$ rpki-client -vvf rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft File: k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft (raw, json) Hash identifier: 5xjnYznG/KdWL9naXYP6HpHPeR3Bw1/rW3CRKbgoFWg= Subject key identifier: BD:C8:F9:15:51:FF:76:B0:A1:00:BF:3A:E2:25:A0:4E:76:C1:09:7C Authority key identifier: 93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 Certificate issuer: /CN=A91100B2/serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Certificate serial: 075C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft Manifest number: 117C Signing time: Mon 04 Aug 2025 20:02:07 +0000 Manifest this update: Mon 04 Aug 2025 20:02:07 +0000 Manifest next update: Mon 11 Aug 2025 20:02:07 +0000 Files and hashes: 1: k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl (hash: BMYMwpQSCs0JTNGLMm7L6QucV1JNwhEkzIdeb7HB55Q=) 2: 6EA6EB5A355011EBAAB1E56EC4F9AE02.roa (hash: AyvIys4YJpvtkuF9JFLjVCqCEs8F48qLv5mACdRRucI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 20:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1884 (0x75c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91100B2, serialNumber=93A7D835E13858BB59951C399A5F9EAB0E2EB931 Validity Not Before: Aug 4 20:02:07 2025 GMT Not After : Aug 11 20:02:07 2025 GMT Subject: CN=689111bf-27bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:71:f2:a8:4d:33:f7:68:b0:bd:9a:16:6b:09: 9e:6b:a7:43:ba:f0:37:72:5f:80:53:30:43:15:28: 54:31:f8:b9:17:5e:a9:7d:fe:8c:e3:c2:8c:68:e8: 13:d4:aa:78:69:3e:d8:9b:34:bf:20:6c:e7:03:e3: 96:60:10:a6:b8:18:83:b2:53:c1:1f:a1:93:66:15: 3a:90:48:c6:ec:9d:7f:4a:60:6d:2b:a7:64:ae:84: d0:98:fd:b9:79:e4:d7:2c:3e:06:1c:e3:d2:f7:94: 5b:21:e0:0e:6a:f7:62:f6:3b:ef:7a:49:5d:6f:f1: 33:f4:da:e1:7e:55:67:92:ce:df:bf:fd:8e:4e:46: d5:ad:eb:b3:b7:24:06:5d:73:78:44:a0:83:62:4b: 51:69:74:50:22:b3:83:6e:1a:ea:35:a7:fb:63:06: a3:62:3d:a7:f3:ad:09:56:cb:0f:56:6e:5a:72:10: 61:a5:a6:7e:47:af:0b:0d:65:e2:34:38:49:ec:7b: 0f:41:d9:df:22:f8:2b:b0:11:08:83:cc:e4:0a:33: 95:fc:46:d4:f9:7d:2e:30:d2:cd:71:a6:cf:27:2a: 38:90:14:ff:28:a9:d0:c0:6b:65:2d:71:ac:31:2b: bb:84:d2:9c:86:59:3f:c3:cc:38:d6:5b:82:90:0f: 65:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C8:F9:15:51:FF:76:B0:A1:00:BF:3A:E2:25:A0:4E:76:C1:09:7C X509v3 Authority Key Identifier: keyid:93:A7:D8:35:E1:38:58:BB:59:95:1C:39:9A:5F:9E:AB:0E:2E:B9:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k6fYNeE4WLtZlRw5ml-eqw4uuTE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91100B2/0AF6EB2A73E811EA8851F87CC4F9AE02/k6fYNeE4WLtZlRw5ml-eqw4uuTE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4e:ce:fa:4a:45:18:e0:0c:79:c5:3b:06:03:52:b6:bb:c0:96: d3:a1:d1:cd:07:dc:b7:80:05:d0:79:c2:a2:40:be:0b:24:15: 9a:07:95:27:7d:30:62:fd:46:81:a8:55:39:81:1e:69:52:2c: 03:a6:0d:06:47:84:6b:1e:dd:9b:08:09:65:d7:ca:2c:ab:65: a4:c8:39:e7:ed:60:86:b5:04:13:b1:2d:dd:c4:c5:00:61:fc: f2:a1:55:38:ce:11:0b:9a:32:78:a1:6e:c0:ac:e4:11:19:7a: e1:96:ba:71:ca:a9:01:93:7c:ca:8b:2a:66:2f:dc:03:79:2e: da:ac:c5:b8:f9:1d:d1:64:86:e9:80:51:86:83:42:ad:a0:22: 97:7d:21:45:14:20:76:5e:e1:0a:18:7b:06:aa:57:24:22:df: 8b:48:17:b1:82:d2:70:45:e0:63:93:9e:3d:86:3d:77:9e:43: 2b:3e:2d:97:86:10:5b:91:0a:c4:43:f9:69:f7:42:75:09:8f: e2:5e:24:37:45:ca:b9:b5:b2:42:37:c8:02:1c:f1:a1:29:ec: d0:e2:04:91:0b:92:3e:40:f3:e9:ac:77:7d:9d:46:e1:7e:e5: 25:fb:10:fb:c1:bb:a3:9d:09:23:69:09:40:12:98:a1:5a:78: 58:19:61:9c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB1wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTAwQjIxMTAvBgNVBAUTKDkzQTdEODM1RTEzODU4QkI1OTk1MUMzOTlBNUY5RUFC MEUyRUI5MzEwHhcNMjUwODA0MjAwMjA3WhcNMjUwODExMjAwMjA3WjAYMRYwFAYD VQQDEw02ODkxMTFiZi0yN2JjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHHyqE0z92iwvZoWawmea6dDuvA3cl+AUzBDFShUMfi5F16pff6M48KMaOgT 1Kp4aT7YmzS/IGznA+OWYBCmuBiDslPBH6GTZhU6kEjG7J1/SmBtK6dkroTQmP25 eeTXLD4GHOPS95RbIeAOavdi9jvvekldb/Ez9NrhflVnks7fv/2OTkbVreuztyQG XXN4RKCDYktRaXRQIrODbhrqNaf7YwajYj2n860JVssPVm5achBhpaZ+R68LDWXi NDhJ7HsPQdnfIvgrsBEIg8zkCjOV/EbU+X0uMNLNcabPJyo4kBT/KKnQwGtlLXGs MSu7hNKchlk/w8w41luCkA9lFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL3I+RVR /3awoQC/OuIloE52wQl8MB8GA1UdIwQYMBaAFJOn2DXhOFi7WZUcOZpfnqsOLrkx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMDBCMi8wQUY2RUIyQTcz RTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdMdFpsUnc1bWwtZXF3NHV1 VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s2ZllOZUU0V0x0WmxSdzVtbC1lcXc0dXVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MDBCMi8wQUY2RUIyQTczRTgxMUVBODg1MUY4N0NDNEY5QUUwMi9rNmZZTmVFNFdM dFpsUnc1bWwtZXF3NHV1VEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBOzvpKRRjgDHnFOwYDUra7wJbTodHNB9y3gAXQecKiQL4LJBWaB5Un fTBi/UaBqFU5gR5pUiwDpg0GR4RrHt2bCAll18osq2WkyDnn7WCGtQQTsS3dxMUA YfzyoVU4zhELmjJ4oW7ArOQRGXrhlrpxyqkBk3zKiypmL9wDeS7arMW4+R3RZIbp gFGGg0KtoCKXfSFFFCB2XuEKGHsGqlckIt+LSBexgtJwReBjk549hj13nkMrPi2X hhBbkQrEQ/lp90J1CY/iXiQ3Rcq5tbJCN8gCHPGhKezQ4gSRC5I+QPPprHd9nUbh fuUl+xD7wbujnQkjaQlAEpihWnhYGWGc -----END CERTIFICATE-----Generated at Wed Aug 6 10:57:57 2025 by rpki-client