$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json) Hash identifier: EcaICqJ+CMz3yrHzPkv25AeCYPDtvGRgBPdiBPadqic= Subject key identifier: 0C:1C:86:F1:4A:AF:EB:E7:A0:4B:E2:DA:00:0C:85:85:53:13:59:D4 Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0CB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft Manifest number: 0C90 Signing time: Fri 22 Aug 2025 18:24:13 +0000 Manifest this update: Fri 22 Aug 2025 18:24:12 +0000 Manifest next update: Fri 29 Aug 2025 18:24:12 +0000 Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: ME+/xRPiPmbXa1Cwd6Qnr9HbLyDCCHul58LmoJYZW3I=) 2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=) 3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=) 4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=) 5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=) 6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3255 (0xcb7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Aug 22 18:24:12 2025 GMT Not After : Aug 29 18:24:12 2025 GMT Subject: CN=68a8b5cc-c8ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:52:51:ed:f5:05:8f:da:77:7d:05:46:db:7e: 44:73:6b:39:b9:f5:09:91:c8:b7:62:e3:ca:3a:c5: e8:dd:dc:d3:7b:b5:37:b2:ca:4c:9b:5d:19:84:cc: f4:6f:4f:9d:47:5e:6d:71:e9:0a:07:16:0c:6b:9e: 12:18:ff:f1:2c:41:c9:12:f9:dd:d5:51:41:eb:c2: 3f:9f:29:51:c4:d8:70:26:b6:e0:8e:cd:a7:7c:60: d0:1f:8a:e0:03:4c:93:88:7f:75:29:1a:52:d1:ed: 91:36:c3:a6:c5:bc:65:d8:ec:d4:8a:19:9e:e7:c8: 76:16:40:6b:69:d8:f6:31:09:2f:e1:92:80:ab:75: 2a:b2:15:bf:c3:ee:ff:35:31:1a:24:b2:03:3c:ed: 08:64:ee:eb:cd:71:c4:e7:29:5a:9c:74:86:63:24: 8d:4d:56:91:27:a3:5e:97:78:73:5f:5e:d6:86:9a: 65:d1:21:d4:27:14:d2:8a:61:68:11:36:0d:c7:21: dc:bb:5b:ac:b9:d8:ce:6d:60:82:85:87:8b:09:7f: 60:7d:21:70:d6:85:fb:4f:a8:ac:80:03:04:2b:c2: 41:2b:fe:ea:c9:ba:66:28:4e:10:42:87:8b:44:91: 12:1e:f8:ad:35:8a:5e:8c:80:66:79:2b:d9:d8:ef: 86:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:1C:86:F1:4A:AF:EB:E7:A0:4B:E2:DA:00:0C:85:85:53:13:59:D4 X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:ed:e4:0a:6d:27:ff:0a:59:ff:f4:3d:5a:f2:93:79:6b:f6: 5e:e3:11:a2:86:86:5b:a7:1a:de:21:d7:ff:96:63:20:56:dc: 32:74:cd:86:33:89:5e:1b:d4:43:c1:57:33:55:05:7f:1c:9a: ce:87:b6:9f:b5:dd:c1:95:9f:1c:8c:12:26:7a:5a:e8:01:a3: 20:3e:50:23:17:78:24:89:5a:0c:69:0b:ff:a1:45:3e:6f:dc: 23:08:70:83:0c:62:63:7d:f6:16:23:9f:e0:6f:af:b9:09:f7: 1b:66:e6:66:5c:0f:7b:81:1d:bb:1b:8c:b1:7f:c4:0c:1c:e3: d5:aa:e7:f3:2e:13:c4:66:2a:b5:63:41:98:aa:c4:a2:9a:fb: c3:87:d5:21:02:ad:9d:86:0b:72:97:70:78:67:5d:f9:f1:ba: fe:ad:61:20:ec:8a:e6:68:cf:fa:53:03:b4:9b:20:64:6c:88: ad:8d:22:5b:29:ba:10:e2:9c:d7:7c:43:54:2c:0a:c9:f5:85: b1:a9:91:7a:73:02:0e:11:bb:4a:52:22:9e:28:e8:f3:1c:ed: a3:9b:9d:77:14:1e:b6:70:d1:51:f9:db:b4:5b:fa:c9:08:38: a2:73:04:3c:b9:5a:5f:5b:dc:78:76:9d:38:29:57:1d:d9:77: d0:95:fe:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjUwODIyMTgyNDEyWhcNMjUwODI5MTgyNDEyWjAYMRYwFAYD VQQDEw02OGE4YjVjYy1jOGVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2FJR7fUFj9p3fQVG235Ec2s5ufUJkci3YuPKOsXo3dzTe7U3sspMm10ZhMz0 b0+dR15tcekKBxYMa54SGP/xLEHJEvnd1VFB68I/nylRxNhwJrbgjs2nfGDQH4rg A0yTiH91KRpS0e2RNsOmxbxl2OzUihme58h2FkBradj2MQkv4ZKAq3UqshW/w+7/ NTEaJLIDPO0IZO7rzXHE5ylanHSGYySNTVaRJ6Nel3hzX17Whppl0SHUJxTSimFo ETYNxyHcu1usudjObWCChYeLCX9gfSFw1oX7T6isgAMEK8JBK/7qybpmKE4QQoeL RJESHvitNYpejIBmeSvZ2O+GPwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwchvFK r+vnoEvi2gAMhYVTE1nUMB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAt7eQKbSf/Cln/9D1a8pN5a/Ze4xGihoZbpxreIdf/lmMgVtwydM2G M4leG9RDwVczVQV/HJrOh7aftd3BlZ8cjBImelroAaMgPlAjF3gkiVoMaQv/oUU+ b9wjCHCDDGJjffYWI5/gb6+5CfcbZuZmXA97gR27G4yxf8QMHOPVqufzLhPEZiq1 Y0GYqsSimvvDh9UhAq2dhgtyl3B4Z1358br+rWEg7IrmaM/6UwO0myBkbIitjSJb KboQ4pzXfENULArJ9YWxqZF6cwIOEbtKUiKeKOjzHO2jm513FB62cNFR+du0W/rJ CDiicwQ8uVpfW9x4dp04KVcd2XfQlf5g -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:45 2025 by rpki-client