$ rpki-client -vvf rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft File: C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft (raw, json) Hash identifier: jCjkiMgpB0Pp5MaKlZvSxfpDpcul7s5jz2cJOYvIc54= Subject key identifier: 20:44:51:57:BE:85:3E:E2:80:AD:03:AD:02:49:ED:8D:2A:BF:6C:16 Authority key identifier: 0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 Certificate issuer: /CN=A91868EC/serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Certificate serial: 012D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft Manifest number: 012A Signing time: Thu 07 Aug 2025 05:06:01 +0000 Manifest this update: Thu 07 Aug 2025 05:06:01 +0000 Manifest next update: Thu 14 Aug 2025 05:06:01 +0000 Files and hashes: 1: C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl (hash: Y1ZqvZHT8DHCgaP9pDc/10lKbPOzd/ZUb1WCc8uFdCA=) 2: 8BDE35DAADB511EEA223FA64C4F9AE02.roa (hash: 5Euxmdyfg42rk8kh2tCEWEITcp7TGJlbx40uBqp19vc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91868EC, serialNumber=0BA8BA40F89734CC3F3AE3ED6774CBD843E2E772 Validity Not Before: Aug 7 05:06:01 2025 GMT Not After : Aug 14 05:06:01 2025 GMT Subject: CN=68943439-4c76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b8:10:1b:2d:d3:68:56:6a:68:ec:8d:2f:03: a2:1b:12:2a:57:ba:c6:6b:38:85:8d:d2:67:c0:51: 46:30:00:88:24:f2:51:51:e3:8f:99:6f:9f:b5:b8: 5d:30:db:0d:c8:4a:7b:ed:d4:7a:f4:41:65:5a:96: a3:7f:96:a5:51:a1:79:4b:04:8e:dd:72:f1:88:fd: da:6a:b3:f0:0c:f7:b0:4d:6f:ed:c9:26:9e:cd:21: 82:e9:69:1e:00:d9:5b:56:dc:88:3a:19:a2:13:82: be:f5:84:9c:3c:bd:15:d3:55:29:38:41:27:69:85: 0c:fa:4f:95:19:24:dc:ee:cc:8e:b7:35:dc:16:23: fa:b4:c1:73:d5:54:42:f1:24:7f:2f:08:25:49:d1: c2:7f:57:59:f9:e3:f6:6f:e0:9c:1e:33:4f:73:4b: 44:99:1c:c2:51:13:36:94:33:64:2d:0c:3f:39:87: 4d:1d:5f:ff:13:b5:a7:44:e4:17:dc:27:d3:dd:20: d9:ba:32:5f:7f:0a:d1:68:f0:ef:6a:59:59:ce:0c: c6:8a:c4:9f:49:47:0d:a2:ea:1f:d7:00:3a:0a:d1: 5e:df:7d:21:74:c2:c2:e8:69:49:c3:e3:9d:de:54: 1a:38:e9:fc:c3:68:23:a9:5f:52:e7:5f:31:fe:52: 50:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:44:51:57:BE:85:3E:E2:80:AD:03:AD:02:49:ED:8D:2A:BF:6C:16 X509v3 Authority Key Identifier: keyid:0B:A8:BA:40:F8:97:34:CC:3F:3A:E3:ED:67:74:CB:D8:43:E2:E7:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6i6QPiXNMw_OuPtZ3TL2EPi53I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91868EC/E057E2B0ADB411EEBEA7E563C4F9AE02/C6i6QPiXNMw_OuPtZ3TL2EPi53I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 25:cc:d4:7b:d9:50:ca:47:04:b1:58:15:03:49:07:54:f3:82: 98:c2:77:e1:c3:f9:0d:ff:65:13:db:4b:62:15:05:a8:89:83: 7b:eb:ec:d6:ea:dc:28:e1:49:5f:16:df:5a:63:7a:fe:e4:f9: cd:77:0d:ce:73:62:1f:b7:24:c3:f4:a9:5b:3b:97:6a:6b:05: 26:97:17:ce:cb:d6:78:44:dd:1a:93:01:ec:00:ab:b3:4e:f2: 42:2a:b2:7c:29:ef:0e:f7:ea:2d:4f:ac:2e:60:ea:21:19:84: cd:8c:58:55:44:ff:89:21:35:19:7e:63:59:b3:fb:51:60:c8: 3f:73:ab:4f:ba:5f:7d:55:88:a2:3d:f9:c3:8b:f5:d6:d3:df: 4e:3d:06:cc:c3:14:2e:1c:99:5d:f7:36:cc:2c:7f:18:79:b0: 9b:fd:da:01:08:db:3c:4e:c0:78:57:73:7a:2d:9a:29:fa:4b: b7:2a:bc:82:d4:cd:55:4e:ce:04:7f:df:01:67:a4:91:a1:81: 71:d8:c9:9d:3c:93:9d:08:41:98:79:6a:06:0e:85:a6:f2:4a: e0:5a:aa:7c:49:52:95:6d:f0:cc:d4:ee:91:4e:f1:41:77:9a: 50:45:bb:50:1b:bf:77:45:bc:f0:a9:51:e5:5d:83:03:36:c3: 14:8c:8a:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODY4RUMxMTAvBgNVBAUTKDBCQThCQTQwRjg5NzM0Q0MzRjNBRTNFRDY3NzRDQkQ4 NDNFMkU3NzIwHhcNMjUwODA3MDUwNjAxWhcNMjUwODE0MDUwNjAxWjAYMRYwFAYD VQQDEw02ODk0MzQzOS00Yzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbgQGy3TaFZqaOyNLwOiGxIqV7rGaziFjdJnwFFGMACIJPJRUeOPmW+ftbhd MNsNyEp77dR69EFlWpajf5alUaF5SwSO3XLxiP3aarPwDPewTW/tySaezSGC6Wke ANlbVtyIOhmiE4K+9YScPL0V01UpOEEnaYUM+k+VGSTc7syOtzXcFiP6tMFz1VRC 8SR/LwglSdHCf1dZ+eP2b+CcHjNPc0tEmRzCURM2lDNkLQw/OYdNHV//E7WnROQX 3CfT3SDZujJffwrRaPDvallZzgzGisSfSUcNouof1wA6CtFe330hdMLC6GlJw+Od 3lQaOOn8w2gjqV9S518x/lJQ6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCBEUVe+ hT7igK0DrQJJ7Y0qv2wWMB8GA1UdIwQYMBaAFAuoukD4lzTMPzrj7Wd0y9hD4udy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjhFQy9FMDU3RTJCMEFE QjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5Nd19PdVB0WjNUTDJFUGk1 M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2aTZRUGlYTk13X091UHRaM1RMMkVQaTUzSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NjhFQy9FMDU3RTJCMEFEQjQxMUVFQkVBN0U1NjNDNEY5QUUwMi9DNmk2UVBpWE5N d19PdVB0WjNUTDJFUGk1M0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAlzNR72VDKRwSxWBUDSQdU84KYwnfhw/kN/2UT20tiFQWoiYN76+zW 6two4UlfFt9aY3r+5PnNdw3Oc2IftyTD9KlbO5dqawUmlxfOy9Z4RN0akwHsAKuz TvJCKrJ8Ke8O9+otT6wuYOohGYTNjFhVRP+JITUZfmNZs/tRYMg/c6tPul99VYii PfnDi/XW099OPQbMwxQuHJld9zbMLH8YebCb/doBCNs8TsB4V3N6LZop+ku3KryC 1M1VTs4Ef98BZ6SRoYFx2MmdPJOdCEGYeWoGDoWm8krgWqp8SVKVbfDM1O6RTvFB d5pQRbtQG793RbzwqVHlXYMDNsMUjIpo -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:13 2025 by rpki-client