$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: 21qARundNhd2+hd9hCLTeKMWViwxNjC/VxLgtwa1dok= Subject key identifier: 6F:2B:92:D7:01:9E:C1:B2:A4:F7:DC:1D:7D:2E:2E:1C:77:08:ED:C8 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: F9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: F4 Signing time: Sun 07 Sep 2025 05:41:52 +0000 Manifest this update: Sun 07 Sep 2025 05:41:51 +0000 Manifest next update: Sun 14 Sep 2025 05:41:51 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: c69bommg7x24bDNj/P5h2YXfznBllujZAsj9XMCDcUw=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) 3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:41:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 249 (0xf9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Sep 7 05:41:51 2025 GMT Not After : Sep 14 05:41:51 2025 GMT Subject: CN=68bd1b20-00dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:33:70:4c:ed:8d:50:3e:20:b3:19:47:22:8e: 55:f9:80:5d:88:46:9d:79:15:2b:09:52:81:fa:61: 6c:bf:e7:9b:25:4a:cf:f4:d6:3a:c6:06:ae:32:48: cc:a7:8a:41:ac:a3:dc:8d:90:a5:8b:78:f3:78:d1: 65:24:ea:40:11:cd:a7:3d:2d:f4:1a:60:eb:4a:42: c3:f6:cf:85:25:26:c2:fc:0d:8b:b2:c5:27:68:d9: 65:ee:a2:5e:c9:de:ae:78:ea:f2:e1:cb:ba:09:f4: f3:b3:a6:4f:57:a7:a1:75:79:27:bf:13:31:c9:d6: a6:dd:6b:79:2e:4f:00:cc:85:bf:6a:fb:bc:30:4f: 48:60:d3:ae:d4:61:6e:9b:e3:24:52:51:bd:99:56: 60:51:59:c0:45:16:89:7e:8a:44:df:a4:10:65:66: 06:b9:0d:46:62:92:83:7e:7a:ee:0a:4f:62:32:9d: ea:b0:f9:0c:e4:a5:ab:b8:99:a2:62:98:63:76:86: 35:36:ac:c1:90:10:77:35:97:c1:eb:62:9a:47:d4: 58:e6:5c:7b:a0:2f:68:41:2b:62:02:e6:9f:6d:e6: 10:ea:0d:a5:58:3d:9f:e2:b4:79:b8:63:df:ca:99: 37:45:32:04:a4:22:e7:28:76:fd:d3:24:44:ad:28: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:2B:92:D7:01:9E:C1:B2:A4:F7:DC:1D:7D:2E:2E:1C:77:08:ED:C8 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 81:4b:00:df:38:de:35:7d:90:0a:0a:3f:5f:bd:78:0e:70:3a: 3e:14:b7:6c:27:b8:30:98:7b:8f:1b:2a:29:32:5c:6a:df:ca: aa:6a:35:99:3d:6a:3e:ad:cc:f8:fb:0d:3b:c0:55:7a:a8:5a: 1f:bb:f1:6d:ab:41:99:fa:4e:c4:ed:5a:30:b5:48:90:f5:eb: 67:0f:c9:19:f8:e6:23:c7:cd:72:78:ad:ba:4c:81:f4:7c:76: 1a:51:40:d8:ce:12:83:12:e7:e6:27:3a:ce:3a:81:9a:2f:84: 24:19:16:6c:f5:a3:69:13:40:8b:2c:14:f0:c9:90:64:b4:08: 91:4c:34:76:ec:21:3a:15:99:96:34:b2:e6:76:68:7b:2d:bb: d2:89:96:f4:44:2a:23:81:1b:f3:5d:99:6c:94:f7:5f:a2:ae: 13:05:2f:df:89:ea:68:ba:5c:00:64:e4:78:2c:69:8c:7c:01: 41:01:95:6b:8f:09:07:4e:66:fe:3e:df:2e:14:46:74:27:3b: 07:cd:fe:a2:a5:60:e4:15:cc:ff:97:61:1c:05:5c:c5:13:82: 44:80:b5:d0:ae:06:72:82:5f:ae:cd:fa:aa:c8:7b:a5:66:40: c3:cc:ad:69:d9:94:66:bd:25:32:46:db:33:3a:63:8d:03:69: 00:b1:f8:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUwOTA3MDU0MTUxWhcNMjUwOTE0MDU0MTUxWjAYMRYwFAYD VQQDEw02OGJkMWIyMC0wMGRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6zNwTO2NUD4gsxlHIo5V+YBdiEadeRUrCVKB+mFsv+ebJUrP9NY6xgauMkjM p4pBrKPcjZCli3jzeNFlJOpAEc2nPS30GmDrSkLD9s+FJSbC/A2LssUnaNll7qJe yd6ueOry4cu6CfTzs6ZPV6ehdXknvxMxydam3Wt5Lk8AzIW/avu8ME9IYNOu1GFu m+MkUlG9mVZgUVnARRaJfopE36QQZWYGuQ1GYpKDfnruCk9iMp3qsPkM5KWruJmi YphjdoY1NqzBkBB3NZfB62KaR9RY5lx7oC9oQStiAuafbeYQ6g2lWD2f4rR5uGPf ypk3RTIEpCLnKHb90yRErSiYuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG8rktcB nsGypPfcHX0uLhx3CO3IMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCBSwDfON41fZAKCj9fvXgOcDo+FLdsJ7gwmHuPGyopMlxq38qqajWZ PWo+rcz4+w07wFV6qFofu/Ftq0GZ+k7E7VowtUiQ9etnD8kZ+OYjx81yeK26TIH0 fHYaUUDYzhKDEufmJzrOOoGaL4QkGRZs9aNpE0CLLBTwyZBktAiRTDR27CE6FZmW NLLmdmh7LbvSiZb0RCojgRvzXZlslPdfoq4TBS/fiepoulwAZOR4LGmMfAFBAZVr jwkHTmb+Pt8uFEZ0JzsHzf6ipWDkFcz/l2EcBVzFE4JEgLXQrgZygl+uzfqqyHul ZkDDzK1p2ZRmvSUyRtszOmONA2kAsfjo -----END CERTIFICATE-----Generated at Sun Sep 7 14:54:40 2025 by rpki-client