$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: DWO+2cQ1QMqfBQ5SwYEcXiIYhhMmAzXha61TnLRxOJo= Subject key identifier: 82:DA:48:03:77:5B:ED:D4:D3:FA:9C:56:DA:49:CB:E7:30:0D:29:35 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 209C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2077 Signing time: Tue 22 Jul 2025 16:04:32 +0000 Manifest this update: Tue 22 Jul 2025 16:04:32 +0000 Manifest next update: Tue 29 Jul 2025 16:04:32 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: xnYqC8CQdTIGGW7zWYjvxIuOWAOtaBoZTliqOxbOSFU=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 16:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8348 (0x209c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Jul 22 16:04:32 2025 GMT Not After : Jul 29 16:04:32 2025 GMT Subject: CN=687fb690-f812 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e5:f8:a9:d9:02:6a:80:7e:fd:7a:12:1c:8d: 87:58:b3:8c:e0:4d:20:8a:a0:a1:61:d3:96:35:cd: a7:e7:63:03:c4:72:25:22:34:3c:e0:fd:2a:00:db: 98:e5:f3:60:90:96:e8:61:8e:06:c8:ac:f8:34:c9: d3:87:91:a0:57:1e:ec:ee:42:b2:b5:29:ba:f1:dc: 1a:35:5e:97:b8:9d:ab:38:18:c4:11:81:aa:9a:1e: e2:b7:0e:6e:c1:be:d3:48:48:22:d4:88:ab:75:3d: 9c:12:b1:4f:3c:4f:70:aa:1e:2f:c0:2e:d4:b2:d6: a5:b7:c8:af:f1:9c:af:df:99:f7:b4:e2:ec:66:77: b2:56:6c:2a:6e:c8:dd:a3:cb:c5:02:bf:5c:a4:4f: c4:36:b0:bd:c4:bc:0a:e0:b3:7c:a0:7c:70:5b:d3: 53:63:6c:0c:ad:72:97:a5:6c:72:fb:0d:3f:1f:99: 59:dc:1c:64:8e:78:55:90:d2:2f:0f:b7:10:b1:4f: a7:0e:73:9f:98:86:d8:04:bd:f1:54:ca:aa:f7:7a: 0f:08:91:97:12:4f:b5:11:f3:a3:7e:53:64:51:8c: de:0e:86:be:04:4e:de:92:1b:79:ba:d9:9a:88:ce: f3:89:3b:bb:a9:ce:4d:93:14:ea:a9:14:8d:b3:3e: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:DA:48:03:77:5B:ED:D4:D3:FA:9C:56:DA:49:CB:E7:30:0D:29:35 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 44:2a:01:79:1c:c2:a9:b9:8a:17:1b:7a:eb:32:d5:11:a4:b8: f4:4f:7a:50:0e:e6:2d:40:8a:ac:8a:87:87:06:cf:40:ed:69: be:ca:a5:e8:36:28:d1:38:10:d0:e2:6c:53:5b:17:2b:93:24: f3:21:11:59:24:4d:47:de:4f:61:3a:a4:d3:2b:02:34:dc:cd: 10:16:80:bf:cf:5b:1e:3c:ed:fd:53:0b:10:97:43:9e:42:bf: 4c:53:3f:3a:41:2e:21:ea:ab:f9:9e:d3:8a:6b:6f:df:90:67: 3d:32:0b:78:5e:f9:74:43:c4:ce:34:dc:d3:f1:f5:bd:ed:a6: c4:ae:ae:be:a4:e1:79:e1:29:ea:c2:47:12:82:91:de:51:03: 3b:de:73:09:6f:ca:c0:67:40:e6:98:5c:a7:ea:4d:16:9b:88: d2:3f:c9:81:d7:c5:fd:0d:91:a4:a4:9c:cb:5a:21:06:9e:eb: 26:eb:01:f5:1d:d3:7e:34:a9:10:58:48:66:a5:f1:2f:18:4c: 90:49:e7:e7:20:18:78:a0:9b:52:34:de:b1:53:1a:7e:7a:71: b9:fb:65:d1:32:8d:b3:8e:4d:e7:3b:a0:dd:84:dc:9d:4d:2b: 89:88:30:3f:be:98:bb:03:33:3c:d2:dd:3b:01:25:c0:df:99: 93:85:4e:e7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIJwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwNzIyMTYwNDMyWhcNMjUwNzI5MTYwNDMyWjAYMRYwFAYD VQQDEw02ODdmYjY5MC1mODEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw+X4qdkCaoB+/XoSHI2HWLOM4E0giqChYdOWNc2n52MDxHIlIjQ84P0qANuY 5fNgkJboYY4GyKz4NMnTh5GgVx7s7kKytSm68dwaNV6XuJ2rOBjEEYGqmh7itw5u wb7TSEgi1IirdT2cErFPPE9wqh4vwC7Ustalt8iv8Zyv35n3tOLsZneyVmwqbsjd o8vFAr9cpE/ENrC9xLwK4LN8oHxwW9NTY2wMrXKXpWxy+w0/H5lZ3BxkjnhVkNIv D7cQsU+nDnOfmIbYBL3xVMqq93oPCJGXEk+1EfOjflNkUYzeDoa+BE7ekht5utma iM7ziTu7qc5NkxTqqRSNsz4JxwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFILaSAN3 W+3U0/qcVtpJy+cwDSk1MB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBEKgF5HMKpuYoXG3rrMtURpLj0T3pQDuYtQIqsioeHBs9A7Wm+yqXo NijROBDQ4mxTWxcrkyTzIRFZJE1H3k9hOqTTKwI03M0QFoC/z1sePO39UwsQl0Oe Qr9MUz86QS4h6qv5ntOKa2/fkGc9Mgt4Xvl0Q8TONNzT8fW97abErq6+pOF54Snq wkcSgpHeUQM73nMJb8rAZ0DmmFyn6k0Wm4jSP8mB18X9DZGkpJzLWiEGnusm6wH1 HdN+NKkQWEhmpfEvGEyQSefnIBh4oJtSNN6xUxp+enG5+2XRMo2zjk3nO6DdhNyd TSuJiDA/vpi7AzM80t07ASXA35mThU7n -----END CERTIFICATE-----Generated at Wed Jul 23 02:18:42 2025 by rpki-client