$ rpki-client -vvf rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft File: R6cRTih-sdyDXQfpgEXvRvU-fFc.mft (raw, json) Hash identifier: /vQfBuoK28+9PoD/vJVyW24hPJxIYwpKY+0yEmoeSsE= Subject key identifier: A8:03:66:27:56:E5:EE:95:B5:A5:05:D2:9A:44:F3:34:04:19:7B:AC Authority key identifier: 47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 Certificate issuer: /CN=A91C16B5/serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Certificate serial: 1D92 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft Manifest number: 1D83 Signing time: Sat 02 Aug 2025 16:14:55 +0000 Manifest this update: Sat 02 Aug 2025 16:14:54 +0000 Manifest next update: Sat 09 Aug 2025 16:14:54 +0000 Files and hashes: 1: R6cRTih-sdyDXQfpgEXvRvU-fFc.crl (hash: ZEjbKiYRJ3RoH/HUZ4JCAFlwHl0WoAzsTgS0Mp9saS8=) 2: A264F35C8BAC11E7AFBAB71AC4F9AE02.roa (hash: WHJrUmFRBeAq4NFz6Ka5YRkE6nvBwbgHOetasLuBtuE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 16:14:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7570 (0x1d92) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C16B5, serialNumber=47A7114E287EB1DC835D07E98045EF46F53E7C57 Validity Not Before: Aug 2 16:14:54 2025 GMT Not After : Aug 9 16:14:54 2025 GMT Subject: CN=688e397f-cda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:69:45:7c:f8:6b:dd:90:64:9c:b6:06:59:d4: 0c:a1:22:f8:72:b6:23:9e:a3:ed:72:67:fd:ed:66: db:95:39:d2:d6:54:52:65:b2:6f:b1:ba:52:5e:32: 9d:77:ce:45:a1:6a:44:2b:2d:f7:8a:cb:90:d5:00: ca:3a:4c:4f:21:91:2c:a1:48:a2:2d:fe:c5:d8:8e: e5:49:5e:e0:cc:28:4d:78:c1:50:c1:73:c4:d5:78: ca:02:f7:c2:f7:3a:8a:86:d9:1f:76:f4:f2:ad:31: 47:03:75:fd:2d:1b:ad:5f:f5:aa:3d:e9:37:ee:f9: 6f:83:0a:e6:45:28:f1:fc:97:20:91:ba:99:47:0f: 7e:5a:02:51:fa:42:45:d0:77:4f:b8:70:da:6b:00: 20:65:e8:6f:3a:67:ac:df:66:2b:eb:48:f8:6f:85: 18:b6:eb:b1:bb:9e:9c:f0:4a:25:3a:77:5c:77:6f: 24:47:e4:0c:8d:27:aa:9a:a6:62:6e:c8:f6:e4:ad: 71:53:c8:fe:92:4e:b9:1a:8a:b2:27:eb:57:45:18: 4b:a2:52:9e:fa:93:7d:76:f0:83:c0:62:3a:55:2a: e8:d6:33:52:41:f0:cf:56:b8:de:2d:d5:c7:bd:d6: 63:5a:b6:a3:0c:b4:10:00:78:f6:56:4e:e5:d8:b8: a0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:03:66:27:56:E5:EE:95:B5:A5:05:D2:9A:44:F3:34:04:19:7B:AC X509v3 Authority Key Identifier: keyid:47:A7:11:4E:28:7E:B1:DC:83:5D:07:E9:80:45:EF:46:F5:3E:7C:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6cRTih-sdyDXQfpgEXvRvU-fFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C16B5/CA6A55ECAA5A11E6BDC6B77FC4F9AE02/R6cRTih-sdyDXQfpgEXvRvU-fFc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:0a:27:b7:5b:de:28:d2:2b:79:cb:75:d8:42:94:63:f7:31: 75:f2:e2:b5:1a:97:a6:90:c1:73:19:bc:34:ef:c2:10:af:50: 56:80:8c:91:4b:d0:19:8d:2d:1a:de:d7:2a:57:ae:31:52:97: 15:e5:b7:69:ce:67:3d:d7:31:11:d6:b4:56:c8:c5:e9:1b:be: 86:33:7c:c9:40:c9:92:0d:b3:59:f0:d6:de:d3:0f:82:f8:7a: 67:00:79:5d:f7:17:4b:29:58:bf:fd:30:63:e5:a7:aa:b2:96: bc:05:b8:3c:29:31:0f:15:b9:a5:c6:cc:09:de:2e:51:bb:ba: b2:9c:76:5c:91:07:b2:87:84:fd:d1:2b:ef:14:d0:25:ae:54: 61:c6:87:ec:4b:75:d0:76:24:64:68:42:2e:df:32:c1:11:fb: cc:c0:db:6c:d1:a7:71:3a:9a:0b:9a:78:30:7d:30:bc:4a:3f: 50:1a:4d:fa:9f:28:bf:fa:b5:a3:75:73:66:3e:1b:ea:a0:ab: 28:5b:7a:48:51:52:96:74:4f:5b:7d:61:f9:a5:b3:2b:b0:c7: fc:bc:06:5e:3c:3c:41:91:8e:36:6c:12:c1:5b:01:79:f5:8e: bd:85:0f:53:ff:6c:12:f2:27:a4:88:d1:4b:2c:ef:6c:85:f0: 7b:4d:82:72 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICHZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2QjUxMTAvBgNVBAUTKDQ3QTcxMTRFMjg3RUIxREM4MzVEMDdFOTgwNDVFRjQ2 RjUzRTdDNTcwHhcNMjUwODAyMTYxNDU0WhcNMjUwODA5MTYxNDU0WjAYMRYwFAYD VQQDEw02ODhlMzk3Zi1jZGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2lFfPhr3ZBknLYGWdQMoSL4crYjnqPtcmf97WbblTnS1lRSZbJvsbpSXjKd d85FoWpEKy33isuQ1QDKOkxPIZEsoUiiLf7F2I7lSV7gzChNeMFQwXPE1XjKAvfC 9zqKhtkfdvTyrTFHA3X9LRutX/WqPek37vlvgwrmRSjx/JcgkbqZRw9+WgJR+kJF 0HdPuHDaawAgZehvOmes32Yr60j4b4UYtuuxu56c8EolOndcd28kR+QMjSeqmqZi bsj25K1xU8j+kk65GoqyJ+tXRRhLolKe+pN9dvCDwGI6VSro1jNSQfDPVrjeLdXH vdZjWrajDLQQAHj2Vk7l2Lig8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKgDZidW 5e6VtaUF0ppE8zQEGXusMB8GA1UdIwQYMBaAFEenEU4ofrHcg10H6YBF70b1PnxX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTZCNS9DQTZBNTVFQ0FB NUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNkeURYUWZwZ0VYdlJ2VS1m RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1I2Y1JUaWgtc2R5RFhRZnBnRVh2UnZVLWZGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTZCNS9DQTZBNTVFQ0FBNUExMUU2QkRDNkI3N0ZDNEY5QUUwMi9SNmNSVGloLXNk eURYUWZwZ0VYdlJ2VS1mRmMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6Cie3W94o0it5y3XYQpRj9zF18uK1GpemkMFzGbw078IQr1BWgIyR S9AZjS0a3tcqV64xUpcV5bdpzmc91zER1rRWyMXpG76GM3zJQMmSDbNZ8Nbe0w+C +HpnAHld9xdLKVi//TBj5aeqspa8Bbg8KTEPFbmlxswJ3i5Ru7qynHZckQeyh4T9 0SvvFNAlrlRhxofsS3XQdiRkaEIu3zLBEfvMwNts0adxOpoLmngwfTC8Sj9QGk36 nyi/+rWjdXNmPhvqoKsoW3pIUVKWdE9bfWH5pbMrsMf8vAZePDxBkY42bBLBWwF5 9Y69hQ9T/2wS8iekiNFLLO9shfB7TYJy -----END CERTIFICATE-----Generated at Mon Aug 4 11:14:08 2025 by rpki-client