$ rpki-client -vvf rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft File: 6O2nHIlk0p8GwkorbRt3FTyo84k.mft (raw, json) Hash identifier: XZMro3lmBgrgBCJSra4A/vEbxXoCF1SgRx0L66RXic4= Subject key identifier: CC:CF:00:B3:F7:52:90:C3:03:92:F3:D8:8D:FE:AE:B5:C5:F9:DA:C0 Authority key identifier: E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 Certificate issuer: /CN=A91F724B/serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Certificate serial: 20AC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft Manifest number: 2087 Signing time: Fri 22 Aug 2025 16:01:15 +0000 Manifest this update: Fri 22 Aug 2025 16:01:15 +0000 Manifest next update: Fri 29 Aug 2025 16:01:15 +0000 Files and hashes: 1: 6O2nHIlk0p8GwkorbRt3FTyo84k.crl (hash: BstbPPAFq3B1sRU6VfwRNo78GVw5Rm9UI8tI/WQYRiQ=) 2: D6702FB2C51411E7A0AC1A77C4F9AE02.roa (hash: dRYh9WAvcIumZjCZ5S62u32XoLkiqwXXygrg2DE1FBI=) 3: 36AB4096C51611E7AECA8B79C4F9AE02.roa (hash: 0oF1Qfg6/q63oXyqNiJvhv+IBvlt379syGArKmuw6+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8364 (0x20ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F724B, serialNumber=E8EDA71C8964D29F06C24A2B6D1B77153CA8F389 Validity Not Before: Aug 22 16:01:15 2025 GMT Not After : Aug 29 16:01:15 2025 GMT Subject: CN=68a8944b-2d0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:39:04:49:77:16:b8:3a:9f:5a:29:7b:8a: f7:04:be:f2:a6:e5:e1:1e:4e:66:5a:17:f1:de:b8: 48:9e:5b:9e:3d:60:dc:d2:ee:0f:f6:80:05:c6:62: 9c:cb:ff:9f:05:50:e4:73:ae:5e:9d:4f:78:50:8a: 78:f3:c2:5f:6e:67:8f:9b:c6:4b:72:90:4c:1b:a8: e0:bc:4d:da:e8:9e:1c:b6:0e:fd:e0:5a:8c:21:35: 95:a4:11:c2:10:34:fb:8c:69:85:a5:81:60:bb:de: 68:f9:0f:41:cb:1c:ca:67:f5:e3:87:ba:0a:b8:e1: eb:6e:30:64:23:22:ab:e2:9e:aa:b4:60:e2:16:d8: 71:bc:bd:8a:38:15:83:2d:0e:98:40:ed:fd:0b:cc: 40:ea:09:dd:02:1b:a7:69:26:a1:68:d5:c8:6d:34: 2a:c6:f5:2d:0b:01:8a:38:29:44:d1:ce:a2:b1:94: 33:df:0c:28:a9:63:f6:07:ce:58:eb:56:c4:2f:1a: cc:29:eb:a8:d2:b4:e5:71:86:2c:e5:ef:bd:b8:11: 9f:5d:62:eb:d9:d6:3b:bb:b9:24:bc:5d:d8:5c:eb: 34:48:97:65:6b:c0:11:9b:f3:88:86:22:41:ec:a6: 9a:3a:34:2f:e1:2f:10:e2:ba:38:82:f7:5c:85:92: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:CF:00:B3:F7:52:90:C3:03:92:F3:D8:8D:FE:AE:B5:C5:F9:DA:C0 X509v3 Authority Key Identifier: keyid:E8:ED:A7:1C:89:64:D2:9F:06:C2:4A:2B:6D:1B:77:15:3C:A8:F3:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6O2nHIlk0p8GwkorbRt3FTyo84k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F724B/1BC71A62168911E68EEFD97BC4F9AE02/6O2nHIlk0p8GwkorbRt3FTyo84k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 59:d5:df:41:9b:69:04:95:2b:9a:4e:3c:5f:ee:e5:3a:8c:5b: b1:87:ba:00:80:a1:5a:48:6c:a4:83:a4:64:98:a3:ac:55:ec: 7d:f7:1f:08:90:13:c9:ee:45:40:d3:72:8b:a9:b1:65:c8:95: 4c:5c:3c:77:23:9e:7f:64:6f:7f:27:66:8c:f2:39:79:38:55: 80:9b:1a:ff:c5:f9:e7:3e:74:c3:e2:26:8c:e5:91:0a:cd:23: fb:02:55:e5:57:ae:64:e4:c9:2a:46:63:f0:b3:77:ce:bc:c1: cf:d3:cc:19:5b:26:36:d5:1b:71:e1:72:97:9e:b1:28:75:48: cc:4d:dc:79:77:1f:ad:4c:20:a4:33:74:06:d8:dd:ae:70:8a: 9f:a6:e1:dc:c4:e4:69:bf:19:e0:7a:29:f6:1f:6d:80:fd:f2: c8:e2:ab:45:c8:39:95:53:50:76:9d:d3:64:b0:bf:4f:b2:0b: 72:1b:58:bb:b6:41:7e:ca:2a:2b:5f:d8:88:19:bc:28:34:e5: f4:f3:12:3d:65:0b:13:25:67:d0:c8:ab:f8:5c:b6:d7:92:43: cd:d1:53:fb:8c:1b:dd:6d:f2:1c:87:18:c5:57:3d:f5:ed:32: e6:38:1d:84:c3:79:5d:95:74:fc:38:63:11:9d:bf:b3:91:e9: fc:f2:e1:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICIKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjcyNEIxMTAvBgNVBAUTKEU4RURBNzFDODk2NEQyOUYwNkMyNEEyQjZEMUI3NzE1 M0NBOEYzODkwHhcNMjUwODIyMTYwMTE1WhcNMjUwODI5MTYwMTE1WjAYMRYwFAYD VQQDEw02OGE4OTQ0Yi0yZDBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmrs5BEl3Frg6n1ope4r3BL7ypuXhHk5mWhfx3rhInluePWDc0u4P9oAFxmKc y/+fBVDkc65enU94UIp488JfbmePm8ZLcpBMG6jgvE3a6J4ctg794FqMITWVpBHC EDT7jGmFpYFgu95o+Q9ByxzKZ/Xjh7oKuOHrbjBkIyKr4p6qtGDiFthxvL2KOBWD LQ6YQO39C8xA6gndAhunaSahaNXIbTQqxvUtCwGKOClE0c6isZQz3wwoqWP2B85Y 61bELxrMKeuo0rTlcYYs5e+9uBGfXWLr2dY7u7kkvF3YXOs0SJdla8ARm/OIhiJB 7KaaOjQv4S8Q4ro4gvdchZI/XwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMzPALP3 UpDDA5Lz2I3+rrXF+drAMB8GA1UdIwQYMBaAFOjtpxyJZNKfBsJKK20bdxU8qPOJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNzI0Qi8xQkM3MUE2MjE2 ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBwOEd3a29yYlJ0M0ZUeW84 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZPMm5ISWxrMHA4R3drb3JiUnQzRlR5bzg0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NzI0Qi8xQkM3MUE2MjE2ODkxMUU2OEVFRkQ5N0JDNEY5QUUwMi82TzJuSElsazBw OEd3a29yYlJ0M0ZUeW84NGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBZ1d9Bm2kElSuaTjxf7uU6jFuxh7oAgKFaSGykg6RkmKOsVex99x8I kBPJ7kVA03KLqbFlyJVMXDx3I55/ZG9/J2aM8jl5OFWAmxr/xfnnPnTD4iaM5ZEK zSP7AlXlV65k5MkqRmPws3fOvMHP08wZWyY21Rtx4XKXnrEodUjMTdx5dx+tTCCk M3QG2N2ucIqfpuHcxORpvxngein2H22A/fLI4qtFyDmVU1B2ndNksL9PsgtyG1i7 tkF+yiorX9iIGbwoNOX08xI9ZQsTJWfQyKv4XLbXkkPN0VP7jBvdbfIchxjFVz31 7TLmOB2Ew3ldlXT8OGMRnb+zken88uHk -----END CERTIFICATE-----Generated at Sun Aug 24 09:14:59 2025 by rpki-client