$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft File: 6qltynQw36Rxyim4Q4NsHIDlQ54.mft (raw, json) Hash identifier: Ka1rQRBfgGFWf7KgssfZH9kncl1fjWklVfyOYPut0Rs= Subject key identifier: 31:B9:BF:B6:2F:7E:1F:4C:87:B6:C9:FB:93:E6:52:3C:2E:7C:F9:0E Authority key identifier: EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E Certificate issuer: /CN=A91BB87C/serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Certificate serial: 0CC4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft Manifest number: 0CB0 Signing time: Fri 22 Aug 2025 18:19:37 +0000 Manifest this update: Fri 22 Aug 2025 18:19:36 +0000 Manifest next update: Fri 29 Aug 2025 18:19:36 +0000 Files and hashes: 1: 6qltynQw36Rxyim4Q4NsHIDlQ54.crl (hash: f4pDr50FS6FanaJQH8cKXv62sy/IhamiDUS8fvFF0WI=) 2: 5B01916AD15911EE8B8BB151C4F9AE02.roa (hash: j94Y9byA6hrJjWvSwlJFmsvrVOzYBezuSr8IKFG6YL4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:19:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3268 (0xcc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB87C, serialNumber=EAA96DCA7430DFA471CA29B843836C1C80E5439E Validity Not Before: Aug 22 18:19:36 2025 GMT Not After : Aug 29 18:19:36 2025 GMT Subject: CN=68a8b4b9-8a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:03:34:b6:0e:57:db:8e:25:75:ef:ac:26:98: 27:df:4b:e0:28:cf:66:34:10:d2:82:63:64:a2:de: ce:18:8a:db:ab:bf:8a:28:d7:64:17:78:bf:e3:4d: b0:56:23:3d:9e:56:b7:08:a2:50:de:d7:48:12:59: 43:52:8f:7d:40:c9:9a:21:6f:11:a1:98:4d:77:e4: 12:dd:e4:0c:27:0c:9f:03:71:eb:3d:f9:23:bc:09: f7:de:eb:ff:33:61:aa:6a:99:90:94:be:f5:1c:64: 76:e7:09:aa:ce:23:c2:0e:a1:19:3b:54:f1:40:b0: eb:b8:c0:a3:21:e0:da:14:f7:56:6e:99:78:ea:33: 41:58:10:ac:43:3c:4c:e7:c8:a0:af:52:cb:e9:eb: d1:2b:72:db:33:a4:0d:4a:2d:bb:aa:7f:ad:9d:0e: 6c:d9:b0:01:2c:1f:c8:60:46:89:58:e8:da:44:de: 88:44:0d:68:71:4b:99:7a:b0:6c:c9:ef:a4:fa:cb: 4a:9f:a6:9f:a4:f3:ff:e1:13:c8:6f:66:ea:8d:52: 57:5d:ea:9f:eb:bb:b5:ab:9d:7e:2b:c1:22:bf:b8: c2:9f:77:4a:fa:5c:84:29:3b:22:59:17:8d:b2:f5: e8:04:c9:2a:19:8c:58:e4:27:03:fc:67:c7:75:0a: bc:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:B9:BF:B6:2F:7E:1F:4C:87:B6:C9:FB:93:E6:52:3C:2E:7C:F9:0E X509v3 Authority Key Identifier: keyid:EA:A9:6D:CA:74:30:DF:A4:71:CA:29:B8:43:83:6C:1C:80:E5:43:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qltynQw36Rxyim4Q4NsHIDlQ54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB87C/63D90312FC0211E9A419F340C4F9AE02/6qltynQw36Rxyim4Q4NsHIDlQ54.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:99:da:c7:6b:9a:ac:ce:33:64:34:ae:6f:7f:14:08:3c:bd: 92:a6:ac:e3:ac:fd:b5:64:5b:4e:d0:5d:52:89:f1:3d:72:71: e7:83:4b:e2:8d:a9:a5:5d:ae:d8:51:34:b6:21:0e:ea:7a:11: c7:3f:2b:32:bf:89:63:d0:06:d5:ee:d8:de:a4:09:8c:20:53: 17:f1:ba:5a:f1:06:ec:3d:b3:67:a5:d8:62:24:e0:6e:97:e9: 94:2a:ab:55:b3:e2:4f:b9:6e:aa:50:63:4e:78:ae:c3:05:d1: 57:11:d3:35:13:d5:f6:d3:fe:b9:22:6f:29:49:19:ec:7b:af: 11:ef:c6:63:40:3a:19:66:b0:eb:ec:46:27:4b:fe:5c:a1:a2: b1:a0:7a:46:22:44:f5:b0:a3:7f:77:b0:e7:b7:46:d8:e1:da: ac:2b:8f:5a:f3:38:66:77:e4:2e:b3:16:16:82:e3:ec:63:08: 0e:1f:14:5c:e1:45:40:f3:63:18:75:78:3a:17:24:86:14:fa: c0:fa:20:63:55:43:3a:44:78:b8:fc:36:e1:bb:4e:21:06:56: 51:79:6c:54:4b:01:dd:ec:12:a3:21:fd:93:28:c3:10:6c:4b: 90:38:e3:cb:16:37:37:2b:be:ac:b7:c7:22:8e:84:63:68:b6: 5d:b6:09:5f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI4N0MxMTAvBgNVBAUTKEVBQTk2RENBNzQzMERGQTQ3MUNBMjlCODQzODM2QzFD ODBFNTQzOUUwHhcNMjUwODIyMTgxOTM2WhcNMjUwODI5MTgxOTM2WjAYMRYwFAYD VQQDEw02OGE4YjRiOS04YTU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAM0tg5X244lde+sJpgn30vgKM9mNBDSgmNkot7OGIrbq7+KKNdkF3i/402w ViM9nla3CKJQ3tdIEllDUo99QMmaIW8RoZhNd+QS3eQMJwyfA3HrPfkjvAn33uv/ M2GqapmQlL71HGR25wmqziPCDqEZO1TxQLDruMCjIeDaFPdWbpl46jNBWBCsQzxM 58igr1LL6evRK3LbM6QNSi27qn+tnQ5s2bABLB/IYEaJWOjaRN6IRA1ocUuZerBs ye+k+stKn6afpPP/4RPIb2bqjVJXXeqf67u1q51+K8Eiv7jCn3dK+lyEKTsiWReN svXoBMkqGYxY5CcD/GfHdQq8vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDG5v7Yv fh9Mh7bJ+5PmUjwufPkOMB8GA1UdIwQYMBaAFOqpbcp0MN+kccopuEODbByA5UOe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjg3Qy82M0Q5MDMxMkZD MDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2Unh5aW00UTROc0hJRGxR NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxbHR5blF3MzZSeHlpbTRRNE5zSElEbFE1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Qjg3Qy82M0Q5MDMxMkZDMDIxMUU5QTQxOUYzNDBDNEY5QUUwMi82cWx0eW5RdzM2 Unh5aW00UTROc0hJRGxRNTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhmdrHa5qszjNkNK5vfxQIPL2SpqzjrP21ZFtO0F1SifE9cnHng0vi jamlXa7YUTS2IQ7qehHHPysyv4lj0AbV7tjepAmMIFMX8bpa8QbsPbNnpdhiJOBu l+mUKqtVs+JPuW6qUGNOeK7DBdFXEdM1E9X20/65Im8pSRnse68R78ZjQDoZZrDr 7EYnS/5coaKxoHpGIkT1sKN/d7Dnt0bY4dqsK49a8zhmd+QusxYWguPsYwgOHxRc 4UVA82MYdXg6FySGFPrA+iBjVUM6RHi4/Dbhu04hBlZReWxUSwHd7BKjIf2TKMMQ bEuQOOPLFjc3K76st8cijoRjaLZdtglf -----END CERTIFICATE-----Generated at Sat Aug 23 20:40:01 2025 by rpki-client