$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft File: M6AXSkpLAJwBFRWWkTbzAQidtbU.mft (raw, json) Hash identifier: EAWPeoQaIK6NtVP4SLMeJsLgsLeQYObMJJijVhN3/Q4= Subject key identifier: 3F:4A:B9:4F:4A:9F:A0:B4:4B:FB:C0:C7:E9:ED:7A:28:93:76:43:1F Authority key identifier: 33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 Certificate issuer: /CN=A91FF1CC/serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Certificate serial: 5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft Manifest number: 5F Signing time: Sat 23 Aug 2025 07:19:56 +0000 Manifest this update: Sat 23 Aug 2025 07:19:55 +0000 Manifest next update: Sat 30 Aug 2025 07:19:55 +0000 Files and hashes: 1: M6AXSkpLAJwBFRWWkTbzAQidtbU.crl (hash: wGeOQIJmtihhypP1bf+MIs+LVTk8NAQzmRKeCBql+rE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:19:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 95 (0x5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF1CC, serialNumber=33A0174A4A4B009C011515969136F301089DB5B5 Validity Not Before: Aug 23 07:19:55 2025 GMT Not After : Aug 30 07:19:55 2025 GMT Subject: CN=68a96b9c-8c91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:5b:59:8a:62:da:ff:4e:0e:09:7b:32:5c: 0b:b8:19:b2:33:6b:06:79:74:f8:df:65:b5:71:d0: 0c:d6:88:20:e6:f0:a5:9e:fd:2c:04:b4:bd:8f:07: b7:a3:de:95:90:5f:ec:35:0a:1d:88:29:44:41:1e: 0f:11:76:df:68:ab:2d:25:36:85:67:b2:54:4f:d5: e9:b1:2c:c9:51:29:01:8d:b9:e0:22:37:50:95:f7: 85:ee:1e:9f:a2:e5:8b:f1:f4:19:33:06:3a:ef:59: 88:94:95:25:8d:f1:dd:6d:ae:7c:ac:22:b1:5f:1a: 0f:73:fe:be:14:77:31:82:d1:e6:d3:0e:bb:3a:18: 68:59:f5:22:ca:b7:20:7c:9d:81:de:1a:2c:cc:e6: 30:c8:24:f4:de:de:c8:c1:42:b8:24:54:d1:ef:70: 02:74:8f:6b:17:d5:63:17:67:59:33:6a:ba:e3:6e: c0:ae:3b:f9:29:e0:5b:30:d3:f6:61:72:f8:73:68: 8d:b3:70:a0:ab:a8:07:92:a6:f9:c5:ec:8b:49:99: e6:d5:87:0c:ec:9c:df:b4:b4:17:93:d1:0d:b8:62: 85:49:66:01:45:90:da:fc:28:a9:3c:30:30:f5:ee: 39:0c:d8:9e:e7:2c:ad:7a:5d:77:e6:e1:f9:ec:84: 27:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:4A:B9:4F:4A:9F:A0:B4:4B:FB:C0:C7:E9:ED:7A:28:93:76:43:1F X509v3 Authority Key Identifier: keyid:33:A0:17:4A:4A:4B:00:9C:01:15:15:96:91:36:F3:01:08:9D:B5:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6AXSkpLAJwBFRWWkTbzAQidtbU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF1CC/43EA6B18EF6311EFBF64AB6AC4F9AE02/M6AXSkpLAJwBFRWWkTbzAQidtbU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 89:62:46:eb:dc:70:8e:e3:6c:f2:69:02:d4:3f:38:f2:e1:ab: c9:da:74:7f:22:bf:6d:d0:15:7e:ea:07:cc:f9:33:ac:5e:49: 05:0f:c4:40:38:85:03:81:f2:3f:f2:d3:14:66:44:a6:fd:52: b5:a8:b3:f0:cc:15:2a:40:e6:67:92:94:95:74:d2:39:bb:0a: d3:1b:b5:00:4b:ce:12:b6:32:90:2d:7f:c8:56:cb:2c:82:85: 99:85:a1:46:88:fb:ef:21:74:aa:53:7e:c9:ac:40:e9:95:57: 58:ec:95:d1:72:d7:68:3f:ed:9f:f4:76:cb:11:6c:af:b4:48: a5:75:f3:2a:47:e9:64:64:dd:0a:fc:22:5b:78:26:9b:e1:a8: 6d:de:83:82:70:3f:12:fd:1c:f4:50:78:af:cb:89:ec:43:bc: 8b:71:d7:4c:67:c1:66:4f:a8:c7:51:e1:c2:70:07:35:e3:1c: a5:81:7f:53:87:76:82:20:f9:52:fb:e4:af:41:ba:ad:10:87: a9:ad:9d:e0:61:39:7a:8b:8b:7b:34:4d:17:76:d7:1f:f2:64: d2:41:fb:9d:45:36:cf:0b:06:4e:86:60:17:34:9a:50:9e:5f: fd:89:0d:59:99:86:d2:49:49:52:84:e0:b0:cd:c4:3a:47:63: 66:b3:4f:00 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjFDQzExMC8GA1UEBRMoMzNBMDE3NEE0QTRCMDA5QzAxMTUxNTk2OTEzNkYzMDEw ODlEQjVCNTAeFw0yNTA4MjMwNzE5NTVaFw0yNTA4MzAwNzE5NTVaMBgxFjAUBgNV BAMTDTY4YTk2YjljLThjOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyr1tZimLa/04OCXsyXAu4GbIzawZ5dPjfZbVx0AzWiCDm8KWe/SwEtL2PB7ej 3pWQX+w1Ch2IKURBHg8Rdt9oqy0lNoVnslRP1emxLMlRKQGNueAiN1CV94XuHp+i 5Yvx9BkzBjrvWYiUlSWN8d1trnysIrFfGg9z/r4UdzGC0ebTDrs6GGhZ9SLKtyB8 nYHeGizM5jDIJPTe3sjBQrgkVNHvcAJ0j2sX1WMXZ1kzarrjbsCuO/kp4Fsw0/Zh cvhzaI2zcKCrqAeSpvnF7ItJmebVhwzsnN+0tBeT0Q24YoVJZgFFkNr8KKk8MDD1 7jkM2J7nLK16XXfm4fnshCeBAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUP0q5T0qf oLRL+8DH6e16KJN2Qx8wHwYDVR0jBBgwFoAUM6AXSkpLAJwBFRWWkTbzAQidtbUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMUNDLzQzRUE2QjE4RUY2 MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3QkZSV1drVGJ6QVFpZHRi VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTTZBWFNrcExBSndCRlJXV2tUYnpBUWlkdGJVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZG MUNDLzQzRUE2QjE4RUY2MzExRUZCRjY0QUI2QUM0RjlBRTAyL002QVhTa3BMQUp3 QkZSV1drVGJ6QVFpZHRiVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIliRuvccI7jbPJpAtQ/OPLhq8nadH8iv23QFX7qB8z5M6xeSQUPxEA4 hQOB8j/y0xRmRKb9UrWos/DMFSpA5meSlJV00jm7CtMbtQBLzhK2MpAtf8hWyyyC hZmFoUaI++8hdKpTfsmsQOmVV1jsldFy12g/7Z/0dssRbK+0SKV18ypH6WRk3Qr8 Ilt4JpvhqG3eg4JwPxL9HPRQeK/LiexDvItx10xnwWZPqMdR4cJwBzXjHKWBf1OH doIg+VL75K9Buq0Qh6mtneBhOXqLi3s0TRd21x/yZNJB+51FNs8LBk6GYBc0mlCe X/2JDVmZhtJJSVKE4LDNxDpHY2azTwA= -----END CERTIFICATE-----Generated at Sun Aug 24 22:16:06 2025 by rpki-client