$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft File: B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft (raw, json) Hash identifier: yXwTJKokDETyB/iT3oz+P+I16KfVJAoCmKsw5oZpjX0= Subject key identifier: 5F:94:54:BB:EA:D2:B9:E7:BA:C2:9A:78:06:20:CE:ED:C8:DA:A7:AC Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft Manifest number: 0872 Signing time: Mon 04 Aug 2025 21:10:08 +0000 Manifest this update: Mon 04 Aug 2025 21:10:08 +0000 Manifest next update: Mon 11 Aug 2025 21:10:08 +0000 Files and hashes: 1: B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl (hash: uvoSs22mViDRzqvycjz6YGX0VjH2J7evjsoN6AaCCSM=) 2: F8C02F3CDA4E11EC9C09A446C4F9AE02.roa (hash: fQqKRj97YwSX01j4RLkIYLyoFuesKb4QSmD9wM54Hnc=) 3: BA1752AE176B11EF9ADED980C4F9AE02.roa (hash: E4ey91ujkF/MRIeBzx9ZLQooU0yVAuuvKVrBh8MDQSg=) 4: E518ECC6D52A11ED99D55E2EC4F9AE02.roa (hash: 8ZNPpyzaCSOR7XArDiXTgpwOZdqi5o9nlzrrurZ8f2Q=) 5: FEEC2C90643811EB9D7F624EC4F9AE02.roa (hash: huVUXhJ3Ojs1r05u1jG7Kov4uI++w1LAbAYi/YZa49g=) 6: 007CF9924F1111EFA7D2F345C4F9AE02.roa (hash: jDHZwFF5yPuG0E/+EVJniBRe11d0Z59ErydSm1FeI2Q=) 7: 5B5CBC68751B11EB9065A822C4F9AE02.roa (hash: PfplpurYpM5Nlhs4wMvQOWeVvjM0XGHzdK7n61JNfpc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 21:10:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2265 (0x8d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Aug 4 21:10:08 2025 GMT Not After : Aug 11 21:10:08 2025 GMT Subject: CN=689121b0-bae9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:64:07:a8:90:5f:30:7b:50:f1:3f:3d:29:56: 76:0c:9d:c0:f3:aa:56:d3:1f:eb:a4:2f:a4:ef:38: e3:11:08:c2:56:49:4b:36:9f:aa:d6:c7:f0:64:58: 06:46:e0:f8:25:c6:cc:c0:b2:ce:cf:4b:8e:5e:b5: c3:62:e5:20:e7:7d:f0:34:66:60:a0:fa:8a:23:ea: f2:8f:fb:89:f3:34:0d:f8:9f:a8:bf:72:0c:8a:ff: e4:8e:69:e0:ae:3b:cc:a9:d9:a8:8c:3c:a9:41:cc: bf:41:14:ee:55:80:fa:fe:c3:67:86:61:ab:08:70: c1:9e:4b:51:9d:66:61:cb:ef:74:a2:1e:be:98:ce: c2:f1:4d:c4:e4:1a:8f:b8:47:aa:4f:68:47:1e:56: e5:39:94:25:9f:26:a3:2e:b5:b7:e0:42:d5:53:04: f7:7b:32:14:5a:7c:ff:0a:9d:c7:f6:8d:44:cd:5f: 04:d0:36:98:74:c2:0d:25:64:95:33:ff:8c:02:87: 13:f8:dc:7f:d3:93:88:58:27:57:1d:2d:2f:55:0d: 6a:7b:49:4c:d0:90:ef:ba:60:a7:1f:4b:d3:09:98: f7:a7:f0:37:14:39:20:4e:44:3a:76:b8:c6:da:8b: 99:a2:d5:98:26:ac:41:86:24:20:5d:f1:ef:fb:e3: 19:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:94:54:BB:EA:D2:B9:E7:BA:C2:9A:78:06:20:CE:ED:C8:DA:A7:AC X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b2:fa:30:6a:80:e9:e9:0e:48:63:28:40:aa:4e:0e:b7:6e: 08:74:ce:0f:d0:66:fc:95:07:c9:80:f1:6a:fb:6f:bb:8f:f7: b2:7a:11:16:75:83:73:d4:00:b0:0a:e6:6e:51:14:e3:40:bb: 74:2c:dd:66:da:94:20:5c:99:84:6c:88:49:5d:be:a8:9b:ba: 94:7d:93:89:5d:f0:24:bd:c3:e4:97:87:1d:7e:25:97:4e:04: 25:4c:6a:5d:b5:a9:59:24:5b:e4:3e:d0:b6:b9:01:76:e4:9a: 84:e3:60:04:91:a7:21:0e:a8:0f:ab:a0:40:7a:2c:b6:ff:18: d1:bd:bb:83:49:33:ea:57:46:3d:17:c1:48:0c:bd:6b:41:94: 05:c8:c0:ca:81:52:08:79:bf:5f:16:82:14:26:ca:73:7c:eb: d0:1f:c5:46:49:8d:af:45:4f:68:49:3f:39:34:2d:cf:c1:d3: 8d:3a:a3:68:e4:f1:9c:de:34:0b:d6:a7:ba:72:cb:35:47:29: b5:c6:d3:d0:87:4f:70:21:67:13:14:d7:e5:5a:ca:54:0b:ca: 8a:5f:02:7b:a0:9a:1b:c6:5f:0d:c4:14:a7:3b:e7:7d:cf:28: 94:39:25:83:2e:2b:89:71:f9:1e:c3:b0:33:b4:ed:e3:70:35: 6c:51:d8:d1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCNkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwODA0MjExMDA4WhcNMjUwODExMjExMDA4WjAYMRYwFAYD VQQDEw02ODkxMjFiMC1iYWU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2QHqJBfMHtQ8T89KVZ2DJ3A86pW0x/rpC+k7zjjEQjCVklLNp+q1sfwZFgG RuD4JcbMwLLOz0uOXrXDYuUg533wNGZgoPqKI+ryj/uJ8zQN+J+ov3IMiv/kjmng rjvMqdmojDypQcy/QRTuVYD6/sNnhmGrCHDBnktRnWZhy+90oh6+mM7C8U3E5BqP uEeqT2hHHlblOZQlnyajLrW34ELVUwT3ezIUWnz/Cp3H9o1EzV8E0DaYdMINJWSV M/+MAocT+Nx/05OIWCdXHS0vVQ1qe0lM0JDvumCnH0vTCZj3p/A3FDkgTkQ6drjG 2ouZotWYJqxBhiQgXfHv++MZdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFF+UVLvq 0rnnusKaeAYgzu3I2qesMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RjkzQS9GRjUxRTU5RUU1RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pH WGdpQzFKNmZMNHo5Sy1nbUEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysvowaoDp6Q5IYyhAqk4Ot24IdM4P0Gb8lQfJgPFq+2+7j/eyehEW dYNz1ACwCuZuURTjQLt0LN1m2pQgXJmEbIhJXb6om7qUfZOJXfAkvcPkl4cdfiWX TgQlTGpdtalZJFvkPtC2uQF25JqE42AEkachDqgPq6BAeiy2/xjRvbuDSTPqV0Y9 F8FIDL1rQZQFyMDKgVIIeb9fFoIUJspzfOvQH8VGSY2vRU9oST85NC3PwdONOqNo 5PGc3jQL1qe6css1Rym1xtPQh09wIWcTFNflWspUC8qKXwJ7oJobxl8NxBSnO+d9 zyiUOSWDLiuJcfkew7AztO3jcDVsUdjR -----END CERTIFICATE-----Generated at Wed Aug 6 14:11:50 2025 by rpki-client