$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: Rv0v6KCKPVlzV8ON4r/mmSBwOyistEdSfYBx8nP+NPo= Subject key identifier: 32:3C:9D:5F:E7:1F:A6:75:0D:C9:4A:34:51:2E:85:68:B4:0D:D0:03 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2081 Signing time: Sun 10 Aug 2025 15:56:00 +0000 Manifest this update: Sun 10 Aug 2025 15:56:00 +0000 Manifest next update: Sun 17 Aug 2025 15:56:00 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: tVgF76TacnUB0TrUe2jg3Pk21Wo9zPmyI/jOdeCIAaM=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8358 (0x20a6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Aug 10 15:56:00 2025 GMT Not After : Aug 17 15:56:00 2025 GMT Subject: CN=6898c110-24a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:bb:cb:54:5d:a3:6c:9f:8a:b8:3f:1f:0a: 65:0b:f9:6e:52:23:24:41:c4:b4:82:a1:7d:b8:16: c3:ab:84:44:60:28:e7:ae:c5:52:0b:08:da:85:09: 2f:ea:05:ac:d3:92:0b:bb:2d:b3:31:39:a2:98:4c: 70:e7:02:65:c4:0a:ff:50:47:7d:2f:03:89:c8:ff: cf:47:dd:81:20:92:9b:a0:70:5b:1b:bd:59:91:c5: 81:64:54:cc:e8:9d:f3:82:29:5c:3b:f3:82:36:c5: c5:4f:57:7c:4b:e5:7a:96:b5:73:a7:0a:be:b5:a2: c5:b7:a3:ed:2a:7e:bf:c0:44:41:d3:f1:0e:5c:0a: 6c:a5:23:bb:4e:29:a4:df:1e:98:5f:37:5b:8d:7e: 5f:dc:ef:90:bd:96:91:3b:af:bf:9a:43:13:98:a2: d6:76:45:bd:00:5b:1e:6e:3b:ad:57:61:fc:78:0d: c9:aa:ba:9a:54:3d:c7:cb:c1:cc:13:83:ec:d1:18: af:75:28:6d:a0:81:dc:10:e4:14:fe:70:59:76:f9: a1:8b:e6:b0:60:ee:71:60:ad:0d:2d:83:62:b6:eb: 0a:02:60:ba:81:ae:7c:f3:4f:c7:17:36:e8:eb:20: 7e:8f:bd:9e:a5:f4:57:7a:be:17:6d:c7:f2:40:e2: a5:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:3C:9D:5F:E7:1F:A6:75:0D:C9:4A:34:51:2E:85:68:B4:0D:D0:03 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 20:24:be:a4:a5:01:e9:2b:60:73:ab:76:03:f2:12:97:5f:91: a0:11:7e:3b:b3:cd:5a:e4:f6:84:3f:03:be:28:78:7a:c8:d9: 88:9d:cd:f8:2e:05:bb:33:54:d9:e9:25:8a:75:64:bb:6f:81: e1:4e:3b:c1:78:81:66:1e:7f:18:8f:48:36:6c:87:57:32:c4: ee:d8:0e:36:43:e6:9f:c0:f5:6f:2e:3b:58:09:88:36:71:d2: 64:fd:87:4e:1f:2f:d8:fb:ef:0a:56:16:5f:36:9e:9a:96:89: 70:77:3a:66:b9:62:e0:90:2a:e6:6c:f5:f8:43:4b:c4:77:95: d3:b8:1d:88:16:02:4c:5d:32:14:45:94:f0:e6:00:29:1d:92: 49:ab:a3:06:91:84:7e:94:f8:8a:56:99:7b:d1:e7:d1:d5:35: 1e:a9:90:d9:3c:1b:11:c3:40:0d:e1:60:b7:32:6d:27:05:98: ea:d6:b8:ed:5a:09:76:84:34:ad:80:89:2e:d1:1e:09:06:49: 47:8e:0c:9f:f3:67:a9:96:a4:a8:25:48:30:5a:65:61:aa:f0: ae:5f:e0:83:4d:0b:f3:56:28:de:a7:8a:43:2c:90:9c:0b:fc: 32:17:5d:b8:4d:61:db:15:47:08:75:24:56:00:2f:9e:11:56: a3:f1:ee:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIKYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwODEwMTU1NjAwWhcNMjUwODE3MTU1NjAwWjAYMRYwFAYD VQQDEw02ODk4YzExMC0yNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozm7y1Rdo2yfirg/HwplC/luUiMkQcS0gqF9uBbDq4REYCjnrsVSCwjahQkv 6gWs05ILuy2zMTmimExw5wJlxAr/UEd9LwOJyP/PR92BIJKboHBbG71ZkcWBZFTM 6J3zgilcO/OCNsXFT1d8S+V6lrVzpwq+taLFt6PtKn6/wERB0/EOXApspSO7Timk 3x6YXzdbjX5f3O+QvZaRO6+/mkMTmKLWdkW9AFsebjutV2H8eA3JqrqaVD3Hy8HM E4Ps0RivdShtoIHcEOQU/nBZdvmhi+awYO5xYK0NLYNitusKAmC6ga5880/HFzbo 6yB+j72epfRXer4XbcfyQOKltQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDI8nV/n H6Z1DclKNFEuhWi0DdADMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAgJL6kpQHpK2Bzq3YD8hKXX5GgEX47s81a5PaEPwO+KHh6yNmInc34 LgW7M1TZ6SWKdWS7b4HhTjvBeIFmHn8Yj0g2bIdXMsTu2A42Q+afwPVvLjtYCYg2 cdJk/YdOHy/Y++8KVhZfNp6alolwdzpmuWLgkCrmbPX4Q0vEd5XTuB2IFgJMXTIU RZTw5gApHZJJq6MGkYR+lPiKVpl70efR1TUeqZDZPBsRw0AN4WC3Mm0nBZjq1rjt Wgl2hDStgIku0R4JBklHjgyf82eplqSoJUgwWmVhqvCuX+CDTQvzVijep4pDLJCc C/wyF124TWHbFUcIdSRWAC+eEVaj8e4Z -----END CERTIFICATE-----Generated at Mon Aug 11 10:30:02 2025 by rpki-client