$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: mrnjjLZ2BctA8T1MN35h6pWBqGAAsN9a7eIiizJ5eIg= Subject key identifier: 67:46:FA:F7:45:BE:2E:9D:FC:8A:96:6E:BF:CB:F4:3E:EF:47:91:32 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 150D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 1502 Signing time: Thu 18 Sep 2025 16:57:23 +0000 Manifest this update: Thu 18 Sep 2025 16:57:23 +0000 Manifest next update: Thu 25 Sep 2025 16:57:23 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: qAH0driaKZLsg2g26lkfhBUCdt2I2jQRUoQrkD6fbp0=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 16:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5389 (0x150d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Sep 18 16:57:23 2025 GMT Not After : Sep 25 16:57:23 2025 GMT Subject: CN=68cc39f3-dccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:03:0b:f1:ee:25:c1:ed:33:3a:dc:2b:12:fc: 59:a8:e9:4f:3b:e3:7d:ed:45:d7:04:0b:9a:3b:96: e0:35:d7:92:d6:cb:19:0c:90:38:2d:68:d5:0f:15: 39:7b:60:06:1c:68:c7:8f:5b:90:74:a8:f2:c0:3f: 55:da:58:6d:72:5d:17:84:ce:d0:09:11:25:61:36: ae:be:dc:74:2a:ad:af:9e:79:f3:7f:7a:b5:02:c2: 27:3b:81:ef:72:26:09:37:17:f5:fc:94:d0:6b:35: 8e:97:20:cf:12:be:eb:58:61:60:f7:35:43:0f:5f: d5:44:8b:21:96:03:87:d3:e4:57:d7:f5:0a:87:f2: b2:33:0a:c4:89:4f:87:1a:90:c5:c4:e6:6c:cf:85: 7d:92:30:3e:51:f5:5e:a1:d3:33:31:65:d5:f4:a8: 45:17:42:d6:0e:f7:9e:b3:75:90:f5:d4:4d:8e:2d: 23:03:49:fc:29:60:d3:a4:18:da:df:cb:46:39:a1: 32:fa:ea:05:ed:e7:ed:02:28:21:fe:70:16:e9:9e: 4e:1f:22:24:f4:49:67:c5:b5:61:d1:49:cb:1d:cd: 4e:e6:ff:53:ef:1b:e5:16:c8:13:fb:26:cc:58:88: f2:d7:61:a7:79:be:9d:7b:e1:62:61:f3:1e:74:4e: 99:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:46:FA:F7:45:BE:2E:9D:FC:8A:96:6E:BF:CB:F4:3E:EF:47:91:32 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:56:e1:79:43:73:4d:3b:29:7d:e0:c4:03:0f:f9:8f:67:67: 3e:c0:d3:8b:a2:01:c8:87:cb:9b:9f:18:63:fa:cd:4d:98:44: 34:1f:51:e2:40:b2:fc:d6:5d:f9:cd:85:ea:52:1a:5b:67:e7: 27:e7:f5:f5:d2:dc:78:48:bc:0e:b2:05:37:43:e3:94:3e:e4: e5:84:06:81:7d:bb:70:b8:05:87:36:66:de:33:32:fc:7d:1a: b1:6d:eb:9b:01:54:1f:84:74:4e:5a:a3:1d:e4:b9:d2:ab:66: be:e4:1c:48:ed:08:1a:3a:25:59:6e:be:8a:c1:e3:3e:df:dc: 33:35:23:1d:00:3f:65:be:03:88:a4:fc:8e:38:fe:e2:87:c7: 59:7f:c7:44:07:b6:2d:22:0e:01:d8:33:e2:a2:b2:3b:a5:74: 92:8d:74:4e:36:21:64:da:cc:ed:0d:76:c0:a8:71:18:6b:53: 73:d2:84:18:1b:c8:db:12:cd:37:b7:e3:57:0f:c2:03:72:44: e3:fb:ee:11:79:62:04:ea:20:e4:bd:97:d9:ed:12:4a:e0:dd: 59:30:ba:39:d5:f1:20:8d:7d:dc:0c:11:66:bb:54:b4:ac:bf: f2:8c:a8:42:60:98:31:7e:cb:e9:dc:02:5f:1e:e9:9f:69:e2: 46:9d:38:45 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFQ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwOTE4MTY1NzIzWhcNMjUwOTI1MTY1NzIzWjAYMRYwFAYD VQQDEw02OGNjMzlmMy1kY2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0wML8e4lwe0zOtwrEvxZqOlPO+N97UXXBAuaO5bgNdeS1ssZDJA4LWjVDxU5 e2AGHGjHj1uQdKjywD9V2lhtcl0XhM7QCRElYTauvtx0Kq2vnnnzf3q1AsInO4Hv ciYJNxf1/JTQazWOlyDPEr7rWGFg9zVDD1/VRIshlgOH0+RX1/UKh/KyMwrEiU+H GpDFxOZsz4V9kjA+UfVeodMzMWXV9KhFF0LWDvees3WQ9dRNji0jA0n8KWDTpBja 38tGOaEy+uoF7eftAigh/nAW6Z5OHyIk9ElnxbVh0UnLHc1O5v9T7xvlFsgT+ybM WIjy12Gneb6de+FiYfMedE6ZeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGdG+vdF vi6d/IqWbr/L9D7vR5EyMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoVuF5Q3NNOyl94MQDD/mPZ2c+wNOLogHIh8ubnxhj+s1NmEQ0H1Hi QLL81l35zYXqUhpbZ+cn5/X10tx4SLwOsgU3Q+OUPuTlhAaBfbtwuAWHNmbeMzL8 fRqxbeubAVQfhHROWqMd5LnSq2a+5BxI7QgaOiVZbr6KweM+39wzNSMdAD9lvgOI pPyOOP7ih8dZf8dEB7YtIg4B2DPiorI7pXSSjXRONiFk2sztDXbAqHEYa1Nz0oQY G8jbEs03t+NXD8IDckTj++4ReWIE6iDkvZfZ7RJK4N1ZMLo51fEgjX3cDBFmu1S0 rL/yjKhCYJgxfsvp3AJfHumfaeJGnThF -----END CERTIFICATE-----Generated at Fri Sep 19 05:10:02 2025 by rpki-client