$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft File: awKSxgJwici6idjGWhozDUiLCiw.mft (raw, json) Hash identifier: JQH6+05BswPRbYyLoZYVDhKDJuK+7TOGZC9ReAIfVGo= Subject key identifier: 32:90:00:3F:60:D8:EC:A3:5F:5C:B4:53:C7:E7:B1:7F:A0:BE:75:D8 Authority key identifier: 6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C Certificate issuer: /CN=A91D0B0E/serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Certificate serial: AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft Manifest number: A6 Signing time: Sat 09 Aug 2025 06:40:59 +0000 Manifest this update: Sat 09 Aug 2025 06:40:58 +0000 Manifest next update: Sat 16 Aug 2025 06:40:58 +0000 Files and hashes: 1: awKSxgJwici6idjGWhozDUiLCiw.crl (hash: ULooUoYpaM3vMypLe96LIdsEivm0Iy9R/96Nlaxosnk=) 2: 17782970808311EFBB9C2A46C4F9AE02.roa (hash: p+Li5x5IRkEHLsrKLMYZtCUY4xOsEsGyH8peATkiJDE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0B0E, serialNumber=6B0292C6027089C8BA89D8C65A1A330D488B0A2C Validity Not Before: Aug 9 06:40:58 2025 GMT Not After : Aug 16 06:40:58 2025 GMT Subject: CN=6896ed7a-60b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:0b:2e:0a:7f:0e:3b:f2:b1:87:08:9f:33: 21:99:12:33:86:05:fb:2b:4c:77:6f:28:1c:ed:6b: 78:53:86:7e:45:a0:b9:04:6a:2d:8b:3a:48:52:72: 8a:7b:97:fa:18:6b:c1:81:dc:66:2a:a9:18:af:7f: 59:c3:a6:e5:02:22:49:4b:c8:28:ee:5b:a3:db:03: be:a2:e7:2c:5f:a4:d5:93:af:cc:5e:d4:11:0d:90: 65:5e:42:1c:90:8a:6c:5f:dc:25:64:fa:9d:e3:aa: a2:0c:a3:c6:f1:76:2f:b0:db:4c:d0:ec:d0:d2:3c: 9d:8e:52:5e:92:5c:38:bb:ca:61:23:41:4b:b7:c0: 96:b6:30:b4:85:2e:c5:57:02:84:c0:e4:b4:36:d8: ad:4d:65:33:0c:0c:ac:d9:81:03:4b:18:18:4b:23: 1d:45:ef:15:eb:6f:13:b7:45:56:01:dc:03:fb:39: 16:de:13:61:05:8a:89:5b:14:5a:b9:03:4a:1a:36: 9a:73:01:81:47:61:6a:e5:b4:9d:ec:f9:e4:6b:ca: cb:bc:4d:68:d0:98:bc:02:b4:20:9f:1c:67:1b:b5: 76:3f:c5:47:71:37:48:25:f6:d2:64:60:6b:30:de: 25:65:c3:a3:d2:bd:02:7e:81:c3:37:ef:5d:f3:08: f4:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:90:00:3F:60:D8:EC:A3:5F:5C:B4:53:C7:E7:B1:7F:A0:BE:75:D8 X509v3 Authority Key Identifier: keyid:6B:02:92:C6:02:70:89:C8:BA:89:D8:C6:5A:1A:33:0D:48:8B:0A:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/awKSxgJwici6idjGWhozDUiLCiw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0B0E/44BCA632806911EF887B703CC4F9AE02/awKSxgJwici6idjGWhozDUiLCiw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 24:aa:61:c7:a9:9d:ab:27:00:a2:d4:9f:c6:52:c2:76:ec:b2: ec:6b:4f:e1:3e:10:2e:73:72:c8:a6:3f:ff:45:55:dd:64:af: 89:18:73:8d:54:ea:d5:4d:3f:30:81:0e:0a:cd:8c:2f:e8:79: 8a:91:fb:b0:57:04:f7:ba:f9:3c:a2:92:c6:04:ae:dc:2a:36: 44:ee:30:51:aa:64:6e:69:5e:1a:d6:28:62:9c:ee:63:0c:a5: d7:f7:7c:11:68:b1:a5:22:df:d5:14:9d:23:26:4b:ae:d0:5d: 1d:ae:e1:9f:53:1a:d2:61:40:87:9f:9a:ae:5d:8a:24:ab:e0: 4e:cb:e8:5b:f9:c7:3f:e2:6e:e5:90:c5:25:71:a3:5b:92:a0: 5c:37:9e:60:ee:d2:2d:24:e9:dd:00:ab:14:63:31:12:d4:33: 46:63:2f:6b:40:92:06:fb:3f:42:dd:d5:56:14:22:9e:1e:a3: 66:1b:1c:e9:d9:dc:91:ce:8b:a9:74:6d:2d:d2:2f:12:22:d7: 58:1e:8b:de:7a:6e:f7:c8:7f:3f:eb:85:9f:21:53:b0:5e:b6: 94:5e:c9:6f:d5:e4:3d:4b:0f:93:60:b6:c7:e4:2a:6e:cb:96: e6:05:f1:c3:e6:66:89:08:84:78:5f:08:67:a5:30:df:3c:5b: 0b:c2:f0:63 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBCMEUxMTAvBgNVBAUTKDZCMDI5MkM2MDI3MDg5QzhCQTg5RDhDNjVBMUEzMzBE NDg4QjBBMkMwHhcNMjUwODA5MDY0MDU4WhcNMjUwODE2MDY0MDU4WjAYMRYwFAYD VQQDEw02ODk2ZWQ3YS02MGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1LQLLgp/DjvysYcInzMhmRIzhgX7K0x3bygc7Wt4U4Z+RaC5BGotizpIUnKK e5f6GGvBgdxmKqkYr39Zw6blAiJJS8go7luj2wO+oucsX6TVk6/MXtQRDZBlXkIc kIpsX9wlZPqd46qiDKPG8XYvsNtM0OzQ0jydjlJeklw4u8phI0FLt8CWtjC0hS7F VwKEwOS0NtitTWUzDAys2YEDSxgYSyMdRe8V628Tt0VWAdwD+zkW3hNhBYqJWxRa uQNKGjaacwGBR2Fq5bSd7Pnka8rLvE1o0Ji8ArQgnxxnG7V2P8VHcTdIJfbSZGBr MN4lZcOj0r0CfoHDN+9d8wj0mQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDKQAD9g 2OyjX1y0U8fnsX+gvnXYMB8GA1UdIwQYMBaAFGsCksYCcInIuonYxloaMw1Iiwos MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEIwRS80NEJDQTYzMjgw NjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2ljaTZpZGpHV2hvekRVaUxD aXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2F3S1N4Z0p3aWNpNmlkakdXaG96RFVpTENpdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MEIwRS80NEJDQTYzMjgwNjkxMUVGODg3QjcwM0NDNEY5QUUwMi9hd0tTeGdKd2lj aTZpZGpHV2hvekRVaUxDaXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAkqmHHqZ2rJwCi1J/GUsJ27LLsa0/hPhAuc3LIpj//RVXdZK+JGHON VOrVTT8wgQ4KzYwv6HmKkfuwVwT3uvk8opLGBK7cKjZE7jBRqmRuaV4a1ihinO5j DKXX93wRaLGlIt/VFJ0jJkuu0F0druGfUxrSYUCHn5quXYokq+BOy+hb+cc/4m7l kMUlcaNbkqBcN55g7tItJOndAKsUYzES1DNGYy9rQJIG+z9C3dVWFCKeHqNmGxzp 2dyRzoupdG0t0i8SItdYHoveem73yH8/64WfIVOwXraUXslv1eQ9Sw+TYLbH5Cpu y5bmBfHD5maJCIR4XwhnpTDfPFsLwvBj -----END CERTIFICATE-----Generated at Sun Aug 10 18:18:24 2025 by rpki-client