$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft File: 6LCK3PScYMutkdHtbTe9hEOtvUw.mft (raw, json) Hash identifier: cIuRlOz3TA9wvFMhSWdZ88W9QT+CmksWvJtqWr2G5k0= Subject key identifier: 01:67:13:A4:E9:1B:1A:1B:2A:1F:F1:97:B7:C4:CC:EE:D7:87:9B:87 Authority key identifier: E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C Certificate issuer: /CN=A91D6C2E/serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Certificate serial: 0148 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft Manifest number: 0144 Signing time: Sat 23 Aug 2025 04:30:49 +0000 Manifest this update: Sat 23 Aug 2025 04:30:49 +0000 Manifest next update: Sat 30 Aug 2025 04:30:49 +0000 Files and hashes: 1: 6LCK3PScYMutkdHtbTe9hEOtvUw.crl (hash: eKsHc0Slo9mkWyVBPfPfx22yJSvq6hLP0PBaAhdiZLI=) 2: 5FB99B82934511EE87C1BE7EC4F9AE02.roa (hash: 8pKe3+4xRyiS1MHB1KBCyB6GyZL8OjDx7TX9aT1ieFo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 328 (0x148) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C2E, serialNumber=E8B08ADCF49C60CBAD91D1ED6D37BD8443ADBD4C Validity Not Before: Aug 23 04:30:49 2025 GMT Not After : Aug 30 04:30:49 2025 GMT Subject: CN=68a943f9-9d88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:95:9b:ee:f0:77:1e:3d:65:78:99:c5:48: 38:64:18:9a:a3:b5:ac:55:c8:48:55:12:69:5f:77: 86:63:14:9a:cc:9f:86:f9:3b:a5:7d:39:59:c5:03: d8:27:b9:5a:a9:6d:51:c9:0f:c5:75:5c:83:aa:09: 9c:7d:e4:9b:ef:df:b2:e3:94:f1:f9:45:5c:eb:31: f1:5c:0e:33:85:d2:5f:71:10:bd:81:6e:05:f9:bc: 0b:64:9f:c6:a6:10:9f:b5:e1:43:77:c6:25:2c:39: 1e:2e:21:d6:47:14:58:bc:05:f5:2d:8a:55:74:24: 74:f4:2f:4c:19:42:30:34:01:c2:a2:21:5b:1f:aa: a8:87:68:bd:8b:f0:77:87:c5:98:c9:97:cc:8c:7e: 00:8b:c1:61:7f:a4:f1:f9:2d:39:7d:10:43:5c:60: e2:f8:8b:10:83:b2:03:c6:85:88:7d:75:f0:33:e6: 0f:24:13:6f:14:14:10:44:e4:42:93:c6:16:e9:8c: ef:33:62:57:a8:00:a0:26:6c:0a:15:d5:cd:64:3e: 33:14:eb:65:c8:22:33:98:a4:50:fe:d2:e3:53:16: eb:dd:f1:cf:63:92:0d:0f:15:2b:21:bc:50:44:80: 95:65:df:36:2d:a8:05:d4:18:8e:f8:ec:82:2b:4c: 3a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:67:13:A4:E9:1B:1A:1B:2A:1F:F1:97:B7:C4:CC:EE:D7:87:9B:87 X509v3 Authority Key Identifier: keyid:E8:B0:8A:DC:F4:9C:60:CB:AD:91:D1:ED:6D:37:BD:84:43:AD:BD:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6LCK3PScYMutkdHtbTe9hEOtvUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C2E/818FDA46934011EE843F8374C4F9AE02/6LCK3PScYMutkdHtbTe9hEOtvUw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:f6:79:24:48:ef:e6:76:d1:03:1a:e2:7b:99:40:3d:66:d5: d4:88:9d:98:c5:3e:18:52:80:e4:01:fc:15:19:57:f6:a6:b4: 65:a2:36:63:31:b0:27:e6:36:28:1d:0e:98:ee:37:0a:87:81: 0a:70:36:a1:a8:90:9e:99:6d:af:a7:89:01:23:4e:bd:a8:05: e5:cd:65:03:e2:45:71:4b:9e:7f:fb:ef:8b:b0:37:85:09:22: c7:92:90:3b:90:b0:c9:d9:71:11:e6:7a:b5:fa:ab:7f:aa:00: f5:57:55:38:d4:4f:36:d7:f3:32:9a:a1:39:d9:0e:a5:f3:24: e2:0d:e1:7f:5f:47:82:f2:73:24:ce:f5:de:3f:5e:4d:e1:d5: 31:44:6b:c9:3f:de:30:89:45:12:c0:a8:17:40:09:86:c0:3b: 38:20:0e:1b:4b:af:c6:9d:49:77:ab:ad:34:c8:e5:f0:b4:fd: 12:05:8a:e0:54:2f:8b:ca:fe:38:0c:77:f0:f1:9d:e1:51:6d: a6:e5:b5:81:05:94:32:3b:0e:00:5c:4d:c0:a9:77:1f:27:f0: 8a:cb:c4:68:6c:0f:e5:f1:8c:92:f6:f0:58:f0:95:d2:43:e3: 1a:f9:22:73:46:2c:a6:7d:ba:b6:72:d3:a1:0e:04:ab:53:eb: 2f:3e:44:30 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAUgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDZDMkUxMTAvBgNVBAUTKEU4QjA4QURDRjQ5QzYwQ0JBRDkxRDFFRDZEMzdCRDg0 NDNBREJENEMwHhcNMjUwODIzMDQzMDQ5WhcNMjUwODMwMDQzMDQ5WjAYMRYwFAYD VQQDEw02OGE5NDNmOS05ZDg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/mVm+7wdx49ZXiZxUg4ZBiao7WsVchIVRJpX3eGYxSazJ+G+TulfTlZxQPY J7laqW1RyQ/FdVyDqgmcfeSb79+y45Tx+UVc6zHxXA4zhdJfcRC9gW4F+bwLZJ/G phCfteFDd8YlLDkeLiHWRxRYvAX1LYpVdCR09C9MGUIwNAHCoiFbH6qoh2i9i/B3 h8WYyZfMjH4Ai8Fhf6Tx+S05fRBDXGDi+IsQg7IDxoWIfXXwM+YPJBNvFBQQRORC k8YW6YzvM2JXqACgJmwKFdXNZD4zFOtlyCIzmKRQ/tLjUxbr3fHPY5INDxUrIbxQ RICVZd82LagF1BiO+OyCK0w6wwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAFnE6Tp GxobKh/xl7fEzO7Xh5uHMB8GA1UdIwQYMBaAFOiwitz0nGDLrZHR7W03vYRDrb1M MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENkMyRS84MThGREE0Njkz NDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lNdXRrZEh0YlRlOWhFT3R2 VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZMQ0szUFNjWU11dGtkSHRiVGU5aEVPdHZVdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMyRS84MThGREE0NjkzNDAxMUVFODQzRjgzNzRDNEY5QUUwMi82TENLM1BTY1lN dXRrZEh0YlRlOWhFT3R2VXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBz9nkkSO/mdtEDGuJ7mUA9ZtXUiJ2YxT4YUoDkAfwVGVf2prRlojZj MbAn5jYoHQ6Y7jcKh4EKcDahqJCemW2vp4kBI069qAXlzWUD4kVxS55/+++LsDeF CSLHkpA7kLDJ2XER5nq1+qt/qgD1V1U41E821/MymqE52Q6l8yTiDeF/X0eC8nMk zvXeP15N4dUxRGvJP94wiUUSwKgXQAmGwDs4IA4bS6/GnUl3q600yOXwtP0SBYrg VC+Lyv44DHfw8Z3hUW2m5bWBBZQyOw4AXE3AqXcfJ/CKy8RobA/l8YyS9vBY8JXS Q+Ma+SJzRiymfbq2ctOhDgSrU+svPkQw -----END CERTIFICATE-----Generated at Sat Aug 23 14:29:01 2025 by rpki-client