$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json) Hash identifier: Y83MtEuNRvPkFbv6H94wjBpDwbisWMccU/3Lt7/aa5s= Subject key identifier: F6:75:EC:48:89:3C:B3:D6:F7:BB:06:6F:A6:02:21:67:93:B2:DE:AD Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft Manifest number: 2E Signing time: Sat 23 Aug 2025 07:56:09 +0000 Manifest this update: Sat 23 Aug 2025 07:56:09 +0000 Manifest next update: Sat 30 Aug 2025 07:56:09 +0000 Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: kdWSkPUNc7isOApVSubpVmxcq4zWeKaTBdwjQKgabgU=) 2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: DBehkehjj1Vjada20+g+EkMiIesYAdzyY1KoJXBbQUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Aug 23 07:56:09 2025 GMT Not After : Aug 30 07:56:09 2025 GMT Subject: CN=68a97419-cbf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:8e:65:52:c0:8e:37:bb:44:40:3a:9b:e1:6c: 6c:65:93:13:af:9b:6f:5a:89:50:ce:77:28:7f:a2: f5:3f:f7:24:37:d1:02:7f:8f:17:83:69:74:70:e4: 1b:19:70:ba:9d:4b:51:a9:57:e7:02:81:a7:35:be: d5:3d:29:cc:6e:b4:f3:bb:71:34:dc:e6:79:fd:da: c0:a4:25:0c:e4:1f:35:22:9a:dd:47:73:f7:23:b1: 91:a1:b4:70:12:88:3a:24:b9:de:2c:4c:de:cb:be: 1e:bc:f1:56:01:1c:40:b2:7b:92:83:cb:97:c7:e0: 90:13:65:0c:10:10:37:b9:0d:2b:c3:a0:6f:c4:23: 98:ea:30:59:df:3a:e1:fd:27:f2:46:38:ca:c7:1a: 47:2e:b4:a8:bd:8d:c0:1b:f9:9b:7c:c9:c2:c9:50: 44:d6:33:cc:55:a3:25:40:27:15:3e:3c:59:99:a2: 17:bd:15:76:2a:ad:94:42:be:98:35:a7:44:a7:a4: 2d:60:5f:df:4f:d9:ea:ba:8d:2e:b2:bb:68:d9:a4: 86:60:b2:79:89:76:f3:45:8a:86:23:8e:74:b9:91: 18:16:3e:b3:b2:d0:d3:78:04:7f:90:1f:5d:a7:d3: 2c:94:da:e4:99:d9:a8:a0:0c:d7:05:4c:dd:de:6b: 32:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:75:EC:48:89:3C:B3:D6:F7:BB:06:6F:A6:02:21:67:93:B2:DE:AD X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 97:4a:89:cc:06:18:08:0b:4f:f2:e1:e4:f4:7f:0e:0c:01:e7: ec:a3:d9:84:f5:13:4e:a8:95:ea:b4:3a:fc:b9:d4:0c:94:c8: 13:6e:95:bb:36:d3:36:ad:ca:9c:ad:1d:c2:09:10:8f:05:a7: 83:ae:bf:37:66:65:84:df:d8:5e:ea:d9:4d:58:ab:db:cb:25: cd:25:4e:4a:ca:21:bb:28:06:01:9f:b3:62:db:d7:b8:73:50: 41:f9:68:a9:09:68:8f:ca:4d:b0:5f:b0:86:8e:83:3e:71:86: 9f:35:36:d8:22:73:8a:11:53:51:7d:5c:09:b5:83:a4:aa:83: 37:7b:01:c9:2a:79:58:58:cf:14:01:e0:dd:13:18:aa:3c:f9: 49:35:0d:43:03:ab:bd:57:b8:36:51:75:0d:09:1b:03:01:ec: 71:a0:a7:08:90:23:4e:ab:a2:8f:25:e0:b7:80:1b:fd:a7:15: 43:9f:66:12:fe:78:94:db:8d:41:78:e4:6c:a5:61:a7:50:c7: 5f:55:3a:a8:74:a6:f1:1c:c7:20:1a:59:ef:37:74:f0:c5:04: 88:58:e7:19:f8:a0:e3:56:b7:9d:38:33:0a:23:e3:52:1a:66: ab:3d:58:04:50:ba:85:6e:f8:ec:c9:37:1c:47:e1:a3:c5:58: 55:21:4d:82 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTA4MjMwNzU2MDlaFw0yNTA4MzAwNzU2MDlaMBgxFjAUBgNV BAMTDTY4YTk3NDE5LWNiZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwjmVSwI43u0RAOpvhbGxlkxOvm29aiVDOdyh/ovU/9yQ30QJ/jxeDaXRw5BsZ cLqdS1GpV+cCgac1vtU9KcxutPO7cTTc5nn92sCkJQzkHzUimt1Hc/cjsZGhtHAS iDokud4sTN7Lvh688VYBHECye5KDy5fH4JATZQwQEDe5DSvDoG/EI5jqMFnfOuH9 J/JGOMrHGkcutKi9jcAb+Zt8ycLJUETWM8xVoyVAJxU+PFmZohe9FXYqrZRCvpg1 p0SnpC1gX99P2eq6jS6yu2jZpIZgsnmJdvNFioYjjnS5kRgWPrOy0NN4BH+QH12n 0yyU2uSZ2aigDNcFTN3eazI7AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU9nXsSIk8 s9b3uwZvpgIhZ5Oy3q0wHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzREM0NDMDhBM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlC LTBWOUFraHV5TXR0VkpJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJdKicwGGAgLT/Lh5PR/DgwB5+yj2YT1E06oleq0Ovy51AyUyBNulbs2 0zatypytHcIJEI8Fp4OuvzdmZYTf2F7q2U1Yq9vLJc0lTkrKIbsoBgGfs2Lb17hz UEH5aKkJaI/KTbBfsIaOgz5xhp81Ntgic4oRU1F9XAm1g6Sqgzd7AckqeVhYzxQB 4N0TGKo8+Uk1DUMDq71XuDZRdQ0JGwMB7HGgpwiQI06roo8l4LeAG/2nFUOfZhL+ eJTbjUF45GylYadQx19VOqh0pvEcxyAaWe83dPDFBIhY5xn4oONWt504Mwoj41Ia Zqs9WARQuoVu+OzJNxxH4aPFWFUhTYI= -----END CERTIFICATE-----Generated at Sat Aug 23 22:33:23 2025 by rpki-client