$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: 7wXXI9iJY5jZ1zcWACjuWtHSqiopVgSO/a6SaGj0AqQ= Subject key identifier: BD:A1:4B:EE:A6:26:10:72:33:A2:44:2E:59:7C:64:03:C1:CC:25:47 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: E3 Signing time: Wed 17 Sep 2025 06:03:33 +0000 Manifest this update: Wed 17 Sep 2025 06:03:33 +0000 Manifest next update: Wed 24 Sep 2025 06:03:33 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: oDI0AVOC9sNvBu0xn1r2HLCnAKkdmcl+EF1Og2NioJA=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 06:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 229 (0xe5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Sep 17 06:03:33 2025 GMT Not After : Sep 24 06:03:33 2025 GMT Subject: CN=68ca4f35-8745 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:69:d5:b8:57:07:2b:b4:12:3c:f2:db:14: 0d:c2:ad:c7:92:16:07:89:a8:f4:2d:07:5a:c3:0b: d8:95:b7:eb:2b:c7:ea:dd:10:8b:b0:2e:79:69:4b: 38:1a:b2:c6:a3:ea:1a:45:46:8c:be:3e:89:5c:ea: fd:7d:60:b9:01:98:94:7a:e7:c4:b2:9f:96:ae:c7: 9a:6c:90:10:58:3c:74:74:d0:3d:4d:dd:e2:6e:ad: 6c:ba:60:e4:f8:98:20:c0:33:a3:55:c2:65:8f:f0: e4:54:83:4a:e2:0a:5c:01:d2:50:8f:00:63:e6:24: 04:2c:a9:b5:98:de:3f:90:6f:b1:ae:ee:22:75:3b: a7:e8:13:ff:50:36:26:3c:06:88:0e:d5:a9:2f:56: b1:24:2b:67:3e:22:3d:17:4e:a6:f4:fd:1b:9d:3f: d4:b9:e8:b7:38:19:d7:43:8b:71:24:3c:6e:d0:10: 33:fe:7c:80:12:a0:ad:43:08:7a:9b:cd:df:fd:e4: 8a:1f:36:aa:18:81:d9:72:9f:f8:90:be:e4:9d:9b: 7a:7e:be:66:89:66:cc:49:39:57:5c:f1:9a:7e:60: 69:e6:37:3d:4d:2b:76:04:3b:d7:be:da:22:9a:25: 71:b7:0e:f5:89:62:2b:38:c1:41:28:35:b6:d3:e6: 5f:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:A1:4B:EE:A6:26:10:72:33:A2:44:2E:59:7C:64:03:C1:CC:25:47 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 16:eb:40:cc:54:b3:14:2b:46:6d:3c:ef:b3:98:90:73:76:16: 42:b8:65:bf:85:31:60:a7:f1:4a:87:e5:3c:95:83:41:ba:79: e2:a2:19:51:2d:e8:b6:b7:96:46:80:54:81:13:e6:5d:de:ad: 60:0b:a0:37:89:a5:55:34:74:23:99:61:7b:a8:f0:2c:31:1f: 9b:d0:d6:8f:70:89:80:e0:8c:4e:19:69:a1:ec:eb:9e:54:db: 8c:c3:44:91:02:b7:b5:6f:a8:50:da:07:3c:1d:94:02:cf:a9: 2a:e4:32:06:64:8f:f9:69:f8:25:4f:70:90:20:64:8e:b0:54: db:d4:d5:00:ad:f8:e0:cb:a0:01:ec:a6:93:7d:55:72:29:35: ea:f9:9f:ef:d7:f9:63:17:6f:d3:31:90:32:6d:c2:3b:bb:00: 7f:45:f0:17:2c:3f:0a:57:54:6d:f6:33:8d:e1:03:34:e8:02: c0:f7:99:29:0b:32:79:db:25:8d:ff:4a:27:1e:b8:7f:dc:50: 80:f9:85:a0:05:41:46:af:32:70:8a:b4:92:ee:6a:5f:07:15: fd:3a:96:d9:cb:47:dc:b3:04:78:16:d0:6a:07:da:0c:7e:9e: 76:fd:7a:d0:89:a1:6c:b9:db:91:de:79:45:c8:0a:80:8d:dc: ff:f7:43:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwOTE3MDYwMzMzWhcNMjUwOTI0MDYwMzMzWjAYMRYwFAYD VQQDEw02OGNhNGYzNS04NzQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YNp1bhXByu0Ejzy2xQNwq3HkhYHiaj0LQdawwvYlbfrK8fq3RCLsC55aUs4 GrLGo+oaRUaMvj6JXOr9fWC5AZiUeufEsp+WrseabJAQWDx0dNA9Td3ibq1sumDk +JggwDOjVcJlj/DkVINK4gpcAdJQjwBj5iQELKm1mN4/kG+xru4idTun6BP/UDYm PAaIDtWpL1axJCtnPiI9F06m9P0bnT/Uuei3OBnXQ4txJDxu0BAz/nyAEqCtQwh6 m83f/eSKHzaqGIHZcp/4kL7knZt6fr5miWbMSTlXXPGafmBp5jc9TSt2BDvXvtoi miVxtw71iWIrOMFBKDW20+ZfMQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL2hS+6m JhByM6JELll8ZAPBzCVHMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAW60DMVLMUK0ZtPO+zmJBzdhZCuGW/hTFgp/FKh+U8lYNBunniohlR Lei2t5ZGgFSBE+Zd3q1gC6A3iaVVNHQjmWF7qPAsMR+b0NaPcImA4IxOGWmh7Oue VNuMw0SRAre1b6hQ2gc8HZQCz6kq5DIGZI/5afglT3CQIGSOsFTb1NUArfjgy6AB 7KaTfVVyKTXq+Z/v1/ljF2/TMZAybcI7uwB/RfAXLD8KV1Rt9jON4QM06ALA95kp CzJ52yWN/0onHrh/3FCA+YWgBUFGrzJwirSS7mpfBxX9OpbZy0fcswR4FtBqB9oM fp52/XrQiaFsuduR3nlFyAqAjdz/90O0 -----END CERTIFICATE-----Generated at Thu Sep 18 22:14:22 2025 by rpki-client