$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: D892lS8Z7lpWcDI8t/xObYiONLP7Wrqz8LDJ1cPbOmA= Subject key identifier: A5:0C:E9:84:83:4C:01:6D:BD:3E:C9:C4:52:14:C3:AA:4B:7E:66:E0 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 03B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 03AF Signing time: Tue 05 Aug 2025 01:15:41 +0000 Manifest this update: Tue 05 Aug 2025 01:15:40 +0000 Manifest next update: Tue 12 Aug 2025 01:15:40 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: BYMGi6Y8m6jGRcoE0iOX6UPirbUShPoeEDjj9MuB7mU=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 01:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 947 (0x3b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Aug 5 01:15:40 2025 GMT Not After : Aug 12 01:15:40 2025 GMT Subject: CN=68915b3d-8a73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:b5:62:a9:eb:9a:d3:69:23:58:45:59:f3: d3:f6:81:13:ca:6c:50:e0:45:f2:c7:96:74:db:86: cf:6e:ea:02:4a:a2:1a:91:7c:09:f8:69:24:97:cb: 9d:0e:df:e1:0e:1a:df:97:fc:e8:26:5c:9b:2c:de: 60:e7:36:80:89:81:2c:7f:48:50:41:e4:cd:1c:41: 91:f9:01:8b:1f:22:b6:79:e6:dc:d8:ac:25:f3:a0: 8a:ea:3e:33:a8:e4:3b:fc:f3:36:f4:3e:68:34:96: a8:5e:19:04:2b:aa:af:0c:1e:8a:8a:9c:1e:cd:00: 74:04:e2:6f:da:04:3b:43:d2:8c:aa:60:24:85:06: 25:e4:0e:01:4e:08:56:b4:92:41:4c:90:fb:74:5e: 2f:c3:86:d3:81:19:2c:9e:6e:85:53:1f:b4:96:26: 6b:27:92:a0:f7:6b:16:70:37:17:74:98:ed:99:76: 79:44:b4:47:7d:cf:c4:69:96:7c:7f:7d:dd:85:a1: a3:86:b5:39:ca:3f:45:1d:02:da:59:03:fd:fc:40: 83:04:11:d4:79:cd:19:dd:d7:d1:f3:7c:f0:fb:86: c0:85:49:5b:a3:57:d9:3a:c8:f0:5f:a9:ac:1b:32: 68:4e:19:3f:ab:7a:eb:65:2c:c7:3f:79:f9:dc:10: 62:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:0C:E9:84:83:4C:01:6D:BD:3E:C9:C4:52:14:C3:AA:4B:7E:66:E0 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:17:c4:d0:36:99:ab:35:e4:a9:ca:b5:57:78:12:da:6e:c3: f8:38:44:4c:1d:08:68:e5:ad:49:6b:ea:b7:dc:cb:9a:54:33: 31:e4:0b:b7:45:d4:dc:53:da:3a:e2:53:07:56:4f:32:65:0d: 71:b9:4e:a3:fc:8e:46:71:a2:81:ec:3d:c4:23:08:9d:5a:15: b0:be:81:29:0c:6d:d0:2a:0d:db:23:82:e5:21:d4:d7:ed:2c: 30:fb:84:ce:bf:bc:f1:e2:eb:28:61:bd:e2:ce:10:3c:c2:70: 0c:8d:c0:af:9e:91:48:d4:bf:ac:46:8f:d3:a8:83:fc:c3:cb: c7:ec:dc:f1:65:81:b8:d1:f3:e4:cd:e0:e3:35:80:6a:20:58: 03:d3:ac:4f:d2:d5:c6:51:ec:fe:59:ea:32:32:f9:8f:09:a3: 76:00:b1:e0:ed:3a:53:17:e8:90:dd:cd:ba:4a:eb:f0:75:f4: 06:d0:40:80:11:70:06:02:a7:b4:77:fb:58:27:3e:eb:24:cb: 2b:6d:7c:3b:46:99:98:8a:f4:fb:10:01:c8:98:76:94:fd:f2: a2:4f:e1:59:eb:10:73:8b:c4:e1:b8:b9:d8:f7:eb:95:e6:d4: 17:c9:13:e3:94:b8:88:13:28:4a:6e:19:0e:0f:4f:33:79:a2: a7:fb:c9:93 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwODA1MDExNTQwWhcNMjUwODEyMDExNTQwWjAYMRYwFAYD VQQDEw02ODkxNWIzZC04YTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAosu1YqnrmtNpI1hFWfPT9oETymxQ4EXyx5Z024bPbuoCSqIakXwJ+Gkkl8ud Dt/hDhrfl/zoJlybLN5g5zaAiYEsf0hQQeTNHEGR+QGLHyK2eebc2Kwl86CK6j4z qOQ7/PM29D5oNJaoXhkEK6qvDB6KipwezQB0BOJv2gQ7Q9KMqmAkhQYl5A4BTghW tJJBTJD7dF4vw4bTgRksnm6FUx+0liZrJ5Kg92sWcDcXdJjtmXZ5RLRHfc/EaZZ8 f33dhaGjhrU5yj9FHQLaWQP9/ECDBBHUec0Z3dfR83zw+4bAhUlbo1fZOsjwX6ms GzJoThk/q3rrZSzHP3n53BBiowIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKUM6YSD TAFtvT7JxFIUw6pLfmbgMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSF8TQNpmrNeSpyrVXeBLabsP4OERMHQho5a1Ja+q33MuaVDMx5Au3 RdTcU9o64lMHVk8yZQ1xuU6j/I5GcaKB7D3EIwidWhWwvoEpDG3QKg3bI4LlIdTX 7Sww+4TOv7zx4usoYb3izhA8wnAMjcCvnpFI1L+sRo/TqIP8w8vH7NzxZYG40fPk zeDjNYBqIFgD06xP0tXGUez+WeoyMvmPCaN2ALHg7TpTF+iQ3c26SuvwdfQG0ECA EXAGAqe0d/tYJz7rJMsrbXw7RpmYivT7EAHImHaU/fKiT+FZ6xBzi8ThuLnY9+uV 5tQXyRPjlLiIEyhKbhkOD08zeaKn+8mT -----END CERTIFICATE-----Generated at Wed Aug 6 04:13:12 2025 by rpki-client