$ rpki-client -vvf rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft File: AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft (raw, json) Hash identifier: Z2DtHpPtNWURd60aVv0zC1As6rHjw4XXnv80rw27o6M= Subject key identifier: 15:B6:A8:F3:F7:82:2D:54:59:C1:81:77:DA:16:CB:94:76:6C:AE:FC Authority key identifier: 00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 Certificate issuer: /CN=A91C09EA/serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft Manifest number: 6A Signing time: Sat 23 Aug 2025 07:12:37 +0000 Manifest this update: Sat 23 Aug 2025 07:12:37 +0000 Manifest next update: Sat 30 Aug 2025 07:12:37 +0000 Files and hashes: 1: AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl (hash: Ojm54DpWd/i1zY2aRu54y4FGljh9ws8xBLhuZxzISEI=) 2: 7970EAA266DA11F084325D42C4F9AE02.roa (hash: PikBYoAiLsYP3+Plkjib3H61VZb7HfjBFcsCC14z91s=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:12:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C09EA, serialNumber=00FD31FD06B4204C3DDCB63507189533778CCCF8 Validity Not Before: Aug 23 07:12:37 2025 GMT Not After : Aug 30 07:12:37 2025 GMT Subject: CN=68a969e5-fda8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:51:6d:c9:a3:86:42:23:25:5e:f9:ae:3b:ab: 20:60:50:50:60:6a:3a:3c:e4:5c:03:bd:06:e6:26: 6b:c4:a2:94:90:12:ff:67:ea:3c:95:5c:ee:07:31: 4a:1b:b8:b7:5c:38:bf:7f:fa:c3:b8:74:3b:cb:6c: ac:c6:c2:b7:03:41:5f:dd:cb:ea:36:03:b4:93:59: 4b:ce:35:38:81:4b:29:59:54:8c:9d:23:5b:3d:37: fb:f5:9a:cc:00:db:e3:63:cb:1a:aa:5d:e9:8b:e9: 04:d4:7e:80:c9:30:72:9f:ff:9a:ac:27:f9:4e:2e: a9:3e:7b:f6:99:77:b4:5b:8d:b2:5d:53:a9:a5:b4: 70:fa:6d:16:66:97:26:40:cb:db:62:ac:58:98:56: 12:26:10:df:b8:c5:7b:62:d4:54:9a:32:72:ce:67: 14:7f:4d:68:1f:dc:f2:31:5d:f5:4c:23:4e:a6:78: 5f:e7:2f:35:33:00:d9:99:c0:b7:96:8e:72:07:d6: d2:f1:8b:20:4d:c8:fa:53:42:62:c0:c8:6c:43:47: 6d:e1:0d:ec:36:26:fa:14:44:f6:44:d8:ea:d8:b7: b6:0e:c6:0f:b4:c7:c0:f3:a2:25:ad:c6:3c:46:23: a5:cb:44:32:83:d4:16:c4:8d:64:03:05:67:b9:a0: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:B6:A8:F3:F7:82:2D:54:59:C1:81:77:DA:16:CB:94:76:6C:AE:FC X509v3 Authority Key Identifier: keyid:00:FD:31:FD:06:B4:20:4C:3D:DC:B6:35:07:18:95:33:77:8C:CC:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AP0x_Qa0IEw93LY1BxiVM3eMzPg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C09EA/8C5912FEE13B11EFBA7BDF3BC4F9AE02/AP0x_Qa0IEw93LY1BxiVM3eMzPg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 43:79:6e:ce:7f:4d:a4:f2:5a:ed:a8:37:63:62:a9:db:d0:4d: 73:dd:78:6c:16:e1:50:29:f3:86:bd:1d:b7:32:14:01:61:97: e8:a9:05:89:1e:93:b6:34:db:44:1f:4f:8c:e1:c6:ea:b7:1c: 2c:d7:c4:38:b5:a6:b3:76:1f:89:8b:f9:fb:eb:26:d5:06:6c: 3d:73:67:7a:b3:be:ec:dd:fe:e3:cd:0f:66:9b:db:58:20:ab: 78:af:7d:98:f9:3f:d3:d1:3b:ff:fe:bc:18:66:f8:fe:25:80: 83:6b:e5:57:42:77:9d:33:9e:80:24:bc:2b:3b:33:29:83:2d: bf:4a:c3:e3:d0:29:ed:64:3b:f7:02:ec:d2:45:4f:66:22:15: ea:ae:6e:56:45:2f:72:0e:53:52:2a:29:ad:a4:ed:66:40:f9: f4:a4:6a:7e:57:11:41:17:6a:ee:28:b5:f3:b6:7c:e2:2f:ea: d2:a1:df:e7:0c:35:11:a1:e9:6e:18:35:22:22:5a:e4:c5:d3: 9d:15:75:4b:fd:a4:24:6d:54:d3:d9:a4:60:e9:6e:98:90:37: aa:66:43:52:b2:fe:79:e3:17:fc:b6:a6:68:0d:c0:ed:87:fb: 8e:34:50:de:fd:b5:15:29:55:0d:37:62:51:45:71:71:61:95: c9:2d:14:42 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MDlFQTExMC8GA1UEBRMoMDBGRDMxRkQwNkI0MjA0QzNERENCNjM1MDcxODk1MzM3 NzhDQ0NGODAeFw0yNTA4MjMwNzEyMzdaFw0yNTA4MzAwNzEyMzdaMBgxFjAUBgNV BAMTDTY4YTk2OWU1LWZkYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFUW3Jo4ZCIyVe+a47qyBgUFBgajo85FwDvQbmJmvEopSQEv9n6jyVXO4HMUob uLdcOL9/+sO4dDvLbKzGwrcDQV/dy+o2A7STWUvONTiBSylZVIydI1s9N/v1mswA 2+NjyxqqXemL6QTUfoDJMHKf/5qsJ/lOLqk+e/aZd7RbjbJdU6mltHD6bRZmlyZA y9tirFiYVhImEN+4xXti1FSaMnLOZxR/TWgf3PIxXfVMI06meF/nLzUzANmZwLeW jnIH1tLxiyBNyPpTQmLAyGxDR23hDew2JvoURPZE2OrYt7YOxg+0x8DzoiWtxjxG I6XLRDKD1BbEjWQDBWe5oLUFAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUFbao8/eC LVRZwYF32hbLlHZsrvwwHwYDVR0jBBgwFoAUAP0x/Qa0IEw93LY1BxiVM3eMzPgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMwOUVBLzhDNTkxMkZFRTEz QjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3OTNMWTFCeGlWTTNlTXpQ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvQVAweF9RYTBJRXc5M0xZMUJ4aVZNM2VNelBnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMw OUVBLzhDNTkxMkZFRTEzQjExRUZCQTdCREYzQkM0RjlBRTAyL0FQMHhfUWEwSUV3 OTNMWTFCeGlWTTNlTXpQZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEN5bs5/TaTyWu2oN2NiqdvQTXPdeGwW4VAp84a9HbcyFAFhl+ipBYke k7Y020QfT4zhxuq3HCzXxDi1prN2H4mL+fvrJtUGbD1zZ3qzvuzd/uPND2ab21gg q3ivfZj5P9PRO//+vBhm+P4lgINr5VdCd50znoAkvCs7MymDLb9Kw+PQKe1kO/cC 7NJFT2YiFequblZFL3IOU1IqKa2k7WZA+fSkan5XEUEXau4otfO2fOIv6tKh3+cM NRGh6W4YNSIiWuTF050VdUv9pCRtVNPZpGDpbpiQN6pmQ1Ky/nnjF/y2pmgNwO2H +440UN79tRUpVQ03YlFFcXFhlcktFEI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:31:30 2025 by rpki-client