$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft File: l6zd4pEaCfOTXxhg2wV9TP9GssU.mft (raw, json) Hash identifier: NcaKZZoRihQDZCsceHN4YtE+u55KotlOCA7n7+NOpIo= Subject key identifier: BD:DF:EE:2E:47:66:1E:74:0F:6C:6C:58:E9:31:33:36:36:93:90:13 Authority key identifier: 97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 Certificate issuer: /CN=A91E7A75/serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Certificate serial: 42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft Manifest number: 3D Signing time: Sat 23 Aug 2025 07:46:38 +0000 Manifest this update: Sat 23 Aug 2025 07:46:38 +0000 Manifest next update: Sat 30 Aug 2025 07:46:37 +0000 Files and hashes: 1: l6zd4pEaCfOTXxhg2wV9TP9GssU.crl (hash: 8r5QCDXgDh+SwjKLjLwTJkY6kVxOPM9fjRWnPfFoaEE=) 2: 9E314E3A275211F09DB11A29C4F9AE02.roa (hash: xeAIE2lZn+YXNt0L7vlDN0DVHrs7CNulexHVxcXbegs=) 3: 7538A8FC275211F0A14FD328C4F9AE02.roa (hash: 1L8lUrtPjTnoEjcERsj866aTFLWQJPYnWRL13TGRub4=) 4: 9ECB0CF0275211F09DB11A29C4F9AE02.roa (hash: Pfe2htQw7FQ69zCdUGOvP9JJR+bvYFVzLzCF/2HMviU=) 5: 74B37F24275211F0A14FD328C4F9AE02.roa (hash: 5FSb2Jsk8vMB09hl36LtVE9KBpWP+PzKRBhhPkFdcWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66 (0x42) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A75, serialNumber=97ACDDE2911A09F3935F1860DB057D4CFF46B2C5 Validity Not Before: Aug 23 07:46:38 2025 GMT Not After : Aug 30 07:46:37 2025 GMT Subject: CN=68a971de-e1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f5:4d:50:e3:a3:cc:76:fc:48:73:c4:66:48: b9:6b:3c:f1:8a:a2:ff:03:c5:b3:15:f1:22:2c:60: 04:20:d9:f5:01:ef:06:9c:d0:33:5f:9b:15:dd:27: 11:7f:0d:54:4f:70:da:89:f1:d4:08:28:c8:bd:c1: 5c:fd:4e:52:b8:2a:5b:81:e0:01:33:bd:0b:4e:3b: 56:60:c8:a9:09:95:c1:e9:5a:d9:4d:6e:11:08:ff: b9:b6:35:a5:57:57:d6:b6:6d:43:e4:1c:cf:d8:3c: 6c:3d:2d:9b:77:e5:38:e7:63:f4:af:ba:fa:6e:e7: 29:77:22:c9:e7:61:eb:0c:c5:1d:d9:25:46:bd:bb: d6:c8:f9:5b:c5:45:80:1b:1a:f3:08:0e:57:62:d7: 5d:ed:2b:01:8a:6e:bb:e0:af:ae:a6:4b:93:08:61: bc:e0:67:48:d8:1c:d5:62:38:98:4b:e2:c6:2f:c7: 6d:88:80:af:49:d8:d7:8b:6d:52:d6:54:b5:42:c4: a6:8a:db:66:d5:07:cf:87:04:8c:98:99:69:80:5f: 71:33:a9:32:14:d7:2b:17:32:47:75:c5:11:07:42: 6c:2c:28:5e:91:bf:a2:e7:d3:dc:2b:5d:75:63:68: fd:75:d6:d3:16:68:f8:82:cc:00:d5:f6:cc:37:da: b7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:DF:EE:2E:47:66:1E:74:0F:6C:6C:58:E9:31:33:36:36:93:90:13 X509v3 Authority Key Identifier: keyid:97:AC:DD:E2:91:1A:09:F3:93:5F:18:60:DB:05:7D:4C:FF:46:B2:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l6zd4pEaCfOTXxhg2wV9TP9GssU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A75/E6F4B6DA275111F0ACF0AF24C4F9AE02/l6zd4pEaCfOTXxhg2wV9TP9GssU.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:17:fc:43:19:75:05:eb:cc:42:00:ef:5d:f1:d9:3a:29:95: dd:7a:47:f6:37:5d:4e:c8:37:4b:ff:03:17:04:a4:46:9e:81: 17:06:5c:5e:43:0d:46:9d:8f:54:d6:81:b3:ff:76:c3:11:60: 40:fa:a4:db:5d:9c:19:73:6b:8d:71:28:69:08:61:a4:60:6e: cd:31:5a:76:7c:9e:64:5d:90:94:d5:cb:16:f5:e0:98:27:5d: 99:88:5c:f5:39:07:26:96:fd:06:7b:0e:5d:8a:3b:85:4c:68: bf:be:8f:fe:b4:ae:5d:a3:63:cd:1a:2c:ef:aa:ca:80:9d:2b: 1f:16:79:fc:81:21:7f:7c:46:f0:07:ed:cd:27:12:f2:a3:d8: fe:40:1e:99:22:34:4e:9d:70:c4:b1:57:f1:c0:ff:d0:20:1e: 8a:13:02:3e:a5:70:57:94:90:9f:bc:4f:8a:d1:a5:43:7c:d8: 37:45:31:42:f1:98:82:df:31:87:fc:cc:57:f5:84:5a:8e:29: c6:3b:26:d1:17:f0:10:0b:c6:05:a3:f0:df:4d:e4:89:c7:3e: 07:7a:df:9b:5d:68:6b:a4:ab:ce:d7:8e:e9:ee:72:f9:b0:d9: 04:88:22:20:eb:e4:99:49:86:02:11:15:58:df:f3:de:1c:cf: a5:a7:ee:3a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBQjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF N0E3NTExMC8GA1UEBRMoOTdBQ0RERTI5MTFBMDlGMzkzNUYxODYwREIwNTdENENG RjQ2QjJDNTAeFw0yNTA4MjMwNzQ2MzhaFw0yNTA4MzAwNzQ2MzdaMBgxFjAUBgNV BAMTDTY4YTk3MWRlLWUxZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDa9U1Q46PMdvxIc8RmSLlrPPGKov8DxbMV8SIsYAQg2fUB7wac0DNfmxXdJxF/ DVRPcNqJ8dQIKMi9wVz9TlK4KluB4AEzvQtOO1ZgyKkJlcHpWtlNbhEI/7m2NaVX V9a2bUPkHM/YPGw9LZt35TjnY/Svuvpu5yl3IsnnYesMxR3ZJUa9u9bI+VvFRYAb GvMIDldi113tKwGKbrvgr66mS5MIYbzgZ0jYHNViOJhL4sYvx22IgK9J2NeLbVLW VLVCxKaK22bVB8+HBIyYmWmAX3EzqTIU1ysXMkd1xREHQmwsKF6Rv6Ln09wrXXVj aP111tMWaPiCzADV9sw32rdjAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUvd/uLkdm HnQPbGxY6TEzNjaTkBMwHwYDVR0jBBgwFoAUl6zd4pEaCfOTXxhg2wV9TP9GssUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3QTc1L0U2RjRCNkRBMjc1 MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZPVFh4aGcyd1Y5VFA5R3Nz VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbDZ6ZDRwRWFDZk9UWHhoZzJ3VjlUUDlHc3NVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU3 QTc1L0U2RjRCNkRBMjc1MTExRjBBQ0YwQUYyNEM0RjlBRTAyL2w2emQ0cEVhQ2ZP VFh4aGcyd1Y5VFA5R3NzVS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAHUX/EMZdQXrzEIA713x2Topld16R/Y3XU7IN0v/AxcEpEaegRcGXF5D DUadj1TWgbP/dsMRYED6pNtdnBlza41xKGkIYaRgbs0xWnZ8nmRdkJTVyxb14Jgn XZmIXPU5ByaW/QZ7Dl2KO4VMaL++j/60rl2jY80aLO+qyoCdKx8WefyBIX98RvAH 7c0nEvKj2P5AHpkiNE6dcMSxV/HA/9AgHooTAj6lcFeUkJ+8T4rRpUN82DdFMULx mILfMYf8zFf1hFqOKcY7JtEX8BALxgWj8N9N5InHPgd635tdaGukq87Xjunucvmw 2QSIIiDr5JlJhgIRFVjf894cz6Wn7jo= -----END CERTIFICATE-----Generated at Sat Aug 23 16:19:10 2025 by rpki-client