$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: rluLFluKD0+Ao2SFrDs8Q8i+5/6E6I7H72F5fPdVBGc= Subject key identifier: 9C:0A:FD:E9:1F:EE:19:1B:4E:0A:79:27:1B:C1:6F:5B:91:E1:69:1D Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 7A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 75 Signing time: Thu 07 Aug 2025 07:33:40 +0000 Manifest this update: Thu 07 Aug 2025 07:33:39 +0000 Manifest next update: Thu 14 Aug 2025 07:33:39 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: cAFcZIjrVkTFUVnK7rhAOOOaFhJanUDil9OQfo2nrjU=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: vja+a7NVCjcQj64L0y6ot3hr8lpW0YLqwI3TCyIsiEI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Aug 7 07:33:39 2025 GMT Not After : Aug 14 07:33:39 2025 GMT Subject: CN=689456d3-9f97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:2c:40:b1:21:52:a1:dc:22:4c:bf:d7:2a: c5:30:9e:c4:33:02:52:b0:e1:a4:7d:b6:0e:bc:65: 33:5c:dd:13:3b:d1:8b:ee:07:b6:de:08:9c:83:1d: 31:29:49:33:d3:9e:84:b0:92:2e:cc:51:3d:7d:b5: a8:49:f2:75:e8:71:24:89:05:7f:86:91:3b:a5:24: d2:ef:18:49:72:75:2d:8c:3b:f9:06:15:f4:04:c4: 3c:8d:e2:5b:fa:5a:4a:c8:63:50:f0:99:ee:d1:d8: 2c:9c:f4:ac:2a:d8:8b:05:c3:90:f4:8f:a5:a9:80: 35:7e:e9:2e:0c:59:ef:c6:d9:31:e1:52:ed:f5:fe: 50:e7:a7:ef:ac:b4:68:c1:63:2c:59:ff:55:78:7e: f5:bf:6a:32:26:90:27:ff:f6:26:0e:f4:a3:3c:e0: c7:67:77:fd:54:ae:98:d7:59:7f:60:b8:c2:9c:99: 6f:26:f5:ea:83:b1:84:17:0b:e2:75:84:c9:f7:5c: 99:9b:4b:7d:35:9c:07:e9:81:12:25:fd:d4:26:2b: a1:a6:1d:48:8a:64:b5:d8:24:6b:c0:60:d4:49:dc: a3:e1:e7:84:c0:55:5d:f9:e0:64:39:d3:6d:08:12: d0:fc:e7:75:b5:2f:30:2f:8f:b8:ac:95:89:52:4b: 2b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:0A:FD:E9:1F:EE:19:1B:4E:0A:79:27:1B:C1:6F:5B:91:E1:69:1D X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:f6:15:b6:1d:62:8c:fa:12:73:93:9a:b6:e5:9d:62:9b:f4: 44:d1:ca:1e:30:e8:aa:0a:4a:67:d3:61:20:1b:67:3b:28:db: 04:8d:1b:ec:65:85:a7:7a:ee:4e:8a:f5:98:0a:9f:74:05:65: 3f:a7:42:23:8c:76:d9:c8:a8:f7:9a:f8:2d:3b:3c:28:88:c6: 9a:cd:4a:7e:82:06:ed:08:b8:3f:94:19:bb:54:6f:96:30:fb: a3:99:1a:55:05:08:24:0f:de:8c:de:ad:31:a4:7a:ce:37:6f: 4f:23:45:e8:a2:10:f6:dc:85:32:2a:05:36:3d:e8:e2:e9:2f: 11:62:44:00:1e:d0:f6:4e:25:f0:be:c1:0b:c2:94:50:cd:f2: 5a:95:7b:ea:b4:c1:6e:69:cf:05:df:90:11:7d:c5:95:20:0e: 54:ad:cc:33:51:f1:7d:f4:7f:a8:b8:90:55:6f:23:a6:3f:bb: df:a6:5f:24:f9:6a:74:bf:8a:88:59:34:49:63:93:6a:a7:a1: 41:3b:b6:1e:e8:01:ba:c9:73:67:aa:f0:57:bd:03:4e:76:63: 5b:08:ae:39:4a:e2:1a:9b:aa:08:56:09:13:74:2c:66:3f:11: 6b:c5:bd:a0:2c:f8:e7:5a:78:b5:51:be:ae:e2:58:89:eb:f6: e0:00:54:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA4MDcwNzMzMzlaFw0yNTA4MTQwNzMzMzlaMBgxFjAUBgNV BAMTDTY4OTQ1NmQzLTlmOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCqPyxAsSFSodwiTL/XKsUwnsQzAlKw4aR9tg68ZTNc3RM70YvuB7beCJyDHTEp STPTnoSwki7MUT19tahJ8nXocSSJBX+GkTulJNLvGElydS2MO/kGFfQExDyN4lv6 WkrIY1Dwme7R2Cyc9Kwq2IsFw5D0j6WpgDV+6S4MWe/G2THhUu31/lDnp++stGjB YyxZ/1V4fvW/ajImkCf/9iYO9KM84Mdnd/1UrpjXWX9guMKcmW8m9eqDsYQXC+J1 hMn3XJmbS301nAfpgRIl/dQmK6GmHUiKZLXYJGvAYNRJ3KPh54TAVV354GQ5020I EtD853W1LzAvj7islYlSSytPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnAr96R/u GRtOCnknG8FvW5HhaR0wHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5 MDgzL0MwNkYyRTQyRDFCMDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2Ny UlVQb3h0RTNKUElxNEplby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGH2FbYdYoz6EnOTmrblnWKb9ETRyh4w6KoKSmfTYSAbZzso2wSNG+xl had67k6K9ZgKn3QFZT+nQiOMdtnIqPea+C07PCiIxprNSn6CBu0IuD+UGbtUb5Yw +6OZGlUFCCQP3ozerTGkes43b08jReiiEPbchTIqBTY96OLpLxFiRAAe0PZOJfC+ wQvClFDN8lqVe+q0wW5pzwXfkBF9xZUgDlStzDNR8X30f6i4kFVvI6Y/u9+mXyT5 anS/iohZNEljk2qnoUE7th7oAbrJc2eq8Fe9A052Y1sIrjlK4hqbqghWCRN0LGY/ EWvFvaAs+OdaeLVRvq7iWInr9uAAVII= -----END CERTIFICATE-----Generated at Sat Aug 9 01:16:26 2025 by rpki-client