$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: qpz54uHX0BmingYxlQ4QvPRrpgYpYxyzJXLaBBMjI94= Subject key identifier: 32:BF:11:2A:FA:65:2A:AB:BA:F2:E6:AF:54:9C:48:DA:A0:4F:AF:1C Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 92 Signing time: Sat 19 Jul 2025 06:38:34 +0000 Manifest this update: Sat 19 Jul 2025 06:38:33 +0000 Manifest next update: Sat 26 Jul 2025 06:38:33 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: VxY40NyJWk1dBETpx6BdPidDyt1mnXpYiX88sqPEKuo=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:38:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 147 (0x93) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Jul 19 06:38:33 2025 GMT Not After : Jul 26 06:38:33 2025 GMT Subject: CN=687b3d6a-0d0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:1b:bb:4d:aa:3e:1b:eb:68:b8:a0:78:7b:87: 09:56:de:4a:61:50:96:94:a4:4f:ce:cd:3e:bc:fb: d1:f5:99:0b:d2:b2:7e:e5:74:ab:8b:99:7f:a3:43: 6e:7a:6b:14:05:54:84:44:5f:d1:eb:07:a9:e2:10: 6b:ad:bd:16:fd:61:5d:11:11:99:81:77:df:01:e7: b9:3c:ec:0d:af:0e:06:91:b3:96:d4:d4:87:2a:ea: ab:f9:e6:df:2b:a1:da:57:4e:81:b8:64:48:e6:9e: 82:18:54:ab:8f:39:ad:50:59:9a:23:f8:b3:c2:98: 84:a7:5c:46:ff:a5:c2:84:96:b6:eb:72:a6:4b:39: 10:fe:1c:d6:1d:3f:cd:78:3f:41:6e:53:1f:2e:0b: 49:3f:ed:bf:30:20:dd:40:99:84:a3:c4:fc:b3:bc: 39:62:df:65:47:33:c9:3d:ed:61:40:05:28:b6:b9: ea:ce:de:6c:0b:7a:89:c5:97:92:a2:14:b5:89:30: 9b:a6:03:6e:ea:dc:7d:38:d0:b0:61:89:96:aa:58: 09:de:db:7f:fb:df:44:ed:de:ed:29:d2:6d:73:d6: d7:6f:d3:93:7b:91:3a:f3:de:8e:92:9b:56:f0:29: 68:51:1e:c7:7b:62:c8:3b:a2:3a:94:c3:7d:83:2a: 6f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:BF:11:2A:FA:65:2A:AB:BA:F2:E6:AF:54:9C:48:DA:A0:4F:AF:1C X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:d0:93:9a:a2:37:5e:0e:bb:cd:43:cc:09:40:73:34:e0:a7: 54:43:b6:57:5d:96:a2:24:df:73:2e:3f:13:29:cc:f5:20:00: 15:00:a6:57:64:9f:7d:cc:b7:aa:56:53:19:07:50:34:67:5e: 35:e5:ac:72:60:b3:a8:ad:c7:5a:ce:04:96:59:f9:06:6b:76: a8:d4:ed:1b:9b:81:d3:8d:70:1b:ab:12:c3:b4:11:7b:59:79: a1:ab:f1:70:5b:7c:3e:47:fc:f4:e7:92:ed:a9:04:fa:b8:80: 43:11:23:0f:c6:13:d2:53:77:b4:3a:a5:99:8b:ad:c3:b9:63: ee:40:5f:e5:63:f3:c1:41:22:f3:2e:4c:4c:20:e5:e2:5f:3a: d0:14:20:69:21:20:1c:8a:27:ee:94:df:79:83:30:ae:d1:1e: 65:a8:9d:89:68:bd:7a:8d:27:a9:68:ea:63:dc:d7:65:36:5f: 64:b4:ef:46:85:ee:79:e0:fd:b1:50:14:5c:4d:55:82:87:08: cf:99:d2:f0:72:0b:3a:c8:05:82:c6:5c:00:71:d7:ca:12:4c: 88:ca:6d:47:c8:d8:c0:3a:8a:66:8a:76:a1:8e:7a:2f:ae:24: ed:bb:fb:8e:48:b6:af:d5:cc:19:48:6d:71:f6:93:aa:1e:c0: fd:c6:76:a7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUwNzE5MDYzODMzWhcNMjUwNzI2MDYzODMzWjAYMRYwFAYD VQQDEw02ODdiM2Q2YS0wZDBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoBu7Tao+G+touKB4e4cJVt5KYVCWlKRPzs0+vPvR9ZkL0rJ+5XSri5l/o0Nu emsUBVSERF/R6wep4hBrrb0W/WFdERGZgXffAee5POwNrw4GkbOW1NSHKuqr+ebf K6HaV06BuGRI5p6CGFSrjzmtUFmaI/izwpiEp1xG/6XChJa263KmSzkQ/hzWHT/N eD9BblMfLgtJP+2/MCDdQJmEo8T8s7w5Yt9lRzPJPe1hQAUotrnqzt5sC3qJxZeS ohS1iTCbpgNu6tx9ONCwYYmWqlgJ3tt/+99E7d7tKdJtc9bXb9OTe5E6896OkptW 8CloUR7He2LIO6I6lMN9gypvuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDK/ESr6 ZSqruvLmr1ScSNqgT68cMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA80JOaojdeDrvNQ8wJQHM04KdUQ7ZXXZaiJN9zLj8TKcz1IAAVAKZX ZJ99zLeqVlMZB1A0Z1415axyYLOorcdazgSWWfkGa3ao1O0bm4HTjXAbqxLDtBF7 WXmhq/FwW3w+R/z055LtqQT6uIBDESMPxhPSU3e0OqWZi63DuWPuQF/lY/PBQSLz LkxMIOXiXzrQFCBpISAciifulN95gzCu0R5lqJ2JaL16jSepaOpj3NdlNl9ktO9G he554P2xUBRcTVWChwjPmdLwcgs6yAWCxlwAcdfKEkyIym1HyNjAOopminahjnov riTtu/uOSLav1cwZSG1x9pOqHsD9xnan -----END CERTIFICATE-----Generated at Sun Jul 20 20:43:01 2025 by rpki-client