$ rpki-client -vvf rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft File: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft (raw, json) Hash identifier: YM2VFFImeGFqB41p2C4/+ATz5hFGivZT8E8QLnjvLds= Subject key identifier: EF:FA:FF:B8:47:36:91:FE:17:A6:E9:0E:0E:2D:3C:D4:00:F4:C7:4B Authority key identifier: E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 Certificate issuer: /CN=A91C68AD/serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Certificate serial: 8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft Manifest number: 8A Signing time: Thu 03 Jul 2025 06:42:58 +0000 Manifest this update: Thu 03 Jul 2025 06:42:58 +0000 Manifest next update: Thu 10 Jul 2025 06:42:58 +0000 Files and hashes: 1: 6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl (hash: 2DJLb4zjMHh4Cb2tsUvt59aybyYBRUSGaKwjGDFEecs=) 2: FC3E29FC85E111EFB365E459C4F9AE02.roa (hash: 0DxgUjIqfTQVxs1j3QKSFbDtA+jK21POEd6C/CDA/hA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C68AD, serialNumber=E9F2CE483F1B06D29D5EA2ABE375BD1D22A9E1C4 Validity Not Before: Jul 3 06:42:58 2025 GMT Not After : Jul 10 06:42:58 2025 GMT Subject: CN=68662672-dd88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:77:db:44:05:1d:d2:31:78:2e:8d:a5:cd:e5: d8:d3:91:cb:3f:6e:6a:cf:ed:ca:e0:1c:e9:43:f2: 81:6b:b6:f4:03:a8:ab:55:94:42:32:a0:ee:b4:3f: 06:2f:19:9d:9e:46:41:66:a2:1a:7b:98:4f:6a:2c: b0:ca:5b:1e:95:12:b5:0a:77:21:b1:89:f3:ef:16: 32:f2:18:75:0f:c8:9d:b5:59:a0:55:c0:72:5d:f8: 26:3e:58:8b:a5:52:c9:f5:d2:fd:66:bb:60:fc:d4: 1f:a4:fd:d2:6f:5d:5f:15:24:84:78:8b:2a:a8:5f: 31:50:0d:02:a1:c5:c2:cd:30:4e:66:f2:c1:57:d0: f1:14:d1:16:58:e7:64:55:ae:fd:63:06:0a:f2:12: ac:bc:41:90:e2:fb:bf:c4:76:94:62:16:d7:aa:5f: 4c:3d:2b:3f:44:2a:08:8c:e2:19:46:df:5f:c0:b3: 2a:37:8b:f3:90:6c:5b:58:3a:18:cb:83:ef:2a:02: 8a:f6:96:5f:64:1c:15:78:af:7e:de:87:22:2d:0f: 56:1b:c8:d4:94:cc:eb:5b:e7:e1:e5:b9:e8:b5:db: 2e:c7:77:2c:34:ef:57:d5:74:5c:fe:58:be:6e:1e: 39:a2:9f:36:b7:d7:81:e3:7f:16:7a:ab:6f:3b:5c: 4d:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:FA:FF:B8:47:36:91:FE:17:A6:E9:0E:0E:2D:3C:D4:00:F4:C7:4B X509v3 Authority Key Identifier: keyid:E9:F2:CE:48:3F:1B:06:D2:9D:5E:A2:AB:E3:75:BD:1D:22:A9:E1:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6fLOSD8bBtKdXqKr43W9HSKp4cQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C68AD/49DEEE6485E011EFA7587655C4F9AE02/6fLOSD8bBtKdXqKr43W9HSKp4cQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:81:34:33:1a:3a:41:9d:29:63:b7:67:0d:2a:a0:f9:8e:60: ed:98:1d:d6:41:34:bd:be:98:1e:36:ea:a1:73:d2:38:80:50: 40:ae:58:55:b5:01:9a:8c:57:0b:62:8c:89:95:c3:0d:a6:c4: f4:ae:f4:dd:8e:8e:da:2d:93:28:07:df:e0:28:2a:fe:d9:03: de:82:c1:50:66:f3:90:41:8d:b7:70:37:03:a8:3d:11:54:39: bb:b8:64:3f:04:45:45:cf:87:06:bc:ca:8e:82:22:bc:aa:bd: d3:1b:dc:19:83:28:15:b4:44:29:34:07:9b:96:da:95:4e:c2: fe:46:c8:95:2d:59:2b:93:05:fe:14:46:48:86:45:00:94:34: 9b:19:14:5c:b0:5c:e4:91:6f:13:1f:cb:3d:37:30:5f:e0:0b: 81:92:67:ec:2c:18:d4:a8:93:63:5f:36:c8:61:94:44:0f:56: 0d:2a:96:16:00:4b:48:1c:52:aa:c9:63:8b:58:c3:9f:68:ce: 57:3a:35:26:10:b9:13:4e:ff:80:bd:bf:61:cd:cd:ef:25:be: 5b:f2:06:9b:eb:1a:9e:2d:0a:bf:1c:67:e9:78:2f:e3:93:36: 7e:ee:08:5e:02:f2:73:54:bd:08:25:93:19:78:30:c7:a6:3d: 53:42:1b:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzY4QUQxMTAvBgNVBAUTKEU5RjJDRTQ4M0YxQjA2RDI5RDVFQTJBQkUzNzVCRDFE MjJBOUUxQzQwHhcNMjUwNzAzMDY0MjU4WhcNMjUwNzEwMDY0MjU4WjAYMRYwFAYD VQQDEw02ODY2MjY3Mi1kZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx3fbRAUd0jF4Lo2lzeXY05HLP25qz+3K4BzpQ/KBa7b0A6irVZRCMqDutD8G LxmdnkZBZqIae5hPaiywylselRK1CnchsYnz7xYy8hh1D8idtVmgVcByXfgmPliL pVLJ9dL9Zrtg/NQfpP3Sb11fFSSEeIsqqF8xUA0CocXCzTBOZvLBV9DxFNEWWOdk Va79YwYK8hKsvEGQ4vu/xHaUYhbXql9MPSs/RCoIjOIZRt9fwLMqN4vzkGxbWDoY y4PvKgKK9pZfZBwVeK9+3ociLQ9WG8jUlMzrW+fh5bnotdsux3csNO9X1XRc/li+ bh45op82t9eB438WeqtvO1xNeQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO/6/7hH NpH+F6bpDg4tPNQA9MdLMB8GA1UdIwQYMBaAFOnyzkg/GwbSnV6iq+N1vR0iqeHE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjhBRC80OURFRUU2NDg1 RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0S2RYcUtyNDNXOUhTS3A0 Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZmTE9TRDhiQnRLZFhxS3I0M1c5SFNLcDRjUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NjhBRC80OURFRUU2NDg1RTAxMUVGQTc1ODc2NTVDNEY5QUUwMi82ZkxPU0Q4YkJ0 S2RYcUtyNDNXOUhTS3A0Y1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCVgTQzGjpBnSljt2cNKqD5jmDtmB3WQTS9vpgeNuqhc9I4gFBArlhV tQGajFcLYoyJlcMNpsT0rvTdjo7aLZMoB9/gKCr+2QPegsFQZvOQQY23cDcDqD0R VDm7uGQ/BEVFz4cGvMqOgiK8qr3TG9wZgygVtEQpNAebltqVTsL+RsiVLVkrkwX+ FEZIhkUAlDSbGRRcsFzkkW8TH8s9NzBf4AuBkmfsLBjUqJNjXzbIYZRED1YNKpYW AEtIHFKqyWOLWMOfaM5XOjUmELkTTv+Avb9hzc3vJb5b8gab6xqeLQq/HGfpeC/j kzZ+7gheAvJzVL0IJZMZeDDHpj1TQhtZ -----END CERTIFICATE-----Generated at Fri Jul 4 07:45:32 2025 by rpki-client