$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft (raw, json) Hash identifier: DaAY4mumJZN7v6GPb+ndZapJDutZGAPRKwLfSiGEBls= Subject key identifier: 81:33:55:97:56:80:9F:AA:84:EB:6E:6D:82:AF:9E:2A:40:CF:62:D3 Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 Certificate issuer: /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Certificate serial: 0495 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft Manifest number: 048F Signing time: Fri 19 Sep 2025 00:23:52 +0000 Manifest this update: Fri 19 Sep 2025 00:23:51 +0000 Manifest next update: Fri 26 Sep 2025 00:23:51 +0000 Files and hashes: 1: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl (hash: nRGP/He6qzywiVGsZEUpkFfyMQjsj2tVpbNgZbD8sVg=) 2: DA61635E534811EC8FFBDB7CC4F9AE02.roa (hash: k6KOlaww8ZZoE8DhHLb+fcqbZNEuZUquu+zgOXhayXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 00:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1173 (0x495) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Validity Not Before: Sep 19 00:23:51 2025 GMT Not After : Sep 26 00:23:51 2025 GMT Subject: CN=68cca297-813b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ad:be:d2:03:23:37:45:c2:4b:b5:d0:24:3f: d9:23:e2:dc:c2:74:43:1a:20:f5:9d:ec:56:9e:f2: 0d:c8:8e:5e:1d:d5:ad:bc:62:ac:ec:6d:f1:11:fc: ff:41:b0:47:5c:3f:cc:94:00:06:70:ce:03:34:82: 3f:95:3e:56:5a:84:4e:c6:f2:10:9f:56:56:31:06: 8b:81:92:36:f1:d5:fe:79:92:75:c6:a7:78:51:43: d4:8c:6f:28:f7:df:ef:d5:ee:94:f5:89:c1:05:dd: 0e:e8:49:a3:91:cc:0c:30:b2:f3:6a:75:2f:96:56: b0:a6:a8:c1:31:95:d1:aa:8e:23:a9:e2:39:25:7b: 7a:8d:35:49:da:1e:ea:f2:05:ad:a1:f5:43:41:2d: 2c:ee:99:6d:29:aa:3f:ef:90:48:de:08:0d:cc:6b: 10:c3:da:19:c8:a7:64:e0:d0:5d:2b:6d:ac:24:12: af:17:46:0f:0c:18:54:62:a3:ba:1b:62:99:e1:fd: be:24:b9:4a:08:9f:6a:f0:8c:05:a7:65:05:04:5f: 04:c7:87:65:83:b2:52:d2:d9:86:57:33:f5:96:d0: 89:41:b4:88:9b:38:fd:e3:57:5b:63:d6:c4:31:0f: 28:6e:42:dd:e8:76:bc:97:82:a3:22:f1:7e:2b:95: a4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:33:55:97:56:80:9F:AA:84:EB:6E:6D:82:AF:9E:2A:40:CF:62:D3 X509v3 Authority Key Identifier: keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:fb:08:7f:20:2e:9a:45:69:f3:21:28:4e:ab:7b:5d:a3:b5: fe:31:2c:ca:2a:cd:4d:af:63:79:7b:bc:9f:75:c9:50:03:9b: 06:08:d1:f9:8c:b9:26:eb:a3:bb:44:4f:9f:cd:e6:7c:bb:4f: f8:0b:97:f6:a2:82:0f:10:af:cf:21:e8:eb:55:9f:ad:c8:99: 48:56:ac:f5:85:ca:2f:02:e1:07:0f:28:a3:13:87:c6:c2:e4: 80:bb:0d:3a:f3:52:bc:50:9d:9d:03:04:8a:6b:46:ff:02:e6: 70:8a:63:d6:04:3a:40:ba:c5:60:3a:af:c2:2f:0a:d5:8e:02: 60:7c:7d:6c:ca:6b:6e:d2:8e:0b:a7:78:7b:06:cb:14:02:fd: 90:b0:27:a0:44:36:79:f9:26:db:51:9d:0f:ab:30:58:11:26: be:57:34:a7:5d:8c:3c:70:bc:35:a0:95:e9:0f:ba:ca:c0:90: 3c:f0:61:1b:96:00:4d:eb:d4:d0:63:9d:08:15:15:f8:4e:ab: 61:e5:04:43:d8:21:90:98:dc:7f:58:d7:8c:1b:3a:c1:72:84: c2:47:79:c8:b0:a4:bc:31:46:ad:e2:d2:a5:d1:b2:aa:9e:87: 82:2e:8b:6a:a1:0e:1d:ce:c0:c4:9e:d8:52:dd:fb:97:5e:c4: 2c:a9:49:24 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5NDJCNTYyQkQy NTYzQ0FFQjQwHhcNMjUwOTE5MDAyMzUxWhcNMjUwOTI2MDAyMzUxWjAYMRYwFAYD VQQDEw02OGNjYTI5Ny04MTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAva2+0gMjN0XCS7XQJD/ZI+LcwnRDGiD1nexWnvINyI5eHdWtvGKs7G3xEfz/ QbBHXD/MlAAGcM4DNII/lT5WWoROxvIQn1ZWMQaLgZI28dX+eZJ1xqd4UUPUjG8o 99/v1e6U9YnBBd0O6EmjkcwMMLLzanUvllawpqjBMZXRqo4jqeI5JXt6jTVJ2h7q 8gWtofVDQS0s7pltKao/75BI3ggNzGsQw9oZyKdk4NBdK22sJBKvF0YPDBhUYqO6 G2KZ4f2+JLlKCJ9q8IwFp2UFBF8Ex4dlg7JS0tmGVzP1ltCJQbSImzj941dbY9bE MQ8obkLd6Ha8l4KjIvF+K5WkwwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIEzVZdW gJ+qhOtubYKvnipAz2LTMB8GA1UdIwQYMBaAFOrLlf8FfWQUAMowlCtWK9JWPK60 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTUyMi84ODY5MkFCQTUz NDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpCUUF5akNVSzFZcjBsWThy clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzdVZfd1Y5WkJRQXlqQ1VLMVlyMGxZOHJyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpC UUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCp+wh/IC6aRWnzIShOq3tdo7X+MSzKKs1Nr2N5e7yfdclQA5sGCNH5 jLkm66O7RE+fzeZ8u0/4C5f2ooIPEK/PIejrVZ+tyJlIVqz1hcovAuEHDyijE4fG wuSAuw0681K8UJ2dAwSKa0b/AuZwimPWBDpAusVgOq/CLwrVjgJgfH1symtu0o4L p3h7BssUAv2QsCegRDZ5+SbbUZ0PqzBYESa+VzSnXYw8cLw1oJXpD7rKwJA88GEb lgBN69TQY50IFRX4Tqth5QRD2CGQmNx/WNeMGzrBcoTCR3nIsKS8MUat4tKl0bKq noeCLotqoQ4dzsDEnthS3fuXXsQsqUkk -----END CERTIFICATE-----Generated at Fri Sep 19 12:37:53 2025 by rpki-client