$ rpki-client -vvf rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft File: 6NbUISgrkBkAAJd2GiVjIjyngV4.mft (raw, json) Hash identifier: 0ZXelRadPL2KKWU/Q8jGd8VIMhMRl7Zc/yhflbRfubE= Subject key identifier: 12:A6:04:B0:7D:66:73:EC:10:D8:82:5A:9B:58:AC:A0:88:90:63:51 Authority key identifier: E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E Certificate issuer: /CN=A91EFCFF/serialNumber=E8D6D421282B9019000097761A2563223CA7815E Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft Manifest number: A0 Signing time: Sat 09 Aug 2025 06:41:59 +0000 Manifest this update: Sat 09 Aug 2025 06:41:59 +0000 Manifest next update: Sat 16 Aug 2025 06:41:59 +0000 Files and hashes: 1: 6NbUISgrkBkAAJd2GiVjIjyngV4.crl (hash: ksbgBY1H//AtjmD66Q5I6chUEAHPhTIZUHFPFavjtOc=) 2: CCEAF60C911311EFA9C63854C4F9AE02.roa (hash: lpawVFjrLTQaiIY8ph0aOBiFjAIuxDOp5nWen5zsXsU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EFCFF, serialNumber=E8D6D421282B9019000097761A2563223CA7815E Validity Not Before: Aug 9 06:41:59 2025 GMT Not After : Aug 16 06:41:59 2025 GMT Subject: CN=6896edb7-c4d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:8b:0e:85:3e:f6:7c:b4:3b:ad:d5:63:36: c7:1c:85:fd:eb:c4:e5:8c:48:c9:91:a9:50:13:cd: 9a:6e:ce:70:c2:f0:9c:24:24:84:34:71:78:f0:35: f3:0e:4b:5f:33:a3:6a:30:a8:26:ee:fc:bf:88:a5: 37:85:93:1e:90:93:82:bc:72:b5:7f:c2:84:94:44: 87:c3:d8:bb:24:48:ed:dd:53:71:27:d1:ea:99:0c: 03:ee:29:5f:b9:d6:da:77:cd:5b:29:41:6c:c6:34: 9c:ff:8b:1e:83:30:54:6d:7d:3e:41:8f:23:a7:19: a6:b6:cc:c6:1b:24:1a:32:d1:83:90:ab:e3:b0:68: fd:d9:a8:76:f0:c7:58:a1:d2:14:8d:f4:92:ef:29: 03:5d:75:14:3c:90:68:db:23:a8:34:84:de:b8:e1: 63:3a:2a:5d:f7:87:66:64:17:a3:69:3a:3f:6f:23: ba:72:7d:1f:fa:dd:37:06:9a:11:fd:34:99:21:7b: 42:df:8d:e9:ff:cb:0b:ea:18:6f:50:7c:57:ab:72: 7a:d4:0b:d6:51:f2:95:ef:6a:1a:3d:0c:70:8f:e0: a9:f8:1e:36:2c:02:9b:63:5d:5a:c8:d3:da:f8:d5: 7e:1b:79:63:d7:e5:4d:6f:52:60:07:40:05:84:4f: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A6:04:B0:7D:66:73:EC:10:D8:82:5A:9B:58:AC:A0:88:90:63:51 X509v3 Authority Key Identifier: keyid:E8:D6:D4:21:28:2B:90:19:00:00:97:76:1A:25:63:22:3C:A7:81:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6NbUISgrkBkAAJd2GiVjIjyngV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EFCFF/0FA85F88821F11EFA1DB4C75C4F9AE02/6NbUISgrkBkAAJd2GiVjIjyngV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:e0:26:3a:b3:e1:16:92:a7:f9:00:13:a4:bc:e7:28:b9:13: 72:b3:29:47:13:6d:95:e4:2e:95:c7:cc:50:3c:28:69:61:16: 8f:82:d6:48:c5:d0:9d:60:cb:24:10:9d:b2:82:4f:a8:6a:5b: 28:61:5f:30:90:6b:3b:7f:23:0b:4f:f9:12:c8:54:43:4d:e4: ed:e5:fc:14:33:e8:88:cc:e8:58:5d:d2:66:7a:81:8f:79:58: 98:e0:02:ca:5b:b6:18:30:69:b8:b2:15:89:df:c3:80:28:66: 87:da:c4:22:5d:f5:62:b7:0c:a3:d2:11:3e:00:31:0f:a2:23: 8f:c4:fa:98:87:24:0d:60:58:e6:30:69:a9:2c:b3:a2:90:35: 1a:f5:25:63:5f:8e:b1:aa:18:d4:99:03:52:09:91:8a:85:df: 37:ed:99:94:6e:e3:fe:55:37:e0:88:6f:97:1f:5e:83:7e:34: 9d:1d:1e:b6:ef:cd:df:28:ae:55:9f:48:4a:62:77:9d:33:47: d0:2d:44:97:db:60:56:34:e2:23:07:22:13:a6:03:1f:51:2d: 93:fd:08:ae:03:bf:5d:d7:b7:dd:92:d2:9d:ff:35:54:79:33: 54:5c:cd:b2:98:2b:32:86:ad:2a:d6:05:a6:67:32:ca:b0:fd: ce:ab:77:76 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUZDRkYxMTAvBgNVBAUTKEU4RDZENDIxMjgyQjkwMTkwMDAwOTc3NjFBMjU2MzIy M0NBNzgxNUUwHhcNMjUwODA5MDY0MTU5WhcNMjUwODE2MDY0MTU5WjAYMRYwFAYD VQQDEw02ODk2ZWRiNy1jNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoayLDoU+9ny0O63VYzbHHIX968TljEjJkalQE82abs5wwvCcJCSENHF48DXz DktfM6NqMKgm7vy/iKU3hZMekJOCvHK1f8KElESHw9i7JEjt3VNxJ9HqmQwD7ilf udbad81bKUFsxjSc/4segzBUbX0+QY8jpxmmtszGGyQaMtGDkKvjsGj92ah28MdY odIUjfSS7ykDXXUUPJBo2yOoNITeuOFjOipd94dmZBejaTo/byO6cn0f+t03BpoR /TSZIXtC343p/8sL6hhvUHxXq3J61AvWUfKV72oaPQxwj+Cp+B42LAKbY11ayNPa +NV+G3lj1+VNb1JgB0AFhE9KMwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBKmBLB9 ZnPsENiCWptYrKCIkGNRMB8GA1UdIwQYMBaAFOjW1CEoK5AZAACXdholYyI8p4Fe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRkNGRi8wRkE4NUY4ODgy MUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtCa0FBSmQyR2lWaklqeW5n VjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZOYlVJU2dya0JrQUFKZDJHaVZqSWp5bmdWNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RkNGRi8wRkE4NUY4ODgyMUYxMUVGQTFEQjRDNzVDNEY5QUUwMi82TmJVSVNncmtC a0FBSmQyR2lWaklqeW5nVjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCX4CY6s+EWkqf5ABOkvOcouRNysylHE22V5C6Vx8xQPChpYRaPgtZI xdCdYMskEJ2ygk+oalsoYV8wkGs7fyMLT/kSyFRDTeTt5fwUM+iIzOhYXdJmeoGP eViY4ALKW7YYMGm4shWJ38OAKGaH2sQiXfVitwyj0hE+ADEPoiOPxPqYhyQNYFjm MGmpLLOikDUa9SVjX46xqhjUmQNSCZGKhd837ZmUbuP+VTfgiG+XH16DfjSdHR62 783fKK5Vn0hKYnedM0fQLUSX22BWNOIjByITpgMfUS2T/QiuA79d17fdktKd/zVU eTNUXM2ymCsyhq0q1gWmZzLKsP3Oq3d2 -----END CERTIFICATE-----Generated at Sun Aug 10 21:15:40 2025 by rpki-client