$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft File: 6A9XgW64BohdxesewuGtVKL58t8.mft (raw, json) Hash identifier: WtO5U0gdLv0apZqxIic1DjaHYintVi0kwMJejeT95ps= Subject key identifier: DA:77:E5:38:4B:0E:82:6A:BF:10:2F:DF:6E:27:F0:3F:9B:CB:FD:66 Authority key identifier: E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF Certificate issuer: /CN=A91ADA19/serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF Certificate serial: 0825 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft Manifest number: 0817 Signing time: Fri 22 Aug 2025 21:01:36 +0000 Manifest this update: Fri 22 Aug 2025 21:01:35 +0000 Manifest next update: Fri 29 Aug 2025 21:01:35 +0000 Files and hashes: 1: 6A9XgW64BohdxesewuGtVKL58t8.crl (hash: XAOrx4qaq/jVPNw2yO4yapkiWHlFfuysq4f2uJFDREQ=) 2: F95379BE124411EB9E551E38C4F9AE02.roa (hash: hzhgTWFnab8T39Mu9sUJRnqHMQMLHx+/is4D+pExOhI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 21:01:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2085 (0x825) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADA19, serialNumber=E80F57816EB806885DC5EB1EC2E1AD54A2F9F2DF Validity Not Before: Aug 22 21:01:35 2025 GMT Not After : Aug 29 21:01:35 2025 GMT Subject: CN=68a8daaf-c807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:32:5b:18:37:1f:bd:be:1e:24:d8:61:a2:6b: 3b:4a:9a:1a:4c:7a:d5:60:ae:dd:fd:1b:8d:9c:e3: d9:b2:38:0c:7e:41:23:f7:ad:51:5f:63:0f:7c:9f: f6:02:bf:5b:1a:01:39:68:21:8c:7d:fa:68:44:84: e2:22:ad:d0:44:60:8e:10:d3:44:ea:a2:b9:11:5c: 2b:2c:26:fd:c1:09:e6:6b:72:7b:3e:b3:14:ca:16: 0f:c9:ec:e2:27:ee:fa:83:d3:a5:01:3f:6e:1e:b2: c3:13:5b:2c:1a:97:72:f7:5c:5c:ed:f8:20:15:3d: a9:93:d4:a1:58:38:37:bb:da:3d:2c:07:0b:ac:86: cd:c3:94:81:48:d3:e5:09:e3:e7:a3:79:b5:4e:ef: 49:c0:78:fd:ab:9d:a9:0f:11:91:48:26:56:2c:48: aa:7f:da:e0:6a:65:2f:b5:23:e1:ea:4c:45:36:8d: d0:ec:0b:df:6c:ab:91:a9:6d:9d:05:79:6c:87:42: e8:ee:fd:9d:74:d4:3a:ff:4c:36:3e:34:db:47:c5: 69:28:ad:bf:c7:7e:fc:da:ab:19:54:0f:3f:e0:e8: d7:15:9e:72:79:c4:14:77:6f:bb:fe:3f:40:19:29: 90:be:8c:42:80:05:db:5d:45:76:02:8e:2b:67:bf: e3:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:77:E5:38:4B:0E:82:6A:BF:10:2F:DF:6E:27:F0:3F:9B:CB:FD:66 X509v3 Authority Key Identifier: keyid:E8:0F:57:81:6E:B8:06:88:5D:C5:EB:1E:C2:E1:AD:54:A2:F9:F2:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6A9XgW64BohdxesewuGtVKL58t8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADA19/013CD7D0ED4F11EA93C8143DC4F9AE02/6A9XgW64BohdxesewuGtVKL58t8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:5a:c9:78:9c:72:00:af:19:a6:7b:33:71:f0:39:0c:97:a6: 71:46:cc:7e:c6:ef:de:5c:5d:6f:4d:17:6a:43:bc:d6:c8:ff: bc:2e:0d:9f:82:c3:b8:fb:ee:09:1e:dc:d4:8f:c4:89:c3:e8: 0f:04:db:df:6a:1b:09:9d:11:1a:a9:6f:07:ae:75:07:13:92: 4c:ba:1b:39:d9:0b:41:af:1e:76:69:19:8f:52:c1:78:95:7e: a8:2b:36:6e:ef:9f:c7:29:59:51:c1:5c:12:43:6b:db:29:1d: e4:dd:88:18:29:5a:5f:e4:3d:4f:7f:ac:50:de:8a:0d:c5:67: a3:b2:ce:98:3b:6b:1b:6e:bc:cb:2a:5e:05:67:75:d3:7e:08: 43:21:03:2f:e8:f9:c0:d6:36:4a:01:34:66:74:74:49:6b:df: 5e:73:fe:ef:52:82:53:53:fe:3f:55:20:0c:2e:06:23:5b:45: 91:b6:5a:79:33:34:bc:eb:45:14:6e:6d:63:ec:61:03:ca:1e: 80:ad:f0:47:40:e1:86:0d:ae:e1:e7:5b:7f:0b:68:d3:0d:bd: 97:e8:85:6e:fa:2d:72:3c:48:18:2c:64:4a:b2:a0:6f:d1:1b: 37:86:61:89:a1:90:e8:87:40:69:cc:74:8d:80:30:21:1d:4a: b8:a1:e0:82 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCCUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURBMTkxMTAvBgNVBAUTKEU4MEY1NzgxNkVCODA2ODg1REM1RUIxRUMyRTFBRDU0 QTJGOUYyREYwHhcNMjUwODIyMjEwMTM1WhcNMjUwODI5MjEwMTM1WjAYMRYwFAYD VQQDEw02OGE4ZGFhZi1jODA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxDJbGDcfvb4eJNhhoms7SpoaTHrVYK7d/RuNnOPZsjgMfkEj961RX2MPfJ/2 Ar9bGgE5aCGMffpoRITiIq3QRGCOENNE6qK5EVwrLCb9wQnma3J7PrMUyhYPyezi J+76g9OlAT9uHrLDE1ssGpdy91xc7fggFT2pk9ShWDg3u9o9LAcLrIbNw5SBSNPl CePno3m1Tu9JwHj9q52pDxGRSCZWLEiqf9rgamUvtSPh6kxFNo3Q7AvfbKuRqW2d BXlsh0Lo7v2ddNQ6/0w2PjTbR8VpKK2/x3782qsZVA8/4OjXFZ5yecQUd2+7/j9A GSmQvoxCgAXbXUV2Ao4rZ7/jbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNp35ThL DoJqvxAv324n8D+by/1mMB8GA1UdIwQYMBaAFOgPV4FuuAaIXcXrHsLhrVSi+fLf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREExOS8wMTNDRDdEMEVE NEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJvaGR4ZXNld3VHdFZLTDU4 dDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZBOVhnVzY0Qm9oZHhlc2V3dUd0VktMNTh0OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB REExOS8wMTNDRDdEMEVENEYxMUVBOTNDODE0M0RDNEY5QUUwMi82QTlYZ1c2NEJv aGR4ZXNld3VHdFZLTDU4dDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHWsl4nHIArxmmezNx8DkMl6ZxRsx+xu/eXF1vTRdqQ7zWyP+8Lg2f gsO4++4JHtzUj8SJw+gPBNvfahsJnREaqW8HrnUHE5JMuhs52QtBrx52aRmPUsF4 lX6oKzZu75/HKVlRwVwSQ2vbKR3k3YgYKVpf5D1Pf6xQ3ooNxWejss6YO2sbbrzL Kl4FZ3XTfghDIQMv6PnA1jZKATRmdHRJa99ec/7vUoJTU/4/VSAMLgYjW0WRtlp5 MzS860UUbm1j7GEDyh6ArfBHQOGGDa7h51t/C2jTDb2X6IVu+i1yPEgYLGRKsqBv 0Rs3hmGJoZDoh0BpzHSNgDAhHUq4oeCC -----END CERTIFICATE-----Generated at Sun Aug 24 03:37:42 2025 by rpki-client