$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft File: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft (raw, json) Hash identifier: QOmop3C5bW51EBW1LmfUO0EQLLmgoJBBV/1KF6kOgrg= Subject key identifier: 6A:77:CA:27:CF:D7:5F:4C:90:AF:6C:09:2D:78:42:A9:EA:90:C0:26 Authority key identifier: E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 Certificate issuer: /CN=A91C6FD6/serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Certificate serial: D1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft Manifest number: CF Signing time: Sat 09 Aug 2025 06:04:45 +0000 Manifest this update: Sat 09 Aug 2025 06:04:44 +0000 Manifest next update: Sat 16 Aug 2025 06:04:44 +0000 Files and hashes: 1: 6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl (hash: NYaJWSVaqQsPVpk6idgouV0tJciG5CLJunATlbuyXbY=) 2: 70F3668238F711EFB4132D26C4F9AE02.roa (hash: 6q2HJGghYczmtOW7uCV2DY5B1dnxfLxnRSXR0JIpe1c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 209 (0xd1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6FD6, serialNumber=E86821E9F23D42F362E42AE2AFB5BD98E0B11193 Validity Not Before: Aug 9 06:04:44 2025 GMT Not After : Aug 16 06:04:44 2025 GMT Subject: CN=6896e4fc-e682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:da:aa:d7:4a:ad:50:af:f3:c2:a2:73:58:80: 0b:79:2c:82:87:a5:ec:a9:56:a1:8c:d0:2d:56:71: 16:91:6c:26:0f:84:c2:a4:98:53:60:51:38:e5:3e: 7b:f8:dc:51:25:21:d4:4d:e4:44:f4:e8:e2:8d:d0: e5:df:29:4d:76:fe:6d:02:34:3a:7d:77:16:46:09: f4:a8:c7:97:4b:39:fb:9d:5b:cc:ee:9e:a2:3d:c5: 11:09:ef:26:22:75:c0:bf:cd:90:1b:72:d3:22:be: 86:aa:9f:b2:1a:99:95:bc:6e:b0:60:dd:a1:59:62: e3:65:ce:60:2a:8e:24:50:ec:d4:91:53:bf:ef:f4: 3b:ae:da:be:a5:67:bd:9d:0e:85:14:9d:8f:8f:79: 09:62:e4:7f:0b:b1:fe:8a:4f:ab:8d:5f:74:96:ca: ce:80:d4:bd:68:2f:60:fb:5c:0f:48:26:5f:2c:90: 10:fd:bf:bf:19:18:10:be:58:29:15:ff:70:2c:8e: bd:75:b1:78:15:f2:bc:35:ca:69:9c:72:0f:47:f3: 91:96:0f:2b:2a:62:35:03:6f:62:5b:25:81:5b:2d: 3c:b5:e0:57:93:a2:07:f1:c9:a4:55:e9:2b:b1:53: 93:de:50:4f:6b:1a:bf:69:1c:42:91:c1:2a:9c:8f: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:77:CA:27:CF:D7:5F:4C:90:AF:6C:09:2D:78:42:A9:EA:90:C0:26 X509v3 Authority Key Identifier: keyid:E8:68:21:E9:F2:3D:42:F3:62:E4:2A:E2:AF:B5:BD:98:E0:B1:11:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ggh6fI9QvNi5Crir7W9mOCxEZM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6FD6/68DA4B6A38F611EFB1318423C4F9AE02/6Ggh6fI9QvNi5Crir7W9mOCxEZM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:44:f5:7f:2e:31:60:ce:c7:0b:af:05:79:3e:64:ea:2f:2e: f6:10:be:1b:05:4e:8b:0d:b2:88:fb:77:e3:28:03:22:99:cc: 28:b0:c4:07:3f:7a:d7:7b:38:a5:be:67:20:da:ab:f3:61:d0: d0:47:a6:73:84:c0:41:98:e8:29:13:98:5c:d6:3b:51:70:3e: 6e:2d:fd:c7:a6:95:05:9c:b9:de:b5:98:47:26:0b:6b:d0:02: f3:d2:d8:df:bc:77:32:5a:b0:3b:62:3e:51:e9:68:99:e3:e1: ff:d5:76:02:2b:3a:cb:8d:15:0f:24:43:09:52:1c:5a:5d:63: 7d:0b:a2:83:77:db:80:7a:24:91:1f:f4:c1:40:c9:b4:ff:49: 87:4b:80:0e:30:cd:71:10:c5:92:be:3e:38:54:1b:75:cc:60: a1:56:6d:03:e1:6c:43:d1:98:9b:70:1c:7e:67:2b:5f:8a:5c: 6c:62:01:0b:42:e5:cd:cf:f7:f9:a5:2a:6b:63:ff:a0:66:bf: 82:43:a6:5f:d6:7e:a2:5e:6f:e5:b4:81:6e:b0:20:0f:b3:6c: 3f:93:ec:13:44:07:44:46:63:bc:c8:f0:a8:b3:62:02:e2:8b: 8d:73:83:3e:27:51:4f:65:2a:02:7a:28:14:9b:86:4d:72:46: 43:ac:0b:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZGRDYxMTAvBgNVBAUTKEU4NjgyMUU5RjIzRDQyRjM2MkU0MkFFMkFGQjVCRDk4 RTBCMTExOTMwHhcNMjUwODA5MDYwNDQ0WhcNMjUwODE2MDYwNDQ0WjAYMRYwFAYD VQQDEw02ODk2ZTRmYy1lNjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9qq10qtUK/zwqJzWIALeSyCh6XsqVahjNAtVnEWkWwmD4TCpJhTYFE45T57 +NxRJSHUTeRE9OjijdDl3ylNdv5tAjQ6fXcWRgn0qMeXSzn7nVvM7p6iPcURCe8m InXAv82QG3LTIr6Gqp+yGpmVvG6wYN2hWWLjZc5gKo4kUOzUkVO/7/Q7rtq+pWe9 nQ6FFJ2Pj3kJYuR/C7H+ik+rjV90lsrOgNS9aC9g+1wPSCZfLJAQ/b+/GRgQvlgp Ff9wLI69dbF4FfK8NcppnHIPR/ORlg8rKmI1A29iWyWBWy08teBXk6IH8cmkVekr sVOT3lBPaxq/aRxCkcEqnI8iUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGp3yifP 119MkK9sCS14QqnqkMAmMB8GA1UdIwQYMBaAFOhoIenyPULzYuQq4q+1vZjgsRGT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkZENi82OERBNEI2QTM4 RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2Tmk1Q3JpcjdXOW1PQ3hF Wk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHZ2g2Zkk5UXZOaTVDcmlyN1c5bU9DeEVaTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NkZENi82OERBNEI2QTM4RjYxMUVGQjEzMTg0MjNDNEY5QUUwMi82R2doNmZJOVF2 Tmk1Q3JpcjdXOW1PQ3hFWk0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3RPV/LjFgzscLrwV5PmTqLy72EL4bBU6LDbKI+3fjKAMimcwosMQH P3rXezilvmcg2qvzYdDQR6ZzhMBBmOgpE5hc1jtRcD5uLf3HppUFnLnetZhHJgtr 0ALz0tjfvHcyWrA7Yj5R6WiZ4+H/1XYCKzrLjRUPJEMJUhxaXWN9C6KDd9uAeiSR H/TBQMm0/0mHS4AOMM1xEMWSvj44VBt1zGChVm0D4WxD0ZibcBx+ZytfilxsYgEL QuXNz/f5pSprY/+gZr+CQ6Zf1n6iXm/ltIFusCAPs2w/k+wTRAdERmO8yPCos2IC 4ouNc4M+J1FPZSoCeigUm4ZNckZDrAuH -----END CERTIFICATE-----Generated at Mon Aug 11 04:12:39 2025 by rpki-client