$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: 6u4qVaTZZgEYrFgYlg1XT/diUjnNR3FlP56ry2i2lHc= Subject key identifier: 01:D0:7E:99:13:91:7E:4D:8D:49:28:81:E1:46:C8:9D:35:00:4B:24 Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0CD2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0CBE Signing time: Thu 18 Sep 2025 18:22:39 +0000 Manifest this update: Thu 18 Sep 2025 18:22:38 +0000 Manifest next update: Thu 25 Sep 2025 18:22:38 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: qPQbVMH7n9bpChJv5hJ1Udi/wFRxVokWfQ9rgq9M/r8=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: j94Y9byA6hrJjWvSwlJFmsvrVOzYBezuSr8IKFG6YL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:22:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3282 (0xcd2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Sep 18 18:22:38 2025 GMT Not After : Sep 25 18:22:38 2025 GMT Subject: CN=68cc4def-6922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c4:05:59:4d:60:18:9c:a4:ef:bb:cc:e1:67: e7:c9:8d:ae:b0:7d:02:25:f0:65:c8:2e:07:6e:8a: 67:79:67:dd:ee:93:64:17:91:45:54:a7:59:45:07: 19:7b:38:5d:0e:68:31:8a:c8:dd:f8:db:3a:73:ae: 1d:26:8d:a5:22:15:7a:7b:31:54:b3:f6:f4:34:33: 49:7c:f0:e8:9a:c0:5e:67:ee:17:be:64:61:0a:3a: 3b:e0:34:ad:fa:92:a7:77:c1:06:2f:b9:a1:17:c9: c4:47:7b:ad:b8:00:60:bb:76:49:49:67:0f:3f:b9: 26:de:22:57:ee:b7:98:78:dc:c1:47:06:a4:c5:5a: 9f:c3:c7:00:57:ed:4a:68:c9:ed:39:03:e3:02:0b: f7:f9:3b:6e:55:2d:27:e6:46:2b:cf:44:0c:16:0d: 11:cd:12:02:65:ba:70:af:7c:fe:33:7d:6a:c1:e4: 50:f6:b5:7e:cc:ca:0f:bc:06:df:99:44:cb:4c:78: ca:eb:59:6f:01:96:d1:39:1f:7a:16:b2:3b:50:94: 2e:d5:80:70:5c:5e:3d:d1:61:9b:e1:95:0e:9c:03: 4c:e6:e4:13:2d:2c:a1:2d:3b:90:11:b8:77:6e:16: da:76:dd:17:81:54:47:42:df:63:e3:31:6f:43:a2: 6e:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:D0:7E:99:13:91:7E:4D:8D:49:28:81:E1:46:C8:9D:35:00:4B:24 X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 39:a7:09:4f:19:93:67:8f:a7:7b:47:77:0f:3a:49:83:1a:06: e4:70:96:48:99:e5:fc:10:19:0d:e3:c3:bb:c3:f8:85:52:22: 9f:07:90:e7:7a:45:25:7d:87:72:5b:e9:11:1d:7a:13:c0:75: c2:d0:74:0d:9d:ec:36:2d:e7:c7:a5:de:65:05:2f:b0:2b:76: 53:d1:25:f8:b1:46:d3:ad:d2:f2:d6:87:5e:9e:36:b6:05:02: 41:99:9d:24:e5:57:34:d4:81:39:be:8b:5b:c0:84:fd:91:d2: 5d:e3:8a:10:08:c2:40:fc:7b:e3:73:06:12:91:af:2a:41:3b: 4e:83:18:90:6a:f1:35:a7:87:5f:f9:34:6a:db:ea:6a:1c:da: 86:0d:bd:95:57:b8:5b:ae:f3:2f:b5:ce:27:b8:dd:1f:f4:04: 8b:8a:30:51:95:16:df:8b:3e:c7:f7:e7:d4:0a:88:bc:ec:8b: 05:69:00:23:38:61:0a:10:58:38:1c:0a:af:70:90:83:74:15: 24:18:00:fd:13:c8:a0:9d:24:57:12:cc:5a:67:f2:f0:a1:5c: 4b:18:fd:ad:7d:f0:a4:92:a2:59:ba:28:36:a6:61:24:ea:71: 7c:93:a0:90:ec:2b:67:19:59:b5:fe:5b:ba:e4:1d:51:48:7e: f5:29:84:18 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDNIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwOTE4MTgyMjM4WhcNMjUwOTI1MTgyMjM4WjAYMRYwFAYD VQQDEw02OGNjNGRlZi02OTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcQFWU1gGJyk77vM4WfnyY2usH0CJfBlyC4HbopneWfd7pNkF5FFVKdZRQcZ ezhdDmgxisjd+Ns6c64dJo2lIhV6ezFUs/b0NDNJfPDomsBeZ+4XvmRhCjo74DSt +pKnd8EGL7mhF8nER3utuABgu3ZJSWcPP7km3iJX7reYeNzBRwakxVqfw8cAV+1K aMntOQPjAgv3+TtuVS0n5kYrz0QMFg0RzRICZbpwr3z+M31qweRQ9rV+zMoPvAbf mUTLTHjK61lvAZbROR96FrI7UJQu1YBwXF490WGb4ZUOnANM5uQTLSyhLTuQEbh3 bhbadt0XgVRHQt9j4zFvQ6Ju2wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAHQfpkT kX5NjUkogeFGyJ01AEskMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA5pwlPGZNnj6d7R3cPOkmDGgbkcJZImeX8EBkN48O7w/iFUiKfB5Dn ekUlfYdyW+kRHXoTwHXC0HQNnew2LefHpd5lBS+wK3ZT0SX4sUbTrdLy1odenja2 BQJBmZ0k5Vc01IE5votbwIT9kdJd44oQCMJA/HvjcwYSka8qQTtOgxiQavE1p4df +TRq2+pqHNqGDb2VV7hbrvMvtc4nuN0f9ASLijBRlRbfiz7H9+fUCoi87IsFaQAj OGEKEFg4HAqvcJCDdBUkGAD9E8ignSRXEsxaZ/LwoVxLGP2tffCkkqJZuig2pmEk 6nF8k6CQ7CtnGVm1/lu65B1RSH71KYQY -----END CERTIFICATE-----Generated at Thu Sep 18 22:05:25 2025 by rpki-client