$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: kwlhDDT/R8MVvsPwG5AlHtc6M48u5jtCopO42QNEQ3s= Subject key identifier: 83:05:7C:74:CC:6D:24:CD:FB:3A:0B:38:A6:3E:9D:08:61:0A:38:99 Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 85 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 7F Signing time: Sat 23 Aug 2025 07:05:42 +0000 Manifest this update: Sat 23 Aug 2025 07:05:41 +0000 Manifest next update: Sat 30 Aug 2025 07:05:41 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: /AMPc4lPO9SlCbNPPXOPHAYs3t7BGC5G23XDqVV3SwI=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Aug 23 07:05:41 2025 GMT Not After : Aug 30 07:05:41 2025 GMT Subject: CN=68a96845-f21a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:9d:fe:20:6e:c4:8a:93:fb:3d:c5:cb:5d:71: 88:b8:e9:fa:eb:0b:e2:e3:5e:31:17:ea:13:b1:94: fe:c0:e3:8c:4e:36:15:7a:06:f3:0b:aa:8d:8e:75: a1:b9:24:6c:71:34:f5:43:d8:e0:ab:59:d8:3c:14: ea:7f:c0:b7:68:7b:c9:58:b9:0e:1c:d9:0a:5b:ed: 7c:ba:55:bf:7d:38:0d:fb:89:68:89:31:57:ea:bc: 7e:ed:fe:6f:f6:5c:e4:c5:f3:4a:9d:ef:47:c8:ad: 7a:b0:34:54:3f:1d:4c:27:70:78:81:36:16:22:73: 70:cc:06:1e:d7:8b:db:11:d9:f6:cb:a4:a9:15:b6: 3b:03:eb:57:f4:de:92:fa:54:65:6d:c9:6d:9f:83: 39:e8:21:fc:ef:0e:b6:0b:45:fc:a8:33:99:8b:de: 14:f0:a9:c2:8a:72:c3:3d:ee:6c:7b:90:e3:a1:f6: 06:f3:4a:19:f3:0a:63:09:40:28:6e:45:31:e1:1e: c1:59:76:75:4b:fb:c0:ed:4a:b4:6f:24:b0:70:b2: b4:16:39:f6:f7:6f:44:e3:fd:08:cb:3e:f4:9e:2b: f6:ae:a4:b0:3d:0c:e0:d9:03:fc:38:93:40:c2:ad: 8a:70:3b:ed:bb:53:da:1b:1d:ca:93:e4:b7:81:57: 02:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:05:7C:74:CC:6D:24:CD:FB:3A:0B:38:A6:3E:9D:08:61:0A:38:99 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 63:26:df:6e:fc:2a:41:1d:06:b4:55:77:81:8f:df:ac:fe:8a: da:ec:aa:70:99:51:ae:0d:0c:8a:01:10:5d:2e:1e:14:22:5c: bc:ef:e8:f1:b4:6a:4e:52:49:64:bb:e5:af:7a:92:82:d6:2d: d3:62:7f:49:33:55:be:f8:b3:f3:e4:4d:bf:5f:1d:ee:1a:29: 84:b4:ef:6a:1f:68:49:e3:dd:e6:1d:f5:a1:01:d5:e7:f7:69: 6b:c8:76:bd:e7:90:52:99:bd:fd:36:d5:fa:91:1b:59:7e:4c: 95:a6:b3:72:0b:00:d8:17:96:73:fa:30:90:a8:52:26:e2:be: 58:98:16:49:ad:ad:cd:2b:a5:63:eb:40:40:84:04:6a:8d:6b: ac:c5:53:40:36:f3:30:91:77:82:03:be:42:fa:7e:39:52:e7: 8b:c0:ee:e9:19:b2:f5:39:34:58:4b:61:ca:83:ba:85:0d:88: e3:10:46:da:85:97:8a:f3:c8:aa:f5:bd:06:1c:3d:f1:20:d6: 81:7d:56:4d:72:ef:12:8d:09:0e:d8:c8:7f:15:dd:2c:15:d4: 0d:2e:94:31:55:ca:af:3e:8e:56:76:af:4d:9f:0e:4e:b9:19: a4:b0:f9:d3:ec:9a:9a:39:50:d2:d2:55:f7:bc:1b:bf:04:70: 51:92:56:af -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND OEFCODI1RUEwHhcNMjUwODIzMDcwNTQxWhcNMjUwODMwMDcwNTQxWjAYMRYwFAYD VQQDEw02OGE5Njg0NS1mMjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6Z3+IG7EipP7PcXLXXGIuOn66wvi414xF+oTsZT+wOOMTjYVegbzC6qNjnWh uSRscTT1Q9jgq1nYPBTqf8C3aHvJWLkOHNkKW+18ulW/fTgN+4loiTFX6rx+7f5v 9lzkxfNKne9HyK16sDRUPx1MJ3B4gTYWInNwzAYe14vbEdn2y6SpFbY7A+tX9N6S +lRlbcltn4M56CH87w62C0X8qDOZi94U8KnCinLDPe5se5DjofYG80oZ8wpjCUAo bkUx4R7BWXZ1S/vA7Uq0bySwcLK0Fjn2929E4/0Iyz70niv2rqSwPQzg2QP8OJNA wq2KcDvtu1PaGx3Kk+S3gVcCnQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIMFfHTM bSTN+zoLOKY+nQhhCjiZMB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTA4My9DMDZGMkU0MkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtj clJVUG94dEUzSlBJcTRKZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBjJt9u/CpBHQa0VXeBj9+s/ora7KpwmVGuDQyKARBdLh4UIly87+jx tGpOUklku+WvepKC1i3TYn9JM1W++LPz5E2/Xx3uGimEtO9qH2hJ493mHfWhAdXn 92lryHa955BSmb39NtX6kRtZfkyVprNyCwDYF5Zz+jCQqFIm4r5YmBZJra3NK6Vj 60BAhARqjWusxVNANvMwkXeCA75C+n45UueLwO7pGbL1OTRYS2HKg7qFDYjjEEba hZeK88iq9b0GHD3xINaBfVZNcu8SjQkO2Mh/Fd0sFdQNLpQxVcqvPo5Wdq9Nnw5O uRmksPnT7JqaOVDS0lX3vBu/BHBRklav -----END CERTIFICATE-----Generated at Sat Aug 23 10:37:11 2025 by rpki-client