$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: o6iGFTIzLIGbLtiu5nFNrLwojK+Ka+GcvBB/nTyPK7M= Subject key identifier: DB:2D:F8:F7:7F:4B:ED:0B:61:CF:DF:F8:19:D8:0D:19:B2:CD:54:44 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: C6 Signing time: Fri 05 Sep 2025 06:16:07 +0000 Manifest this update: Fri 05 Sep 2025 06:16:06 +0000 Manifest next update: Fri 12 Sep 2025 06:16:06 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: TQ9+tZkl3y1ymDTkc61hXMeJRxjkKhaFdGgHLWiaRZw=) 2: DF6D4464818211F097447962C4F9AE02.roa (hash: xYauir6MB56Ojo5qgXZ86nvyFuU2glwRvQp9xpx5D2o=) 3: BD75B3E6818211F0AE3B2562C4F9AE02.roa (hash: SslSp4nE+vO5Y+MFQ4h3qrKcU+sVczW58pAUxun3o5M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Sep 5 06:16:06 2025 GMT Not After : Sep 12 06:16:06 2025 GMT Subject: CN=68ba8026-544e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:bf:7d:1f:ea:3f:76:ed:c1:fb:f1:64:e5:f9: 38:15:2b:6e:9f:c9:04:5f:15:b7:d3:80:48:f8:61: d0:01:f5:58:46:6d:da:b9:21:69:0a:d3:58:4a:74: 09:2c:d9:42:fa:6d:7b:50:95:eb:a5:a4:46:bf:22: 19:ea:a4:da:0b:53:a3:fd:ae:45:29:4d:af:a1:25: 30:57:01:15:09:6e:7e:a8:a3:f0:79:d4:a5:31:bf: 30:30:9d:2c:d0:e6:ef:2d:a2:a7:7f:4c:6d:f7:03: 56:e2:19:84:1b:29:36:95:7c:4c:44:9e:a1:29:ab: 78:3f:d8:1f:87:4e:a0:68:8e:fc:da:a3:84:2b:e7: 9c:5b:cf:10:3f:af:33:6c:b3:f4:cb:9a:52:05:c7: 2a:e1:17:df:32:fc:ef:51:49:bd:ba:50:76:7c:f6: e6:bc:a1:2d:1a:c8:13:2d:3b:2f:ba:4d:c2:48:1e: 31:3b:f7:51:df:97:77:88:00:d3:8d:24:a5:19:54: d4:0b:17:22:66:47:0b:16:84:ef:a5:c5:79:c0:6a: 7c:39:86:2a:4a:ad:99:72:2d:21:02:38:2b:99:d9: 9c:49:b1:0f:81:e7:70:83:08:da:b6:f7:f7:a2:c5: b1:a6:b4:db:20:24:bf:0c:67:87:09:e8:84:00:14: d6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:2D:F8:F7:7F:4B:ED:0B:61:CF:DF:F8:19:D8:0D:19:B2:CD:54:44 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b2:1e:39:2c:71:68:ac:43:6a:74:3a:7c:0c:aa:33:cf:28:c3: b9:9a:94:4b:fa:b6:46:ea:c4:81:09:85:96:8d:46:08:58:08: 60:64:78:e9:b4:bb:4c:64:cc:47:ed:6e:e9:c4:50:1b:e5:cf: 49:f4:2b:df:13:35:c5:dd:fd:41:14:6d:38:d8:77:a8:38:d5: 85:0d:70:67:ec:36:90:c6:65:95:d1:d6:19:a5:80:36:d5:8c: 9a:f8:34:ed:a4:dd:4e:14:b2:30:b8:67:b8:f5:85:fa:a1:ea: 5e:37:05:fe:7c:82:a0:55:ef:d6:de:a4:36:fc:f5:1b:f5:cd: 38:b7:40:c6:83:46:98:a7:d1:1b:c8:d4:32:e1:4c:96:12:83: 6f:5d:c6:84:ee:ee:17:ed:d0:0e:9c:38:5e:37:58:72:24:ff: 0a:1c:7e:73:1f:f1:8b:65:1a:48:09:13:a8:19:4d:92:ed:e1: ba:4a:53:3e:66:2d:74:2c:f4:8d:e1:d0:1c:b9:eb:c6:a3:12: e1:de:a2:29:52:3f:24:3b:a8:7d:1c:50:80:3f:dc:e4:b0:ae: a6:b2:5d:c8:ae:e5:56:ab:fd:ab:d8:aa:b9:d6:63:8b:b2:fe: de:be:1b:9c:8f:00:ee:f0:86:17:a6:9a:a4:47:2e:02:74:ae: 26:44:0d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwOTA1MDYxNjA2WhcNMjUwOTEyMDYxNjA2WjAYMRYwFAYD VQQDEw02OGJhODAyNi01NDRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5b99H+o/du3B+/Fk5fk4FStun8kEXxW304BI+GHQAfVYRm3auSFpCtNYSnQJ LNlC+m17UJXrpaRGvyIZ6qTaC1Oj/a5FKU2voSUwVwEVCW5+qKPwedSlMb8wMJ0s 0ObvLaKnf0xt9wNW4hmEGyk2lXxMRJ6hKat4P9gfh06gaI782qOEK+ecW88QP68z bLP0y5pSBccq4RffMvzvUUm9ulB2fPbmvKEtGsgTLTsvuk3CSB4xO/dR35d3iADT jSSlGVTUCxciZkcLFoTvpcV5wGp8OYYqSq2Zci0hAjgrmdmcSbEPgedwgwjatvf3 osWxprTbICS/DGeHCeiEABTWsQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNst+Pd/ S+0LYc/f+BnYDRmyzVREMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCyHjkscWisQ2p0OnwMqjPPKMO5mpRL+rZG6sSBCYWWjUYIWAhgZHjp tLtMZMxH7W7pxFAb5c9J9CvfEzXF3f1BFG042HeoONWFDXBn7DaQxmWV0dYZpYA2 1Yya+DTtpN1OFLIwuGe49YX6oepeNwX+fIKgVe/W3qQ2/PUb9c04t0DGg0aYp9Eb yNQy4UyWEoNvXcaE7u4X7dAOnDheN1hyJP8KHH5zH/GLZRpICROoGU2S7eG6SlM+ Zi10LPSN4dAcuevGoxLh3qIpUj8kO6h9HFCAP9zksK6msl3IruVWq/2r2Kq51mOL sv7evhucjwDu8IYXppqkRy4CdK4mRA20 -----END CERTIFICATE-----Generated at Sat Sep 6 21:04:22 2025 by rpki-client