$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft File: G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft (raw, json) Hash identifier: rpu1KR8k/Ew4P5kFJRgCxX6Afr7nw/SNPZAObBsDTaY= Subject key identifier: 8E:16:80:31:8B:8C:D1:3F:84:03:0F:C0:AF:EE:DC:A7:A7:1B:07:55 Authority key identifier: 1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 Certificate issuer: /CN=A91DF352/serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Certificate serial: 2D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft Manifest number: 2C Signing time: Sat 09 Aug 2025 08:12:40 +0000 Manifest this update: Sat 09 Aug 2025 08:12:39 +0000 Manifest next update: Sat 16 Aug 2025 08:12:39 +0000 Files and hashes: 1: G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl (hash: LOwRj/x6k5ySFek2adEvAcVU2dizhtBzP2eAtD21kYY=) 2: BA3FE218315611F0951A037DC4F9AE02.roa (hash: qVVzOp455rcs6g+f/MmhYpdl/2N+Lt1OuCuyTK7KoGY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF352, serialNumber=1BA5ACFE4ECE99EABB6E54146532FD13735CEF40 Validity Not Before: Aug 9 08:12:39 2025 GMT Not After : Aug 16 08:12:39 2025 GMT Subject: CN=689702f7-0df2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f3:5e:e5:96:39:8f:72:7b:fe:21:9e:b2:8e: 98:96:ef:ce:3a:56:72:8c:2b:76:8a:77:7b:65:cf: 37:2b:0c:41:ec:35:1c:4a:72:91:28:d8:a4:ce:1b: cf:99:8c:d0:31:c1:9c:ce:56:06:c2:97:d6:4a:c8: 77:21:c7:83:61:48:f5:e7:0a:cb:10:0b:80:55:f4: 35:5a:66:7a:51:51:2e:bc:d2:7e:45:3c:7d:93:76: 0e:44:cd:54:73:c9:d0:e4:e4:1c:d3:27:a4:25:5a: ac:12:12:27:c2:70:85:71:20:bb:e6:e1:4b:11:9e: 21:ed:75:a2:f2:3a:7a:e9:64:32:d7:df:17:6e:c5: 81:7e:00:5f:dc:35:1c:d5:e0:d3:11:07:3d:2d:e4: b4:82:23:51:73:cb:ab:fa:8f:c8:49:47:b8:0b:8a: 07:fe:82:c9:e3:e4:9e:4e:43:3e:82:e8:5e:2e:be: d8:97:a5:9f:7f:e3:4c:5c:69:65:bc:b7:7b:3c:ec: f5:5a:48:da:da:ba:d6:ac:de:8d:22:fd:00:41:a4: fa:6a:75:3f:c4:c1:01:e7:fb:8e:d3:4f:ad:fb:1b: 44:f9:d9:34:e8:c9:87:86:42:11:e4:1e:ed:a4:4e: 77:91:a3:1f:64:1c:d4:c1:7f:bd:0f:cf:93:26:a9: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:16:80:31:8B:8C:D1:3F:84:03:0F:C0:AF:EE:DC:A7:A7:1B:07:55 X509v3 Authority Key Identifier: keyid:1B:A5:AC:FE:4E:CE:99:EA:BB:6E:54:14:65:32:FD:13:73:5C:EF:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G6Ws_k7Omeq7blQUZTL9E3Nc70A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF352/82938046315511F0A72FBF5BC4F9AE02/G6Ws_k7Omeq7blQUZTL9E3Nc70A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:9a:c8:ac:9a:0e:53:a1:1f:d8:32:2c:ae:72:24:16:a6:09: a0:89:41:4a:52:b3:c9:95:b5:7b:03:eb:d5:ce:65:59:6f:66: 4e:d9:86:8b:eb:da:37:02:af:c8:42:b1:80:71:d1:b4:70:3a: 30:86:1e:ba:7c:97:55:e2:e2:99:e8:88:3c:97:59:72:be:d5: f8:65:25:08:04:f2:b8:74:cb:23:91:4d:d2:58:bc:a1:d4:f7: 3d:79:0b:88:27:d2:61:cb:de:89:10:9a:3b:66:bc:f8:40:1e: 6c:c6:e9:76:ea:91:73:a0:a3:9a:0d:93:dc:38:47:c5:f9:fc: 66:6c:87:0c:87:31:3d:b0:c9:30:11:4e:1c:90:d1:ef:b4:ad: e5:b0:18:a3:e6:d7:58:2c:52:0e:a6:15:96:09:c4:b6:a9:3e: a9:d3:bb:86:73:e9:ce:5a:dd:01:7b:d9:91:09:d2:ea:1d:57: b7:25:5d:e3:3e:e7:4f:1b:6e:56:2e:52:4f:49:6c:43:bf:76: 12:eb:01:6f:3a:db:ef:52:b4:d1:25:6a:b5:1f:25:46:f0:36: 6b:64:ce:9d:7b:ce:55:f2:ad:2b:f2:9d:00:d9:08:8b:9c:28: 17:ea:36:1b:86:4e:2b:02:4d:24:f9:84:fc:42:03:f8:da:36: 0f:dc:e4:91 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RjM1MjExMC8GA1UEBRMoMUJBNUFDRkU0RUNFOTlFQUJCNkU1NDE0NjUzMkZEMTM3 MzVDRUY0MDAeFw0yNTA4MDkwODEyMzlaFw0yNTA4MTYwODEyMzlaMBgxFjAUBgNV BAMTDTY4OTcwMmY3LTBkZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP817lljmPcnv+IZ6yjpiW7846VnKMK3aKd3tlzzcrDEHsNRxKcpEo2KTOG8+Z jNAxwZzOVgbCl9ZKyHchx4NhSPXnCssQC4BV9DVaZnpRUS680n5FPH2Tdg5EzVRz ydDk5BzTJ6QlWqwSEifCcIVxILvm4UsRniHtdaLyOnrpZDLX3xduxYF+AF/cNRzV 4NMRBz0t5LSCI1Fzy6v6j8hJR7gLigf+gsnj5J5OQz6C6F4uvtiXpZ9/40xcaWW8 t3s87PVaSNrautas3o0i/QBBpPpqdT/EwQHn+47TT637G0T52TToyYeGQhHkHu2k TneRox9kHNTBf70Pz5MmqZGLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUjhaAMYuM 0T+EAw/Ar+7cp6cbB1UwHwYDVR0jBBgwFoAUG6Ws/k7Omeq7blQUZTL9E3Nc70Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGMzUyLzgyOTM4MDQ2MzE1 NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVxN2JsUVVaVEw5RTNOYzcw QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRzZXc19rN09tZXE3YmxRVVpUTDlFM05jNzBBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURG MzUyLzgyOTM4MDQ2MzE1NTExRjBBNzJGQkY1QkM0RjlBRTAyL0c2V3NfazdPbWVx N2JsUVVaVEw5RTNOYzcwQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAAWayKyaDlOhH9gyLK5yJBamCaCJQUpSs8mVtXsD69XOZVlvZk7Zhovr 2jcCr8hCsYBx0bRwOjCGHrp8l1Xi4pnoiDyXWXK+1fhlJQgE8rh0yyORTdJYvKHU 9z15C4gn0mHL3okQmjtmvPhAHmzG6XbqkXOgo5oNk9w4R8X5/GZshwyHMT2wyTAR ThyQ0e+0reWwGKPm11gsUg6mFZYJxLapPqnTu4Zz6c5a3QF72ZEJ0uodV7clXeM+ 508bblYuUk9JbEO/dhLrAW862+9StNElarUfJUbwNmtkzp17zlXyrSvynQDZCIuc KBfqNhuGTisCTST5hPxCA/jaNg/c5JE= -----END CERTIFICATE-----Generated at Sun Aug 10 03:48:29 2025 by rpki-client