$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: wSJ8FLYXSQ3bhTBXnuHtLqOiur4JeCMvoMEiuDAv0i8= Subject key identifier: E2:1A:41:F1:16:69:C2:C8:09:44:49:BF:49:8F:3E:1F:DB:18:41:A9 Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 013F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 013B Signing time: Tue 05 Aug 2025 04:55:01 +0000 Manifest this update: Tue 05 Aug 2025 04:55:00 +0000 Manifest next update: Tue 12 Aug 2025 04:55:00 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: cy1QPyjsdV95dglZaPt3+ui2RShI1iKJiXdlyNj6XYE=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 04:55:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: Aug 5 04:55:00 2025 GMT Not After : Aug 12 04:55:00 2025 GMT Subject: CN=68918ea5-302b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:85:e2:1f:d7:fb:d2:24:76:51:ff:2f:61:f5: ae:4f:4f:33:bc:27:9c:ab:b9:5f:a2:41:0f:36:eb: 82:1e:70:88:06:52:4f:e0:9e:cd:7b:a4:3f:ba:ef: 87:8f:85:ee:fc:70:5d:91:eb:19:38:f6:9e:bd:5f: b9:5d:73:8e:0c:73:11:b9:d1:f7:31:ae:49:2a:23: de:06:35:ff:c3:a3:3d:51:f6:88:4f:b0:a5:b2:f6: 42:c8:2d:64:72:83:4d:38:5f:88:d6:c0:d8:b2:72: 19:5d:ac:ca:0f:17:86:fb:11:ae:93:c7:6b:aa:aa: eb:8a:80:c9:7a:87:82:4e:e9:b5:fe:1d:82:99:10: 17:b3:fc:2e:3c:76:a8:7b:52:4e:ef:49:b6:9c:6c: 41:04:36:31:81:d2:23:88:e0:3d:39:9d:91:4c:f1: 35:bd:b6:ef:dc:6e:18:f7:95:f3:b5:10:bf:58:f4: c3:a9:1c:3d:e0:47:56:7f:ac:f8:4e:2b:26:0c:80: cb:17:4c:e7:e3:d3:52:58:c8:df:cb:07:0e:4e:4b: 29:ee:bc:b1:26:76:f8:51:3b:1e:ef:0f:90:55:1b: a5:87:80:4a:a0:36:1b:10:df:f2:d1:d4:38:2e:fc: 2a:94:1f:83:03:4e:28:ed:ff:b4:c0:5f:a6:92:b4: a2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:1A:41:F1:16:69:C2:C8:09:44:49:BF:49:8F:3E:1F:DB:18:41:A9 X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9f:4d:49:b3:61:08:bc:f6:6a:0b:c4:88:ab:3e:e0:cd:6a: a0:4d:22:36:f7:4e:ee:16:f3:c3:b4:fd:35:46:97:1a:2d:b3: 5c:7e:39:f2:a4:c0:86:76:53:c5:40:8e:66:33:e2:63:70:af: 92:8d:4c:17:b4:f0:5f:0c:a0:64:61:f4:56:9f:04:f3:b0:b5: 8b:81:cd:d7:f1:6f:e2:6b:09:19:00:b4:81:1f:90:f9:d9:c2: d7:14:fc:85:14:87:9d:b8:56:27:bf:b6:25:7c:cf:eb:fa:64: 41:4b:3b:14:e2:4d:f4:82:c3:09:dd:35:31:ce:4a:4b:49:a4: 0c:23:21:4f:56:7d:db:0e:9c:30:f0:93:b3:7f:a3:83:10:05: 78:97:a0:96:4f:d6:8e:9e:5f:39:f5:b0:64:6c:69:61:95:45: 1d:ad:33:3d:a3:2b:5e:52:00:c2:e7:0c:dc:b0:a0:25:e1:58: b1:f5:06:5b:9f:b2:6c:2b:14:45:c6:80:0e:c4:61:c9:78:23: 15:b0:13:4c:69:4f:68:7c:b6:50:7b:43:3b:32:63:fa:c8:eb: f6:4c:e3:50:4d:e5:fd:87:f7:a8:9e:42:73:46:33:3d:82:f8: a4:65:da:b2:17:cf:9c:18:39:a3:df:38:0e:98:5c:8d:55:18: a9:a5:36:05 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0 NDNBREJENEMwHhcNMjUwODA1MDQ1NTAwWhcNMjUwODEyMDQ1NTAwWjAYMRYwFAYD VQQDEw02ODkxOGVhNS0zMDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIXiH9f70iR2Uf8vYfWuT08zvCecq7lfokEPNuuCHnCIBlJP4J7Ne6Q/uu+H j4Xu/HBdkesZOPaevV+5XXOODHMRudH3Ma5JKiPeBjX/w6M9UfaIT7ClsvZCyC1k coNNOF+I1sDYsnIZXazKDxeG+xGuk8drqqrrioDJeoeCTum1/h2CmRAXs/wuPHao e1JO70m2nGxBBDYxgdIjiOA9OZ2RTPE1vbbv3G4Y95XztRC/WPTDqRw94EdWf6z4 TismDIDLF0zn49NSWMjfywcOTksp7ryxJnb4UTse7w+QVRulh4BKoDYbEN/y0dQ4 LvwqlB+DA04o7f+0wF+mkrSi5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOIaQfEW acLICURJv0mPPh/bGEGpMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMyRS84MThGREE0NjkzNDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lN dXRrZEh0YlRlOWhFT3R2VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCfn01Js2EIvPZqC8SIqz7gzWqgTSI2907uFvPDtP01RpcaLbNcfjny pMCGdlPFQI5mM+JjcK+SjUwXtPBfDKBkYfRWnwTzsLWLgc3X8W/iawkZALSBH5D5 2cLXFPyFFIeduFYnv7YlfM/r+mRBSzsU4k30gsMJ3TUxzkpLSaQMIyFPVn3bDpww 8JOzf6ODEAV4l6CWT9aOnl859bBkbGlhlUUdrTM9oyteUgDC5wzcsKAl4Vix9QZb n7JsKxRFxoAOxGHJeCMVsBNMaU9ofLZQe0M7MmP6yOv2TONQTeX9h/eonkJzRjM9 gvikZdqyF8+cGDmj3zgOmFyNVRippTYF -----END CERTIFICATE-----Generated at Thu Aug 7 05:16:17 2025 by rpki-client