$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: uwsLb7ifgW7dX7hqzUHHI3ok0qTnnY6VmLBrMeSgiw8= Subject key identifier: 78:F2:8F:04:03:38:E5:31:1E:E6:22:DA:0E:B6:CB:62:DF:B6:7C:69 Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: 9B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: 9A Signing time: Tue 05 Aug 2025 06:56:32 +0000 Manifest this update: Tue 05 Aug 2025 06:56:32 +0000 Manifest next update: Tue 12 Aug 2025 06:56:32 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: aKd/elp5AIrqufMLTm7Z90TyT1+tsCh+zifg/z0jXIU=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 06:56:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Aug 5 06:56:32 2025 GMT Not After : Aug 12 06:56:32 2025 GMT Subject: CN=6891ab20-e666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2e:ba:d6:a3:e5:72:29:c1:ad:fa:07:8c:16: 76:72:9c:e7:b6:32:7c:eb:a4:ac:18:ca:25:81:a4: 37:3b:62:f9:e0:72:a5:6f:93:03:43:87:9d:79:44: 7c:6b:a0:e8:81:d2:ae:b3:98:fe:08:58:f5:ea:0a: e6:ae:3f:aa:36:cf:8c:71:2e:95:e1:84:7d:42:bb: db:d4:d0:21:d9:26:da:4e:b7:b9:3f:91:bc:cd:07: 8d:b9:fb:97:02:c2:0c:4a:12:ed:31:86:3c:34:a5: f2:28:98:5f:54:bc:23:35:09:06:8d:6c:e2:f4:36: 6e:f8:74:8f:6a:14:51:46:6b:38:07:c3:24:09:c1: 7d:40:83:5c:e1:a2:55:10:86:d9:7b:0f:ec:d7:ee: 65:cb:bc:76:89:7d:5b:9d:b0:f7:c5:27:14:48:e8: 70:3f:71:7f:07:6a:64:34:73:b6:01:72:34:20:b6: 68:3e:a3:90:65:a6:df:e4:3d:5e:73:3d:f9:d4:d6: 4d:10:29:ff:a9:25:1c:51:7a:69:da:27:f9:39:63: 9b:f5:25:90:90:c0:5d:d6:fe:3f:0a:34:3d:c1:b5: a5:ac:ac:91:b6:29:1d:72:be:46:93:4b:7a:0e:38: 92:74:12:5b:89:d2:81:2d:7b:9b:56:39:56:d2:61: ed:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F2:8F:04:03:38:E5:31:1E:E6:22:DA:0E:B6:CB:62:DF:B6:7C:69 X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:85:e5:8e:13:ce:4b:58:dc:94:48:5e:99:de:e8:d1:b8:b2: 0d:e1:80:d1:b4:ce:fd:58:a5:07:4e:06:32:3e:52:d8:fe:16: 12:a5:80:96:b3:0e:24:dd:b9:ae:0b:a9:e1:31:d0:98:8e:a1: d9:ee:36:c3:a8:74:56:a6:fb:09:c8:89:7d:ae:43:f9:46:93: e9:c4:34:de:fa:1d:24:41:17:41:f1:2e:0e:a4:89:17:a6:ac: 3a:e4:6a:90:96:91:53:3f:9b:0d:ba:80:5a:6d:3b:a7:85:2a: a6:a5:da:91:b8:8b:89:df:f5:3c:a0:59:51:9b:9e:64:53:6d: 41:63:8a:e5:29:51:6b:55:3f:39:53:f2:b0:88:10:c8:a3:de: 62:d1:6d:18:6d:91:8e:a2:df:78:b8:f9:61:9c:25:90:b9:d4: bd:01:95:88:7d:5d:1c:16:97:48:78:69:87:f3:f6:a4:03:c6: d2:66:01:92:cb:2f:46:89:b4:a8:97:08:80:78:8b:f0:8a:6f: 91:1c:04:18:4b:4a:9f:2d:8d:0f:ac:fd:b3:fb:74:dd:94:fa: 7a:a2:5e:eb:74:35:5c:3e:fc:37:bd:ce:0a:9f:cc:a1:25:f6: 70:74:68:64:33:c1:f9:8c:70:dc:00:fa:04:ad:57:97:23:30: d0:8a:9d:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDcxMTAvBgNVBAUTKEU4NjE0MDAyM0YwQ0EwNUYxNzE0QjhBNzBEQzk5NTVG Rjc5N0JEQjEwHhcNMjUwODA1MDY1NjMyWhcNMjUwODEyMDY1NjMyWjAYMRYwFAYD VQQDEw02ODkxYWIyMC1lNjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAri661qPlcinBrfoHjBZ2cpzntjJ866SsGMolgaQ3O2L54HKlb5MDQ4edeUR8 a6DogdKus5j+CFj16grmrj+qNs+McS6V4YR9Qrvb1NAh2SbaTre5P5G8zQeNufuX AsIMShLtMYY8NKXyKJhfVLwjNQkGjWzi9DZu+HSPahRRRms4B8MkCcF9QINc4aJV EIbZew/s1+5ly7x2iX1bnbD3xScUSOhwP3F/B2pkNHO2AXI0ILZoPqOQZabf5D1e cz351NZNECn/qSUcUXpp2if5OWOb9SWQkMBd1v4/CjQ9wbWlrKyRtikdcr5Gk0t6 DjiSdBJbidKBLXubVjlW0mHtWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHjyjwQD OOUxHuYi2g62y2LftnxpMB8GA1UdIwQYMBaAFOhhQAI/DKBfFxS4pw3JlV/3l72x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0Ny8zM0IyM0Y3RThD OEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9GOFhGTGluRGNtVlhfZVh2 YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0Ny8zM0IyM0Y3RThDOEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9G OFhGTGluRGNtVlhfZVh2YkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgheWOE85LWNyUSF6Z3ujRuLIN4YDRtM79WKUHTgYyPlLY/hYSpYCW sw4k3bmuC6nhMdCYjqHZ7jbDqHRWpvsJyIl9rkP5RpPpxDTe+h0kQRdB8S4OpIkX pqw65GqQlpFTP5sNuoBabTunhSqmpdqRuIuJ3/U8oFlRm55kU21BY4rlKVFrVT85 U/KwiBDIo95i0W0YbZGOot94uPlhnCWQudS9AZWIfV0cFpdIeGmH8/akA8bSZgGS yy9GibSolwiAeIvwim+RHAQYS0qfLY0PrP2z+3TdlPp6ol7rdDVcPvw3vc4Kn8yh JfZwdGhkM8H5jHDcAPoErVeXIzDQip1N -----END CERTIFICATE-----Generated at Thu Aug 7 05:11:06 2025 by rpki-client