$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft File: s6HqYHo_df54qoQuuJCSWZEQ_cY.mft (raw, json) Hash identifier: dhAfNum+m/Xtb2+CDL5UxSAXXrJSQHOCvDer6fcscoY= Subject key identifier: 36:88:32:55:94:9D:29:18:60:A4:92:3F:CB:6B:43:93:68:51:5F:50 Authority key identifier: B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 Certificate issuer: /CN=A91F5BCC/serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Certificate serial: 67 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft Manifest number: 65 Signing time: Sat 19 Jul 2025 07:16:16 +0000 Manifest this update: Sat 19 Jul 2025 07:16:16 +0000 Manifest next update: Sat 26 Jul 2025 07:16:16 +0000 Files and hashes: 1: s6HqYHo_df54qoQuuJCSWZEQ_cY.crl (hash: JRoUq1D9IMkkYWYD8c2DTYCDk8ql3Le4Ms9OmMspqX8=) 2: 5FEB0DA8E90611EFA74B611DC4F9AE02.roa (hash: hwuul9zOvXSQLDdgabC6PgRyfpY9SzpmngkkmJxvu+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 103 (0x67) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5BCC, serialNumber=B3A1EA607A3F75FE78AA842EB89092599110FDC6 Validity Not Before: Jul 19 07:16:16 2025 GMT Not After : Jul 26 07:16:16 2025 GMT Subject: CN=687b4640-79e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b6:c7:d1:eb:ea:d1:c2:1c:3a:cc:28:92:d3: f0:fb:be:da:dc:97:31:1a:69:2d:36:1f:f7:b4:cc: 90:84:94:9f:95:86:c3:ec:ad:b5:37:84:1e:f5:19: 24:44:08:17:0f:1c:58:2d:c0:7a:67:bf:66:20:73: 8e:8f:b6:4d:ae:98:53:10:4f:64:ba:47:72:d3:fd: 70:14:ef:6f:fa:73:bf:dc:1e:92:c0:31:66:37:68: 96:46:76:73:84:41:98:ff:01:6d:aa:21:76:b7:c1: 9f:ea:c5:de:8b:00:4c:e6:83:fa:85:55:94:0d:98: 13:4b:14:d9:65:6a:fa:ab:77:1d:7e:66:57:06:bf: 51:ea:c2:af:d8:cc:e7:89:59:1b:a9:c5:f6:dc:c3: 5b:47:12:1c:08:2f:b5:77:90:1e:99:3b:a6:db:00: af:dd:88:98:0b:5c:cb:5f:1f:12:27:e4:da:eb:91: c0:24:6d:a1:df:38:61:e1:0e:15:3e:61:42:86:7d: aa:5e:7f:5e:b5:80:74:8b:38:fb:97:24:e8:ab:f7: bd:9b:c5:b8:88:af:2e:c4:26:e1:2f:ef:7d:bf:fb: 10:1d:e6:4e:16:9a:c7:2d:67:b8:57:74:36:0b:a9: 3c:ee:60:e0:e7:1e:85:90:d7:56:71:68:c1:11:cb: fc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:88:32:55:94:9D:29:18:60:A4:92:3F:CB:6B:43:93:68:51:5F:50 X509v3 Authority Key Identifier: keyid:B3:A1:EA:60:7A:3F:75:FE:78:AA:84:2E:B8:90:92:59:91:10:FD:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s6HqYHo_df54qoQuuJCSWZEQ_cY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5BCC/B1181B10CE7811EF80EF4D44C4F9AE02/s6HqYHo_df54qoQuuJCSWZEQ_cY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 08:da:b6:a3:ac:88:ba:ad:ae:55:74:e4:10:85:f4:e3:53:e1: 28:ab:3f:64:f4:0d:a5:88:f1:74:08:28:e4:21:b7:d3:4c:03: 66:fd:d7:e8:8f:29:a8:f4:41:23:88:9c:4a:4e:d0:e4:9a:36: ef:f6:40:cf:5c:1b:30:93:a7:a2:3f:2f:ca:46:a5:47:31:30: 92:25:53:d3:78:4c:77:53:bd:0c:19:08:c0:cc:f0:36:70:e8: d5:e3:f4:d9:a1:52:0b:8e:e1:f9:e5:1e:a8:94:57:1b:ab:ce: 93:8a:d0:b5:58:b8:60:31:42:d7:26:05:1c:be:c9:ff:50:1c: 12:94:8f:42:32:65:d8:c7:24:80:04:a9:7a:1c:e9:59:04:41: b9:6a:9d:fb:ca:d8:41:73:05:98:01:b2:5d:83:9a:09:b9:f7: fa:cd:db:a6:4f:a2:e3:2a:7f:55:75:7f:8b:d2:3e:55:c8:af: a8:37:b7:cb:08:1b:6e:29:d6:2a:95:2a:8c:2c:fd:c4:8c:8c: 2e:7a:8c:ce:9b:ac:c8:14:85:df:89:98:6b:f7:3c:b8:2d:30: 20:4b:4f:08:ef:23:5c:7a:cf:ce:4a:3a:c7:b0:b1:2a:cc:a0: 1a:a3:38:e4:d5:06:4a:0c:f5:5f:e6:4b:fd:8f:82:3a:5c:0f: ab:15:62:a9 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NUJDQzExMC8GA1UEBRMoQjNBMUVBNjA3QTNGNzVGRTc4QUE4NDJFQjg5MDkyNTk5 MTEwRkRDNjAeFw0yNTA3MTkwNzE2MTZaFw0yNTA3MjYwNzE2MTZaMBgxFjAUBgNV BAMTDTY4N2I0NjQwLTc5ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0tsfR6+rRwhw6zCiS0/D7vtrclzEaaS02H/e0zJCElJ+VhsPsrbU3hB71GSRE CBcPHFgtwHpnv2Ygc46Ptk2umFMQT2S6R3LT/XAU72/6c7/cHpLAMWY3aJZGdnOE QZj/AW2qIXa3wZ/qxd6LAEzmg/qFVZQNmBNLFNllavqrdx1+ZlcGv1Hqwq/YzOeJ WRupxfbcw1tHEhwIL7V3kB6ZO6bbAK/diJgLXMtfHxIn5NrrkcAkbaHfOGHhDhU+ YUKGfapef161gHSLOPuXJOir972bxbiIry7EJuEv732/+xAd5k4WmsctZ7hXdDYL qTzuYODnHoWQ11ZxaMERy/zDAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNogyVZSd KRhgpJI/y2tDk2hRX1AwHwYDVR0jBBgwFoAUs6HqYHo/df54qoQuuJCSWZEQ/cYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1QkNDL0IxMTgxQjEwQ0U3 ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1NHFvUXV1SkNTV1pFUV9j WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvczZIcVlIb19kZjU0cW9RdXVKQ1NXWkVRX2NZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY1 QkNDL0IxMTgxQjEwQ0U3ODExRUY4MEVGNEQ0NEM0RjlBRTAyL3M2SHFZSG9fZGY1 NHFvUXV1SkNTV1pFUV9jWS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAjatqOsiLqtrlV05BCF9ONT4SirP2T0DaWI8XQIKOQht9NMA2b91+iP Kaj0QSOInEpO0OSaNu/2QM9cGzCTp6I/L8pGpUcxMJIlU9N4THdTvQwZCMDM8DZw 6NXj9NmhUguO4fnlHqiUVxurzpOK0LVYuGAxQtcmBRy+yf9QHBKUj0IyZdjHJIAE qXoc6VkEQblqnfvK2EFzBZgBsl2Dmgm59/rN26ZPouMqf1V1f4vSPlXIr6g3t8sI G24p1iqVKows/cSMjC56jM6brMgUhd+JmGv3PLgtMCBLTwjvI1x6z85KOsewsSrM oBqjOOTVBkoM9V/mS/2PgjpcD6sVYqk= -----END CERTIFICATE-----Generated at Sun Jul 20 20:31:59 2025 by rpki-client