$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft File: 6XepImIg6MeKHRs74E1gzcyKIYg.mft (raw, json) Hash identifier: gk46Y+WLAd3K7MAFrA0tLmr1evzczbTO4XI9hrbE+t4= Subject key identifier: 7C:39:8A:7D:75:EB:39:98:6A:BA:1B:8C:3F:86:47:CA:8F:DD:F9:69 Authority key identifier: E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 Certificate issuer: /CN=A91FC5BD/serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft Manifest number: EC Signing time: Sat 23 Aug 2025 05:30:23 +0000 Manifest this update: Sat 23 Aug 2025 05:30:23 +0000 Manifest next update: Sat 30 Aug 2025 05:30:23 +0000 Files and hashes: 1: 6XepImIg6MeKHRs74E1gzcyKIYg.crl (hash: fBodc2XhEQZF4aMYh/R/wiaQsoJkzP4P3FvVj7V1YX4=) 2: 1101B5C01CEC11EFA7CDC085C4F9AE02.roa (hash: BZA1P97SNGTrhAAl2/Ui2Ojz/Jo4Dfx0oXuCfnfQd+I=) 3: 5B6A06725D2C11F080B2DC7BC4F9AE02.roa (hash: l5eDg1NtuwC6/S6spgtl7+l3t055Pm1B+3DrcaZ20+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC5BD, serialNumber=E977A9226220E8C78A1D1B3BE04D60CDCC8A2188 Validity Not Before: Aug 23 05:30:23 2025 GMT Not After : Aug 30 05:30:23 2025 GMT Subject: CN=68a951ef-3096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9a:4b:cd:26:e3:6a:86:a9:ee:70:48:20:df: 12:1e:a0:b8:4a:4f:c1:b5:c1:cd:12:70:0e:46:83: e4:48:fc:0b:af:56:fe:e5:c0:5b:fd:c8:8c:67:1f: 39:4f:47:b3:14:1d:3f:be:07:0c:e3:a1:44:54:55: 3b:a5:73:97:c8:75:c1:37:82:76:16:0e:c8:47:59: 4f:b8:29:cb:a6:65:3c:c3:44:61:01:92:83:c1:d0: 11:58:fd:8e:fd:b3:6f:32:a8:2b:db:2d:ec:e9:ac: 7e:ff:58:4f:7c:c1:7f:93:f6:6b:f4:7c:0d:24:c3: cb:9b:60:c3:b7:60:a4:82:5c:af:87:63:5f:8d:55: 6c:ce:4d:bb:28:32:4c:e8:5d:3f:7b:7f:b2:91:b2: 25:1d:01:44:b0:04:88:f0:2a:fb:11:b8:31:d3:50: f7:98:74:ba:b5:5a:11:a1:e8:ee:2d:d6:ba:98:23: a2:96:2b:f8:3c:f3:7c:03:48:79:64:a2:cf:96:c1: 9c:aa:43:62:bb:b6:19:f9:48:05:7d:b8:54:52:e5: 12:ff:b4:13:25:17:0f:eb:01:e1:a3:17:16:42:cd: f1:e3:9d:a9:f5:28:a0:26:47:2c:88:d0:12:e6:86: 41:60:99:e5:27:cd:a6:47:f1:f6:c0:57:9d:9a:fa: bb:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:39:8A:7D:75:EB:39:98:6A:BA:1B:8C:3F:86:47:CA:8F:DD:F9:69 X509v3 Authority Key Identifier: keyid:E9:77:A9:22:62:20:E8:C7:8A:1D:1B:3B:E0:4D:60:CD:CC:8A:21:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XepImIg6MeKHRs74E1gzcyKIYg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC5BD/76C2C72E1CEB11EF85DFD776C4F9AE02/6XepImIg6MeKHRs74E1gzcyKIYg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a9:34:7e:fd:61:de:b0:19:40:26:04:4f:3f:2f:d1:bc:99:c9: 06:e4:2c:9c:25:fb:8d:98:40:a6:78:de:06:ff:d7:76:52:8c: 28:67:d4:d0:8e:9e:66:ab:3a:36:ed:65:b7:a9:7e:56:fe:c7: 2f:74:aa:1b:47:d2:ef:9f:d1:1f:f2:fd:03:b8:8d:cf:66:f7: bc:d1:93:69:27:5c:7b:c9:2a:e7:7e:dd:3b:3a:2a:95:8f:4e: fc:6d:2a:19:0c:90:ef:cc:a7:71:ae:ab:66:ec:6b:08:02:0a: 7e:81:77:cc:57:87:75:ef:32:58:d0:79:1b:66:08:aa:df:d7: 92:c8:63:88:cd:c4:31:dc:38:2d:bc:69:5f:9f:01:88:6e:1e: 24:1c:d1:74:7a:8c:ce:6e:ca:d2:40:ea:d8:e7:18:57:8e:ab: dc:e6:20:f7:20:d8:33:ba:c8:e4:d2:b2:e1:7a:36:40:c0:a7: 93:3e:48:23:60:bf:5b:4e:2d:72:0d:27:25:d0:c5:8f:3c:ee: ca:de:9d:1c:23:fc:6c:51:ef:b0:d6:80:a4:62:a6:21:5a:8f: ac:e3:c0:c6:9d:8e:15:8d:20:81:43:43:7c:67:c0:0a:8e:a7: 29:6e:e6:38:e6:e9:e9:30:a6:d8:6b:f2:2e:5e:7b:06:30:9e: f8:eb:f4:ff -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM1QkQxMTAvBgNVBAUTKEU5NzdBOTIyNjIyMEU4Qzc4QTFEMUIzQkUwNEQ2MENE Q0M4QTIxODgwHhcNMjUwODIzMDUzMDIzWhcNMjUwODMwMDUzMDIzWjAYMRYwFAYD VQQDEw02OGE5NTFlZi0zMDk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3ZpLzSbjaoap7nBIIN8SHqC4Sk/BtcHNEnAORoPkSPwLr1b+5cBb/ciMZx85 T0ezFB0/vgcM46FEVFU7pXOXyHXBN4J2Fg7IR1lPuCnLpmU8w0RhAZKDwdARWP2O /bNvMqgr2y3s6ax+/1hPfMF/k/Zr9HwNJMPLm2DDt2Ckglyvh2NfjVVszk27KDJM 6F0/e3+ykbIlHQFEsASI8Cr7Ebgx01D3mHS6tVoRoejuLda6mCOiliv4PPN8A0h5 ZKLPlsGcqkNiu7YZ+UgFfbhUUuUS/7QTJRcP6wHhoxcWQs3x452p9SigJkcsiNAS 5oZBYJnlJ82mR/H2wFedmvq7swIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHw5in11 6zmYarobjD+GR8qP3flpMB8GA1UdIwQYMBaAFOl3qSJiIOjHih0bO+BNYM3MiiGI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzVCRC83NkMyQzcyRTFD RUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZNZUtIUnM3NEUxZ3pjeUtJ WWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYZXBJbUlnNk1lS0hSczc0RTFnemN5S0lZZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzVCRC83NkMyQzcyRTFDRUIxMUVGODVERkQ3NzZDNEY5QUUwMi82WGVwSW1JZzZN ZUtIUnM3NEUxZ3pjeUtJWWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCpNH79Yd6wGUAmBE8/L9G8mckG5CycJfuNmECmeN4G/9d2UowoZ9TQ jp5mqzo27WW3qX5W/scvdKobR9Lvn9Ef8v0DuI3PZve80ZNpJ1x7ySrnft07OiqV j078bSoZDJDvzKdxrqtm7GsIAgp+gXfMV4d17zJY0HkbZgiq39eSyGOIzcQx3Dgt vGlfnwGIbh4kHNF0eozObsrSQOrY5xhXjqvc5iD3INgzusjk0rLhejZAwKeTPkgj YL9bTi1yDScl0MWPPO7K3p0cI/xsUe+w1oCkYqYhWo+s48DGnY4VjSCBQ0N8Z8AK jqcpbuY45unpMKbYa/IuXnsGMJ746/T/ -----END CERTIFICATE-----Generated at Sat Aug 23 20:44:41 2025 by rpki-client