$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: ywKVC8ilKobDGEYldoVX9GeP6TouzEqBbgQO0ZUTd/w= Subject key identifier: AB:F0:8C:7E:E1:CC:55:E4:9D:C5:4C:AA:55:D3:E7:97:0F:28:8E:9A Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1AD9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1AC0 Signing time: Mon 04 Aug 2025 16:28:22 +0000 Manifest this update: Mon 04 Aug 2025 16:28:21 +0000 Manifest next update: Mon 11 Aug 2025 16:28:21 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: bXRjXlwESsxWe/ehgK2zbIVwIZwfXtdgy94Yt3muXy4=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 16:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6873 (0x1ad9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Aug 4 16:28:21 2025 GMT Not After : Aug 11 16:28:21 2025 GMT Subject: CN=6890dfa5-2ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:b0:b9:7e:f3:81:dc:32:2e:a5:62:3d:46: 99:08:4d:e8:ac:4b:84:0e:69:84:b3:1f:60:c1:f5: e9:53:a7:eb:de:1a:e2:34:a9:63:06:ca:85:5c:a7: 37:5e:6d:c8:e9:e7:f7:75:4c:28:d2:17:9b:06:96: 03:3b:a3:97:06:4e:a0:f0:c6:75:32:3c:4c:9e:8c: 73:80:bd:b8:af:9b:86:e8:a6:c5:14:d3:0f:e2:bc: 02:90:05:0a:39:06:20:7d:cc:cc:8e:c2:af:6b:11: 0f:65:7a:1f:9b:c5:f4:37:9c:86:3a:4f:65:3e:61: 00:14:3a:43:26:9f:0f:bd:2e:0b:23:fd:7b:75:ab: db:c0:b0:48:63:e7:89:51:e3:10:ec:8e:3d:e4:6b: 2e:97:41:3c:67:a4:db:d4:5b:c0:e2:84:3a:7a:af: 72:70:a4:49:ed:aa:00:dc:4d:26:9b:71:52:68:b2: ea:f6:79:1c:32:cb:d0:06:4a:59:43:b8:89:54:a0: 61:33:d5:68:17:04:14:45:dc:2d:1b:1b:2f:7d:61: c6:3f:96:fa:2a:90:cd:71:b3:a0:c1:2a:d8:7e:3a: 4a:18:13:f2:b9:18:49:25:11:a7:61:f7:50:1a:41: 55:78:45:e4:de:a5:d4:5f:4b:f6:02:8c:31:f2:0a: 7f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F0:8C:7E:E1:CC:55:E4:9D:C5:4C:AA:55:D3:E7:97:0F:28:8E:9A X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:d3:90:5d:f7:a2:de:df:41:f2:f1:64:36:37:fd:f8:35:b4: 44:50:cb:f0:b8:0c:cd:9e:bd:7d:53:ed:12:aa:fe:1d:e2:15: 19:cf:55:55:75:55:41:b7:56:6a:a5:71:78:22:4f:21:c1:26: 23:c1:94:01:d1:db:e2:cc:a7:de:c1:91:e8:cf:62:31:17:a0: e7:74:c3:b4:28:71:c9:a3:de:6c:92:b6:9f:d3:90:ee:56:6c: b8:ac:4d:b5:27:9e:56:da:b7:5e:e9:17:f7:e1:71:57:86:6f: de:5f:14:31:82:da:82:1b:c5:1f:fe:e0:3f:19:12:46:49:50: a9:06:8c:6c:94:6a:18:5c:23:b2:65:0c:43:8a:b6:1c:86:13: a8:11:7b:b1:27:e3:73:ef:fb:ee:d1:72:12:e3:12:e7:38:a8: 21:8e:eb:84:13:12:16:f9:b1:ee:f3:33:57:e8:03:4e:83:ee: d4:1a:bd:fb:d8:28:93:33:9f:f4:8e:92:9d:ec:8a:2d:c8:71: bd:2c:13:4d:96:b1:91:41:7e:03:57:a5:a0:85:6a:c7:53:b2: a8:88:79:aa:32:11:bb:f0:1e:b1:bd:3e:af:5c:75:12:18:6c: 55:18:d4:da:0a:3e:e6:80:7b:f8:14:7f:cb:c7:0c:dc:fe:e0: 93:b3:7d:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGtkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjUwODA0MTYyODIxWhcNMjUwODExMTYyODIxWjAYMRYwFAYD VQQDEw02ODkwZGZhNS0yZmY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TuwuX7zgdwyLqViPUaZCE3orEuEDmmEsx9gwfXpU6fr3hriNKljBsqFXKc3 Xm3I6ef3dUwo0hebBpYDO6OXBk6g8MZ1MjxMnoxzgL24r5uG6KbFFNMP4rwCkAUK OQYgfczMjsKvaxEPZXofm8X0N5yGOk9lPmEAFDpDJp8PvS4LI/17davbwLBIY+eJ UeMQ7I495Gsul0E8Z6Tb1FvA4oQ6eq9ycKRJ7aoA3E0mm3FSaLLq9nkcMsvQBkpZ Q7iJVKBhM9VoFwQURdwtGxsvfWHGP5b6KpDNcbOgwSrYfjpKGBPyuRhJJRGnYfdQ GkFVeEXk3qXUX0v2Aowx8gp/mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKvwjH7h zFXkncVMqlXT55cPKI6aMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv05Bd96Le30Hy8WQ2N/34NbREUMvwuAzNnr19U+0Sqv4d4hUZz1VV dVVBt1ZqpXF4Ik8hwSYjwZQB0dvizKfewZHoz2IxF6DndMO0KHHJo95skraf05Du Vmy4rE21J55W2rde6Rf34XFXhm/eXxQxgtqCG8Uf/uA/GRJGSVCpBoxslGoYXCOy ZQxDirYchhOoEXuxJ+Nz7/vu0XIS4xLnOKghjuuEExIW+bHu8zNX6ANOg+7UGr37 2CiTM5/0jpKd7IotyHG9LBNNlrGRQX4DV6WghWrHU7KoiHmqMhG78B6xvT6vXHUS GGxVGNTaCj7mgHv4FH/Lxwzc/uCTs31o -----END CERTIFICATE-----Generated at Wed Aug 6 06:05:38 2025 by rpki-client