$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft File: 6HFyjDosJtDmCABLp9Hlo1gwlWw.mft (raw, json) Hash identifier: Dx9zXes+KD2gSdQtQkyD9jQMmDWP3zDn44APAPt3Lfo= Subject key identifier: C6:CF:26:39:6F:CB:80:91:6C:98:84:B8:86:54:12:0A:D9:15:86:E1 Authority key identifier: E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C Certificate issuer: /CN=A91E6EFE/serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft Manifest number: 0205 Signing time: Sat 23 Aug 2025 02:26:54 +0000 Manifest this update: Sat 23 Aug 2025 02:26:54 +0000 Manifest next update: Sat 30 Aug 2025 02:26:54 +0000 Files and hashes: 1: 6HFyjDosJtDmCABLp9Hlo1gwlWw.crl (hash: 1jI5bo2QfjXiF54GmYKSxuxy5ooivCM0Y1qATGuSb/0=) 2: 8367C13A6CA411ED9DD6425CC4F9AE02.roa (hash: qStgTKoKUIh+qGv4WydL84alI8T6N4vvNinWDR/WOZo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6EFE, serialNumber=E871728C3A2C26D0E608004BA7D1E5A35830956C Validity Not Before: Aug 23 02:26:54 2025 GMT Not After : Aug 30 02:26:54 2025 GMT Subject: CN=68a926ee-cbb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:91:46:f2:e4:b8:aa:f7:fd:2f:08:27:53:d6: 2e:57:8b:be:98:1b:b6:28:34:68:f6:a6:fa:17:c6: 68:1b:7d:e2:45:b1:a1:c7:cd:bb:98:3e:41:17:18: ce:9b:ec:37:5d:84:17:23:5f:9a:66:fb:85:0b:c8: 53:07:2b:17:90:d6:14:3a:b8:d9:d7:88:d7:a7:cc: 23:bd:77:9d:95:44:9f:1e:96:b9:ee:13:33:d7:29: a1:d6:2e:e7:bc:62:1a:07:27:f4:4d:ba:9c:d8:5c: 96:da:53:44:5f:7b:f3:49:61:c5:a7:d0:1a:ed:21: 36:f2:38:c6:22:91:eb:a1:a6:ab:22:15:dd:e9:2b: 98:5d:b8:71:20:62:8c:46:ad:96:46:09:bd:3e:cb: a9:cc:b7:69:52:41:79:89:3d:ac:ec:94:c1:78:bd: 11:ae:93:02:3b:cc:24:50:27:b8:d9:55:05:52:49: 32:6a:1b:bd:37:ce:73:92:31:ed:87:1f:82:7a:15: b5:ec:66:0d:03:7b:e5:f4:18:d6:1f:e2:6a:f8:eb: e1:49:f9:a7:87:e0:03:90:76:25:00:a5:33:78:3b: 8b:d2:dc:a3:6b:59:c9:4c:72:3b:84:50:ae:11:5e: 7b:b0:49:95:c1:b4:75:a4:8c:dc:c4:8d:08:60:b6: 59:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:CF:26:39:6F:CB:80:91:6C:98:84:B8:86:54:12:0A:D9:15:86:E1 X509v3 Authority Key Identifier: keyid:E8:71:72:8C:3A:2C:26:D0:E6:08:00:4B:A7:D1:E5:A3:58:30:95:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HFyjDosJtDmCABLp9Hlo1gwlWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/E4C00D3C6CA111EDB44E765BC4F9AE02/6HFyjDosJtDmCABLp9Hlo1gwlWw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bd:2d:ff:02:6f:e3:6e:f4:0c:d3:f1:1b:3d:7e:db:69:cb:54: 0b:34:bc:7c:d0:0b:52:82:c7:47:8e:d1:7a:68:ec:23:a2:ae: 6f:76:88:11:ab:05:05:dd:2f:6f:bc:b5:75:36:c3:30:75:88: f5:37:71:84:83:b7:17:40:09:37:2e:f8:05:6b:e6:a5:5e:a0: 37:ba:3b:87:05:49:4a:7a:fc:85:e4:a2:eb:ee:67:0b:63:89: d3:36:1a:20:b4:a5:d6:91:6d:67:2d:6e:80:70:ca:4c:bb:e3: 06:f6:af:24:b1:50:e3:5b:7e:a6:a4:f9:cd:e5:f1:93:8b:29: aa:f4:6c:e5:54:47:74:61:00:7a:5e:a1:3a:fe:75:ae:a6:44: db:b4:a7:cc:92:1e:63:fa:aa:ca:4c:7c:0c:45:fe:8f:ec:bb: 15:6b:77:f0:1d:bc:d8:09:e6:87:da:a2:d3:fd:64:a1:7b:dd: 5c:f5:2a:01:e4:76:0a:a2:dc:79:fb:c5:1a:bf:68:41:de:54: 81:d0:59:d9:7d:10:9d:bd:5b:bc:3c:0d:d6:2c:74:2d:48:1d: f9:9e:a4:72:a4:04:e5:6a:54:f5:25:b6:19:69:82:ed:4b:68: f9:1c:34:c1:67:ad:07:2a:6b:49:2e:b4:0d:b3:a5:ea:49:92: 59:b6:70:38 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTZFRkUxMTAvBgNVBAUTKEU4NzE3MjhDM0EyQzI2RDBFNjA4MDA0QkE3RDFFNUEz NTgzMDk1NkMwHhcNMjUwODIzMDIyNjU0WhcNMjUwODMwMDIyNjU0WjAYMRYwFAYD VQQDEw02OGE5MjZlZS1jYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZFG8uS4qvf9LwgnU9YuV4u+mBu2KDRo9qb6F8ZoG33iRbGhx827mD5BFxjO m+w3XYQXI1+aZvuFC8hTBysXkNYUOrjZ14jXp8wjvXedlUSfHpa57hMz1ymh1i7n vGIaByf0Tbqc2FyW2lNEX3vzSWHFp9Aa7SE28jjGIpHroaarIhXd6SuYXbhxIGKM Rq2WRgm9PsupzLdpUkF5iT2s7JTBeL0RrpMCO8wkUCe42VUFUkkyahu9N85zkjHt hx+CehW17GYNA3vl9BjWH+Jq+OvhSfmnh+ADkHYlAKUzeDuL0tyja1nJTHI7hFCu EV57sEmVwbR1pIzcxI0IYLZZcQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMbPJjlv y4CRbJiEuIZUEgrZFYbhMB8GA1UdIwQYMBaAFOhxcow6LCbQ5ggAS6fR5aNYMJVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNkVGRS9FNEMwMEQzQzZD QTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0RG1DQUJMcDlIbG8xZ3ds V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIRnlqRG9zSnREbUNBQkxwOUhsbzFnd2xXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NkVGRS9FNEMwMEQzQzZDQTExMUVEQjQ0RTc2NUJDNEY5QUUwMi82SEZ5akRvc0p0 RG1DQUJMcDlIbG8xZ3dsV3cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC9Lf8Cb+Nu9AzT8Rs9fttpy1QLNLx80AtSgsdHjtF6aOwjoq5vdogR qwUF3S9vvLV1NsMwdYj1N3GEg7cXQAk3LvgFa+alXqA3ujuHBUlKevyF5KLr7mcL Y4nTNhogtKXWkW1nLW6AcMpMu+MG9q8ksVDjW36mpPnN5fGTiymq9GzlVEd0YQB6 XqE6/nWupkTbtKfMkh5j+qrKTHwMRf6P7LsVa3fwHbzYCeaH2qLT/WShe91c9SoB 5HYKotx5+8Uav2hB3lSB0FnZfRCdvVu8PA3WLHQtSB35nqRypATlalT1JbYZaYLt S2j5HDTBZ60HKmtJLrQNs6XqSZJZtnA4 -----END CERTIFICATE-----Generated at Sat Aug 23 19:13:37 2025 by rpki-client