$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft File: -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json) Hash identifier: ZZRxMb464YJws1PD6ij8FvFY7HiuY8P6urzwzJ7LEpA= Subject key identifier: 0B:4F:6F:5C:78:E8:1E:45:77:12:EB:48:A8:E3:38:16:AB:A3:F6:E9 Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA Certificate issuer: /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Certificate serial: 6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft Manifest number: 6C Signing time: Sat 09 Aug 2025 07:27:06 +0000 Manifest this update: Sat 09 Aug 2025 07:27:05 +0000 Manifest next update: Sat 16 Aug 2025 07:27:05 +0000 Files and hashes: 1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: LJSzvrM/QvOOqUQoho14yCjw4gpFbvDPduAiXKME4Ro=) 2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: LnJzBzEfTxjLgTZtBUJIJtCnRzaftx7eCk4WGWWItX4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA Validity Not Before: Aug 9 07:27:05 2025 GMT Not After : Aug 16 07:27:05 2025 GMT Subject: CN=6896f84a-b779 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e5:02:9d:4d:ab:a8:a1:9d:ee:1c:f5:a2:8a: 62:83:76:32:9e:9a:58:2d:2e:0b:ba:e7:22:31:01: 5a:9d:33:8e:20:f8:3e:c9:a7:56:c2:74:90:e3:4d: c6:2c:9a:d6:8e:79:7e:3c:f6:5b:95:99:8e:07:c1: d4:31:e4:7c:16:25:17:96:bb:0e:21:c6:37:9f:3e: ac:8b:f6:f7:36:57:fa:03:95:ab:82:fe:0c:a1:13: bb:86:f4:cd:aa:95:c1:57:66:61:9c:76:d0:13:7c: 50:c0:cf:41:d9:c9:56:3d:45:83:a2:95:af:de:64: 17:60:65:bd:1b:6b:50:9b:99:72:a6:7e:70:50:74: 6a:2e:98:af:50:84:34:53:e5:78:0a:db:aa:cb:e9: 84:5b:79:7a:5e:a0:32:dc:2b:54:21:d2:ef:2e:af: a7:18:e2:1c:b8:31:12:2f:57:5f:08:21:34:85:61: de:95:ff:57:f7:cc:e4:3e:50:63:95:71:63:8b:0d: 32:f0:c8:56:02:39:78:dc:ae:60:35:c0:c7:ed:83: 19:9a:37:0c:e6:bb:8c:42:ba:bb:cf:96:97:97:1e: 1e:d3:d8:9a:9e:fb:59:5b:f4:ee:27:da:12:ed:3a: c4:75:68:cf:8e:ef:33:1f:f6:e5:e0:44:a2:a7:90: f7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4F:6F:5C:78:E8:1E:45:77:12:EB:48:A8:E3:38:16:AB:A3:F6:E9 X509v3 Authority Key Identifier: keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c8:d0:70:87:32:26:22:5b:c8:9f:c0:d2:58:8d:8b:50:bc:c1: eb:98:7b:f8:ac:4f:02:41:55:48:30:4d:1f:27:c3:7c:35:c5: 90:be:d5:a4:73:d5:6b:4c:be:a4:d4:0b:92:36:d5:79:38:26: d3:3b:0b:0d:ae:41:5b:3b:be:ed:1e:57:9d:6c:b4:60:18:6a: 0b:37:71:6b:8a:3a:5f:de:6b:fe:84:6f:d3:50:36:c3:d7:73: 9f:fd:b2:cb:92:ad:47:e7:48:55:1b:5b:01:60:3c:9d:47:46: 13:25:ad:e5:a4:02:4c:7a:17:3c:ed:d6:6b:36:75:30:13:d3: ae:f0:13:09:07:64:31:8f:dd:13:a0:f3:b7:77:45:11:98:50: 73:12:51:89:b3:64:71:4d:03:44:5a:06:79:74:6a:cc:8e:37: 7d:f7:62:3a:13:87:6c:b4:c2:81:6d:d6:55:4e:e2:a0:e0:c5: d8:4d:67:2d:f5:a3:7b:c3:95:72:20:41:85:7b:39:4b:59:10: 7b:82:42:e9:57:aa:3a:5a:9a:05:1e:ec:c3:09:03:69:50:f7: 6d:e4:7f:2f:69:d6:ff:4d:9d:ab:a0:2d:82:6d:1d:32:37:10: 0a:6c:c6:ce:f5:43:16:a7:af:b9:71:2b:75:e5:77:7b:3f:11: d4:65:4a:e4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MkQ5MzExMC8GA1UEBRMoRkJBRTREQjkzOTJDODE5MzIxQUY1MTFEQzZCMkI1QUE4 OTk4MTlGQTAeFw0yNTA4MDkwNzI3MDVaFw0yNTA4MTYwNzI3MDVaMBgxFjAUBgNV BAMTDTY4OTZmODRhLWI3NzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDP5QKdTauooZ3uHPWiimKDdjKemlgtLgu65yIxAVqdM44g+D7Jp1bCdJDjTcYs mtaOeX489luVmY4HwdQx5HwWJReWuw4hxjefPqyL9vc2V/oDlauC/gyhE7uG9M2q lcFXZmGcdtATfFDAz0HZyVY9RYOila/eZBdgZb0ba1CbmXKmfnBQdGoumK9QhDRT 5XgK26rL6YRbeXpeoDLcK1Qh0u8ur6cY4hy4MRIvV18IITSFYd6V/1f3zOQ+UGOV cWOLDTLwyFYCOXjcrmA1wMftgxmaNwzmu4xCurvPlpeXHh7T2Jqe+1lb9O4n2hLt OsR1aM+O7zMf9uXgRKKnkPeHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUC09vXHjo HkV3EutIqOM4Fquj9ukwHwYDVR0jBBgwFoAU+65NuTksgZMhr1EdxrK1qomYGfow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYyRDkzLzgxOEZEQjc4RDQ0 RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdm by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvLTY1TnVUa3NnWk1ocjFFZHhySzFxb21ZR2ZvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYy RDkzLzgxOEZEQjc4RDQ0RDExRUZCMTYwMEIyOEM0RjlBRTAyLy02NU51VGtzZ1pN aHIxRWR4cksxcW9tWUdmby5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAMjQcIcyJiJbyJ/A0liNi1C8weuYe/isTwJBVUgwTR8nw3w1xZC+1aRz 1WtMvqTUC5I21Xk4JtM7Cw2uQVs7vu0eV51stGAYags3cWuKOl/ea/6Eb9NQNsPX c5/9ssuSrUfnSFUbWwFgPJ1HRhMlreWkAkx6Fzzt1ms2dTAT067wEwkHZDGP3ROg 87d3RRGYUHMSUYmzZHFNA0RaBnl0asyON333YjoTh2y0woFt1lVO4qDgxdhNZy31 o3vDlXIgQYV7OUtZEHuCQulXqjpamgUe7MMJA2lQ923kfy9p1v9NnaugLYJtHTI3 EApsxs71Qxanr7lxK3Xld3s/EdRlSuQ= -----END CERTIFICATE-----Generated at Sun Aug 10 13:49:54 2025 by rpki-client