$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: d9u80GgDac7SWeMBkMHk0wYZE3RY9NiBGBs60BB+w4A= Subject key identifier: 49:67:01:71:F2:BB:FC:7E:A6:82:F4:D9:EB:81:1E:13:16:85:DB:64 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: AC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: AB Signing time: Fri 05 Sep 2025 06:33:21 +0000 Manifest this update: Fri 05 Sep 2025 06:33:21 +0000 Manifest next update: Fri 12 Sep 2025 06:33:21 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: 6Ps8196Lpu+wT8yTmdEAlWim83PTD3A6yaYR2DgYilA=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:33:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 172 (0xac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Sep 5 06:33:21 2025 GMT Not After : Sep 12 06:33:21 2025 GMT Subject: CN=68ba8431-b3b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9b:64:85:da:f7:57:41:f8:11:88:aa:bf:77: 72:89:d9:a6:06:4a:9a:5f:dd:2e:e7:d7:f6:d9:cf: c6:eb:43:62:df:ee:72:1e:11:e2:e6:55:ef:b6:c1: 77:00:0b:e9:61:f6:c6:70:d2:0d:05:e3:23:22:6e: 7d:ca:b1:f3:11:bb:0f:28:66:ee:5f:00:43:d3:71: 32:41:66:9c:c1:59:c8:fd:51:a3:49:1d:1d:0e:f6: a2:aa:f4:7b:d5:23:af:b0:ee:90:ca:c6:90:82:73: 60:aa:e5:d2:05:be:e0:5a:91:4c:bb:85:b4:5a:30: d8:a8:08:33:01:a7:c5:08:de:d8:c1:4b:86:35:1a: 7a:2a:a0:15:17:14:56:36:d7:9d:c1:fa:fb:1b:cb: 71:fa:7e:65:1f:05:19:eb:b7:28:72:23:46:02:90: 95:63:3f:a8:51:6d:68:89:a0:37:3b:38:83:28:bc: a4:ab:b8:23:17:6a:cf:21:17:6c:37:5d:9b:d7:54: ab:ab:2a:10:36:3e:53:6f:9c:d1:57:f0:44:43:9d: 89:d7:2a:4f:96:7a:02:7a:8b:64:de:6d:42:96:6f: a5:10:ab:ce:67:5a:5a:65:a9:3d:7c:b7:f3:0e:50: 89:33:ee:08:80:d7:6f:ad:b8:76:72:70:85:f7:58: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:67:01:71:F2:BB:FC:7E:A6:82:F4:D9:EB:81:1E:13:16:85:DB:64 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:fa:c0:d9:7f:10:e0:99:e6:3e:a1:d7:e3:54:da:72:33:7b: e0:d2:1f:f2:d5:9c:b6:15:89:8c:4d:99:e9:f8:c7:3b:59:c7: d4:51:e9:1d:98:96:fe:73:d0:52:3e:45:2b:b6:1d:b1:c0:27: 93:2d:bd:4d:02:8c:1c:76:60:83:77:fb:71:a3:cd:a8:2e:81: 81:80:ea:ef:c2:74:77:59:45:fa:3d:7a:0a:a1:2f:32:ba:9f: 37:4b:9d:37:fb:06:55:f4:4e:f2:62:91:ee:49:7a:06:c7:34: c1:b2:d6:24:1f:98:84:2e:44:27:f9:ea:ae:6b:0c:5a:0f:c6: 20:5d:7a:fa:7b:a3:e3:29:fa:b5:0d:ad:49:c5:0f:90:90:0d: 91:2b:71:35:eb:7b:f7:88:70:50:90:53:34:cf:d2:f7:15:f1: 55:24:98:97:6b:01:4e:d6:69:06:d3:d8:f9:4a:22:bf:61:40: 50:ad:b7:27:f8:33:92:74:9e:1e:27:8c:b8:57:8c:7a:4d:37: 18:9d:ed:76:d2:8c:19:3f:34:11:fd:1e:40:12:9c:b4:b4:ca: 05:3b:b9:ed:f7:53:92:5f:60:3e:24:ad:df:ed:41:14:95:4c: 71:96:19:a2:5b:e3:be:6a:01:17:19:29:9d:86:3f:98:f1:11: 77:9c:1b:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUwOTA1MDYzMzIxWhcNMjUwOTEyMDYzMzIxWjAYMRYwFAYD VQQDEw02OGJhODQzMS1iM2IwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Ztkhdr3V0H4EYiqv3dyidmmBkqaX90u59f22c/G60Ni3+5yHhHi5lXvtsF3 AAvpYfbGcNINBeMjIm59yrHzEbsPKGbuXwBD03EyQWacwVnI/VGjSR0dDvaiqvR7 1SOvsO6QysaQgnNgquXSBb7gWpFMu4W0WjDYqAgzAafFCN7YwUuGNRp6KqAVFxRW Ntedwfr7G8tx+n5lHwUZ67cociNGApCVYz+oUW1oiaA3OziDKLykq7gjF2rPIRds N12b11SrqyoQNj5Tb5zRV/BEQ52J1ypPlnoCeotk3m1Clm+lEKvOZ1paZak9fLfz DlCJM+4IgNdvrbh2cnCF91jLLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFElnAXHy u/x+poL02euBHhMWhdtkMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBi+sDZfxDgmeY+odfjVNpyM3vg0h/y1Zy2FYmMTZnp+Mc7WcfUUekd mJb+c9BSPkUrth2xwCeTLb1NAowcdmCDd/txo82oLoGBgOrvwnR3WUX6PXoKoS8y up83S503+wZV9E7yYpHuSXoGxzTBstYkH5iELkQn+equawxaD8YgXXr6e6PjKfq1 Da1JxQ+QkA2RK3E163v3iHBQkFM0z9L3FfFVJJiXawFO1mkG09j5SiK/YUBQrbcn +DOSdJ4eJ4y4V4x6TTcYne120owZPzQR/R5AEpy0tMoFO7nt91OSX2A+JK3f7UEU lUxxlhmiW+O+agEXGSmdhj+Y8RF3nBvk -----END CERTIFICATE-----Generated at Sat Sep 6 15:21:33 2025 by rpki-client