$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: loVdYwpoT+5SxrARt+zXWwCccyp+8d4C5sXl6Th/07E= Subject key identifier: 55:3B:C3:33:36:48:2B:D9:E1:A4:31:DE:DB:76:CA:A6:59:89:ED:1A Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20B5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2090 Signing time: Mon 08 Sep 2025 15:57:36 +0000 Manifest this update: Mon 08 Sep 2025 15:57:35 +0000 Manifest next update: Mon 15 Sep 2025 15:57:35 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: JCTFjQbyYfQrz24xqgf4ZMGAg3eJAgaQS1MM8CuCOnQ=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 15:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8373 (0x20b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Sep 8 15:57:35 2025 GMT Not After : Sep 15 15:57:35 2025 GMT Subject: CN=68befcf0-7bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ec:16:8e:b1:0c:a0:ed:37:68:12:7c:14:e5: 6e:50:36:7e:1d:7c:56:3e:c1:47:35:b7:95:9e:77: 0c:1a:cc:ca:87:3f:6f:3c:4c:7c:72:29:cc:76:69: b0:b2:92:7e:b6:43:b4:d8:91:ed:40:af:4c:72:a7: 84:04:53:5e:da:fa:28:9b:e2:a4:d7:d7:c8:51:8a: 15:8e:44:ac:1f:7d:61:71:a0:df:02:45:6a:28:37: 2c:19:2c:7e:86:98:a1:a3:59:4a:8e:ee:c8:13:e4: 7a:ba:1a:5b:8c:0b:2c:06:09:27:fc:05:35:68:73: 8e:87:db:37:7d:3e:f8:19:c6:df:65:6d:64:f0:d4: eb:ac:3a:6e:63:a0:8f:50:b8:14:7f:28:fb:17:39: 6e:3f:a8:0e:88:d1:db:3b:b9:12:1d:0c:ce:a3:5f: 32:81:ba:e2:98:d5:02:a3:56:57:f0:aa:0a:94:df: f6:a8:ad:f8:92:e1:4a:9c:06:41:c2:2f:6c:ce:61: 2b:ca:c6:f9:f5:ab:4c:6a:31:d5:06:0b:23:03:06: be:c9:96:fe:ab:32:59:de:56:ed:75:f4:ac:16:37: 67:01:32:a4:ca:d3:2d:73:55:25:ab:3e:37:52:23: 19:c9:d8:bd:d3:08:61:88:b5:52:30:f7:29:36:6d: 53:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:3B:C3:33:36:48:2B:D9:E1:A4:31:DE:DB:76:CA:A6:59:89:ED:1A X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a8:5b:b2:e8:fb:85:66:4d:04:77:a9:8d:07:6f:d9:75:b8:3f: c0:35:0b:da:4e:11:dc:fd:b3:a7:4e:90:32:bd:f7:3a:90:35: ed:7b:d6:cc:37:43:ee:b0:62:68:54:34:61:f4:a5:69:85:ef: 60:9d:f5:60:0b:11:99:5a:47:ea:8a:a7:e3:da:17:7c:ba:5e: 2b:b8:d2:16:3f:64:5f:b5:94:fd:9c:f6:6c:3a:06:63:75:52: 37:68:4d:dd:c1:3e:31:5b:d1:15:5a:9f:59:f1:ee:dd:a5:ca: 70:1f:c1:08:22:a5:37:69:f0:4e:f3:dd:ff:27:66:68:10:90: 25:86:b8:d2:43:b4:7d:52:cd:b3:9c:ac:67:2e:b3:44:b4:84: 37:ea:99:09:85:a7:26:bc:1e:79:dc:76:7d:ae:ba:fa:2e:60: f0:ed:f7:e9:fa:3c:6a:84:ab:1c:37:a7:d2:6f:9e:ee:49:5f: 99:dc:49:e8:e2:54:3c:7c:b3:f3:4f:9c:84:cc:7a:41:1b:b2: cb:d7:ce:8b:96:e2:40:22:57:f8:8d:81:0a:42:70:f5:55:2f: 0e:14:07:1c:c2:f2:0f:58:db:18:81:cf:22:de:4f:89:78:5f: e0:2c:06:7d:2f:5e:37:7a:93:2c:48:fa:42:86:50:32:c5:a0: 94:61:cd:02 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICILUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwOTA4MTU1NzM1WhcNMjUwOTE1MTU1NzM1WjAYMRYwFAYD VQQDEw02OGJlZmNmMC03YmRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1uwWjrEMoO03aBJ8FOVuUDZ+HXxWPsFHNbeVnncMGszKhz9vPEx8cinMdmmw spJ+tkO02JHtQK9McqeEBFNe2voom+Kk19fIUYoVjkSsH31hcaDfAkVqKDcsGSx+ hpiho1lKju7IE+R6uhpbjAssBgkn/AU1aHOOh9s3fT74GcbfZW1k8NTrrDpuY6CP ULgUfyj7FzluP6gOiNHbO7kSHQzOo18ygbrimNUCo1ZX8KoKlN/2qK34kuFKnAZB wi9szmErysb59atMajHVBgsjAwa+yZb+qzJZ3lbtdfSsFjdnATKkytMtc1Ulqz43 UiMZydi90whhiLVSMPcpNm1THQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFU7wzM2 SCvZ4aQx3tt2yqZZie0aMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCoW7Lo+4VmTQR3qY0Hb9l1uD/ANQvaThHc/bOnTpAyvfc6kDXte9bM N0PusGJoVDRh9KVphe9gnfVgCxGZWkfqiqfj2hd8ul4ruNIWP2RftZT9nPZsOgZj dVI3aE3dwT4xW9EVWp9Z8e7dpcpwH8EIIqU3afBO893/J2ZoEJAlhrjSQ7R9Us2z nKxnLrNEtIQ36pkJhacmvB553HZ9rrr6LmDw7ffp+jxqhKscN6fSb57uSV+Z3Eno 4lQ8fLPzT5yEzHpBG7LL186LluJAIlf4jYEKQnD1VS8OFAccwvIPWNsYgc8i3k+J eF/gLAZ9L143epMsSPpChlAyxaCUYc0C -----END CERTIFICATE-----Generated at Tue Sep 9 13:21:27 2025 by rpki-client