$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: +pje7JJ/CkjgmqGrmDthnAzuVNyZBG5JC+JhiMnCcJI= Subject key identifier: 3D:B6:92:FA:47:EF:D1:FB:56:51:C0:63:92:45:DA:87:85:EA:5B:14 Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 3B Signing time: Sun 07 Sep 2025 08:02:09 +0000 Manifest this update: Sun 07 Sep 2025 08:02:08 +0000 Manifest next update: Sun 14 Sep 2025 08:02:08 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: y5vq/8k2aArHs125zySHg5mXx5XsqNCJClbJqS/24E0=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 08:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: Sep 7 08:02:08 2025 GMT Not After : Sep 14 08:02:08 2025 GMT Subject: CN=68bd3c00-c293 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:ac:56:cc:56:a7:00:a6:8c:97:34:86:57: f7:fb:eb:dc:21:36:a6:12:48:a5:53:ea:d2:dc:7b: 15:b3:e2:36:da:27:b8:b4:07:92:b8:49:67:69:10: 1b:29:10:fb:46:03:b3:19:a9:8b:b5:5c:7a:9e:69: ec:6a:03:b4:4e:87:10:f2:01:2a:01:02:83:94:c5: 30:ef:48:be:58:17:fb:75:fa:f2:31:bc:aa:23:f1: e3:16:4a:77:1f:dd:5d:d2:f0:b6:3c:7f:92:9e:c2: 0d:31:ce:9d:3f:f6:22:f9:13:64:c3:b1:a6:2e:6c: 89:eb:7d:90:dd:ae:09:cf:c2:58:ba:51:43:66:98: 7c:08:45:26:ef:8f:70:1a:6c:d9:c0:f0:11:eb:9f: 01:3a:96:40:8b:10:11:0a:ef:f6:a7:85:4b:6f:8e: 54:3e:0c:54:04:65:ae:94:51:c7:19:fc:47:66:aa: 7e:56:84:cf:06:d1:5d:71:09:ab:ff:10:49:f3:12: 70:a4:f7:d6:ef:b1:26:3b:4d:81:6d:31:db:ea:70: 2c:8c:cc:4e:95:c9:e1:5d:06:b2:ff:5f:a3:f2:be: 16:23:2b:fe:d6:e8:49:56:48:f5:67:4a:ba:55:ca: b2:5e:04:49:24:e1:fe:6e:5a:7a:82:38:e8:23:f1: 7c:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:92:FA:47:EF:D1:FB:56:51:C0:63:92:45:DA:87:85:EA:5B:14 X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9c:b6:c2:e1:07:5c:3b:81:b9:a4:5f:90:84:0b:0f:2c:b4: ea:09:00:2a:60:34:41:1b:0a:27:7b:5d:3d:fd:cc:19:cf:d8: 0a:ee:60:77:4c:40:16:ce:db:54:e1:8c:0f:ca:1e:0f:9b:49: a6:cf:55:8a:07:23:48:de:fe:44:eb:a5:92:1e:16:52:0b:c9: 15:4d:ef:df:08:ed:26:bc:5b:3f:69:e3:78:04:ef:9b:1d:48: a9:48:e3:e2:52:ae:24:f6:ef:11:bc:11:1f:b2:1a:3a:4f:c3: 05:7c:11:1f:29:2f:77:f0:1e:af:62:4d:74:90:ef:b8:f1:76: f6:ef:52:61:fe:64:4c:be:a6:ed:42:e9:c7:9c:bd:af:e2:d5: 68:60:19:af:f5:2f:b3:85:17:e3:d4:0a:3b:84:aa:01:3d:14: 12:e9:30:50:04:f4:66:83:62:db:a7:b9:63:6a:9b:db:c3:8b: 7c:1f:74:85:14:ed:66:e1:ca:ba:2a:fd:6b:76:7d:ca:d1:0e: 5c:21:93:d3:90:57:ab:b5:35:58:33:88:26:4b:29:82:8f:71: d1:8d:77:1e:8f:89:32:a9:9a:5e:73:45:58:9a:43:7e:42:7a: 3a:67:fc:b7:9a:3b:20:e3:62:f7:39:98:87:38:cd:28:b0:9d: 51:da:f4:37 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA5MDcwODAyMDhaFw0yNTA5MTQwODAyMDhaMBgxFjAUBgNV BAMTDTY4YmQzYzAwLWMyOTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtWaxWzFanAKaMlzSGV/f769whNqYSSKVT6tLcexWz4jbaJ7i0B5K4SWdpEBsp EPtGA7MZqYu1XHqeaexqA7ROhxDyASoBAoOUxTDvSL5YF/t1+vIxvKoj8eMWSncf 3V3S8LY8f5Kewg0xzp0/9iL5E2TDsaYubInrfZDdrgnPwli6UUNmmHwIRSbvj3Aa bNnA8BHrnwE6lkCLEBEK7/anhUtvjlQ+DFQEZa6UUccZ/Edmqn5WhM8G0V1xCav/ EEnzEnCk99bvsSY7TYFtMdvqcCyMzE6VyeFdBrL/X6PyvhYjK/7W6ElWSPVnSrpV yrJeBEkk4f5uWnqCOOgj8XypAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUPbaS+kfv 0ftWUcBjkkXah4XqWxQwHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+ctsLhB1w7gbmkX5CECw8stOoJACpgNEEbCid7XT39zBnP2AruYHdM QBbO21ThjA/KHg+bSabPVYoHI0je/kTrpZIeFlILyRVN798I7Sa8Wz9p43gE75sd SKlI4+JSriT27xG8ER+yGjpPwwV8ER8pL3fwHq9iTXSQ77jxdvbvUmH+ZEy+pu1C 6cecva/i1WhgGa/1L7OFF+PUCjuEqgE9FBLpMFAE9GaDYtunuWNqm9vDi3wfdIUU 7Wbhyroq/Wt2fcrRDlwhk9OQV6u1NVgziCZLKYKPcdGNdx6PiTKpml5zRViaQ35C ejpn/LeaOyDjYvc5mIc4zSiwnVHa9Dc= -----END CERTIFICATE-----Generated at Mon Sep 8 04:17:27 2025 by rpki-client