$ rpki-client -vvf rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft File: N6CiG7WFEffv59KwRIPtgLSgIzo.mft (raw, json) Hash identifier: Q1qbkETyY2SVyHAJ/9eNmZyjllFZqKwnHp34vOLWYpA= Subject key identifier: 48:59:9C:80:C8:D7:00:5A:B7:1F:CD:8A:1B:50:E2:67:B6:34:90:33 Authority key identifier: 37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A Certificate issuer: /CN=A91C456F/serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Certificate serial: 03BC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft Manifest number: 03B8 Signing time: Sat 23 Aug 2025 00:57:45 +0000 Manifest this update: Sat 23 Aug 2025 00:57:45 +0000 Manifest next update: Sat 30 Aug 2025 00:57:45 +0000 Files and hashes: 1: N6CiG7WFEffv59KwRIPtgLSgIzo.crl (hash: mzPkDcgi8xAqiBxsp2waM5Rdfo3oF5uGnr6pEx8eZ+8=) 2: AF95CCA0A08711EC88A88D39C4F9AE02.roa (hash: f88t3B3XEIrStaMOLBEX51aBDTSHx6vviz1RmYW+1Aw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:57:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 956 (0x3bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C456F, serialNumber=37A0A21BB58511F7EFE7D2B04483ED80B4A0233A Validity Not Before: Aug 23 00:57:45 2025 GMT Not After : Aug 30 00:57:45 2025 GMT Subject: CN=68a91209-67a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:19:fc:71:76:0e:16:1a:02:80:e8:4a:1b:28: d2:b5:6b:80:7e:f3:f0:e5:64:82:6e:6f:54:29:73: a3:01:eb:49:b5:72:34:0e:d6:31:e3:c6:8d:d8:ef: 6f:b4:75:e9:67:db:70:a8:32:c3:4a:25:26:f2:2a: c4:36:d6:88:3b:39:32:bb:0a:78:2b:b2:8a:66:2b: 67:10:17:96:f3:08:2a:aa:96:cf:c7:6a:60:14:50: 7e:f9:91:7c:87:14:08:1e:04:e3:06:5b:f0:38:ed: d8:38:77:24:d5:b7:59:bf:f9:c9:f6:62:b6:22:16: d6:54:cb:c5:e6:ba:32:b8:e2:07:60:0d:c4:ec:88: 56:c7:b5:c0:ee:2a:ce:a0:5c:0a:b6:b7:41:12:31: 24:13:f0:67:4b:05:37:9d:f9:c0:c7:80:17:8e:67: 94:e1:ce:9b:cf:81:ac:60:92:cf:76:59:1e:56:21: d4:c0:c9:25:f5:46:36:0a:04:30:a3:da:23:9c:52: 71:ee:80:39:d9:ea:21:70:58:22:27:e6:29:dc:8e: 57:2f:d5:14:4e:fe:d5:df:57:5c:5f:04:2c:d9:d5: cd:0f:fc:67:0a:75:82:5b:a3:7c:95:05:37:8e:2f: 61:29:96:1e:f9:f8:fa:aa:b9:9b:81:d4:5f:3c:0c: 75:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:59:9C:80:C8:D7:00:5A:B7:1F:CD:8A:1B:50:E2:67:B6:34:90:33 X509v3 Authority Key Identifier: keyid:37:A0:A2:1B:B5:85:11:F7:EF:E7:D2:B0:44:83:ED:80:B4:A0:23:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N6CiG7WFEffv59KwRIPtgLSgIzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C456F/D33FC82AA08411EC94AD2A37C4F9AE02/N6CiG7WFEffv59KwRIPtgLSgIzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:27:47:8a:fb:24:d1:d1:30:73:8b:22:87:df:c2:bd:cf:bb: c3:fa:ad:ad:a8:a5:ea:5b:42:fa:60:51:f9:58:d8:04:a3:0c: 69:db:7a:71:33:97:ab:2a:38:cf:d9:40:67:f3:1d:f0:20:d1: 41:ab:7d:4f:39:b6:11:90:49:9c:6e:e3:5e:c1:47:89:8a:01: 2d:3e:e6:9c:66:d5:1f:07:c4:d1:d1:5b:55:8c:f2:43:69:7a: 9f:68:b7:a8:c4:f0:a5:7d:e1:cb:b3:97:d4:a9:99:fc:9b:14: 6a:a6:7e:e7:4c:49:91:2a:bd:4e:1c:ee:15:61:47:8d:79:d1: a9:cd:07:7a:3c:2d:42:cd:59:6d:26:0d:f3:66:50:52:5a:4d: db:36:ec:f6:e3:57:3d:aa:f1:f6:ec:48:43:ee:dc:c8:05:7a: 59:fe:51:07:dd:56:cf:44:da:82:8b:81:f2:37:39:2c:38:2d: 6e:3c:ba:e3:2d:fe:6f:03:82:30:c5:80:54:6e:e9:ee:bf:ea: a1:b0:f0:93:6b:af:9f:aa:8c:f7:5b:4f:38:c6:9f:20:a2:5f: 6a:49:03:ec:b4:43:fd:fd:6a:5d:71:4c:9a:1b:72:b8:ba:08: 3e:d1:22:a8:98:7f:f1:75:07:52:4c:5e:12:16:43:eb:77:30: ad:fc:1a:dc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQ1NkYxMTAvBgNVBAUTKDM3QTBBMjFCQjU4NTExRjdFRkU3RDJCMDQ0ODNFRDgw QjRBMDIzM0EwHhcNMjUwODIzMDA1NzQ1WhcNMjUwODMwMDA1NzQ1WjAYMRYwFAYD VQQDEw02OGE5MTIwOS02N2E2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+hn8cXYOFhoCgOhKGyjStWuAfvPw5WSCbm9UKXOjAetJtXI0DtYx48aN2O9v tHXpZ9twqDLDSiUm8irENtaIOzkyuwp4K7KKZitnEBeW8wgqqpbPx2pgFFB++ZF8 hxQIHgTjBlvwOO3YOHck1bdZv/nJ9mK2IhbWVMvF5royuOIHYA3E7IhWx7XA7irO oFwKtrdBEjEkE/BnSwU3nfnAx4AXjmeU4c6bz4GsYJLPdlkeViHUwMkl9UY2CgQw o9ojnFJx7oA52eohcFgiJ+Yp3I5XL9UUTv7V31dcXwQs2dXND/xnCnWCW6N8lQU3 ji9hKZYe+fj6qrmbgdRfPAx1DwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEhZnIDI 1wBatx/NihtQ4me2NJAzMB8GA1UdIwQYMBaAFDegohu1hRH37+fSsESD7YC0oCM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDU2Ri9EMzNGQzgyQUEw ODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVmZnY1OUt3UklQdGdMU2dJ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL042Q2lHN1dGRWZmdjU5S3dSSVB0Z0xTZ0l6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NDU2Ri9EMzNGQzgyQUEwODQxMUVDOTRBRDJBMzdDNEY5QUUwMi9ONkNpRzdXRkVm ZnY1OUt3UklQdGdMU2dJem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCwJ0eK+yTR0TBziyKH38K9z7vD+q2tqKXqW0L6YFH5WNgEowxp23px M5erKjjP2UBn8x3wINFBq31PObYRkEmcbuNewUeJigEtPuacZtUfB8TR0VtVjPJD aXqfaLeoxPClfeHLs5fUqZn8mxRqpn7nTEmRKr1OHO4VYUeNedGpzQd6PC1CzVlt Jg3zZlBSWk3bNuz241c9qvH27EhD7tzIBXpZ/lEH3VbPRNqCi4HyNzksOC1uPLrj Lf5vA4IwxYBUbunuv+qhsPCTa6+fqoz3W084xp8gol9qSQPstEP9/WpdcUyaG3K4 ugg+0SKomH/xdQdSTF4SFkPrdzCt/Brc -----END CERTIFICATE-----Generated at Sat Aug 23 17:56:00 2025 by rpki-client