$ rpki-client -vvf rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft File: 6f7YwwxxXQSs4XWunL1wDBl3BgI.mft (raw, json) Hash identifier: Xo67z6PpXBG4BEGNpvR7jjD1A+FlkGt2zxIYMhPVxt0= Subject key identifier: 70:10:5E:5F:57:1B:38:04:F1:E1:E7:9A:64:56:57:D9:E8:57:DA:40 Authority key identifier: E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 Certificate issuer: /CN=A91C3EF6/serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Certificate serial: 14FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft Manifest number: 14F4 Signing time: Fri 22 Aug 2025 16:57:37 +0000 Manifest this update: Fri 22 Aug 2025 16:57:36 +0000 Manifest next update: Fri 29 Aug 2025 16:57:36 +0000 Files and hashes: 1: 6f7YwwxxXQSs4XWunL1wDBl3BgI.crl (hash: Ub4PYhkTGXxsjx7KKVJIG9lC5wsSEPQaL2ARaES5SSI=) 2: D056896E592A11E889035A70C4F9AE02.roa (hash: aB/CZOa/bktBFkb0MzOXP2VLNM1qXtNibatV1IuSEFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5375 (0x14ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C3EF6, serialNumber=E9FED8C30C715D04ACE175AE9CBD700C19770602 Validity Not Before: Aug 22 16:57:36 2025 GMT Not After : Aug 29 16:57:36 2025 GMT Subject: CN=68a8a180-7a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:48:10:01:8b:4e:95:b4:8d:53:f1:0f:48:ad: 98:96:a5:4c:7c:c4:72:99:1a:10:2b:2c:16:b2:ff: 37:17:b6:4f:d4:a4:4d:35:ea:03:50:22:89:c7:6f: 42:6b:78:f0:c6:01:14:40:b0:2f:26:4b:d8:14:12: a4:6c:57:89:06:cc:dd:6d:df:18:2a:65:3c:3c:e0: 16:a6:62:97:a6:41:80:17:aa:d4:d3:9b:c1:84:b1: c4:5e:c9:56:0d:d3:04:67:fd:c7:61:ee:15:32:c0: e8:04:28:19:66:42:20:de:5a:64:e2:e5:28:2d:e7: 0c:07:02:bb:aa:3f:0f:00:bc:a7:a0:7e:c5:b1:25: 03:a8:eb:8c:98:d8:84:e2:bf:07:ba:60:af:ee:e6: 8a:de:de:56:fd:77:16:8a:51:3f:3e:fd:59:41:0c: 78:8b:0b:84:28:2c:82:37:30:db:e4:66:71:4d:3c: 3c:96:00:b9:ba:73:d5:a0:4b:f9:3a:16:ec:ef:ed: 88:a0:a5:40:a1:af:3a:9f:f3:b9:42:e5:29:b9:6e: 3f:37:f1:b3:9e:02:ce:17:a7:64:c0:d8:39:fb:4d: 05:16:b9:a5:6f:a8:b1:54:d7:81:22:92:e2:75:32: f2:37:57:6a:4b:c2:5d:f9:f6:88:50:2e:4d:a4:bd: 1d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:10:5E:5F:57:1B:38:04:F1:E1:E7:9A:64:56:57:D9:E8:57:DA:40 X509v3 Authority Key Identifier: keyid:E9:FE:D8:C3:0C:71:5D:04:AC:E1:75:AE:9C:BD:70:0C:19:77:06:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f7YwwxxXQSs4XWunL1wDBl3BgI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C3EF6/AC4DABC6592811E88E5B446BC4F9AE02/6f7YwwxxXQSs4XWunL1wDBl3BgI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:3a:4d:c3:95:c5:e9:36:51:7d:09:e8:1b:99:68:f2:da:69: c5:cf:4f:17:26:32:d6:8b:7a:13:76:ad:c5:6c:1a:36:f5:99: f3:48:14:eb:30:5d:b4:dd:f5:a1:75:a8:2f:30:f1:ae:41:7b: eb:c9:39:83:7e:e7:a5:fd:bf:c4:3d:8b:ce:32:ad:da:2d:4b: ee:16:cb:2b:4e:47:a0:36:2b:c6:aa:09:b6:9a:80:d6:f3:de: b9:8a:85:28:25:18:3e:6c:fe:db:d3:80:47:84:d0:d5:71:67: 0f:79:0d:13:72:e8:1c:47:12:c2:f6:46:cc:37:59:52:9f:f0: 3b:72:d1:44:6e:8d:c9:1e:4c:3b:9e:8d:f5:7a:75:43:b9:3a: fd:73:67:ee:5b:70:1f:a4:36:32:45:05:e3:87:79:1a:3b:5a: a3:27:82:0a:89:54:a5:6b:94:77:c9:44:a1:1b:e6:6f:9b:b8: 7f:6b:78:44:d9:77:11:4b:bf:19:b4:6c:39:fd:44:88:35:6b: b8:e0:14:4e:f1:14:b0:a4:bb:33:48:60:85:69:bb:74:52:2f: 2d:c1:41:16:68:ec:bd:64:6c:eb:9e:77:f2:21:c3:cd:ed:c4: ef:f3:ec:8c:b7:33:98:e0:5a:2d:4e:79:15:1c:61:98:b7:d3: 62:3e:a6:57 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICFP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzNFRjYxMTAvBgNVBAUTKEU5RkVEOEMzMEM3MTVEMDRBQ0UxNzVBRTlDQkQ3MDBD MTk3NzA2MDIwHhcNMjUwODIyMTY1NzM2WhcNMjUwODI5MTY1NzM2WjAYMRYwFAYD VQQDEw02OGE4YTE4MC03YTM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArkgQAYtOlbSNU/EPSK2YlqVMfMRymRoQKywWsv83F7ZP1KRNNeoDUCKJx29C a3jwxgEUQLAvJkvYFBKkbFeJBszdbd8YKmU8POAWpmKXpkGAF6rU05vBhLHEXslW DdMEZ/3HYe4VMsDoBCgZZkIg3lpk4uUoLecMBwK7qj8PALynoH7FsSUDqOuMmNiE 4r8HumCv7uaK3t5W/XcWilE/Pv1ZQQx4iwuEKCyCNzDb5GZxTTw8lgC5unPVoEv5 Ohbs7+2IoKVAoa86n/O5QuUpuW4/N/GzngLOF6dkwNg5+00FFrmlb6ixVNeBIpLi dTLyN1dqS8Jd+faIUC5NpL0dswIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHAQXl9X GzgE8eHnmmRWV9noV9pAMB8GA1UdIwQYMBaAFOn+2MMMcV0ErOF1rpy9cAwZdwYC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDM0VGNi9BQzREQUJDNjU5 MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhRU3M0WFd1bkwxd0RCbDNC Z0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmN1l3d3h4WFFTczRYV3VuTDF3REJsM0JnSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD M0VGNi9BQzREQUJDNjU5MjgxMUU4OEU1QjQ0NkJDNEY5QUUwMi82ZjdZd3d4eFhR U3M0WFd1bkwxd0RCbDNCZ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBqOk3DlcXpNlF9CegbmWjy2mnFz08XJjLWi3oTdq3FbBo29ZnzSBTr MF203fWhdagvMPGuQXvryTmDfuel/b/EPYvOMq3aLUvuFssrTkegNivGqgm2moDW 8965ioUoJRg+bP7b04BHhNDVcWcPeQ0TcugcRxLC9kbMN1lSn/A7ctFEbo3JHkw7 no31enVDuTr9c2fuW3AfpDYyRQXjh3kaO1qjJ4IKiVSla5R3yUShG+Zvm7h/a3hE 2XcRS78ZtGw5/USINWu44BRO8RSwpLszSGCFabt0Ui8twUEWaOy9ZGzrnnfyIcPN 7cTv8+yMtzOY4FotTnkVHGGYt9NiPqZX -----END CERTIFICATE-----Generated at Sat Aug 23 17:10:12 2025 by rpki-client