91:30:93:fa:b5:a7:f1:c6:ff:e2: ab:8f:0a:0b:b6:38:7e:db:3a:45:aa:d9:cc:d0:3b: 1d:39:d1:e8:fb:80:93:6e:ce:26:39:14:75:36:9a: e7:00:09:47:e4:53:21:f4:5b:14:cc:3c:00:ec:5c: 84:c0:b0:8d:b6:e6:aa:8e:0a:ed:15:37:5d:4a:16: 55:24:2e:cd:9f:a2:be:67:b5:4f:11:c4:a5:e3:f8: 60:bb:4f:71:44:ef:67:00:9f:b2:30:25:6a:ca:e5: c7:2f:6c:45:db:4f:2a:25:ee:55:b0:ac:c3:de:7c: 7f:b7:b0:9c:1f:ea:d3:5e:e2:d7:c2:bc:01:5a:4a: 73:5b:74:5f:ef:74:5d:61:73:46:78:60:63:3d:02: 73:e8:a6:b1:5a:dc:bf:6d:09:fa:d1:3b:cd:bd:2b: f8:73:14:ca:fd:7c:12:f8:f3:d0:46:21:86:95:84: f6:b7:0e:6d:46:3e:bf:fd:cd:d1:67:b7:5c:41:02: da:6a:d2:87:a7:46:7c:43:cb:2b:60:bb:5b:c3:7f: 1e:fc:99:3b:90:58:c7:20:6b:8e:6c:d1:eb:cc:82: 2d:35:e6:e9:08:1e:41:98:78:a1:7c:bb:17:f9:2b: e3:77:2b:3c:21:f4:fc:94:28:54:be:b9:f0:0c:7a: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:63:B3:37:FD:29:51:2D:17:F3:C3:6A:F8:FE:7B:07:56:04:31:44 X509v3 Authority Key Identifier: keyid:6B:5E:BF:E9:8A:37:87:64:C1:B1:2D:CB:69:04:E4:61:0B:50:AC:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a16_6Yo3h2TBsS3LaQTkYQtQrFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5418/0C0B800EF68211E9A8996146C4F9AE02/a16_6Yo3h2TBsS3LaQTkYQtQrFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a6:bf:d2:e3:86:ab:cc:9f:91:77:71:5e:f5:c0:f1:6b:1b:b8: f8:d0:15:17:f8:f4:eb:71:80:64:78:31:12:92:19:95:a8:b2: 25:3a:fd:ec:d1:57:0f:36:50:f1:d3:97:00:a5:85:ed:9f:03: 5f:c2:44:73:64:09:92:96:07:81:08:32:b0:f9:af:8f:f2:d4: 20:d3:a2:b5:0b:6a:d6:34:b7:9f:d5:6f:15:52:00:56:68:13: 7e:5d:eb:e2:d1:cc:07:9d:08:e7:1f:8a:ba:bf:d0:1c:b5:0e: b0:d2:97:0e:77:91:34:01:f5:df:83:41:29:5a:65:03:ad:29: ce:87:74:02:97:9b:f8:d5:fc:4a:5d:4a:d1:51:94:ca:9f:bf: 81:4d:f6:79:06:63:f6:14:26:6d:67:e0:53:6d:dc:ed:af:fb: 64:89:5d:55:b4:bf:7b:75:48:f8:df:0e:a5:c9:f6:38:d7:72: 16:ca:48:65:25:b6:6c:10:bb:f3:05:36:d2:a1:39:8a:a2:9c: ac:56:92:b8:09:b9:83:ba:d2:5e:07:ef:4e:bd:fc:ca:89:42: f9:b5:c9:12:c3:e7:b5:f7:3e:94:d9:08:fc:c5:26:79:bd:ad: db:67:a8:66:b7:a9:3a:c7:41:b8:d7:4a:17:ed:51:f1:66:8e: 49:f5:19:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjU0MTgxMTAvBgNVBAUTKDZCNUVCRkU5OEEzNzg3NjRDMUIxMkRDQjY5MDRFNDYx MEI1MEFDNTcwHhcNMjUwOTA5MTEwMjI1WhcNMjUwOTE2MTEwMjI1WjAYMRYwFAYD VQQDEw02OGMwMDk0MS1iM2I2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr1i+nZEwk/q1p/HG/+KrjwoLtjh+2zpFqtnM0DsdOdHo+4CTbs4mORR1Nprn AAlH5FMh9FsUzDwA7FyEwLCNtuaqjgrtFTddShZVJC7Nn6K+Z7VPEcSl4/hgu09x RO9nAJ+yMCVqyuXHL2xF208qJe5VsKzD3nx/t7CcH+rTXuLXwrwBWkpzW3Rf73Rd YXNGeGBjPQJz6KaxWty/bQn60TvNvSv4cxTK/XwS+PPQRiGGlYT2tw5tRj6//c3R Z7dcQQLaatKHp0Z8Q8srYLtbw38e/Jk7kFjHIGuObNHrzIItNebpCB5BmHihfLsX +Svjdys8IfT8lChUvrnwDHpU7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPdjszf9 KVEtF/PDavj+ewdWBDFEMB8GA1UdIwQYMBaAFGtev+mKN4dkwbEty2kE5GELUKxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNTQxOC8wQzBCODAwRUY2 ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gyVEJzUzNMYVFUa1lRdFFy RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ExNl82WW8zaDJUQnNTM0xhUVRrWVF0UXJGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NTQxOC8wQzBCODAwRUY2ODIxMUU5QTg5OTYxNDZDNEY5QUUwMi9hMTZfNllvM2gy VEJzUzNMYVFUa1lRdFFyRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCmv9LjhqvMn5F3cV71wPFrG7j40BUX+PTrcYBkeDESkhmVqLIlOv3s 0VcPNlDx05cApYXtnwNfwkRzZAmSlgeBCDKw+a+P8tQg06K1C2rWNLef1W8VUgBW aBN+Xevi0cwHnQjnH4q6v9ActQ6w0pcOd5E0AfXfg0EpWmUDrSnOh3QCl5v41fxK XUrRUZTKn7+BTfZ5BmP2FCZtZ+BTbdztr/tkiV1VtL97dUj43w6lyfY413IWykhl JbZsELvzBTbSoTmKopysVpK4CbmDutJeB+9OvfzKiUL5tckSw+e19z6U2Qj8xSZ5 va3bZ6hmt6k6x0G410oX7VHxZo5J9Rnc -----END CERTIFICATE-----Generated at Tue Sep 9 17:38:47 2025 by rpki-client