$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: ouKQeu1flqCKJ/AL5W/jHseJtjMSEQ69u+iVh9Lle10= Subject key identifier: 8D:6A:B4:3A:9E:FE:1E:FD:FA:2F:FE:C9:AF:4F:88:2C:A5:41:8F:BA Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1D9D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1D8E Signing time: Sun 24 Aug 2025 16:05:52 +0000 Manifest this update: Sun 24 Aug 2025 16:05:52 +0000 Manifest next update: Sun 31 Aug 2025 16:05:52 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: KTA1cskxILApIKOssY/S34DbyBzpYTqoxvDZs+SVN2w=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 16:05:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7581 (0x1d9d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: Aug 24 16:05:52 2025 GMT Not After : Aug 31 16:05:52 2025 GMT Subject: CN=68ab3860-f8ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a4:2e:d0:45:2c:7c:c0:3d:74:26:9f:d5:5e: 57:0a:f8:e4:02:1b:c0:0a:28:8f:86:85:e9:3c:cc: 4f:87:a1:17:55:0f:b9:13:aa:16:f7:7f:c8:45:b7: 4e:ef:ab:35:25:dd:86:96:13:6a:e5:38:48:75:8d: 50:73:e6:35:7a:d9:82:66:07:74:eb:5c:6e:bc:91: 45:38:92:24:07:c2:08:19:66:af:aa:bd:fe:2f:55: 47:45:1f:27:26:f8:f3:d9:57:6d:a0:97:2a:d5:f8: 0b:e3:6a:35:62:67:78:57:e6:bc:11:ac:a6:6b:db: 2b:1b:e3:97:75:99:44:8b:a6:c1:8c:0f:bd:9d:b2: ec:b3:35:bb:d8:a9:c4:a1:c3:fa:59:d8:e8:85:45: 0a:22:17:1c:1c:e6:7a:6e:af:ba:31:eb:bc:de:d3: 3e:4b:ec:4b:9e:c1:d4:03:f2:53:41:c0:f0:6d:f4: 5b:82:df:de:62:45:16:95:f0:08:00:5c:e4:48:0b: 8a:d1:dd:27:35:76:2e:7f:2d:76:11:13:16:e5:13: 97:fd:47:c2:cb:28:d3:c6:2e:b8:7e:c7:17:27:7d: 5f:0f:fa:bd:6f:f3:96:0d:fc:c5:b2:60:ea:90:d4: c5:a5:52:22:fa:d7:0c:80:8e:ed:ab:4f:15:81:3f: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:6A:B4:3A:9E:FE:1E:FD:FA:2F:FE:C9:AF:4F:88:2C:A5:41:8F:BA X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:31:0d:49:eb:23:c1:28:b3:e0:89:87:02:a0:98:54:2f:17: 5f:74:27:72:06:0b:5d:8e:2f:81:3d:d4:8b:ca:ff:f6:3f:a4: 2f:15:2e:aa:92:f1:c3:ba:33:60:32:86:d6:cb:74:1b:06:ac: b3:43:cf:d5:c4:4d:b8:2d:73:19:a8:df:2d:bc:ef:9e:5d:83: dd:be:55:cd:38:64:25:38:91:4f:ef:91:59:12:1b:be:7e:c9: 7e:9c:36:15:ff:94:c2:3f:1f:b6:d0:e0:4f:9e:65:35:bd:a4: ef:f3:b7:02:9c:55:4b:19:7d:d3:05:c2:f3:5a:60:08:5d:7c: 81:15:d1:01:1c:9a:67:81:f3:ec:0b:1d:6d:0c:d4:8c:6b:87: 44:08:58:84:55:14:ba:a7:18:68:5a:8a:58:88:a8:1b:b5:74: 0b:32:b2:13:eb:e8:90:57:76:12:1c:c1:54:a2:fe:7a:fe:29: 71:b3:dc:3d:b8:ad:f1:5e:c9:ff:71:52:53:c3:a6:e5:ed:86: ff:c7:c3:48:60:9f:12:45:a8:ba:cb:b7:27:d7:09:0e:b3:1d: 3a:c2:d7:b9:01:41:38:c9:fc:7c:2c:ae:04:78:92:f2:f9:ae: f5:f6:9b:27:ff:8c:79:b5:cd:e2:4b:3b:29:29:04:a0:17:6c: a3:0f:cf:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjUwODI0MTYwNTUyWhcNMjUwODMxMTYwNTUyWjAYMRYwFAYD VQQDEw02OGFiMzg2MC1mOGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuaQu0EUsfMA9dCaf1V5XCvjkAhvACiiPhoXpPMxPh6EXVQ+5E6oW93/IRbdO 76s1Jd2GlhNq5ThIdY1Qc+Y1etmCZgd061xuvJFFOJIkB8IIGWavqr3+L1VHRR8n Jvjz2VdtoJcq1fgL42o1Ymd4V+a8Eayma9srG+OXdZlEi6bBjA+9nbLsszW72KnE ocP6WdjohUUKIhccHOZ6bq+6Meu83tM+S+xLnsHUA/JTQcDwbfRbgt/eYkUWlfAI AFzkSAuK0d0nNXYufy12ERMW5ROX/UfCyyjTxi64fscXJ31fD/q9b/OWDfzFsmDq kNTFpVIi+tcMgI7tq08VgT/WiwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI1qtDqe /h79+i/+ya9PiCylQY+6MB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoMQ1J6yPBKLPgiYcCoJhULxdfdCdyBgtdji+BPdSLyv/2P6QvFS6q kvHDujNgMobWy3QbBqyzQ8/VxE24LXMZqN8tvO+eXYPdvlXNOGQlOJFP75FZEhu+ fsl+nDYV/5TCPx+20OBPnmU1vaTv87cCnFVLGX3TBcLzWmAIXXyBFdEBHJpngfPs Cx1tDNSMa4dECFiEVRS6pxhoWopYiKgbtXQLMrIT6+iQV3YSHMFUov56/ilxs9w9 uK3xXsn/cVJTw6bl7Yb/x8NIYJ8SRai6y7cn1wkOsx06wte5AUE4yfx8LK4EeJLy +a719psn/4x5tc3iSzspKQSgF2yjD8/M -----END CERTIFICATE-----Generated at Sun Aug 24 21:58:28 2025 by rpki-client