$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft File: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft (raw, json) Hash identifier: aVxyMhu2nJE0QPAeZbILt/CYAwNLUybb1+en6ffiAVE= Subject key identifier: 96:F9:E2:80:C5:B5:B1:4C:8A:7B:9A:F0:B8:88:41:65:92:6C:34:CD Authority key identifier: E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE Certificate issuer: /CN=A91EBDB8/serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Certificate serial: 38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft Manifest number: 36 Signing time: Sat 23 Aug 2025 07:49:14 +0000 Manifest this update: Sat 23 Aug 2025 07:49:14 +0000 Manifest next update: Sat 30 Aug 2025 07:49:14 +0000 Files and hashes: 1: 6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl (hash: W2T0CjD2ei/iRolO/IaQHCxEiRZQqPHPFWcjyqr93hs=) 2: B0B587222FC911F0938FE136C4F9AE02.roa (hash: AJ6f5YKXMBqxmiNf5w59genHsLltTfcxiqmemHdhYMs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:49:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56 (0x38) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBDB8, serialNumber=E88B3B23E09675B437A8328963C5CD3CE3E95FEE Validity Not Before: Aug 23 07:49:14 2025 GMT Not After : Aug 30 07:49:14 2025 GMT Subject: CN=68a9727a-c5db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:47:c2:9d:15:e3:22:68:18:85:da:40:15:39: 45:61:de:9d:a6:ac:f0:1a:22:7c:0e:75:86:c4:df: 6b:6f:1d:2d:3a:05:06:df:c6:e1:40:19:54:22:bb: 63:9d:4f:0c:68:0d:eb:c6:ca:c5:01:a1:c2:5d:8c: da:c3:d7:4a:fb:c1:75:f5:fe:d6:05:67:fb:11:fe: 2b:06:fe:99:f5:18:ec:52:9c:19:7d:1c:b1:f9:1e: 27:c7:f7:a1:ef:a5:dc:39:ec:c0:45:6b:ac:82:c7: df:5b:d0:9b:fe:b3:79:68:b8:5d:87:25:fe:2c:b3: 78:a3:ee:83:1f:9b:6b:92:47:69:6d:7f:f3:07:00: 90:f5:b0:42:81:fd:49:fa:18:c0:b9:54:b1:19:f8: af:13:4b:41:84:88:cc:16:ec:9e:8e:55:a5:8f:e2: 3c:cc:75:f9:e5:3f:68:8e:1f:8a:ae:56:45:15:f3: 8e:ca:0f:77:25:4f:43:46:4b:2d:a2:f9:49:87:f7: db:d2:43:47:22:4e:a5:11:d4:a5:8f:97:2e:73:c1: 43:72:c8:9a:5a:76:51:e9:3a:05:b5:79:fb:df:51: e2:e3:fa:b6:16:02:3d:e2:f5:a7:81:2b:37:5b:e2: b2:d8:9d:cf:90:cb:ee:19:75:97:a2:6c:ea:72:d9: b0:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:F9:E2:80:C5:B5:B1:4C:8A:7B:9A:F0:B8:88:41:65:92:6C:34:CD X509v3 Authority Key Identifier: keyid:E8:8B:3B:23:E0:96:75:B4:37:A8:32:89:63:C5:CD:3C:E3:E9:5F:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBDB8/98230B2C2EFB11F090E36385C4F9AE02/6Is7I-CWdbQ3qDKJY8XNPOPpX-4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3b:b6:ed:13:bf:9a:62:4a:23:b7:e9:1d:e1:df:e8:22:91:f0: 87:07:1c:d1:f8:a3:2b:b5:f9:38:7f:e5:78:9c:6f:b3:50:5a: 5e:04:99:fe:c7:3f:f0:52:93:97:fc:31:d1:20:8f:63:a0:34: 0b:9e:00:7d:07:df:e9:00:30:14:e3:bb:3e:91:8a:08:3b:f0: 8f:43:14:8d:b5:fa:c7:27:b7:7e:66:fa:2a:d2:8e:00:9f:7c: bc:ff:84:97:f9:72:a4:56:d3:0b:ef:3f:24:c1:cf:b3:ac:0c: fb:8f:5b:c5:32:a2:67:76:07:7c:b7:82:d3:d9:52:cd:34:ad: f9:6b:f2:aa:62:af:2c:77:72:6d:d2:5a:38:ea:a8:c3:6a:3e: 4c:b7:7e:1b:45:ea:9b:66:13:52:6a:ff:0c:9d:09:c2:3a:4d: 73:d9:41:f6:1f:89:2f:97:ba:a7:5f:d5:d3:4d:f7:7d:e1:34: 9b:6a:bc:e6:b8:27:25:31:1d:c0:9a:d7:5b:3c:7e:d5:cb:60: ad:28:ea:4c:4f:b3:af:3f:0a:ff:51:8a:10:33:9e:ea:d4:7b: 23:e0:55:2b:67:89:79:ba:64:88:b2:2f:c9:75:bc:07:3c:0c: cc:fe:1f:6f:d8:c4:a6:25:cf:13:69:d8:8f:fb:21:2e:e3:7c: 56:36:f5:f2 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBODANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QkRCODExMC8GA1UEBRMoRTg4QjNCMjNFMDk2NzVCNDM3QTgzMjg5NjNDNUNEM0NF M0U5NUZFRTAeFw0yNTA4MjMwNzQ5MTRaFw0yNTA4MzAwNzQ5MTRaMBgxFjAUBgNV BAMTDTY4YTk3MjdhLWM1ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJR8KdFeMiaBiF2kAVOUVh3p2mrPAaInwOdYbE32tvHS06BQbfxuFAGVQiu2Od TwxoDevGysUBocJdjNrD10r7wXX1/tYFZ/sR/isG/pn1GOxSnBl9HLH5HifH96Hv pdw57MBFa6yCx99b0Jv+s3louF2HJf4ss3ij7oMfm2uSR2ltf/MHAJD1sEKB/Un6 GMC5VLEZ+K8TS0GEiMwW7J6OVaWP4jzMdfnlP2iOH4quVkUV847KD3clT0NGSy2i +UmH99vSQ0ciTqUR1KWPly5zwUNyyJpadlHpOgW1efvfUeLj+rYWAj3i9aeBKzdb 4rLYnc+Qy+4ZdZeibOpy2bDxAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUlvnigMW1 sUyKe5rwuIhBZZJsNM0wHwYDVR0jBBgwFoAU6Is7I+CWdbQ3qDKJY8XNPOPpX+4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVCREI4Lzk4MjMwQjJDMkVG QjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJRM3FES0pZOFhOUE9QcFgt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNklzN0ktQ1dkYlEzcURLSlk4WE5QT1BwWC00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVC REI4Lzk4MjMwQjJDMkVGQjExRjA5MEUzNjM4NUM0RjlBRTAyLzZJczdJLUNXZGJR M3FES0pZOFhOUE9QcFgtNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADu27RO/mmJKI7fpHeHf6CKR8IcHHNH4oyu1+Th/5Xicb7NQWl4Emf7H P/BSk5f8MdEgj2OgNAueAH0H3+kAMBTjuz6Rigg78I9DFI21+scnt35m+irSjgCf fLz/hJf5cqRW0wvvPyTBz7OsDPuPW8Uyomd2B3y3gtPZUs00rflr8qpiryx3cm3S WjjqqMNqPky3fhtF6ptmE1Jq/wydCcI6TXPZQfYfiS+Xuqdf1dNN933hNJtqvOa4 JyUxHcCa11s8ftXLYK0o6kxPs68/Cv9RihAznurUeyPgVStniXm6ZIiyL8l1vAc8 DMz+H2/YxKYlzxNp2I/7IS7jfFY29fI= -----END CERTIFICATE-----Generated at Sat Aug 23 19:06:26 2025 by rpki-client