$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft File: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft (raw, json) Hash identifier: h3cnppPDpGARr2V0tAOzzDFdGFt1zIfY+Hxoq8huHwQ= Subject key identifier: 8A:2C:73:64:AF:C3:CD:E8:F1:C5:DC:53:23:A1:7A:E8:91:71:AF:E8 Authority key identifier: EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 Certificate issuer: /CN=A91F6C39/serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Certificate serial: 05D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft Manifest number: 05C9 Signing time: Sun 10 Aug 2025 23:10:09 +0000 Manifest this update: Sun 10 Aug 2025 23:10:09 +0000 Manifest next update: Sun 17 Aug 2025 23:10:09 +0000 Files and hashes: 1: 6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl (hash: IiXxsGA0+2BX06n044b7AzddEdEXnJlzc+6frMasHCg=) 2: 7EFC59BA5D0511EEB1F12C3BC4F9AE02.roa (hash: 2cmkD42QcbCRoSMZu579s8sayLfnS2VTqmE89GasVfM=) 3: 6F9ACE76CE7211EBAF46B61AC4F9AE02.roa (hash: wVYga0/tD85l8FSG82PbnxhnB2SkjvEdIkkyzqmMiv0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1491 (0x5d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C39, serialNumber=EA26D323831CDA1A384E91E0FE3891DB0CEB2EC8 Validity Not Before: Aug 10 23:10:09 2025 GMT Not After : Aug 17 23:10:09 2025 GMT Subject: CN=689926d1-8f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:9c:73:4d:79:cb:3f:f8:7f:f4:a7:37:aa: fa:21:e9:f0:e6:64:75:16:d9:fc:2e:a0:fa:b9:c1: 64:f8:e7:24:58:4e:42:2f:d0:36:d0:0b:8c:34:30: 39:81:15:d5:a8:97:65:e2:0f:6b:ab:46:f1:44:dc: c4:1d:e9:8e:43:15:26:8c:ce:66:2b:b6:cf:4c:38: 1b:df:85:8b:10:d7:3a:e4:f6:a8:f5:4a:1a:f3:40: e0:8f:e5:5d:bb:31:05:d0:d6:7d:d6:11:a0:2e:d9: 1e:92:96:05:0a:c5:9e:58:b8:16:f0:04:0e:0f:14: 5c:49:6b:01:42:07:8d:e0:8e:13:38:d5:e0:64:53: 26:93:cd:d0:83:49:6f:88:42:21:1c:f1:37:20:9b: 4d:fe:81:4b:e7:5c:4f:f5:e9:e5:84:6c:da:02:c6: 55:be:a3:11:0b:61:94:b8:c3:5f:95:b1:3d:35:18: cb:4f:3c:7e:4e:99:87:d2:f8:37:2c:d9:97:a3:12: 41:4c:9d:a5:d5:cd:6a:69:64:16:dc:0a:c0:bc:6e: b2:93:c5:93:51:45:f4:2a:56:7a:cf:e2:24:ab:4f: f1:5f:21:24:71:f7:37:db:62:df:77:ff:3e:92:a7: a2:ab:70:65:5a:27:f0:6f:43:70:72:17:51:ed:3e: 7c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2C:73:64:AF:C3:CD:E8:F1:C5:DC:53:23:A1:7A:E8:91:71:AF:E8 X509v3 Authority Key Identifier: keyid:EA:26:D3:23:83:1C:DA:1A:38:4E:91:E0:FE:38:91:DB:0C:EB:2E:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C39/7BF0F274CE7011EBA7E09B1AC4F9AE02/6ibTI4Mc2ho4TpHg_jiR2wzrLsg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2e:5b:a0:19:f7:ef:ee:9c:35:38:f0:6e:21:61:5c:5f:14:1f: 09:3c:62:4c:4b:32:cc:35:52:d5:53:1b:f0:e7:23:b8:59:47: 3b:37:00:3c:4a:47:83:a2:ab:f2:88:01:58:63:b7:62:34:c8: 6f:67:4c:51:e6:a2:59:89:a3:83:88:13:9b:69:b0:aa:91:c6: 98:49:06:9f:72:28:47:89:7b:04:4d:5a:2e:3e:58:eb:7b:01: 23:36:95:67:62:59:a5:16:fe:fb:87:78:0f:44:a7:70:fc:d8: 3a:48:4d:d1:e6:95:9e:5e:ee:12:c1:61:db:f7:57:03:31:73: 2f:c6:03:a7:f4:d6:1e:95:a7:f8:e1:3f:9f:11:f5:33:26:fc: c4:dc:74:25:91:96:31:0e:08:99:f9:4f:f2:68:56:6a:52:81: d8:cf:95:f9:35:d9:09:43:5b:e6:60:1e:49:d9:3f:d7:2b:36: 5d:2d:b2:a1:b3:f7:75:03:36:9d:da:a9:74:a3:53:e4:16:c2: 08:9f:28:87:77:32:9b:1f:fc:fe:94:43:40:cb:05:8c:5b:78: 52:6d:c4:bb:d4:d2:ba:4d:35:a3:f4:60:dc:d3:87:69:4a:a6: c3:44:65:95:ec:44:4f:6f:4f:c4:0d:27:ee:c6:cc:7b:e4:64: 1e:2c:b7:b9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBdMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMzkxMTAvBgNVBAUTKEVBMjZEMzIzODMxQ0RBMUEzODRFOTFFMEZFMzg5MURC MENFQjJFQzgwHhcNMjUwODEwMjMxMDA5WhcNMjUwODE3MjMxMDA5WjAYMRYwFAYD VQQDEw02ODk5MjZkMS04Zjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzQWcc015yz/4f/SnN6r6Ienw5mR1Ftn8LqD6ucFk+OckWE5CL9A20AuMNDA5 gRXVqJdl4g9rq0bxRNzEHemOQxUmjM5mK7bPTDgb34WLENc65Pao9Uoa80Dgj+Vd uzEF0NZ91hGgLtkekpYFCsWeWLgW8AQODxRcSWsBQgeN4I4TONXgZFMmk83Qg0lv iEIhHPE3IJtN/oFL51xP9enlhGzaAsZVvqMRC2GUuMNflbE9NRjLTzx+TpmH0vg3 LNmXoxJBTJ2l1c1qaWQW3ArAvG6yk8WTUUX0KlZ6z+Ikq0/xXyEkcfc322Lfd/8+ kqeiq3BlWifwb0NwchdR7T58mwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIosc2Sv w83o8cXcUyOheuiRca/oMB8GA1UdIwQYMBaAFOom0yODHNoaOE6R4P44kdsM6y7I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMzOS83QkYwRjI3NENF NzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJobzRUcEhnX2ppUjJ3enJM c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZpYlRJNE1jMmhvNFRwSGdfamlSMnd6ckxzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkMzOS83QkYwRjI3NENFNzAxMUVCQTdFMDlCMUFDNEY5QUUwMi82aWJUSTRNYzJo bzRUcEhnX2ppUjJ3enJMc2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAuW6AZ9+/unDU48G4hYVxfFB8JPGJMSzLMNVLVUxvw5yO4WUc7NwA8 SkeDoqvyiAFYY7diNMhvZ0xR5qJZiaODiBObabCqkcaYSQafcihHiXsETVouPljr ewEjNpVnYlmlFv77h3gPRKdw/Ng6SE3R5pWeXu4SwWHb91cDMXMvxgOn9NYelaf4 4T+fEfUzJvzE3HQlkZYxDgiZ+U/yaFZqUoHYz5X5NdkJQ1vmYB5J2T/XKzZdLbKh s/d1Azad2ql0o1PkFsIInyiHdzKbH/z+lENAywWMW3hSbcS71NK6TTWj9GDc04dp SqbDRGWV7ERPb0/EDSfuxsx75GQeLLe5 -----END CERTIFICATE-----Generated at Mon Aug 11 06:00:40 2025 by rpki-client