$ rpki-client -vvf rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft File: C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft (raw, json) Hash identifier: SBW14S8O7rS0c0CIJY08Nm4rjHP4tL361yGHnWbQksY= Subject key identifier: F7:06:CC:F0:AF:65:FA:5E:B4:0A:DD:D0:BA:56:5A:FB:E8:A6:24:E9 Authority key identifier: 0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C Certificate issuer: /CN=A91A279C/serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Certificate serial: 1AE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft Manifest number: 1AC9 Signing time: Fri 22 Aug 2025 16:24:02 +0000 Manifest this update: Fri 22 Aug 2025 16:24:01 +0000 Manifest next update: Fri 29 Aug 2025 16:24:01 +0000 Files and hashes: 1: C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl (hash: dmKpNCXIHZNJg0yksDwFt+YYbWtWQAnwXvMSzioyYlM=) 2: 9D2302A4F1D011E88D564045C4F9AE02.roa (hash: VxTzxn1U/OXB+CWBddl3uRVosJ2/DdLLOs7eSbWCVE4=) 3: 06D9E242335211E79AC36F87C4F9AE02.roa (hash: cOF8JZVjOiBr4JiE8EO1rOQQwXV4Z3nniDklK+R3JE4=) 4: 9DD35B9AF1D011E88D564045C4F9AE02.roa (hash: BfNK79rwC7mJWHyNf4je/JUK8nGDNnAVVEA5gBoGvSE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6882 (0x1ae2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A279C, serialNumber=0BA34E6430B10E6A7F2D29964425D1F714AF865C Validity Not Before: Aug 22 16:24:01 2025 GMT Not After : Aug 29 16:24:01 2025 GMT Subject: CN=68a899a2-f11a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:6b:e2:2b:85:bb:1a:c7:d7:5c:2a:cf:21:26: c4:f8:82:bf:ad:62:f3:36:58:7d:ac:16:f8:85:48: 00:2a:0a:26:8a:70:80:6f:c4:46:90:d5:74:7d:19: d5:1c:cc:19:a6:de:df:e9:55:fa:e1:e9:84:c7:1c: 2a:1a:6e:eb:48:3a:88:6d:7a:02:e3:20:96:84:b2: 72:97:c1:d4:db:00:f6:bd:ca:dc:e6:48:a6:c4:dc: 96:78:35:b7:24:8e:2b:bd:0c:37:1b:ea:f3:4f:22: c3:8d:be:0c:8b:2f:1b:c3:da:48:aa:d8:4b:10:26: 47:76:07:ee:42:e3:be:b7:e9:67:42:03:3c:f1:86: 75:02:f0:d9:76:b8:45:86:08:72:70:9c:4e:dc:7c: c3:37:99:5b:8b:83:1d:3a:04:88:bb:f5:da:43:21: 81:e1:00:66:87:d6:ae:d9:27:e2:c3:19:20:f7:01: dc:e1:92:b6:f0:f4:05:41:55:fc:d4:9e:35:b9:99: 8b:b0:93:22:d2:2e:41:ad:f5:8e:94:e8:f0:d7:e8: 85:a2:b3:d2:bd:0e:76:a3:5f:26:a9:26:4e:72:1d: 18:66:16:3d:e1:27:7e:8a:a6:11:8e:2e:1c:20:f1: 53:88:18:ba:57:f2:27:d0:af:5a:0d:1a:71:e0:59: 32:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:06:CC:F0:AF:65:FA:5E:B4:0A:DD:D0:BA:56:5A:FB:E8:A6:24:E9 X509v3 Authority Key Identifier: keyid:0B:A3:4E:64:30:B1:0E:6A:7F:2D:29:96:44:25:D1:F7:14:AF:86:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6NOZDCxDmp_LSmWRCXR9xSvhlw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A279C/1CEB7718335111E7BF4B9586C4F9AE02/C6NOZDCxDmp_LSmWRCXR9xSvhlw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:a2:4b:f3:70:44:ab:8f:df:3b:6a:74:4b:d7:75:70:cd:38: 5d:db:70:3e:e1:54:93:26:72:e0:fc:89:50:3c:46:8e:15:ad: d5:9c:9d:66:84:f4:fe:44:0c:d6:ac:c5:14:71:60:0a:58:35: a1:73:6c:fd:8d:01:24:06:80:cd:5a:c9:73:9f:34:2e:da:c5: 57:0c:76:4a:39:8e:c2:ae:a5:f4:13:d0:8e:01:2c:51:06:f5: 38:8a:70:8a:ec:31:45:20:4d:3a:aa:dc:68:14:95:31:f2:5c: ef:e0:81:ac:3d:58:a3:19:b0:ed:d9:04:fb:39:e0:13:48:75: c3:a5:a3:7b:94:17:f5:76:ea:6e:e9:47:65:e8:a7:dc:b7:29: 44:76:dc:4a:0c:47:8e:2c:60:f4:b5:b4:ac:88:67:ed:b5:eb: 7a:f8:08:8d:f2:94:da:3e:c2:fa:e0:3f:4c:db:c4:cb:c5:28: d7:ca:e6:a7:bf:bb:d9:75:b3:fe:68:b1:96:70:61:5e:39:29: 6c:96:d5:00:c8:15:fd:63:ac:10:e3:8d:34:b9:5a:96:9e:b0: d6:62:b5:4e:0b:e9:98:b2:62:69:a8:e6:d3:76:80:be:86:b8: 21:e9:72:79:e4:fc:89:32:1c:85:03:00:f5:1b:15:a9:4f:6c: 11:e3:dd:b1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGuIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTI3OUMxMTAvBgNVBAUTKDBCQTM0RTY0MzBCMTBFNkE3RjJEMjk5NjQ0MjVEMUY3 MTRBRjg2NUMwHhcNMjUwODIyMTYyNDAxWhcNMjUwODI5MTYyNDAxWjAYMRYwFAYD VQQDEw02OGE4OTlhMi1mMTFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv2viK4W7GsfXXCrPISbE+IK/rWLzNlh9rBb4hUgAKgominCAb8RGkNV0fRnV HMwZpt7f6VX64emExxwqGm7rSDqIbXoC4yCWhLJyl8HU2wD2vcrc5kimxNyWeDW3 JI4rvQw3G+rzTyLDjb4Miy8bw9pIqthLECZHdgfuQuO+t+lnQgM88YZ1AvDZdrhF hghycJxO3HzDN5lbi4MdOgSIu/XaQyGB4QBmh9au2Sfiwxkg9wHc4ZK28PQFQVX8 1J41uZmLsJMi0i5BrfWOlOjw1+iForPSvQ52o18mqSZOch0YZhY94Sd+iqYRji4c IPFTiBi6V/In0K9aDRpx4Fky0wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPcGzPCv ZfpetArd0LpWWvvopiTpMB8GA1UdIwQYMBaAFAujTmQwsQ5qfy0plkQl0fcUr4Zc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMjc5Qy8xQ0VCNzcxODMz NTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERtcF9MU21XUkNYUjl4U3Zo bHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2Tk9aREN4RG1wX0xTbVdSQ1hSOXhTdmhsdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB Mjc5Qy8xQ0VCNzcxODMzNTExMUU3QkY0Qjk1ODZDNEY5QUUwMi9DNk5PWkRDeERt cF9MU21XUkNYUjl4U3ZobHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnokvzcESrj987anRL13VwzThd23A+4VSTJnLg/IlQPEaOFa3VnJ1m hPT+RAzWrMUUcWAKWDWhc2z9jQEkBoDNWslznzQu2sVXDHZKOY7CrqX0E9COASxR BvU4inCK7DFFIE06qtxoFJUx8lzv4IGsPVijGbDt2QT7OeATSHXDpaN7lBf1dupu 6Udl6KfctylEdtxKDEeOLGD0tbSsiGfttet6+AiN8pTaPsL64D9M28TLxSjXyuan v7vZdbP+aLGWcGFeOSlsltUAyBX9Y6wQ4400uVqWnrDWYrVOC+mYsmJpqObTdoC+ hrgh6XJ55PyJMhyFAwD1GxWpT2wR492x -----END CERTIFICATE-----Generated at Sat Aug 23 13:44:59 2025 by rpki-client