$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft File: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft (raw, json) Hash identifier: cK1KCLpY1QBMPWIZ8F0abdfvKexoCq5c+unm2AsOR4Y= Subject key identifier: 0A:F2:99:68:BA:42:22:9C:6F:8B:23:D4:E0:83:DF:63:F5:B5:CA:53 Authority key identifier: EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 Certificate issuer: /CN=A91EA522/serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Certificate serial: 0487 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft Manifest number: 0481 Signing time: Sat 23 Aug 2025 00:17:42 +0000 Manifest this update: Sat 23 Aug 2025 00:17:42 +0000 Manifest next update: Sat 30 Aug 2025 00:17:42 +0000 Files and hashes: 1: 6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl (hash: 0bmnKCqSaIsXSFym2DBRDmsIZl/WNlELlSkFFtI3hAA=) 2: DA61635E534811EC8FFBDB7CC4F9AE02.roa (hash: k6KOlaww8ZZoE8DhHLb+fcqbZNEuZUquu+zgOXhayXw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1159 (0x487) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA522, serialNumber=EACB95FF057D641400CA30942B562BD2563CAEB4 Validity Not Before: Aug 23 00:17:42 2025 GMT Not After : Aug 30 00:17:42 2025 GMT Subject: CN=68a908a6-d8cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:43:bb:0a:44:ef:c5:c0:d7:bd:ac:70:c8:7e: 49:73:33:a3:f6:8e:45:fb:23:cb:13:50:5c:11:6b: e3:18:22:a5:d0:c7:67:ef:e7:3d:0d:4b:f5:6b:04: 8f:2e:e0:eb:09:6d:12:7e:90:a0:b0:de:51:60:8a: 23:56:82:d2:b2:4a:bc:2b:09:fc:4f:f7:4f:82:fe: 2e:fd:b4:77:e7:36:ea:9b:ff:f2:17:dd:7f:6c:5b: d4:ab:8c:54:c6:28:3d:b8:83:c2:78:f0:32:9f:7e: d4:f6:1f:f5:e4:7f:f1:9b:fd:ce:72:0b:e5:5e:f7: 11:f6:48:2a:14:de:3e:84:af:6f:01:30:47:64:d2: 78:f4:1b:38:7b:bb:9e:c8:36:60:df:11:c6:ab:11: e3:23:27:85:3f:46:56:e2:1c:34:b6:95:a6:47:80: 25:ca:59:83:db:98:e6:74:f9:0f:d7:30:36:41:9c: 68:80:b9:16:e3:f3:43:e2:b2:f9:22:0c:6c:15:aa: d4:9d:ca:62:0f:05:aa:6d:47:7f:c0:e6:51:9d:cd: 61:dd:ce:a7:46:b4:ab:8c:02:f6:25:bb:a5:d9:f5: ab:a4:25:5e:25:32:2b:1e:48:ff:7a:60:0b:7c:a3: bc:eb:23:d2:dc:c2:ca:c2:fb:79:ac:22:28:dd:ad: c4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:F2:99:68:BA:42:22:9C:6F:8B:23:D4:E0:83:DF:63:F5:B5:CA:53 X509v3 Authority Key Identifier: keyid:EA:CB:95:FF:05:7D:64:14:00:CA:30:94:2B:56:2B:D2:56:3C:AE:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA522/88692ABA534211EC8CD2D722C4F9AE02/6suV_wV9ZBQAyjCUK1Yr0lY8rrQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8e:79:6e:ee:85:78:c9:00:80:2d:fa:df:1a:73:13:3b:fe: eb:2e:40:fa:e9:09:df:e2:ce:5a:f5:2c:db:d3:64:01:64:46: 2d:b9:81:60:b8:c4:4d:75:89:b6:a9:d8:8b:b1:d2:75:01:71: e6:82:e4:ba:b7:4f:da:13:5b:1e:77:61:d5:1a:9c:82:97:1d: 06:2b:5e:9b:3b:fa:69:39:bc:e7:95:8b:cc:99:14:33:45:06: ff:9d:56:56:1f:04:f2:ae:d0:13:1d:32:3c:1d:11:20:dc:0e: 69:47:8d:49:b0:24:9f:1f:54:4f:c4:95:71:1e:cd:24:db:43: 21:20:2d:7c:18:99:17:99:3b:97:ba:ea:27:fe:1b:09:22:92: d8:3d:4a:54:78:63:41:85:5d:35:7e:1b:e4:b0:73:db:93:fc: fd:32:55:88:49:bd:19:43:a2:5e:9c:a6:e2:2a:da:1d:6e:c0: 12:12:4c:ba:d9:d8:6b:6c:c5:f4:f0:30:29:7f:4f:64:5c:66: 9a:d3:eb:e5:35:1e:05:44:af:b2:ff:00:8c:03:7f:38:fb:02: 89:3f:23:73:fd:66:b8:c1:2b:4c:d9:df:84:0d:28:ff:32:f2: 7d:38:0f:e3:64:ad:70:d9:da:0d:8e:00:51:4e:03:19:91:4b: 60:41:73:71 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBIcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE1MjIxMTAvBgNVBAUTKEVBQ0I5NUZGMDU3RDY0MTQwMENBMzA5NDJCNTYyQkQy NTYzQ0FFQjQwHhcNMjUwODIzMDAxNzQyWhcNMjUwODMwMDAxNzQyWjAYMRYwFAYD VQQDEw02OGE5MDhhNi1kOGNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt0O7CkTvxcDXvaxwyH5JczOj9o5F+yPLE1BcEWvjGCKl0Mdn7+c9DUv1awSP LuDrCW0SfpCgsN5RYIojVoLSskq8Kwn8T/dPgv4u/bR35zbqm//yF91/bFvUq4xU xig9uIPCePAyn37U9h/15H/xm/3OcgvlXvcR9kgqFN4+hK9vATBHZNJ49Bs4e7ue yDZg3xHGqxHjIyeFP0ZW4hw0tpWmR4AlylmD25jmdPkP1zA2QZxogLkW4/ND4rL5 IgxsFarUncpiDwWqbUd/wOZRnc1h3c6nRrSrjAL2Jbul2fWrpCVeJTIrHkj/emAL fKO86yPS3MLKwvt5rCIo3a3EZQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFArymWi6 QiKcb4sj1OCD32P1tcpTMB8GA1UdIwQYMBaAFOrLlf8FfWQUAMowlCtWK9JWPK60 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTUyMi84ODY5MkFCQTUz NDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpCUUF5akNVSzFZcjBsWThy clEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzdVZfd1Y5WkJRQXlqQ1VLMVlyMGxZOHJyUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTUyMi84ODY5MkFCQTUzNDIxMUVDOENEMkQ3MjJDNEY5QUUwMi82c3VWX3dWOVpC UUF5akNVSzFZcjBsWThyclEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA6jnlu7oV4yQCALfrfGnMTO/7rLkD66Qnf4s5a9Szb02QBZEYtuYFg uMRNdYm2qdiLsdJ1AXHmguS6t0/aE1sed2HVGpyClx0GK16bO/ppObznlYvMmRQz RQb/nVZWHwTyrtATHTI8HREg3A5pR41JsCSfH1RPxJVxHs0k20MhIC18GJkXmTuX uuon/hsJIpLYPUpUeGNBhV01fhvksHPbk/z9MlWISb0ZQ6JenKbiKtodbsASEky6 2dhrbMX08DApf09kXGaa0+vlNR4FRK+y/wCMA384+wKJPyNz/Wa4wStM2d+EDSj/ MvJ9OA/jZK1w2doNjgBRTgMZkUtgQXNx -----END CERTIFICATE-----Generated at Sun Aug 24 00:42:32 2025 by rpki-client