$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: x4WST8rSBnKYQfryb2ckjL/f3bao/Odua0JKz6a3P0Y= Subject key identifier: 5B:BC:5F:54:87:DC:74:4B:71:38:69:3B:F3:75:72:B7:52:62:B3:41 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: BC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: B9 Signing time: Fri 19 Sep 2025 06:39:21 +0000 Manifest this update: Fri 19 Sep 2025 06:39:20 +0000 Manifest next update: Fri 26 Sep 2025 06:39:20 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: 2QsTtP1u1sOR2V4I0k2ToTI29OeZ8JV18+vVp5hmEEE=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: FpNZ3HLo1o4b1YUw3bp5mGEZMF3ekFVbByklPwI6twE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 06:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Sep 19 06:39:20 2025 GMT Not After : Sep 26 06:39:20 2025 GMT Subject: CN=68ccfa99-f536 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:6e:5e:bb:e4:81:d9:40:6d:96:a3:f2:73:ce: 4c:05:8b:4c:7e:8f:ac:0a:54:b2:1e:fe:3c:2e:54: b3:95:c4:11:82:75:ec:76:04:0f:e8:36:46:f7:92: 10:60:e5:5a:ef:2f:2f:78:ae:4f:3d:0d:bc:2f:de: 4e:a0:8a:94:34:f3:a3:0f:0b:7d:ca:31:d6:af:17: 98:ef:28:64:0d:2d:2b:8e:02:84:98:f6:01:71:96: 77:ee:04:36:3f:66:27:be:0a:5f:6e:75:07:11:05: 82:87:0a:5c:2c:e9:4d:e1:80:3c:0b:0c:56:5c:35: 7f:68:11:77:36:d6:3a:c3:33:84:03:27:84:28:8a: fd:4c:ec:99:fa:e7:6a:96:da:a4:b9:af:7a:72:66: d9:15:e3:08:7a:08:c5:16:bd:23:b2:d8:68:73:1f: bf:4d:68:e2:57:b9:73:b3:54:40:3b:4d:89:e7:1a: f9:17:42:31:94:33:ef:6a:65:5f:49:a6:f5:6b:0b: 2a:ee:28:d0:d7:26:23:7c:c9:45:2d:44:40:e9:1e: 93:2f:dd:d6:67:9c:b7:a4:ed:75:d9:17:38:38:cc: d3:72:56:57:88:c0:5c:e5:e2:93:06:74:d8:0d:a5: 72:e7:26:0e:73:4b:82:a0:de:c0:35:ea:c3:f2:6f: c8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:BC:5F:54:87:DC:74:4B:71:38:69:3B:F3:75:72:B7:52:62:B3:41 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:e4:02:d8:bb:ba:84:98:48:af:39:9c:3f:44:5a:d6:f8:61: 85:46:ae:f5:39:bb:11:5c:9a:58:fa:6d:92:ae:f8:84:ca:af: 27:ae:bb:94:84:b3:c9:a0:46:09:ce:43:1e:b9:54:86:ba:f1: c1:5d:bf:ed:8e:db:93:b7:b0:64:4e:04:9b:60:21:d3:0f:a7: 29:ab:c4:6a:6c:e9:81:86:d9:4f:96:b7:16:c7:3c:17:8e:b5: 4a:97:90:10:5c:54:6d:d8:bb:aa:a5:84:69:f5:2d:ae:99:17: 55:f1:b4:cc:77:12:c3:e1:5b:21:5f:39:be:c5:b1:e8:bd:e7: 66:08:aa:ee:fd:40:38:77:2e:e3:18:fa:3b:9c:5a:44:6c:89: 95:e3:7e:4c:a7:a4:02:a0:05:61:c9:3d:f2:ae:4d:90:7e:c3: a4:53:e1:8a:36:c6:5a:6c:3f:a7:4b:a7:b5:2e:33:db:d0:fc: 25:b1:23:7f:4f:e5:e0:17:3c:7c:eb:21:cf:8c:e0:c9:e9:9d: 5c:e6:b1:f6:90:85:c9:b0:de:24:71:33:a8:b2:c6:14:88:57: 6c:4b:c9:9b:f3:58:b2:c0:cd:7c:b1:31:2d:9c:c4:b9:c5:6a: 5b:27:de:bb:d0:18:e5:58:d5:1b:83:54:46:70:4a:e6:87:c6: 3f:79:3d:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUwOTE5MDYzOTIwWhcNMjUwOTI2MDYzOTIwWjAYMRYwFAYD VQQDEw02OGNjZmE5OS1mNTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3W5eu+SB2UBtlqPyc85MBYtMfo+sClSyHv48LlSzlcQRgnXsdgQP6DZG95IQ YOVa7y8veK5PPQ28L95OoIqUNPOjDwt9yjHWrxeY7yhkDS0rjgKEmPYBcZZ37gQ2 P2YnvgpfbnUHEQWChwpcLOlN4YA8CwxWXDV/aBF3NtY6wzOEAyeEKIr9TOyZ+udq ltqkua96cmbZFeMIegjFFr0jsthocx+/TWjiV7lzs1RAO02J5xr5F0IxlDPvamVf Sab1awsq7ijQ1yYjfMlFLURA6R6TL93WZ5y3pO112Rc4OMzTclZXiMBc5eKTBnTY DaVy5yYOc0uCoN7ANerD8m/IIwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFu8X1SH 3HRLcThpO/N1crdSYrNBMB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCu5ALYu7qEmEivOZw/RFrW+GGFRq71ObsRXJpY+m2SrviEyq8nrruU hLPJoEYJzkMeuVSGuvHBXb/tjtuTt7BkTgSbYCHTD6cpq8RqbOmBhtlPlrcWxzwX jrVKl5AQXFRt2LuqpYRp9S2umRdV8bTMdxLD4VshXzm+xbHovedmCKru/UA4dy7j GPo7nFpEbImV435Mp6QCoAVhyT3yrk2QfsOkU+GKNsZabD+nS6e1LjPb0PwlsSN/ T+XgFzx86yHPjODJ6Z1c5rH2kIXJsN4kcTOossYUiFdsS8mb81iywM18sTEtnMS5 xWpbJ9670BjlWNUbg1RGcErmh8Y/eT20 -----END CERTIFICATE-----Generated at Sat Sep 20 01:29:11 2025 by rpki-client