$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json) Hash identifier: D/n3nRBFKMRyb2D2/bmFlP8Oumz+ROpEm+bD+GMCIeY= Subject key identifier: A8:36:1E:08:9B:29:18:CA:CF:A3:D4:B8:D9:4F:68:48:7E:39:E9:DE Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Certificate serial: 0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft Manifest number: 08 Signing time: Tue 05 Aug 2025 08:53:49 +0000 Manifest this update: Tue 05 Aug 2025 08:53:49 +0000 Manifest next update: Tue 12 Aug 2025 08:53:49 +0000 Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: vrn4hs4RRyGvLsOuM5Mmax8L18eh2g/DhEvf61arKVE=) 2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:53:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Validity Not Before: Aug 5 08:53:49 2025 GMT Not After : Aug 12 08:53:49 2025 GMT Subject: CN=6891c69d-ab33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:92:1d:76:1c:01:83:4f:b1:ca:1a:bf:15:f5: 78:d6:53:4e:6b:3e:74:15:74:06:2a:f6:05:43:ad: 62:14:1a:11:83:64:a4:46:f4:5e:e6:1f:32:cb:84: 9e:2c:ba:15:8e:57:f9:5d:b2:92:cc:fc:f5:6d:74: c0:d0:6a:0f:12:0a:43:6c:44:85:ab:88:46:fd:94: a1:21:9f:9a:86:6b:d8:51:aa:91:06:ca:32:0b:c9: 77:0f:fc:f3:61:6b:2c:10:89:86:77:26:0c:cf:99: 3f:ab:74:99:25:32:ca:e3:82:9d:cd:e6:e3:14:9e: 2d:b5:23:6b:17:8f:c0:7d:81:7e:2a:bc:e1:1c:61: 88:07:ee:ca:05:fb:8b:96:c5:12:59:25:ea:eb:60: bc:da:d3:b1:f0:4e:b5:38:c1:b9:b9:07:63:8c:e5: e3:bd:c8:5d:04:b1:d1:ab:8f:9f:ac:7e:46:d5:ee: 78:3c:65:ed:d0:81:56:73:85:48:42:92:ec:97:1d: c6:06:41:5e:2c:74:0a:49:29:f1:79:29:07:21:12: 7b:56:62:29:0c:b3:73:48:cc:8c:ea:bd:03:75:8e: 7a:4a:2e:a2:3b:ba:28:9d:0c:a7:47:cd:3e:c0:69: bf:3a:80:49:f5:41:28:aa:dd:df:67:e6:83:10:82: 22:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:36:1E:08:9B:29:18:CA:CF:A3:D4:B8:D9:4F:68:48:7E:39:E9:DE X509v3 Authority Key Identifier: keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:5a:ec:55:0a:00:b9:30:40:00:76:47:b4:34:ee:74:8e:64: 98:c6:a2:31:71:6d:af:b8:de:1a:c3:3b:fd:c1:36:f4:be:2a: 87:fe:fe:76:1d:85:22:fa:fb:dd:51:e3:51:a5:74:f2:2b:3d: bf:4d:3b:33:d2:c4:20:f1:10:00:b8:b1:ea:5e:50:3b:bc:78: 8c:e3:51:43:9c:94:e7:55:60:a9:91:3d:88:41:3a:1f:9c:45: 0e:89:57:0b:f4:8c:f1:87:e9:66:56:cc:4e:08:a0:07:19:ac: 19:e5:55:a0:26:29:a8:1c:80:7f:89:c0:de:ee:e2:db:9a:70: c6:f3:53:28:fd:00:a9:4c:49:73:49:a2:e3:f4:bd:1e:ee:5d: 14:ef:fb:b2:6e:11:ec:46:82:e9:e9:79:af:24:ed:1d:dd:08: 2b:df:3b:ed:d8:d3:6b:38:f9:e0:18:f5:ee:e9:45:b3:81:79: ce:17:44:76:ec:8a:89:45:a0:38:ee:cc:14:24:7a:66:72:06: 3f:ff:d2:aa:31:10:4e:a5:f9:17:02:29:d2:e2:7c:22:46:6a: 56:49:da:85:34:5d:fe:3d:d6:48:94:90:d2:0d:0e:08:af:43: a1:cc:76:10:bc:c9:a1:0e:53:c0:81:d9:8a:6f:74:9c:1e:28: f9:c9:9a:35 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4 MDk3NkQ1QjAeFw0yNTA4MDUwODUzNDlaFw0yNTA4MTIwODUzNDlaMBgxFjAUBgNV BAMTDTY4OTFjNjlkLWFiMzMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3kh12HAGDT7HKGr8V9XjWU05rPnQVdAYq9gVDrWIUGhGDZKRG9F7mHzLLhJ4s uhWOV/ldspLM/PVtdMDQag8SCkNsRIWriEb9lKEhn5qGa9hRqpEGyjILyXcP/PNh aywQiYZ3JgzPmT+rdJklMsrjgp3N5uMUni21I2sXj8B9gX4qvOEcYYgH7soF+4uW xRJZJerrYLza07HwTrU4wbm5B2OM5eO9yF0EsdGrj5+sfkbV7ng8Ze3QgVZzhUhC kuyXHcYGQV4sdApJKfF5KQchEntWYikMs3NIzIzqvQN1jnpKLqI7uiidDKdHzT7A ab86gEn1QSiq3d9n5oMQgiLzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUqDYeCJsp GMrPo9S42U9oSH456d4wHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2Lzg4MTJGQkU0NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxt eGZsQUEtb21tVm9DWGJWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFZa7FUKALkwQAB2R7Q07nSOZJjGojFxba+43hrDO/3BNvS+Kof+/nYd hSL6+91R41GldPIrPb9NOzPSxCDxEAC4sepeUDu8eIzjUUOclOdVYKmRPYhBOh+c RQ6JVwv0jPGH6WZWzE4IoAcZrBnlVaAmKagcgH+JwN7u4tuacMbzUyj9AKlMSXNJ ouP0vR7uXRTv+7JuEexGgunpea8k7R3dCCvfO+3Y02s4+eAY9e7pRbOBec4XRHbs iolFoDjuzBQkemZyBj//0qoxEE6l+RcCKdLifCJGalZJ2oU0Xf491kiUkNINDgiv Q6HMdhC8yaEOU8CB2YpvdJweKPnJmjU= -----END CERTIFICATE-----Generated at Thu Aug 7 05:15:20 2025 by rpki-client