$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json) Hash identifier: tX2sbB2BO8YwvJfdEX8BZqop9nlbf4gKDPpyObzFJcM= Subject key identifier: 44:EC:6E:2D:13:D4:96:AD:5A:08:DF:D9:FE:2C:8A:C4:8E:29:1B:DB Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Certificate serial: 0679 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft Manifest number: 0674 Signing time: Mon 04 Aug 2025 22:49:14 +0000 Manifest this update: Mon 04 Aug 2025 22:49:13 +0000 Manifest next update: Mon 11 Aug 2025 22:49:13 +0000 Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: XASqzjfTmwySN6gaitaLD4Rwu8YvcnrmnLXLt9IhNWY=) 2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: Lx0/5acw/rTT+uCYraQZRnT94tjJt0V2khH4PhiByaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 22:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1657 (0x679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Validity Not Before: Aug 4 22:49:13 2025 GMT Not After : Aug 11 22:49:13 2025 GMT Subject: CN=689138e9-2b1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:48:b9:9b:d9:ea:06:1b:6f:cc:66:94:dc:cc: 2a:c8:bc:dc:57:b3:24:b5:8e:d4:9f:6c:5d:7a:f5: 46:1f:79:9c:9f:1b:9b:98:c2:a1:54:ae:87:17:28: 2b:f6:f1:8c:50:72:6b:84:f5:59:8f:e3:43:c3:ce: 6c:8a:5e:f8:4f:a6:cd:08:af:d3:85:bb:c4:b0:79: 9d:3e:b3:05:5e:be:1e:b2:6d:ce:34:48:58:3e:a2: 83:8b:62:af:e1:35:37:d8:49:38:5d:ca:3a:9f:2f: dc:fd:f6:c7:a8:c0:ce:bc:7c:ad:e2:8c:32:49:99: 1c:de:eb:4e:68:65:b7:10:e2:78:30:8a:19:1f:a7: f5:c7:9d:d6:57:ba:a5:28:07:67:33:45:0b:fb:43: 12:5f:c5:a2:bb:16:78:e4:1e:e1:43:ff:1b:b6:44: 32:59:d8:0f:c9:42:0d:bd:12:6d:28:a3:e6:d7:7e: 2f:1b:9f:48:b5:d3:2e:59:36:c4:3e:8f:4e:2b:2f: 0a:ef:d9:1d:f6:81:e9:17:20:8e:e9:6b:f5:0a:f3: b3:6f:61:0a:a6:2a:8f:19:0e:14:98:3f:b6:89:98: e8:31:66:56:35:9c:02:1b:55:7a:c6:15:02:ac:03: b3:02:7c:cb:3e:17:b8:34:23:e3:16:69:b0:55:e5: ef:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:EC:6E:2D:13:D4:96:AD:5A:08:DF:D9:FE:2C:8A:C4:8E:29:1B:DB X509v3 Authority Key Identifier: keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:55:a2:1f:c4:0e:bc:22:7f:75:aa:57:04:a0:24:3a:ce:34: d3:17:bf:97:92:3d:bc:fd:5b:05:3e:52:cb:b1:f7:44:3e:f8: 56:ba:de:6f:49:c5:11:20:ca:84:9b:d1:45:4d:d2:7e:75:11: e1:a1:da:b8:91:8c:1c:0c:7d:4d:dd:f2:60:7e:cf:72:4f:be: e1:25:ee:57:a0:78:fd:ab:61:f0:bc:a5:1e:38:6c:44:ce:c6: d5:2b:03:02:ea:74:2b:18:1a:11:63:35:d1:b6:63:56:26:1e: 81:66:33:4f:00:34:42:4a:1b:ff:44:56:10:c6:5d:68:45:d5: 36:26:6b:c1:d7:06:d3:a1:61:1d:12:4e:e6:36:33:8a:14:32: 0e:73:f1:44:3c:d5:9c:e6:56:3c:28:07:38:8a:92:0c:76:b7: 33:b3:82:fa:aa:de:aa:96:b1:4c:96:f9:25:cc:88:31:9b:7e: 12:eb:b0:7f:02:7c:72:d4:64:51:10:7c:d0:91:e5:56:30:8f: e6:57:a6:f3:eb:8e:64:4f:c0:ee:97:43:7a:3c:27:12:77:e3: 9a:52:d2:d3:f7:35:4a:3c:fc:40:b2:96:9b:89:94:f5:20:8c: ba:a8:fa:eb:91:e3:07:20:f1:89:f1:88:6f:bb:79:c6:e1:f3: b8:b4:59:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGN0MxMTAvBgNVBAUTKEVCNTk3RkU4REYwN0VBOTc5OThCMDNGODI4MzQzQkM4 ODc1QUVEMDgwHhcNMjUwODA0MjI0OTEzWhcNMjUwODExMjI0OTEzWjAYMRYwFAYD VQQDEw02ODkxMzhlOS0yYjFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyki5m9nqBhtvzGaU3MwqyLzcV7MktY7Un2xdevVGH3mcnxubmMKhVK6HFygr 9vGMUHJrhPVZj+NDw85sil74T6bNCK/ThbvEsHmdPrMFXr4esm3ONEhYPqKDi2Kv 4TU32Ek4Xco6ny/c/fbHqMDOvHyt4owySZkc3utOaGW3EOJ4MIoZH6f1x53WV7ql KAdnM0UL+0MSX8WiuxZ45B7hQ/8btkQyWdgPyUINvRJtKKPm134vG59ItdMuWTbE Po9OKy8K79kd9oHpFyCO6Wv1CvOzb2EKpiqPGQ4UmD+2iZjoMWZWNZwCG1V6xhUC rAOzAnzLPhe4NCPjFmmwVeXvAwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFETsbi0T 1JatWgjf2f4sisSOKRvbMB8GA1UdIwQYMBaAFOtZf+jfB+qXmYsD+Cg0O8iHWu0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y3Qy9DRDNCNzQ4Qzg3 Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZwZVppd1A0S0RRN3lJZGE3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxbF82TjhINnBlWml3UDRLRFE3eUlkYTdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y3Qy9DRDNCNzQ4Qzg3Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZw ZVppd1A0S0RRN3lJZGE3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbVaIfxA68In91qlcEoCQ6zjTTF7+Xkj28/VsFPlLLsfdEPvhWut5v ScURIMqEm9FFTdJ+dRHhodq4kYwcDH1N3fJgfs9yT77hJe5XoHj9q2HwvKUeOGxE zsbVKwMC6nQrGBoRYzXRtmNWJh6BZjNPADRCShv/RFYQxl1oRdU2JmvB1wbToWEd Ek7mNjOKFDIOc/FEPNWc5lY8KAc4ipIMdrczs4L6qt6qlrFMlvklzIgxm34S67B/ Anxy1GRREHzQkeVWMI/mV6bz645kT8Dul0N6PCcSd+OaUtLT9zVKPPxAspabiZT1 IIy6qPrrkeMHIPGJ8Yhvu3nG4fO4tFmH -----END CERTIFICATE-----Generated at Wed Aug 6 16:24:21 2025 by rpki-client