$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: 8DNeUwEdIBAQH0UyqYPbELMEFFD5G9tf0prkpOX9hHw= Subject key identifier: D6:6F:6A:79:1A:B4:F2:42:8C:61:7A:42:1C:A5:5A:D6:FE:7A:14:A6 Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: A4 Signing time: Sat 23 Aug 2025 06:25:48 +0000 Manifest this update: Sat 23 Aug 2025 06:25:48 +0000 Manifest next update: Sat 30 Aug 2025 06:25:48 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: PAS+BtiW0s3+6TAewMHsp2m2Ih5YV4R5Toi6L0vS9Zc=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:25:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 165 (0xa5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Aug 23 06:25:48 2025 GMT Not After : Aug 30 06:25:48 2025 GMT Subject: CN=68a95eec-3e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e4:08:ad:67:18:62:bd:05:cf:68:55:20:52: f3:0d:12:5f:66:5e:b7:82:b8:c5:66:12:83:db:92: ab:04:67:50:a1:51:75:88:09:96:01:a6:5c:c5:86: 77:6b:a7:87:85:ae:ae:8e:3d:4c:79:4d:36:71:7f: a6:98:c7:34:d0:5f:d7:73:d4:ea:f5:59:1a:09:41: 25:62:77:4c:df:9a:14:65:2c:13:58:b1:c0:14:3d: d9:60:fe:de:87:a0:3e:0a:72:f0:7d:c9:f7:3a:b6: 4d:9c:7d:60:5e:3a:da:22:df:ad:3a:4a:a3:f7:c0: 38:cc:9a:ee:1d:e4:fa:bd:1b:b8:cb:f7:d0:ed:c3: 51:8d:2b:75:c6:a5:49:ef:10:ee:13:16:a4:f4:f3: 9a:93:ee:cb:c4:ff:cc:1a:16:ca:3a:71:3c:94:8d: ce:75:52:0a:f6:a7:78:2e:c4:73:ef:6b:a7:e1:cc: b0:5d:34:7d:55:45:cb:0a:34:6d:b4:80:e5:bb:90: 31:ac:a3:04:51:67:2d:f0:d8:f4:4c:88:a3:e2:50: 86:2c:16:06:04:a9:71:dc:bb:b8:7f:75:c2:c4:e4: fe:89:ac:49:0c:f0:1e:a3:5b:5d:43:e4:8e:46:72: c2:e1:6e:00:01:c5:b2:05:95:e4:74:5a:47:2b:6f: c4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:6F:6A:79:1A:B4:F2:42:8C:61:7A:42:1C:A5:5A:D6:FE:7A:14:A6 X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:0c:db:3a:14:36:35:e0:ee:5b:ac:3a:58:09:f9:62:b5:b5: b0:de:7a:02:bb:56:1b:58:ec:c1:d5:33:e0:21:c8:5f:0c:57: 22:9c:1a:56:d7:ac:ab:de:4f:3d:50:bf:65:e7:72:4e:cf:15: 75:6d:30:ba:bd:5e:74:d2:23:29:51:d1:11:3c:a2:50:a1:32: e1:f5:64:d5:d8:30:93:58:5b:7f:68:2b:9e:69:27:28:ed:49: cd:17:05:53:34:ff:61:fa:4d:ee:30:7f:9f:c3:d8:a4:4f:05: 74:5a:a0:5a:18:40:1a:15:58:b8:a9:52:f9:e8:06:d3:0b:ae: 11:79:1e:c1:05:c8:f2:50:7f:90:bf:52:2f:b7:32:dc:11:94: c7:14:a6:6f:5d:02:d1:c4:33:b6:49:0b:35:7e:26:5d:f0:8f: d2:63:bd:fc:10:eb:f1:c5:13:6f:5e:61:c3:a4:fa:d6:b3:2b: 05:17:57:32:32:62:a1:23:ac:a7:cd:e3:1f:bc:55:98:01:af: 16:dd:60:e0:c4:c0:54:10:04:92:c1:fd:fa:d8:08:78:48:33: bf:62:dc:c5:d3:4a:35:94:e0:98:8b:ff:59:33:ae:69:0b:b9: b4:97:ab:ef:a8:e3:69:7e:cd:e1:f9:e0:41:ec:6c:ad:4f:bc: ef:3f:09:ae -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUwODIzMDYyNTQ4WhcNMjUwODMwMDYyNTQ4WjAYMRYwFAYD VQQDEw02OGE5NWVlYy0zZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwuQIrWcYYr0Fz2hVIFLzDRJfZl63grjFZhKD25KrBGdQoVF1iAmWAaZcxYZ3 a6eHha6ujj1MeU02cX+mmMc00F/Xc9Tq9VkaCUElYndM35oUZSwTWLHAFD3ZYP7e h6A+CnLwfcn3OrZNnH1gXjraIt+tOkqj98A4zJruHeT6vRu4y/fQ7cNRjSt1xqVJ 7xDuExak9POak+7LxP/MGhbKOnE8lI3OdVIK9qd4LsRz72un4cywXTR9VUXLCjRt tIDlu5AxrKMEUWct8Nj0TIij4lCGLBYGBKlx3Lu4f3XCxOT+iaxJDPAeo1tdQ+SO RnLC4W4AAcWyBZXkdFpHK2/EUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZvanka tPJCjGF6QhylWtb+ehSmMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwDNs6FDY14O5brDpYCflitbWw3noCu1YbWOzB1TPgIchfDFcinBpW 16yr3k89UL9l53JOzxV1bTC6vV500iMpUdERPKJQoTLh9WTV2DCTWFt/aCueaSco 7UnNFwVTNP9h+k3uMH+fw9ikTwV0WqBaGEAaFVi4qVL56AbTC64ReR7BBcjyUH+Q v1IvtzLcEZTHFKZvXQLRxDO2SQs1fiZd8I/SY738EOvxxRNvXmHDpPrWsysFF1cy MmKhI6ynzeMfvFWYAa8W3WDgxMBUEASSwf362Ah4SDO/YtzF00o1lOCYi/9ZM65p C7m0l6vvqONpfs3h+eBB7GytT7zvPwmu -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:00 2025 by rpki-client