$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: duqmiOnjautoDLWr5R43tjuUJIse6iI6sAQNEMUS090= Subject key identifier: 58:9B:11:C2:3D:B5:66:87:8A:E1:4B:02:CA:A7:C4:F4:06:62:E9:71 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 011A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 0112 Signing time: Sat 09 Aug 2025 05:26:12 +0000 Manifest this update: Sat 09 Aug 2025 05:26:12 +0000 Manifest next update: Sat 16 Aug 2025 05:26:12 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: j/EWlBw5EbKy/bhSyooQwsIAn9c6q/MAP8lqfbcDCkU=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Aug 9 05:26:12 2025 GMT Not After : Aug 16 05:26:12 2025 GMT Subject: CN=6896dbf4-0cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:49:76:bb:15:3a:a0:24:f3:43:49:aa:58: 27:1e:68:a7:12:38:df:18:6e:13:b6:f0:26:a2:73: 4d:df:14:04:70:aa:f8:b2:68:f2:cb:16:d5:31:85: c2:e7:53:cf:27:af:01:54:f2:21:ca:4f:d9:31:59: 41:aa:97:25:a4:87:13:8e:25:09:da:b7:6a:7e:48: bb:40:80:8b:e8:9b:58:59:41:fc:af:5f:70:f2:80: 27:80:89:e0:15:5b:84:c0:03:30:80:f3:5c:85:fa: 3c:8b:36:f5:8d:bd:df:5b:a6:84:3e:16:d4:26:4a: 26:e2:cf:59:50:23:e8:45:f1:f3:17:20:80:b7:01: 76:46:68:4e:38:6f:44:b3:60:fb:93:13:70:ce:d0: 60:8c:b1:c5:b3:fe:60:28:64:3a:7e:a9:9a:0b:3f: 8b:2a:a1:3a:fc:4d:02:5e:f9:57:b7:47:bd:a5:35: c2:5c:aa:3b:64:92:d5:a3:e5:21:6d:40:3e:82:5b: 9e:06:a3:4f:0e:03:fb:92:46:1a:3c:a5:04:69:0d: 66:25:06:f9:ca:b4:35:85:96:d9:58:42:a0:4a:2c: a5:48:f5:a8:cc:21:a0:6b:aa:7c:6f:66:ba:f8:ef: 60:fa:7e:28:a0:cf:22:ec:e7:39:10:69:c6:11:2b: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9B:11:C2:3D:B5:66:87:8A:E1:4B:02:CA:A7:C4:F4:06:62:E9:71 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:5a:c6:f2:db:d8:8f:96:66:92:62:57:5f:74:ad:9d:f6:87: b3:52:f1:cf:95:a2:48:df:d6:20:fc:8b:cb:78:5a:49:91:59: bf:99:c4:96:b0:10:21:3a:f7:8d:c3:a7:d8:a4:4f:10:a8:ee: b0:e4:2c:fa:80:9a:6b:69:7f:22:8c:b4:c7:cb:f6:a2:c0:ce: e1:a8:0f:7f:1d:11:7a:63:62:b4:8c:1e:b1:97:75:99:9f:6c: af:78:a2:bb:79:90:3d:67:a8:f8:7d:86:a1:c5:85:9b:24:05: 39:3c:f6:a1:53:1e:f5:73:02:e5:16:82:86:d8:93:e7:39:bf: 3e:47:d5:3a:c0:9d:92:54:5b:e0:67:ad:c8:30:c6:a8:2e:1a: 51:54:dc:af:6b:d4:b5:2b:8a:fd:7c:44:ce:49:93:9f:8c:b3: 61:5b:a4:5a:06:24:ff:88:f2:1a:76:99:08:b6:2d:42:e4:06: 8a:2a:2b:1b:29:89:cf:24:18:cb:ad:43:ff:31:ae:c3:5c:ab: 3a:b5:b4:96:fc:bb:74:dc:e9:dd:42:2c:b0:15:c0:2c:a7:0f: 73:8d:70:e7:04:a0:62:5f:f0:f9:61:3d:03:c2:35:85:0d:65: 05:f4:ac:db:44:b6:ea:d5:84:f7:de:36:14:5c:b8:e1:84:d3: 9e:10:fa:5e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUwODA5MDUyNjEyWhcNMjUwODE2MDUyNjEyWjAYMRYwFAYD VQQDEw02ODk2ZGJmNC0wY2VhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzBJdrsVOqAk80NJqlgnHminEjjfGG4TtvAmonNN3xQEcKr4smjyyxbVMYXC 51PPJ68BVPIhyk/ZMVlBqpclpIcTjiUJ2rdqfki7QICL6JtYWUH8r19w8oAngIng FVuEwAMwgPNchfo8izb1jb3fW6aEPhbUJkom4s9ZUCPoRfHzFyCAtwF2RmhOOG9E s2D7kxNwztBgjLHFs/5gKGQ6fqmaCz+LKqE6/E0CXvlXt0e9pTXCXKo7ZJLVo+Uh bUA+glueBqNPDgP7kkYaPKUEaQ1mJQb5yrQ1hZbZWEKgSiylSPWozCGga6p8b2a6 +O9g+n4ooM8i7Oc5EGnGESv6sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFibEcI9 tWaHiuFLAsqnxPQGYulxMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA7Wsby29iPlmaSYldfdK2d9oezUvHPlaJI39Yg/IvLeFpJkVm/mcSW sBAhOveNw6fYpE8QqO6w5Cz6gJpraX8ijLTHy/aiwM7hqA9/HRF6Y2K0jB6xl3WZ n2yveKK7eZA9Z6j4fYahxYWbJAU5PPahUx71cwLlFoKG2JPnOb8+R9U6wJ2SVFvg Z63IMMaoLhpRVNyva9S1K4r9fETOSZOfjLNhW6RaBiT/iPIadpkIti1C5AaKKisb KYnPJBjLrUP/Ma7DXKs6tbSW/Lt03OndQiywFcAspw9zjXDnBKBiX/D5YT0DwjWF DWUF9KzbRLbq1YT33jYUXLjhhNOeEPpe -----END CERTIFICATE-----Generated at Sun Aug 10 18:29:09 2025 by rpki-client