$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: 6yGx8qm8TKZomGZYyIJaqUtsmLt5tlK4JZnKUGXldH0= Subject key identifier: E4:1B:B9:50:39:A3:2C:3E:FF:29:2F:1D:2E:AF:16:8C:1A:7D:F5:B0 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 0218 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 0213 Signing time: Fri 19 Sep 2025 02:36:33 +0000 Manifest this update: Fri 19 Sep 2025 02:36:32 +0000 Manifest next update: Fri 26 Sep 2025 02:36:32 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: PVt72SbwSG1Uf3Oc0B9KJSCJXE/L83ov4N9eLP2s1QE=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 02:36:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 536 (0x218) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Sep 19 02:36:32 2025 GMT Not After : Sep 26 02:36:32 2025 GMT Subject: CN=68ccc1b0-05f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:cd:13:c0:12:60:76:7f:77:bb:68:16:39:4b: 1a:47:74:23:d5:c4:67:e9:c3:3e:06:29:5d:99:b4: 92:e4:d0:9a:2d:06:ce:b4:0b:45:9c:6a:44:77:cd: a7:96:7e:a1:4a:60:b6:4f:74:da:94:75:b8:9b:ca: 8b:ff:18:b6:f2:4e:51:a3:71:79:9c:a3:c5:2f:33: 4b:b6:25:26:af:12:58:60:a2:11:ac:b3:60:5e:7a: 12:61:13:c3:bd:34:4a:99:cb:9d:19:40:c1:a4:c6: 4f:6b:a3:1b:e4:62:64:59:9d:2a:78:fa:fd:90:b1: 47:3f:d2:61:b9:bb:33:d5:99:cc:d4:cf:6c:40:8f: c6:59:9f:c4:4d:6e:3e:df:56:9a:75:98:9e:86:85: 6b:e8:b1:30:d3:0d:4d:f9:5d:41:fb:0c:03:b5:45: d6:0a:b9:7b:34:c9:55:9a:bd:56:10:44:c1:b5:bc: 6d:79:64:da:23:41:ab:d3:48:db:54:c9:c2:25:64: 7b:ff:73:96:69:c5:cc:a4:19:42:b9:d4:a5:9d:b4: 59:2d:85:8d:e1:21:61:39:aa:f1:18:8c:59:5f:b9: 25:9e:7d:e9:6b:93:b8:92:55:26:01:8c:ba:c3:d3: 01:35:d0:00:0a:6f:6b:d6:c4:30:1f:eb:5c:8b:00: 8e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:1B:B9:50:39:A3:2C:3E:FF:29:2F:1D:2E:AF:16:8C:1A:7D:F5:B0 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ca:ea:17:b9:de:b7:60:2b:c9:ef:72:fe:68:ec:f9:ae:07: 8f:11:e1:a8:ed:eb:de:3a:d0:41:12:90:15:7e:36:03:57:b9: 3b:3a:0b:c8:7f:fa:3a:02:81:7b:a6:99:d1:e4:59:0d:0c:d8: 06:f6:87:d8:9a:df:2c:83:26:c6:7b:ee:d8:e8:1b:03:2b:e4: 7b:1e:92:3e:27:13:0a:b8:cf:b8:16:c0:94:1a:df:2f:90:f6: af:0f:95:53:8e:c6:ce:8f:40:23:ef:61:12:81:79:16:8c:a0: cc:16:41:d5:f3:c3:d0:8a:09:de:c9:53:51:ea:7f:69:50:7e: ee:45:90:cc:ba:ca:9f:10:a6:b6:b4:c1:81:19:98:d3:b3:eb: de:ed:e7:74:98:41:89:5a:5f:05:7e:96:5f:39:a8:09:44:63: c1:5f:57:82:46:31:df:7a:d5:b5:c3:1c:c5:57:91:c4:1b:f8: a1:ba:2b:17:1e:9e:5e:f4:1b:c1:f8:02:53:7e:65:df:60:87: a9:ef:98:ee:b0:6b:08:26:18:76:bf:29:c0:fa:15:58:71:a4: 42:1f:63:de:b4:76:2e:67:23:f0:fe:20:f1:4e:27:25:2d:c0: 33:47:df:bd:75:15:a8:c8:54:c3:c3:bf:d6:cd:15:df:53:fe: 6c:c6:0e:ad -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwOTE5MDIzNjMyWhcNMjUwOTI2MDIzNjMyWjAYMRYwFAYD VQQDEw02OGNjYzFiMC0wNWYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5s0TwBJgdn93u2gWOUsaR3Qj1cRn6cM+BildmbSS5NCaLQbOtAtFnGpEd82n ln6hSmC2T3TalHW4m8qL/xi28k5Ro3F5nKPFLzNLtiUmrxJYYKIRrLNgXnoSYRPD vTRKmcudGUDBpMZPa6Mb5GJkWZ0qePr9kLFHP9Jhubsz1ZnM1M9sQI/GWZ/ETW4+ 31aadZiehoVr6LEw0w1N+V1B+wwDtUXWCrl7NMlVmr1WEETBtbxteWTaI0Gr00jb VMnCJWR7/3OWacXMpBlCudSlnbRZLYWN4SFhOarxGIxZX7klnn3pa5O4klUmAYy6 w9MBNdAACm9r1sQwH+tciwCORQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOQbuVA5 oyw+/ykvHS6vFowaffWwMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB8yuoXud63YCvJ73L+aOz5rgePEeGo7eveOtBBEpAVfjYDV7k7OgvI f/o6AoF7ppnR5FkNDNgG9ofYmt8sgybGe+7Y6BsDK+R7HpI+JxMKuM+4FsCUGt8v kPavD5VTjsbOj0Aj72ESgXkWjKDMFkHV88PQigneyVNR6n9pUH7uRZDMusqfEKa2 tMGBGZjTs+ve7ed0mEGJWl8FfpZfOagJRGPBX1eCRjHfetW1wxzFV5HEG/ihuisX Hp5e9BvB+AJTfmXfYIep75jusGsIJhh2vynA+hVYcaRCH2PetHYuZyPw/iDxTicl LcAzR9+9dRWoyFTDw7/WzRXfU/5sxg6t -----END CERTIFICATE-----Generated at Fri Sep 19 06:50:13 2025 by rpki-client