$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: yvfOTxZKzVFgwKKECpNiCZWdqbH7IDmto4gCg1x3ES8= Subject key identifier: 47:FF:22:19:D1:A4:9F:4A:47:29:06:2A:9F:C4:AB:2E:7F:94:17:81 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 3A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 35 Signing time: Thu 07 Aug 2025 08:17:00 +0000 Manifest this update: Thu 07 Aug 2025 08:16:59 +0000 Manifest next update: Thu 14 Aug 2025 08:16:59 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: zttiWriyNWo6/0nWif7WNVlOx6zVAvPxFpf7ol+dAMI=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Aug 7 08:16:59 2025 GMT Not After : Aug 14 08:16:59 2025 GMT Subject: CN=689460fc-eb43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f0:06:df:4f:45:25:2c:d3:e6:59:fc:20:25: 3b:79:c8:c1:87:01:0b:2c:0a:68:8b:df:78:85:ce: d7:70:16:7a:2e:28:34:e5:9a:b2:9f:94:7a:37:c7: 4e:70:94:98:e7:86:35:2e:4e:66:c8:1c:9f:14:cc: dd:ed:34:93:29:33:96:9e:57:0d:c1:e9:d2:17:2b: 49:e0:54:bb:3a:cc:f5:6a:15:2b:3f:c7:39:26:77: da:39:83:c2:0e:13:eb:9d:d3:38:3a:aa:90:66:31: 1f:38:b6:e7:0b:64:43:7f:71:ce:97:8d:37:bf:bd: 13:c8:ab:f1:f7:cf:65:0e:4b:f3:87:14:f6:58:90: a9:c8:31:47:a4:44:cf:1c:b8:7f:8d:6e:43:b1:7a: 53:00:04:29:9b:ba:43:81:5c:76:9c:bf:a2:9f:94: 2b:31:3b:c6:f0:2f:99:81:cd:32:cf:6a:69:89:e3: 82:d4:ca:9f:03:2c:90:bf:1d:04:05:3f:39:cc:44: 1e:52:54:d7:fc:4e:b4:d4:54:be:f0:b1:a1:b6:f4: 7e:88:40:41:f8:2b:a0:8e:11:36:b6:a9:38:ae:2a: b1:3d:5c:eb:e4:d2:75:c3:82:fb:e3:e7:16:dd:db: d2:ca:e2:08:c9:7f:63:58:b3:84:92:24:19:11:3b: 94:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:FF:22:19:D1:A4:9F:4A:47:29:06:2A:9F:C4:AB:2E:7F:94:17:81 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 70:5b:6c:c0:de:35:59:cf:be:31:5d:fa:91:f8:c1:14:34:3b: a9:0f:ff:50:65:4c:f4:0d:7a:68:65:c7:4b:2c:b3:f5:b2:9f: 84:64:27:98:e8:f3:41:9d:80:19:7f:52:a0:82:e9:f8:d6:b5: 35:ac:58:d8:3d:dd:4c:0d:ef:fa:fc:60:8f:d8:6d:07:1c:3a: 0c:09:44:e6:f8:7b:a7:9b:09:cd:45:bb:23:c3:35:86:4f:14: 46:25:41:e6:76:e4:4f:1c:4a:f4:16:fe:d7:2b:91:f4:4a:43: e1:dc:8c:ef:87:90:67:09:c2:2f:e2:a9:e0:b2:79:06:83:6a: aa:bb:9a:a1:f6:dc:04:b6:d4:8e:0b:c4:2c:f3:29:69:7c:09: 97:c7:cf:63:3e:31:ff:4c:7c:36:a3:24:3c:c8:73:f0:b0:77: 55:a9:46:5a:a8:ac:42:ec:be:ec:fc:9b:e9:56:f2:b6:dc:92: 96:0f:fd:e9:2f:93:50:50:ef:17:14:b4:92:3c:4d:d6:ea:d2: c6:e4:0b:22:3b:ee:c9:53:30:aa:33:07:9a:14:81:7f:5b:54: 8a:6e:c9:ff:c4:f8:d5:3d:88:d6:12:e7:1d:e1:b8:de:34:76: ed:da:5c:e8:73:84:02:98:a8:0d:20:9e:80:a1:99:c3:bc:9f: b2:83:4e:ce -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA4MDcwODE2NTlaFw0yNTA4MTQwODE2NTlaMBgxFjAUBgNV BAMTDTY4OTQ2MGZjLWViNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCe8AbfT0UlLNPmWfwgJTt5yMGHAQssCmiL33iFztdwFnouKDTlmrKflHo3x05w lJjnhjUuTmbIHJ8UzN3tNJMpM5aeVw3B6dIXK0ngVLs6zPVqFSs/xzkmd9o5g8IO E+ud0zg6qpBmMR84tucLZEN/cc6XjTe/vRPIq/H3z2UOS/OHFPZYkKnIMUekRM8c uH+NbkOxelMABCmbukOBXHacv6KflCsxO8bwL5mBzTLPammJ44LUyp8DLJC/HQQF PznMRB5SVNf8TrTUVL7wsaG29H6IQEH4K6COETa2qTiuKrE9XOvk0nXDgvvj5xbd 29LK4gjJf2NYs4SSJBkRO5SVAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUR/8iGdGk n0pHKQYqn8SrLn+UF4EwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHBbbMDeNVnPvjFd+pH4wRQ0O6kP/1BlTPQNemhlx0sss/Wyn4RkJ5jo 80GdgBl/UqCC6fjWtTWsWNg93UwN7/r8YI/YbQccOgwJROb4e6ebCc1FuyPDNYZP FEYlQeZ25E8cSvQW/tcrkfRKQ+HcjO+HkGcJwi/iqeCyeQaDaqq7mqH23AS21I4L xCzzKWl8CZfHz2M+Mf9MfDajJDzIc/Cwd1WpRlqorELsvuz8m+lW8rbckpYP/ekv k1BQ7xcUtJI8Tdbq0sbkCyI77slTMKozB5oUgX9bVIpuyf/E+NU9iNYS5x3huN40 du3aXOhzhAKYqA0gnoChmcO8n7KDTs4= -----END CERTIFICATE-----Generated at Thu Aug 7 14:39:52 2025 by rpki-client