$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: JUxC41jgzUTkVMZmQGgIFH1IIQjVSv9L9KMUqbVS8kM= Subject key identifier: A0:A8:3E:69:BA:81:5A:86:E9:19:8E:34:D7:9C:88:82:7B:AF:6D:2B Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 04D8 Signing time: Tue 05 Aug 2025 00:15:07 +0000 Manifest this update: Tue 05 Aug 2025 00:15:06 +0000 Manifest next update: Tue 12 Aug 2025 00:15:06 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: knon6nnc096ppKqILrOsfgFJigWJV+qJaP0Ow/Ifs2s=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:15:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1245 (0x4dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Aug 5 00:15:06 2025 GMT Not After : Aug 12 00:15:06 2025 GMT Subject: CN=68914d0a-8cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:19:68:93:fd:fd:9b:57:41:9a:7f:4a:47:7f: f1:51:46:4c:b5:f3:39:16:0f:a2:8a:c3:5e:cb:51: a2:54:32:22:85:bd:e4:c1:ef:1d:d7:2f:53:12:ac: 67:37:64:eb:91:d0:6d:8f:29:67:fc:66:2b:43:80: 65:7d:88:41:49:13:4b:86:a6:3c:1a:bf:f4:be:52: e3:a3:3d:9a:08:b8:6f:e8:94:95:97:58:30:99:4c: 59:ba:32:91:bf:a6:48:5d:09:e4:ad:c4:74:bd:25: 95:6b:4e:eb:af:72:41:94:0d:aa:cb:cf:05:4f:51: 6a:a1:81:61:13:53:e7:4b:36:7b:de:d9:20:57:56: 27:cf:8e:d2:f7:a2:66:1e:e2:c2:8b:b4:f8:62:de: 2e:ca:51:2b:5a:ee:c2:84:ba:9c:2f:a6:56:7a:9e: c1:88:2c:ca:13:b9:c2:90:a5:b4:55:f8:04:10:83: 52:56:6d:a2:f0:41:b1:f7:bd:b2:5d:7e:1b:b0:1d: 4f:f0:71:d4:38:78:f2:c3:41:85:6e:a5:15:a5:dd: c5:f8:01:2d:d4:80:cc:c3:42:67:ce:98:bc:54:07: dd:d6:02:04:60:0b:f8:33:4a:25:50:5a:e1:8c:18: df:29:17:4a:07:78:ae:46:45:2d:70:54:ab:41:dc: c7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A8:3E:69:BA:81:5A:86:E9:19:8E:34:D7:9C:88:82:7B:AF:6D:2B X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:4f:f8:74:bb:e9:84:48:30:ab:17:8d:49:51:13:48:4c:ef: 62:d3:af:81:69:0f:97:20:95:bb:e3:de:a4:99:82:62:f0:6a: 12:89:b3:67:d9:30:8f:92:1f:f6:c5:3a:b3:d6:9e:17:4f:5c: 8c:6e:47:64:07:87:88:f1:9f:05:15:b6:6b:26:64:f7:03:e3: 65:dd:50:a6:0d:fd:74:60:57:31:0a:d9:7b:ee:f8:72:cd:47: f4:58:11:f9:4f:13:dd:1a:3b:c8:d3:40:1e:99:ba:cb:98:a4: 75:22:42:20:71:2a:c5:ab:1f:21:c5:10:a1:15:d8:c7:e5:4f: e7:cc:86:ef:52:2d:c3:a4:6e:c9:f2:55:18:24:7d:c0:90:68: 44:f2:fb:53:08:7e:ae:2d:bc:1e:87:ac:c3:86:6b:18:03:b9: d8:37:12:77:d2:45:fd:ee:66:b9:73:2d:54:36:df:d7:34:50: fb:39:43:0c:10:9d:2d:5d:05:50:86:cd:a2:fc:4f:72:f2:a7: 2b:4d:55:e9:69:c8:8e:33:6c:f6:37:bd:3c:a6:7e:f2:c3:b9: e6:1f:28:c2:a5:7a:b0:c6:db:b3:b6:81:e8:89:fd:8d:a8:b0: 7b:71:bc:29:d1:f6:67:83:47:51:08:c2:44:74:99:18:85:0b: 15:26:f5:ca -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwODA1MDAxNTA2WhcNMjUwODEyMDAxNTA2WjAYMRYwFAYD VQQDEw02ODkxNGQwYS04Y2I3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwRlok/39m1dBmn9KR3/xUUZMtfM5Fg+iisNey1GiVDIihb3kwe8d1y9TEqxn N2TrkdBtjyln/GYrQ4BlfYhBSRNLhqY8Gr/0vlLjoz2aCLhv6JSVl1gwmUxZujKR v6ZIXQnkrcR0vSWVa07rr3JBlA2qy88FT1FqoYFhE1PnSzZ73tkgV1Ynz47S96Jm HuLCi7T4Yt4uylErWu7ChLqcL6ZWep7BiCzKE7nCkKW0VfgEEINSVm2i8EGx972y XX4bsB1P8HHUOHjyw0GFbqUVpd3F+AEt1IDMw0Jnzpi8VAfd1gIEYAv4M0olUFrh jBjfKRdKB3iuRkUtcFSrQdzHHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKCoPmm6 gVqG6RmONNeciIJ7r20rMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgT/h0u+mESDCrF41JURNITO9i06+BaQ+XIJW7496kmYJi8GoSibNn 2TCPkh/2xTqz1p4XT1yMbkdkB4eI8Z8FFbZrJmT3A+Nl3VCmDf10YFcxCtl77vhy zUf0WBH5TxPdGjvI00AembrLmKR1IkIgcSrFqx8hxRChFdjH5U/nzIbvUi3DpG7J 8lUYJH3AkGhE8vtTCH6uLbweh6zDhmsYA7nYNxJ30kX97ma5cy1UNt/XNFD7OUMM EJ0tXQVQhs2i/E9y8qcrTVXpaciOM2z2N708pn7yw7nmHyjCpXqwxtuztoHoif2N qLB7cbwp0fZng0dRCMJEdJkYhQsVJvXK -----END CERTIFICATE-----Generated at Wed Aug 6 13:17:20 2025 by rpki-client