$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft File: 6wFhqozbHyTNf-E9XlzlIXulj4I.mft (raw, json) Hash identifier: vFX5qYwQ150+HJpcsWcHIB+BTOP9QL8htnsnHnX+Skc= Subject key identifier: 34:D5:78:94:B5:46:7B:A0:31:25:CA:D5:7F:8C:87:6F:16:13:C4:44 Authority key identifier: EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 Certificate issuer: /CN=A91FC77C/serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Certificate serial: 1741 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft Manifest number: 1737 Signing time: Fri 22 Aug 2025 16:43:53 +0000 Manifest this update: Fri 22 Aug 2025 16:43:52 +0000 Manifest next update: Fri 29 Aug 2025 16:43:52 +0000 Files and hashes: 1: 6wFhqozbHyTNf-E9XlzlIXulj4I.crl (hash: jXRchBoe0sunpNSvgTPgK3eUzprHrM3gCWvfwc3jsS8=) 2: AAAAE566E8AA11E78A615315C4F9AE02.roa (hash: IZm4bUn/JmIHtecsy8bw34L4o+Q1Xnkykngp8peDfE0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 16:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5953 (0x1741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC77C, serialNumber=EB0161AA8CDB1F24CD7FE13D5E5CE5217BA58F82 Validity Not Before: Aug 22 16:43:52 2025 GMT Not After : Aug 29 16:43:52 2025 GMT Subject: CN=68a89e48-9a76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fc:61:29:8e:05:43:af:29:26:b6:93:48:fb: 98:b4:4d:c9:55:98:7f:3b:2b:66:e2:01:1a:69:35: 0a:3f:5a:e3:69:20:ed:74:8d:9a:ee:55:d7:c0:a6: ae:5a:c5:43:92:00:e2:8e:0b:a5:cd:dc:38:e7:71: 98:7f:6d:39:da:4f:be:38:f9:44:e6:5e:af:cd:28: c9:b3:dc:2a:18:1e:1b:99:41:cb:08:17:c1:a0:93: 06:0e:d4:46:f7:ad:85:e3:92:7e:6b:79:64:b0:14: 1e:8b:db:f8:47:e0:c7:ab:03:4d:8a:fc:3d:27:4a: 7d:c9:c3:ff:87:30:8b:d4:b4:f9:42:37:e0:86:51: 5c:1e:d7:58:79:3b:dc:5b:35:c5:b4:9a:49:c8:45: d6:3d:d6:8a:86:90:7d:b2:95:4f:12:4a:2c:6f:e0: de:24:ba:33:ee:3f:8f:22:07:dd:c9:0a:34:d1:56: d2:cb:50:4d:84:16:74:02:dc:87:e3:ee:d3:58:ad: 34:70:86:65:37:43:1d:ee:ca:14:d6:1c:8d:90:11: 35:b2:11:51:f2:e2:55:24:1a:ba:23:f2:61:8f:bc: 8f:a8:2f:52:74:5d:a7:e3:bc:fd:1a:d1:c2:2f:b7: 29:05:32:0d:41:e6:6f:7e:d3:12:03:50:0e:79:a1: 33:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:D5:78:94:B5:46:7B:A0:31:25:CA:D5:7F:8C:87:6F:16:13:C4:44 X509v3 Authority Key Identifier: keyid:EB:01:61:AA:8C:DB:1F:24:CD:7F:E1:3D:5E:5C:E5:21:7B:A5:8F:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wFhqozbHyTNf-E9XlzlIXulj4I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC77C/1C32D4B0E8AA11E7A230DF14C4F9AE02/6wFhqozbHyTNf-E9XlzlIXulj4I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:2a:cb:25:85:10:90:e5:d8:6b:54:53:29:0b:0a:40:e9:6d: 55:86:a1:c7:6b:bf:2c:cf:5c:e2:63:40:2d:63:14:85:b1:9a: 21:b0:30:06:7f:ea:be:14:72:df:f8:b8:58:bc:2e:5b:fb:95: c6:3d:c7:78:cf:82:16:73:df:4a:4e:8c:b6:eb:a2:d5:c1:3c: ff:5b:8e:10:66:e6:cb:d6:0f:a4:e2:dc:fa:9f:64:39:ca:01: ad:33:d1:89:23:dc:c3:3e:36:30:0d:03:4d:0a:98:36:c3:d7: a9:ce:5e:5e:96:bc:bd:a2:83:83:49:e8:35:62:d1:b7:0b:d2: e8:43:49:45:e5:22:2f:43:80:19:a9:95:dd:98:f4:d4:76:b7: 54:2a:75:5a:83:a4:c1:23:7e:1c:80:f9:20:14:02:f0:89:45: 8c:f5:7a:60:7b:ae:c3:13:e4:34:f3:98:8a:2b:97:e5:2f:22: cd:4c:35:12:36:42:92:6b:a8:24:09:9c:f3:28:49:11:18:22: 0d:d5:0d:5f:6f:df:7e:7a:31:05:47:40:53:76:5e:5e:7f:bc: ab:62:83:a5:81:51:30:d5:2a:8a:bc:18:b2:fe:45:4f:ba:48: 6e:f4:e3:0a:26:ab:00:2c:0c:4c:46:04:39:f1:63:0d:11:3d: 80:34:52:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICF0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkM3N0MxMTAvBgNVBAUTKEVCMDE2MUFBOENEQjFGMjRDRDdGRTEzRDVFNUNFNTIx N0JBNThGODIwHhcNMjUwODIyMTY0MzUyWhcNMjUwODI5MTY0MzUyWjAYMRYwFAYD VQQDEw02OGE4OWU0OC05YTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2vxhKY4FQ68pJraTSPuYtE3JVZh/Oytm4gEaaTUKP1rjaSDtdI2a7lXXwKau WsVDkgDijgulzdw453GYf2052k++OPlE5l6vzSjJs9wqGB4bmUHLCBfBoJMGDtRG 962F45J+a3lksBQei9v4R+DHqwNNivw9J0p9ycP/hzCL1LT5QjfghlFcHtdYeTvc WzXFtJpJyEXWPdaKhpB9spVPEkosb+DeJLoz7j+PIgfdyQo00VbSy1BNhBZ0AtyH 4+7TWK00cIZlN0Md7soU1hyNkBE1shFR8uJVJBq6I/Jhj7yPqC9SdF2n47z9GtHC L7cpBTINQeZvftMSA1AOeaEz1wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDTVeJS1 RnugMSXK1X+Mh28WE8REMB8GA1UdIwQYMBaAFOsBYaqM2x8kzX/hPV5c5SF7pY+C MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzc3Qy8xQzMyRDRCMEU4 QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5VE5mLUU5WGx6bElYdWxq NEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3Rmhxb3piSHlUTmYtRTlYbHpsSVh1bGo0SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Qzc3Qy8xQzMyRDRCMEU4QUExMUU3QTIzMERGMTRDNEY5QUUwMi82d0ZocW96Ykh5 VE5mLUU5WGx6bElYdWxqNEkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1KsslhRCQ5dhrVFMpCwpA6W1VhqHHa78sz1ziY0AtYxSFsZohsDAG f+q+FHLf+LhYvC5b+5XGPcd4z4IWc99KToy266LVwTz/W44QZubL1g+k4tz6n2Q5 ygGtM9GJI9zDPjYwDQNNCpg2w9epzl5elry9ooODSeg1YtG3C9LoQ0lF5SIvQ4AZ qZXdmPTUdrdUKnVag6TBI34cgPkgFALwiUWM9Xpge67DE+Q085iKK5flLyLNTDUS NkKSa6gkCZzzKEkRGCIN1Q1fb99+ejEFR0BTdl5ef7yrYoOlgVEw1SqKvBiy/kVP ukhu9OMKJqsALAxMRgQ58WMNET2ANFLe -----END CERTIFICATE-----Generated at Sat Aug 23 16:33:44 2025 by rpki-client