$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft File: 6o2GS70rsdeM2IkKFQThETZ_ehM.mft (raw, json) Hash identifier: rt8hQSGWA1I+2fQISwY7STdQq02LDD6D1HBDNt7sLzg= Subject key identifier: CC:F2:A8:FF:5B:F6:A9:B6:2A:93:62:C1:1E:1A:43:40:2A:94:77:67 Authority key identifier: EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 Certificate issuer: /CN=A91F6E65/serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Certificate serial: 1262 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft Manifest number: 125B Signing time: Mon 04 Aug 2025 17:17:53 +0000 Manifest this update: Mon 04 Aug 2025 17:17:52 +0000 Manifest next update: Mon 11 Aug 2025 17:17:52 +0000 Files and hashes: 1: 6o2GS70rsdeM2IkKFQThETZ_ehM.crl (hash: xO71z/BXpMvUfSE40hD3M1StZDIpJe1We0Bce0JUmOw=) 2: F87DE4E2518011E98D519C48C4F9AE02.roa (hash: lNg/c5OqFouAW+fJH2dEOVDXDmJq4ytAeqadsiAMyGA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4706 (0x1262) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6E65, serialNumber=EA8D864BBD2BB1D78CD8890A1504E111367F7A13 Validity Not Before: Aug 4 17:17:52 2025 GMT Not After : Aug 11 17:17:52 2025 GMT Subject: CN=6890eb40-486e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:16:c0:6a:3f:5b:0e:66:cc:24:0b:38:e0:20: 5f:a6:aa:ba:c7:30:00:d0:fe:0e:02:d8:5e:d6:e0: 42:7d:5a:6c:42:4d:9c:4f:6a:45:e2:54:ec:37:18: b5:45:8c:d3:57:f2:b9:b9:38:82:26:d5:7f:91:62: de:eb:8d:47:c8:ef:c9:eb:3a:71:a1:6e:0b:15:88: 99:ff:65:f5:fd:2d:8e:93:b1:30:b5:b4:f5:07:f7: cf:a5:d1:8f:9c:9d:c5:20:21:4a:55:df:a3:3c:62: 47:ec:9b:92:ec:8a:8c:d7:49:67:2f:d6:d6:bc:4e: e9:19:ea:95:29:86:11:de:bb:25:28:c0:da:22:8b: d4:87:cb:6d:a0:8c:d7:89:59:1e:c5:35:e5:7f:ad: d9:42:ac:c6:c3:33:8a:22:bc:59:31:13:46:cb:a3: 6f:f9:68:8d:d1:32:d9:d8:ba:db:49:00:3c:cc:4a: d6:c0:c0:55:fa:c0:66:a6:e5:c2:24:5d:96:c7:95: 43:a6:f3:0b:12:b0:3b:7a:09:a3:01:70:a2:e3:a2: 15:55:76:e7:8f:7a:7b:a7:5e:a7:2a:42:c2:25:d7: 1b:38:56:cc:d3:f6:9a:b4:f1:13:c5:2c:8c:bd:5a: 87:3b:2f:0f:e9:ee:bd:bc:e8:6c:f6:72:49:53:6c: 04:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:A8:FF:5B:F6:A9:B6:2A:93:62:C1:1E:1A:43:40:2A:94:77:67 X509v3 Authority Key Identifier: keyid:EA:8D:86:4B:BD:2B:B1:D7:8C:D8:89:0A:15:04:E1:11:36:7F:7A:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6o2GS70rsdeM2IkKFQThETZ_ehM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6E65/FED93A7CD88A11E8A3ECFF4DC4F9AE02/6o2GS70rsdeM2IkKFQThETZ_ehM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:96:9c:4b:15:c6:de:81:fc:4e:4b:f2:e0:e5:58:a0:fa:be: e5:96:6c:23:13:f3:a3:6d:67:57:7c:1c:19:00:1b:ae:a4:a5: f0:10:3d:8a:ef:e0:68:e8:a7:41:90:cb:06:d7:1a:3b:1a:55: f3:7b:1c:fa:ac:ac:e5:4c:51:c1:07:f3:78:df:b6:b4:7f:6d: dd:2c:b1:98:13:5a:68:f2:0f:cd:b7:4b:bc:59:0e:a8:39:d5: fe:fb:f3:e2:1c:a1:e3:43:75:f6:4e:99:fe:c4:18:bd:7d:d1: 7b:4e:0e:43:c4:cb:5d:eb:33:73:11:19:9a:78:14:2c:8d:76: 5b:f5:0d:9d:ec:bd:9f:9f:70:72:1d:d8:0a:fb:e4:3b:07:57: 04:46:9f:40:c1:82:cf:23:49:3b:15:4b:f4:fd:cf:c5:41:53: 19:fd:d8:8d:68:82:5d:a3:60:6a:51:16:e2:eb:b5:7c:4c:1b: f1:5b:70:d0:3b:41:7a:cc:f7:da:b4:a4:5e:f6:93:d3:03:9a: 06:a8:34:ac:76:e7:cd:72:5d:91:c4:2c:f6:95:c3:c8:f1:01: 3f:a7:24:af:ca:db:37:14:30:3c:5c:14:76:c1:12:02:7c:b0: 5c:cb:f3:3e:64:e1:72:ce:c0:1f:f7:24:2a:59:94:aa:7c:ba: 45:05:c8:66 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEmIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZFNjUxMTAvBgNVBAUTKEVBOEQ4NjRCQkQyQkIxRDc4Q0Q4ODkwQTE1MDRFMTEx MzY3RjdBMTMwHhcNMjUwODA0MTcxNzUyWhcNMjUwODExMTcxNzUyWjAYMRYwFAYD VQQDEw02ODkwZWI0MC00ODZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwxbAaj9bDmbMJAs44CBfpqq6xzAA0P4OAthe1uBCfVpsQk2cT2pF4lTsNxi1 RYzTV/K5uTiCJtV/kWLe641HyO/J6zpxoW4LFYiZ/2X1/S2Ok7EwtbT1B/fPpdGP nJ3FICFKVd+jPGJH7JuS7IqM10lnL9bWvE7pGeqVKYYR3rslKMDaIovUh8ttoIzX iVkexTXlf63ZQqzGwzOKIrxZMRNGy6Nv+WiN0TLZ2LrbSQA8zErWwMBV+sBmpuXC JF2Wx5VDpvMLErA7egmjAXCi46IVVXbnj3p7p16nKkLCJdcbOFbM0/aatPETxSyM vVqHOy8P6e69vOhs9nJJU2wEVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzyqP9b 9qm2KpNiwR4aQ0AqlHdnMB8GA1UdIwQYMBaAFOqNhku9K7HXjNiJChUE4RE2f3oT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkU2NS9GRUQ5M0E3Q0Q4 OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNkZU0ySWtLRlFUaEVUWl9l aE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvMkdTNzByc2RlTTJJa0tGUVRoRVRaX2VoTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NkU2NS9GRUQ5M0E3Q0Q4OEExMUU4QTNFQ0ZGNERDNEY5QUUwMi82bzJHUzcwcnNk ZU0ySWtLRlFUaEVUWl9laE0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHlpxLFcbegfxOS/Lg5Vig+r7llmwjE/OjbWdXfBwZABuupKXwED2K 7+Bo6KdBkMsG1xo7GlXzexz6rKzlTFHBB/N437a0f23dLLGYE1po8g/Nt0u8WQ6o OdX++/PiHKHjQ3X2Tpn+xBi9fdF7Tg5DxMtd6zNzERmaeBQsjXZb9Q2d7L2fn3By HdgK++Q7B1cERp9AwYLPI0k7FUv0/c/FQVMZ/diNaIJdo2BqURbi67V8TBvxW3DQ O0F6zPfatKRe9pPTA5oGqDSsdufNcl2RxCz2lcPI8QE/pySvyts3FDA8XBR2wRIC fLBcy/M+ZOFyzsAf9yQqWZSqfLpFBchm -----END CERTIFICATE-----Generated at Wed Aug 6 05:52:11 2025 by rpki-client