$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft File: -cREz887ajdUceO1SHT8K0myxyY.mft (raw, json) Hash identifier: +YyNiNWtxE108XIWMIILDRIIavBuN76XBiw9+BEdsvk= Subject key identifier: 3F:49:9B:45:38:34:F1:10:4D:BD:C7:44:17:72:D3:07:1C:5C:D9:83 Authority key identifier: F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 Certificate issuer: /CN=A91E6B9A/serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Certificate serial: B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft Manifest number: B6 Signing time: Sat 09 Aug 2025 06:26:39 +0000 Manifest this update: Sat 09 Aug 2025 06:26:38 +0000 Manifest next update: Sat 16 Aug 2025 06:26:38 +0000 Files and hashes: 1: -cREz887ajdUceO1SHT8K0myxyY.crl (hash: RHPy0DgU4OfFlqIvt9YQu0+BfRbA1ZnA2qffK5PXjmk=) 2: 58CA0E62615111EFACF30C14C4F9AE02.roa (hash: n/H7m4JyEx7dcVifKMlTV7vtmvQ/Ig1JHl4d6IW0aVA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 184 (0xb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6B9A, serialNumber=F9C444CFCF3B6A375471E3B54874FC2B49B2C726 Validity Not Before: Aug 9 06:26:38 2025 GMT Not After : Aug 16 06:26:38 2025 GMT Subject: CN=6896ea1f-6876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:27:d5:61:61:cd:c5:e4:38:2f:0f:12:88:17: 31:1c:a4:e9:87:df:e8:44:67:75:61:9a:2d:b2:b1: 06:da:58:5c:20:ff:6c:e0:2a:66:60:f1:4e:b8:6b: d7:d6:5b:b1:fc:42:72:df:88:6e:74:82:cf:85:c8: eb:49:56:51:c4:ee:ee:60:ea:cf:da:3a:05:55:44: 71:34:97:1c:51:08:65:9e:7d:32:2f:3e:88:19:cd: 8c:84:3b:94:59:18:ca:c9:43:50:0f:24:c1:c6:75: 34:3b:e9:80:dd:90:c6:2a:b3:9b:01:be:ba:96:26: 1e:2d:77:b9:7b:de:26:8e:5b:ec:19:da:9f:23:15: d8:22:27:20:0f:3d:2b:83:68:5c:43:9c:b8:8d:94: 24:c5:50:af:f3:6c:6f:1f:e1:85:04:6e:39:54:b5: 8d:18:3e:c3:93:8e:a2:43:6a:0a:86:1d:e2:7c:c2: f5:4e:06:52:6c:71:40:ed:b0:f2:57:ca:50:08:a2: 5d:48:a9:61:36:b9:11:ce:57:55:2b:1f:8f:50:52: 5d:c7:26:63:00:90:bf:64:f1:2b:7e:28:3c:d7:97: 78:84:26:26:ac:70:49:a7:3d:a1:b0:38:48:1a:7f: 71:f2:ae:bd:20:0a:48:4c:c1:f3:a3:8e:93:0d:c9: cd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:49:9B:45:38:34:F1:10:4D:BD:C7:44:17:72:D3:07:1C:5C:D9:83 X509v3 Authority Key Identifier: keyid:F9:C4:44:CF:CF:3B:6A:37:54:71:E3:B5:48:74:FC:2B:49:B2:C7:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-cREz887ajdUceO1SHT8K0myxyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6B9A/1160128E615011EFAE7A8C73C4F9AE02/-cREz887ajdUceO1SHT8K0myxyY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:fc:7c:36:75:6d:7b:20:30:74:fd:40:27:c5:c4:9f:84:3e: 1b:fe:ab:ae:9e:f4:dc:20:d2:3e:e5:58:5b:ff:85:fa:d0:3b: 75:e6:fb:81:a9:ac:68:91:35:a2:d1:b5:40:10:5a:31:79:42: 91:b0:5f:05:27:23:7f:40:fc:d9:dc:b4:e9:a6:bd:7d:61:9f: f9:90:c6:c5:23:1b:00:47:c4:ba:fd:be:e3:f8:30:d7:47:60: 77:6b:15:88:b6:33:7c:ed:cc:f8:20:91:18:52:5c:cf:be:4c: b7:de:e9:7e:2e:95:43:92:5a:92:34:45:19:fb:38:22:c9:a2: be:8a:90:47:b8:65:f1:ca:10:a7:19:bd:b7:a1:40:5c:00:0f: 09:b2:80:80:fa:ab:18:7d:3a:e7:4f:78:8a:58:88:2a:74:17: b9:47:05:a8:31:2a:31:25:77:56:68:d8:5f:5f:9e:a5:17:ec: 71:fa:94:1c:58:2d:5e:43:0d:75:d4:9d:5c:58:e6:09:0d:3a: 7f:48:66:e8:47:d5:a3:8d:10:8a:b9:72:b8:ab:2b:27:47:ee: 92:cf:6b:f8:29:1a:20:d0:af:c9:f0:3d:b9:33:56:33:75:2f: 82:9c:a4:be:63:25:01:7f:18:fd:9a:2e:5d:b9:b0:2f:f4:b9: 67:ef:48:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICALgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZCOUExMTAvBgNVBAUTKEY5QzQ0NENGQ0YzQjZBMzc1NDcxRTNCNTQ4NzRGQzJC NDlCMkM3MjYwHhcNMjUwODA5MDYyNjM4WhcNMjUwODE2MDYyNjM4WjAYMRYwFAYD VQQDEw02ODk2ZWExZi02ODc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuifVYWHNxeQ4Lw8SiBcxHKTph9/oRGd1YZotsrEG2lhcIP9s4CpmYPFOuGvX 1lux/EJy34hudILPhcjrSVZRxO7uYOrP2joFVURxNJccUQhlnn0yLz6IGc2MhDuU WRjKyUNQDyTBxnU0O+mA3ZDGKrObAb66liYeLXe5e94mjlvsGdqfIxXYIicgDz0r g2hcQ5y4jZQkxVCv82xvH+GFBG45VLWNGD7Dk46iQ2oKhh3ifML1TgZSbHFA7bDy V8pQCKJdSKlhNrkRzldVKx+PUFJdxyZjAJC/ZPErfig815d4hCYmrHBJpz2hsDhI Gn9x8q69IApITMHzo46TDcnNXwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD9Jm0U4 NPEQTb3HRBdy0wccXNmDMB8GA1UdIwQYMBaAFPnERM/PO2o3VHHjtUh0/CtJsscm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkI5QS8xMTYwMTI4RTYx NTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2FqZFVjZU8xU0hUOEswbXl4 eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1jUkV6ODg3YWpkVWNlTzFTSFQ4SzBteXh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkI5QS8xMTYwMTI4RTYxNTAxMUVGQUU3QThDNzNDNEY5QUUwMi8tY1JFejg4N2Fq ZFVjZU8xU0hUOEswbXl4eVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCv/Hw2dW17IDB0/UAnxcSfhD4b/quunvTcINI+5Vhb/4X60Dt15vuB qaxokTWi0bVAEFoxeUKRsF8FJyN/QPzZ3LTppr19YZ/5kMbFIxsAR8S6/b7j+DDX R2B3axWItjN87cz4IJEYUlzPvky33ul+LpVDklqSNEUZ+zgiyaK+ipBHuGXxyhCn Gb23oUBcAA8JsoCA+qsYfTrnT3iKWIgqdBe5RwWoMSoxJXdWaNhfX56lF+xx+pQc WC1eQw111J1cWOYJDTp/SGboR9WjjRCKuXK4qysnR+6Sz2v4KRog0K/J8D25M1Yz dS+CnKS+YyUBfxj9mi5dubAv9Lln70jm -----END CERTIFICATE-----Generated at Sat Aug 9 15:16:15 2025 by rpki-client