$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft File: -6JuPNfggZmzoY8WNmp1fwTN8FQ.mft (raw, json) Hash identifier: FyecvbLDaMqLSaVo3/+stWiP5MC4VVSU1fmKX+Gq70E= Subject key identifier: EF:39:91:E0:83:83:F5:73:B2:31:A6:06:F0:BE:18:54:DA:B0:4B:B0 Authority key identifier: FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 Certificate issuer: /CN=A91B7709/serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Certificate serial: A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft Manifest number: A0 Signing time: Sat 23 Aug 2025 06:29:33 +0000 Manifest this update: Sat 23 Aug 2025 06:29:32 +0000 Manifest next update: Sat 30 Aug 2025 06:29:32 +0000 Files and hashes: 1: -6JuPNfggZmzoY8WNmp1fwTN8FQ.crl (hash: rznu+9ERpP22IWbeE/nM/z+X0xfcK83yew/vSq+nPAo=) 2: 25FFA3768BB711EF9C572630C4F9AE02.roa (hash: PO3QH99TaEGXLczk5CFqhAB0Ach8mXnS87Xb+Nz/Uzg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 161 (0xa1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7709, serialNumber=FBA26E3CD7E08199B3A18F16366A757F04CDF054 Validity Not Before: Aug 23 06:29:32 2025 GMT Not After : Aug 30 06:29:32 2025 GMT Subject: CN=68a95fcd-a776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:45:54:e7:02:19:cf:17:f3:9b:18:86:00:7c: dd:9d:8f:5d:16:b7:fa:a8:a3:e3:06:bb:7a:d0:e8: af:58:04:d0:ee:4c:de:d3:93:d1:04:c1:c7:bb:c3: bb:30:e7:72:62:82:14:5b:85:fb:a4:d3:1c:1c:ef: a8:f0:37:ec:47:80:27:8d:7d:da:02:72:7b:67:78: 11:a4:82:a5:3c:16:e7:d5:82:bb:a1:e0:0d:2d:27: 80:dc:84:6e:fe:85:25:0f:ce:43:d5:c2:75:c9:2f: 9a:81:a4:86:96:1e:d4:f1:18:4c:9d:9c:61:a2:fb: 1c:ee:2c:7a:fb:7d:73:a0:cf:38:fe:bd:05:b9:26: 1a:6e:b6:f3:95:4e:31:b8:5a:5d:44:f1:be:d8:da: 7a:f0:09:f2:66:4a:4b:44:81:21:30:44:af:e6:e7: ca:78:b2:37:18:11:88:13:8a:3d:0f:7d:4a:35:2b: 94:49:ed:9b:32:bf:20:1c:66:36:74:fe:64:8c:04: b1:eb:35:72:d6:0a:b7:c1:5d:02:99:5e:8d:e6:09: 98:e9:7a:75:2d:08:1a:4e:29:1a:aa:68:2d:5e:c5: 5d:ec:4c:a4:0a:73:c0:f3:3b:94:11:e8:13:38:bb: 08:0e:cb:0f:3b:7b:2f:a2:32:76:63:a1:db:95:df: c4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:39:91:E0:83:83:F5:73:B2:31:A6:06:F0:BE:18:54:DA:B0:4B:B0 X509v3 Authority Key Identifier: keyid:FB:A2:6E:3C:D7:E0:81:99:B3:A1:8F:16:36:6A:75:7F:04:CD:F0:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6JuPNfggZmzoY8WNmp1fwTN8FQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7709/81623A4A8BB611EF998BAC72C4F9AE02/-6JuPNfggZmzoY8WNmp1fwTN8FQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 85:18:05:ea:7a:7e:86:0c:50:b9:b2:da:c9:04:78:5b:5b:45: 9b:91:43:be:ac:14:df:c2:33:67:7c:b6:b0:ff:c5:48:db:5b: a3:51:af:30:3e:ce:92:35:11:51:9f:e1:0d:55:53:42:f4:05: 29:ca:25:2e:46:a5:1a:78:f6:09:63:2b:4b:fd:ff:d5:a6:d4: 08:c7:02:f0:24:c1:18:0f:c4:ed:45:85:29:a4:7e:69:a1:c5: cd:15:17:ca:28:83:fa:74:52:ae:e0:a9:f0:f2:e4:1f:6c:8b: 0d:20:62:f2:5f:40:6c:b1:16:e6:33:d5:43:08:dd:59:c0:ec: 0c:d8:12:8f:d3:f5:90:1a:25:f8:62:82:e7:75:eb:12:2d:96: b6:1e:9b:d6:10:12:bd:b8:e7:98:60:a0:dd:17:10:96:03:89: b9:33:15:0b:cd:0b:c8:81:0b:48:b2:ca:c9:d3:80:f7:f4:92: c5:db:98:a0:4b:fa:b2:2c:15:9f:33:0a:60:3b:05:7b:da:28: 6d:d4:88:b5:d4:8b:6c:34:0d:e6:ca:f7:ef:65:5d:54:52:50: 3f:74:05:19:99:d9:c9:1a:ad:af:fc:3f:e4:51:29:ac:6e:e7: 2b:9f:8e:94:96:ea:59:49:fb:be:02:0b:ce:dd:28:e9:9f:c9: d4:eb:1a:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qjc3MDkxMTAvBgNVBAUTKEZCQTI2RTNDRDdFMDgxOTlCM0ExOEYxNjM2NkE3NTdG MDRDREYwNTQwHhcNMjUwODIzMDYyOTMyWhcNMjUwODMwMDYyOTMyWjAYMRYwFAYD VQQDEw02OGE5NWZjZC1hNzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0VU5wIZzxfzmxiGAHzdnY9dFrf6qKPjBrt60OivWATQ7kze05PRBMHHu8O7 MOdyYoIUW4X7pNMcHO+o8DfsR4AnjX3aAnJ7Z3gRpIKlPBbn1YK7oeANLSeA3IRu /oUlD85D1cJ1yS+agaSGlh7U8RhMnZxhovsc7ix6+31zoM84/r0FuSYabrbzlU4x uFpdRPG+2Np68AnyZkpLRIEhMESv5ufKeLI3GBGIE4o9D31KNSuUSe2bMr8gHGY2 dP5kjASx6zVy1gq3wV0CmV6N5gmY6Xp1LQgaTikaqmgtXsVd7EykCnPA8zuUEegT OLsIDssPO3svojJ2Y6Hbld/EYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO85keCD g/VzsjGmBvC+GFTasEuwMB8GA1UdIwQYMBaAFPuibjzX4IGZs6GPFjZqdX8EzfBU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzcwOS84MTYyM0E0QThC QjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2dabXpvWThXTm1wMWZ3VE44 RlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02SnVQTmZnZ1ptem9ZOFdObXAxZndUTjhGUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC NzcwOS84MTYyM0E0QThCQjYxMUVGOTk4QkFDNzJDNEY5QUUwMi8tNkp1UE5mZ2da bXpvWThXTm1wMWZ3VE44RlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCFGAXqen6GDFC5strJBHhbW0WbkUO+rBTfwjNnfLaw/8VI21ujUa8w Ps6SNRFRn+ENVVNC9AUpyiUuRqUaePYJYytL/f/VptQIxwLwJMEYD8TtRYUppH5p ocXNFRfKKIP6dFKu4Knw8uQfbIsNIGLyX0BssRbmM9VDCN1ZwOwM2BKP0/WQGiX4 YoLndesSLZa2HpvWEBK9uOeYYKDdFxCWA4m5MxULzQvIgQtIssrJ04D39JLF25ig S/qyLBWfMwpgOwV72iht1Ii11ItsNA3myvfvZV1UUlA/dAUZmdnJGq2v/D/kUSms bucrn46UlupZSfu+AgvO3Sjpn8nU6xpd -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:25 2025 by rpki-client