$ rpki-client -vvf rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft File: 6qgUe81-WERO-2P8KsfVqRy_oCE.mft (raw, json) Hash identifier: I67e97GnqJH/sWwBzj+CnLvide6sxHGW9XMWeFPrSas= Subject key identifier: 08:94:BB:7A:A5:30:DB:45:EF:DE:28:A9:64:F6:E9:1C:EA:D7:2D:04 Authority key identifier: EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21 Certificate issuer: /CN=A91D22E7/serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021 Certificate serial: 28 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft Manifest number: 27 Signing time: Sat 23 Aug 2025 08:00:43 +0000 Manifest this update: Sat 23 Aug 2025 08:00:42 +0000 Manifest next update: Sat 30 Aug 2025 08:00:42 +0000 Files and hashes: 1: 6qgUe81-WERO-2P8KsfVqRy_oCE.crl (hash: xdpGF177D5jZi+TQ9SzD3cSP4gocEqvsGsJ77xW7/SI=) 2: 9EA99558465511F08EDD9E3EC4F9AE02.roa (hash: cWoNQ8oC/1Wsplva0paV3Wc+NwujWAt5ZzODK9sNbiM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40 (0x28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D22E7, serialNumber=EAA8147BCD7E58444EFB63FC2AC7D5A91CBFA021 Validity Not Before: Aug 23 08:00:42 2025 GMT Not After : Aug 30 08:00:42 2025 GMT Subject: CN=68a9752a-d7ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:07:0f:eb:55:de:35:b4:7b:c5:f6:99:a6:ae: 81:55:33:a9:06:ca:13:b3:ff:c7:f9:24:87:85:63: 98:36:25:ac:e3:cb:c0:d1:16:34:61:cb:ee:e1:2c: 54:5b:fc:a6:9b:54:72:c0:42:c3:86:a6:2f:c1:d6: 25:e9:ae:87:94:e9:74:e4:07:ff:29:5d:ce:4a:87: 42:a3:ba:50:59:d3:44:5c:d5:7e:6d:75:9b:33:c2: 9d:12:0a:f7:88:2f:6b:7a:77:99:dc:93:75:eb:e2: fb:3a:b5:c7:19:15:ae:f5:a5:d0:42:ca:3e:12:a5: 96:2b:9a:3d:8d:86:84:ac:84:76:77:c8:2e:b9:ce: ef:ef:05:e9:3f:64:11:93:73:24:fb:91:18:bd:a6: bf:23:b0:c0:19:44:c1:b9:cb:24:2a:20:b7:e9:03: 81:41:b0:2a:8a:26:04:be:cd:67:17:f1:fd:d6:aa: 79:37:c8:fe:da:e7:a9:09:fb:5f:72:86:49:59:4a: f2:c8:01:0d:f7:b5:97:1e:67:54:75:e2:40:25:20: fd:e1:87:d5:a7:02:32:57:0a:52:71:a1:5c:4a:0d: f4:3b:67:64:a8:e0:68:a3:db:04:12:cd:fa:a5:49: 3b:95:c6:2c:5e:5b:9f:ab:aa:8a:4a:2e:8a:bf:00: 85:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:94:BB:7A:A5:30:DB:45:EF:DE:28:A9:64:F6:E9:1C:EA:D7:2D:04 X509v3 Authority Key Identifier: keyid:EA:A8:14:7B:CD:7E:58:44:4E:FB:63:FC:2A:C7:D5:A9:1C:BF:A0:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qgUe81-WERO-2P8KsfVqRy_oCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D22E7/103C8A14465511F0B7CC1C3AC4F9AE02/6qgUe81-WERO-2P8KsfVqRy_oCE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:9c:c9:9e:20:46:5c:18:92:74:22:ed:c0:e2:ad:aa:61:f5: ef:52:5c:f2:e4:16:01:cf:ad:bd:08:29:11:7b:07:5d:74:c9: c5:c4:05:a4:25:b2:31:5f:ce:0f:ee:b2:30:0a:b5:6d:c6:8a: a7:e2:af:5c:fd:2c:b4:ae:07:ab:5c:28:23:ce:e8:39:9c:1d: 64:ba:db:0e:f6:fe:cd:01:0f:68:88:a9:79:c6:44:26:d4:14: 47:50:9e:a1:c3:3d:2a:79:60:66:e5:74:a4:2d:e1:3d:16:27: ba:37:90:c5:b8:20:50:aa:42:3d:cf:42:07:9f:25:55:74:33: c5:93:40:88:da:34:fa:47:47:b1:c3:67:ce:96:9e:25:fc:be: 16:5b:2d:08:81:1a:81:49:cf:cd:ee:b1:4f:65:19:32:20:84: 78:e8:08:8b:df:59:ef:c3:d3:ba:2b:e1:26:6c:99:d5:8c:32: c9:bb:b2:c0:00:8a:ab:02:14:5e:29:c6:69:fe:c8:1c:35:52: ba:20:73:51:83:19:ba:1c:e1:37:23:1f:a3:99:c1:37:34:a9: dd:a9:52:10:9d:52:ba:e4:9a:33:c4:9a:ef:5f:c5:b7:ab:f2: 33:e2:35:46:32:bd:2b:c2:50:f5:bd:96:6d:ce:de:d2:02:3f: 18:6f:27:99 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MjJFNzExMC8GA1UEBRMoRUFBODE0N0JDRDdFNTg0NDRFRkI2M0ZDMkFDN0Q1QTkx Q0JGQTAyMTAeFw0yNTA4MjMwODAwNDJaFw0yNTA4MzAwODAwNDJaMBgxFjAUBgNV BAMTDTY4YTk3NTJhLWQ3ZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDcBw/rVd41tHvF9pmmroFVM6kGyhOz/8f5JIeFY5g2Jazjy8DRFjRhy+7hLFRb /KabVHLAQsOGpi/B1iXproeU6XTkB/8pXc5Kh0KjulBZ00Rc1X5tdZszwp0SCveI L2t6d5nck3Xr4vs6tccZFa71pdBCyj4SpZYrmj2NhoSshHZ3yC65zu/vBek/ZBGT cyT7kRi9pr8jsMAZRMG5yyQqILfpA4FBsCqKJgS+zWcX8f3Wqnk3yP7a56kJ+19y hklZSvLIAQ33tZceZ1R14kAlIP3hh9WnAjJXClJxoVxKDfQ7Z2So4Gij2wQSzfql STuVxixeW5+rqopKLoq/AIWTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUCJS7eqUw 20Xv3iipZPbpHOrXLQQwHwYDVR0jBBgwFoAU6qgUe81+WERO+2P8KsfVqRy/oCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyMkU3LzEwM0M4QTE0NDY1 NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VSTy0yUDhLc2ZWcVJ5X29D RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnFnVWU4MS1XRVJPLTJQOEtzZlZxUnlfb0NFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQy MkU3LzEwM0M4QTE0NDY1NTExRjBCN0NDMUMzQUM0RjlBRTAyLzZxZ1VlODEtV0VS Ty0yUDhLc2ZWcVJ5X29DRS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAKOcyZ4gRlwYknQi7cDiraph9e9SXPLkFgHPrb0IKRF7B110ycXEBaQl sjFfzg/usjAKtW3Giqfir1z9LLSuB6tcKCPO6DmcHWS62w72/s0BD2iIqXnGRCbU FEdQnqHDPSp5YGbldKQt4T0WJ7o3kMW4IFCqQj3PQgefJVV0M8WTQIjaNPpHR7HD Z86WniX8vhZbLQiBGoFJz83usU9lGTIghHjoCIvfWe/D07or4SZsmdWMMsm7ssAA iqsCFF4pxmn+yBw1Urogc1GDGboc4TcjH6OZwTc0qd2pUhCdUrrkmjPEmu9fxber 8jPiNUYyvSvCUPW9lm3O3tICPxhvJ5k= -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:26 2025 by rpki-client