$ rpki-client -vvf rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft File: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft (raw, json) Hash identifier: Usj82c/dklJW+GwqGB8q0HVo/ZYiblxlJwVl+dfSMDw= Subject key identifier: DB:D4:A6:34:70:36:90:B6:DA:02:66:06:81:39:3A:44:41:F2:BE:26 Authority key identifier: EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA Certificate issuer: /CN=A91A13C2/serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Certificate serial: 04E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft Manifest number: 04E1 Signing time: Fri 22 Aug 2025 23:57:48 +0000 Manifest this update: Fri 22 Aug 2025 23:57:48 +0000 Manifest next update: Fri 29 Aug 2025 23:57:48 +0000 Files and hashes: 1: 6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl (hash: 3A8Kv2U7OJ2ULJQxPUd+0F5GJNmfA5v75GbdfsPnlW4=) 2: A231B9362CEA11EC8F99F486C4F9AE02.roa (hash: 8LKcnydJB5oW4TBJzLAGx/1DAq+7TANc8tWAErbpeDg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1254 (0x4e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A13C2, serialNumber=EB2B0C6B9C8B7F094771826746AF7D460EDC47AA Validity Not Before: Aug 22 23:57:48 2025 GMT Not After : Aug 29 23:57:48 2025 GMT Subject: CN=68a903fc-1f0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:57:a6:07:9d:11:c3:1b:d6:f7:9f:71:5b:0c: 6d:dc:9b:c5:89:97:ff:a1:8b:67:36:85:f0:c1:32: 4a:04:dd:2c:8a:f2:fc:58:6d:34:94:cd:06:96:90: ce:6d:95:7c:bf:e7:40:22:23:3c:3a:7b:6a:dc:72: c1:26:02:a3:20:68:9f:8f:e6:61:6f:6a:60:36:2b: 6e:05:6f:70:cf:2c:ab:10:f4:1e:3c:da:a1:87:46: 5d:fa:05:11:ed:21:66:a3:4f:b1:44:9a:46:c5:09: 17:f4:70:e9:60:e0:e2:ec:b9:1b:ee:79:7f:89:f1: de:14:35:26:c8:23:5b:9b:3b:dd:14:29:83:bf:23: b2:ee:06:a4:90:eb:53:34:b1:10:f6:72:4e:58:f6: 95:60:55:85:0c:80:68:41:79:3f:86:d5:3f:1f:a6: 17:48:51:dd:32:bb:f2:ca:cc:93:9c:5f:35:80:91: f9:38:ae:ff:97:9d:63:ef:4c:a6:a5:27:30:b0:16: 4c:d4:2f:91:ca:35:a2:2c:49:ad:96:ba:0e:e6:0e: fe:3d:48:3b:0f:e8:41:7f:f8:a6:3a:4a:bd:7f:44: c8:da:5b:54:69:a8:9e:03:60:14:58:e9:0a:51:f7: f1:73:80:4a:b2:6c:fd:40:54:d1:d5:83:ec:57:e7: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:A6:34:70:36:90:B6:DA:02:66:06:81:39:3A:44:41:F2:BE:26 X509v3 Authority Key Identifier: keyid:EB:2B:0C:6B:9C:8B:7F:09:47:71:82:67:46:AF:7D:46:0E:DC:47:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ysMa5yLfwlHcYJnRq99Rg7cR6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A13C2/5AF7FD762CE711EC871A0660C4F9AE02/6ysMa5yLfwlHcYJnRq99Rg7cR6o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:be:d4:a1:54:20:ce:f2:81:2b:98:47:35:84:2e:d2:b8:16: 8e:0a:0b:04:2e:33:31:98:9f:26:6b:9c:e3:5d:cf:4b:cb:22: 63:de:20:75:d3:86:43:09:c3:cb:ce:d1:99:de:80:ee:ba:5c: 4a:72:3c:48:70:14:61:a4:d3:44:c8:75:2e:73:d6:50:4e:f2: e9:2a:ea:ed:b0:23:67:61:8e:01:a1:41:06:a1:79:93:33:13: 59:27:e2:f9:14:b6:e2:a7:02:db:d9:da:8e:d9:0b:2e:75:59: 9b:58:48:78:41:41:8d:81:62:12:f2:6a:e8:49:49:ee:87:1e: 87:cc:f7:8b:c8:7d:e7:5e:03:3d:e9:ce:9c:2a:96:46:21:b6: 05:ac:92:63:1e:90:ad:a2:27:dc:26:dc:6b:8f:4f:3d:4d:d6: c0:45:f7:45:f3:ea:97:1a:92:7e:fc:28:c7:22:73:73:36:8b: d2:62:44:8a:5c:51:9d:7d:b0:93:ee:85:95:74:b9:57:e7:5d: c4:ea:62:49:52:e7:e4:b1:d2:4b:fa:57:d9:fa:5a:2e:a5:d8: 74:13:00:68:8b:a5:81:f0:17:7a:c5:0b:69:1b:80:45:b1:74: 72:42:d9:13:6b:b4:f7:4c:60:0d:56:83:62:b9:29:69:1a:ac: 63:35:6f:da -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTEzQzIxMTAvBgNVBAUTKEVCMkIwQzZCOUM4QjdGMDk0NzcxODI2NzQ2QUY3RDQ2 MEVEQzQ3QUEwHhcNMjUwODIyMjM1NzQ4WhcNMjUwODI5MjM1NzQ4WjAYMRYwFAYD VQQDEw02OGE5MDNmYy0xZjBkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtVemB50RwxvW959xWwxt3JvFiZf/oYtnNoXwwTJKBN0sivL8WG00lM0GlpDO bZV8v+dAIiM8Ontq3HLBJgKjIGifj+Zhb2pgNituBW9wzyyrEPQePNqhh0Zd+gUR 7SFmo0+xRJpGxQkX9HDpYODi7Lkb7nl/ifHeFDUmyCNbmzvdFCmDvyOy7gakkOtT NLEQ9nJOWPaVYFWFDIBoQXk/htU/H6YXSFHdMrvyysyTnF81gJH5OK7/l51j70ym pScwsBZM1C+RyjWiLEmtlroO5g7+PUg7D+hBf/imOkq9f0TI2ltUaaieA2AUWOkK Uffxc4BKsmz9QFTR1YPsV+dDyQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNvUpjRw NpC22gJmBoE5OkRB8r4mMB8GA1UdIwQYMBaAFOsrDGuci38JR3GCZ0avfUYO3Eeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTNDMi81QUY3RkQ3NjJD RTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3bEhjWUpuUnE5OVJnN2NS Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ5c01hNXlMZndsSGNZSm5ScTk5Umc3Y1I2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MTNDMi81QUY3RkQ3NjJDRTcxMUVDODcxQTA2NjBDNEY5QUUwMi82eXNNYTV5TGZ3 bEhjWUpuUnE5OVJnN2NSNm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBevtShVCDO8oErmEc1hC7SuBaOCgsELjMxmJ8ma5zjXc9LyyJj3iB1 04ZDCcPLztGZ3oDuulxKcjxIcBRhpNNEyHUuc9ZQTvLpKurtsCNnYY4BoUEGoXmT MxNZJ+L5FLbipwLb2dqO2QsudVmbWEh4QUGNgWIS8mroSUnuhx6HzPeLyH3nXgM9 6c6cKpZGIbYFrJJjHpCtoifcJtxrj089TdbARfdF8+qXGpJ+/CjHInNzNovSYkSK XFGdfbCT7oWVdLlX513E6mJJUufksdJL+lfZ+loupdh0EwBoi6WB8Bd6xQtpG4BF sXRyQtkTa7T3TGANVoNiuSlpGqxjNW/a -----END CERTIFICATE-----Generated at Sat Aug 23 16:26:22 2025 by rpki-client