$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft File: -2uUY2HwxcguKwZ0DUuosLmTU_g.mft (raw, json) Hash identifier: RByLOj685j1ylcfSkx3yloQbHw01XIqpFf1DPR1+k/w= Subject key identifier: 71:16:A4:A3:7D:D9:71:B9:B7:D0:EE:43:AF:E8:CB:C3:4C:84:EE:04 Authority key identifier: FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 Certificate issuer: /CN=A91C6A35/serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Certificate serial: 6A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft Manifest number: 69 Signing time: Sat 09 Aug 2025 07:27:15 +0000 Manifest this update: Sat 09 Aug 2025 07:27:15 +0000 Manifest next update: Sat 16 Aug 2025 07:27:15 +0000 Files and hashes: 1: -2uUY2HwxcguKwZ0DUuosLmTU_g.crl (hash: wcQdiFD6SZZ6ldu8KPTun/+jyQ41lmIspBWSQiG5Nek=) 2: 06D77958D49411EFA8DF5E69C4F9AE02.roa (hash: SIysPbQ0shw6SImSP7LGItvtceoka+GBhE2dzjDub+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 106 (0x6a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6A35, serialNumber=FB6B946361F0C5C82E2B06740D4BA8B0B99353F8 Validity Not Before: Aug 9 07:27:15 2025 GMT Not After : Aug 16 07:27:15 2025 GMT Subject: CN=6896f853-aa76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:9a:a0:94:cf:1b:4d:40:df:ee:b9:49:0a:be: 97:66:42:64:25:ee:58:1a:42:51:84:77:e7:cf:60: c2:93:4a:20:94:6d:ff:79:eb:59:c0:44:fd:98:e2: 2f:21:ff:66:f9:03:8b:af:b6:36:73:0f:50:98:4d: ad:31:fa:c9:c1:10:7c:08:0e:6c:db:37:39:41:8c: 8a:b3:b7:96:2a:a2:9c:4d:37:17:2c:eb:2d:ce:c3: 2d:f1:20:f1:05:e1:ea:02:a1:83:bd:68:f0:25:1a: df:d5:01:66:b9:53:1c:67:eb:8e:bf:e8:5d:c5:19: f1:ca:30:3b:35:8b:cd:71:cd:02:e4:a6:69:11:61: 38:b3:ca:28:ba:ff:79:f5:df:60:5c:30:ee:7e:53: 54:fd:1d:7f:96:12:ee:f5:6a:2c:ef:e3:5d:17:0f: fc:6e:a7:5a:fc:e0:87:e1:9c:ce:7f:50:a7:81:1a: cb:99:48:d5:a7:22:bf:4e:13:78:39:e4:29:ef:49: a9:2a:53:a0:18:56:bf:79:5e:1c:77:58:4e:5b:15: 93:8a:88:95:72:47:4a:a9:12:1e:52:98:60:a3:fd: 6c:b6:7c:e4:a2:8f:ab:86:42:86:4d:8f:4e:6b:17: 31:62:c3:9d:02:4a:7d:02:f6:4b:c6:bd:32:de:02: 81:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:16:A4:A3:7D:D9:71:B9:B7:D0:EE:43:AF:E8:CB:C3:4C:84:EE:04 X509v3 Authority Key Identifier: keyid:FB:6B:94:63:61:F0:C5:C8:2E:2B:06:74:0D:4B:A8:B0:B9:93:53:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-2uUY2HwxcguKwZ0DUuosLmTU_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6A35/A159F782D49211EFB564DE62C4F9AE02/-2uUY2HwxcguKwZ0DUuosLmTU_g.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:1f:43:2c:91:1a:9b:3c:a2:6d:d9:4f:5b:e3:82:82:46:db: 5e:88:58:a9:03:ae:4d:c6:1c:26:7f:91:32:5b:65:2b:d4:4b: 95:83:fa:05:e6:b1:7f:bf:5f:e8:8a:40:bc:84:46:1b:a5:b9: 7d:6e:c4:93:fd:4a:ee:49:2a:08:aa:b5:4b:66:82:2f:3c:6c: 80:a6:3b:ed:20:4e:cc:84:4b:be:57:70:ac:bc:78:59:13:15: 60:61:57:73:4c:9c:91:fb:45:7d:88:ac:e3:86:2a:5e:e3:c8: 7a:fb:1d:82:74:93:7d:d9:15:56:18:34:1a:37:25:01:87:06: 3f:14:82:7f:25:03:c9:58:1b:8a:ea:93:63:6c:45:5d:44:37: 28:7a:76:9c:d8:83:56:a1:34:52:3c:04:8c:6a:ad:40:f5:07: ee:31:22:20:be:1b:b5:34:41:5a:26:3b:eb:e5:73:54:84:5a: e6:84:ad:ca:8b:73:1a:b8:0f:5c:38:06:72:33:35:04:1f:a3: 83:de:76:83:5a:68:6e:0d:55:98:f3:61:cc:58:20:89:a8:a9: 41:27:10:c4:f8:df:ee:2c:38:3b:41:49:45:08:1a:2b:76:da: 36:f7:34:61:5f:77:f4:b6:e7:f2:5d:c1:5d:e2:67:8d:67:d7: e9:a7:05:fe -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NkEzNTExMC8GA1UEBRMoRkI2Qjk0NjM2MUYwQzVDODJFMkIwNjc0MEQ0QkE4QjBC OTkzNTNGODAeFw0yNTA4MDkwNzI3MTVaFw0yNTA4MTYwNzI3MTVaMBgxFjAUBgNV BAMTDTY4OTZmODUzLWFhNzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2mqCUzxtNQN/uuUkKvpdmQmQl7lgaQlGEd+fPYMKTSiCUbf9561nARP2Y4i8h /2b5A4uvtjZzD1CYTa0x+snBEHwIDmzbNzlBjIqzt5YqopxNNxcs6y3Owy3xIPEF 4eoCoYO9aPAlGt/VAWa5Uxxn646/6F3FGfHKMDs1i81xzQLkpmkRYTizyii6/3n1 32BcMO5+U1T9HX+WEu71aizv410XD/xup1r84IfhnM5/UKeBGsuZSNWnIr9OE3g5 5CnvSakqU6AYVr95Xhx3WE5bFZOKiJVyR0qpEh5SmGCj/Wy2fOSij6uGQoZNj05r FzFiw50CSn0C9kvGvTLeAoEbAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUcRako33Z cbm30O5Dr+jLw0yE7gQwHwYDVR0jBBgwFoAU+2uUY2HwxcguKwZ0DUuosLmTU/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2QTM1L0ExNTlGNzgyRDQ5 MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNndUt3WjBEVXVvc0xtVFVf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTJ1VVkySHd4Y2d1S3daMERVdW9zTG1UVV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM2 QTM1L0ExNTlGNzgyRDQ5MjExRUZCNTY0REU2MkM0RjlBRTAyLy0ydVVZMkh3eGNn dUt3WjBEVXVvc0xtVFVfZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADAfQyyRGps8om3ZT1vjgoJG216IWKkDrk3GHCZ/kTJbZSvUS5WD+gXm sX+/X+iKQLyERhuluX1uxJP9Su5JKgiqtUtmgi88bICmO+0gTsyES75XcKy8eFkT FWBhV3NMnJH7RX2IrOOGKl7jyHr7HYJ0k33ZFVYYNBo3JQGHBj8Ugn8lA8lYG4rq k2NsRV1ENyh6dpzYg1ahNFI8BIxqrUD1B+4xIiC+G7U0QVomO+vlc1SEWuaErcqL cxq4D1w4BnIzNQQfo4PedoNaaG4NVZjzYcxYIImoqUEnEMT43+4sODtBSUUIGit2 2jb3NGFfd/S25/JdwV3iZ41n1+mnBf4= -----END CERTIFICATE-----Generated at Sun Aug 10 16:14:58 2025 by rpki-client