$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft File: -6D4tMTQWqlqqvV6OUQDcbyNBDc.mft (raw, json) Hash identifier: rpQ+Mv/i0gRwSWQMs59nxDyWYJHucAYG9IBfCgTjr4o= Subject key identifier: 59:DA:6F:83:3F:19:D3:6A:BB:2D:F4:4A:AB:71:1D:83:D2:FD:C2:85 Authority key identifier: FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 Certificate issuer: /CN=A91F9ECA/serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Certificate serial: 055D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft Manifest number: 0558 Signing time: Fri 08 Aug 2025 23:49:52 +0000 Manifest this update: Fri 08 Aug 2025 23:49:51 +0000 Manifest next update: Fri 15 Aug 2025 23:49:51 +0000 Files and hashes: 1: -6D4tMTQWqlqqvV6OUQDcbyNBDc.crl (hash: 7gjASbsvSry+Cxpq8hCm3i6Zek3eT68KGMExF7eNqV0=) 2: 9F2BA98AF90611EBB8E0C27FC4F9AE02.roa (hash: H5HzvqvaFcgyJmUGVWINJTj96jgcqceA7VesKwIUnvc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1373 (0x55d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9ECA, serialNumber=FBA0F8B4C4D05AA96AAAF57A39440371BC8D0437 Validity Not Before: Aug 8 23:49:51 2025 GMT Not After : Aug 15 23:49:51 2025 GMT Subject: CN=68968d1f-f4c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:59:46:8e:07:e3:5e:49:5b:28:8d:74:d4: 2c:90:7a:53:f3:73:d7:50:cc:36:ca:74:00:24:39: de:b5:27:98:b0:81:31:84:73:af:aa:4b:30:95:27: 0e:f4:75:cf:74:5b:4a:3d:cd:5a:e9:da:52:a7:2f: a2:b6:7b:dd:33:2b:72:85:a6:90:45:c8:2a:c9:08: 56:87:f5:91:9d:d5:d9:d8:7c:a4:9e:c3:74:af:ba: 9c:51:a8:d5:fe:f9:ca:d0:7b:3c:bc:4c:31:36:ee: b4:37:1a:90:05:b8:28:8c:a7:be:25:66:57:ad:ef: 0c:09:c2:56:2a:de:20:00:9d:6b:ca:70:54:e4:7b: 9a:6d:3d:e5:1a:1b:8c:a2:81:b4:7b:36:cb:c7:66: 8b:23:3a:02:cd:3a:d9:21:5b:13:9e:75:28:ae:0b: 38:f9:4e:1f:3c:8a:a9:c2:d2:eb:f3:37:f2:14:ee: 77:99:52:34:56:c3:0f:14:06:1b:c0:62:26:5a:df: 8c:72:33:11:a3:dd:4b:84:bd:a5:28:13:e0:fe:e2: 24:cb:9c:a4:4d:30:3a:58:13:e7:25:94:75:9e:fa: 1e:76:6c:42:ce:8e:07:61:54:fc:7f:25:09:47:b9: 1d:ec:45:b8:12:f2:1e:df:32:22:b8:ff:23:3b:79: a8:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:DA:6F:83:3F:19:D3:6A:BB:2D:F4:4A:AB:71:1D:83:D2:FD:C2:85 X509v3 Authority Key Identifier: keyid:FB:A0:F8:B4:C4:D0:5A:A9:6A:AA:F5:7A:39:44:03:71:BC:8D:04:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6D4tMTQWqlqqvV6OUQDcbyNBDc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9ECA/E1ECE0A2F90311EBB07A037AC4F9AE02/-6D4tMTQWqlqqvV6OUQDcbyNBDc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 91:91:1e:9d:42:65:f5:73:b8:af:e5:82:46:cc:77:f7:bd:17: 49:bd:85:8e:60:3a:6d:e6:aa:30:b8:f7:10:82:8b:a1:14:44: 07:dc:0b:5a:3c:0a:9b:ac:cf:3d:2c:db:04:dc:d2:12:1b:3b: 1a:d6:47:cc:7c:da:46:a0:52:c4:38:a4:65:49:f8:88:f0:ab: 29:ee:39:28:77:02:37:a1:94:91:27:6d:c4:68:3c:fd:58:80: 6c:4b:91:b4:33:ca:03:c8:e7:e9:5d:8f:25:04:01:06:23:e9: da:28:27:1a:ee:90:f7:9b:54:a8:f2:25:3c:ad:f8:ca:a8:6f: db:0c:ca:e5:56:65:6c:e0:c1:58:f7:9e:41:d7:db:48:ee:e1: 25:ac:1d:27:ce:d9:cc:c4:05:10:59:c5:39:b1:bb:d1:86:36: 83:c0:8f:b6:d7:7b:0f:71:2e:7c:19:73:14:eb:50:04:b4:3b: 69:c7:6a:a3:d2:6b:64:df:4f:84:ad:9e:00:53:ee:81:aa:ac: 70:d1:30:f9:48:9e:1a:00:c8:9d:52:17:c6:64:b0:02:d2:89: 0c:3e:32:66:d2:41:81:95:da:6f:08:8d:d8:5d:12:82:c5:20: 35:12:7f:d6:12:6b:f9:8a:88:1f:bf:0f:d6:45:c0:c5:6a:4f: ba:6f:da:b3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBV0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjlFQ0ExMTAvBgNVBAUTKEZCQTBGOEI0QzREMDVBQTk2QUFBRjU3QTM5NDQwMzcx QkM4RDA0MzcwHhcNMjUwODA4MjM0OTUxWhcNMjUwODE1MjM0OTUxWjAYMRYwFAYD VQQDEw02ODk2OGQxZi1mNGMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvHNZRo4H415JWyiNdNQskHpT83PXUMw2ynQAJDnetSeYsIExhHOvqkswlScO 9HXPdFtKPc1a6dpSpy+itnvdMytyhaaQRcgqyQhWh/WRndXZ2HyknsN0r7qcUajV /vnK0Hs8vEwxNu60NxqQBbgojKe+JWZXre8MCcJWKt4gAJ1rynBU5HuabT3lGhuM ooG0ezbLx2aLIzoCzTrZIVsTnnUorgs4+U4fPIqpwtLr8zfyFO53mVI0VsMPFAYb wGImWt+McjMRo91LhL2lKBPg/uIky5ykTTA6WBPnJZR1nvoedmxCzo4HYVT8fyUJ R7kd7EW4EvIe3zIiuP8jO3moZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFnab4M/ GdNquy30SqtxHYPS/cKFMB8GA1UdIwQYMBaAFPug+LTE0Fqpaqr1ejlEA3G8jQQ3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOUVDQS9FMUVDRTBBMkY5 MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdxbHFxdlY2T1VRRGNieU5C RGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02RDR0TVRRV3FscXF2VjZPVVFEY2J5TkJEYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG OUVDQS9FMUVDRTBBMkY5MDMxMUVCQjA3QTAzN0FDNEY5QUUwMi8tNkQ0dE1UUVdx bHFxdlY2T1VRRGNieU5CRGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCRkR6dQmX1c7iv5YJGzHf3vRdJvYWOYDpt5qowuPcQgouhFEQH3Ata PAqbrM89LNsE3NISGzsa1kfMfNpGoFLEOKRlSfiI8Ksp7jkodwI3oZSRJ23EaDz9 WIBsS5G0M8oDyOfpXY8lBAEGI+naKCca7pD3m1So8iU8rfjKqG/bDMrlVmVs4MFY 955B19tI7uElrB0nztnMxAUQWcU5sbvRhjaDwI+213sPcS58GXMU61AEtDtpx2qj 0mtk30+ErZ4AU+6Bqqxw0TD5SJ4aAMidUhfGZLAC0okMPjJm0kGBldpvCI3YXRKC xSA1En/WEmv5iogfvw/WRcDFak+6b9qz -----END CERTIFICATE-----Generated at Sat Aug 9 10:50:50 2025 by rpki-client