$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft File: 61l_6N8H6peZiwP4KDQ7yIda7Qg.mft (raw, json) Hash identifier: Kuo5FOuDHPm9aA+Qj+AjZCmhdOGR0ARtQHx9noc/P8I= Subject key identifier: 2A:28:BE:9A:67:69:FF:A4:F7:40:9D:73:02:9E:04:57:A6:92:3E:4B Authority key identifier: EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 Certificate issuer: /CN=A91FCF7C/serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Certificate serial: 0682 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft Manifest number: 067D Signing time: Fri 22 Aug 2025 22:34:04 +0000 Manifest this update: Fri 22 Aug 2025 22:34:03 +0000 Manifest next update: Fri 29 Aug 2025 22:34:03 +0000 Files and hashes: 1: 61l_6N8H6peZiwP4KDQ7yIda7Qg.crl (hash: cvKJK7UnlAg6pnSgKBtJbQJI1UtR+tkNIZBO2QWQPIA=) 2: EF31C4CC87CE11EBAA016A4BC4F9AE02.roa (hash: Lx0/5acw/rTT+uCYraQZRnT94tjJt0V2khH4PhiByaw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 22:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1666 (0x682) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCF7C, serialNumber=EB597FE8DF07EA97998B03F828343BC8875AED08 Validity Not Before: Aug 22 22:34:03 2025 GMT Not After : Aug 29 22:34:03 2025 GMT Subject: CN=68a8f05b-f83e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:80:e7:28:03:03:60:9d:5c:9d:e5:b4:cf:2b: 24:e2:e6:a9:ac:4c:db:b2:08:1f:8b:7c:1d:a8:f6: 55:b7:1d:65:eb:1e:ed:02:f7:d5:99:7e:d3:7d:c5: 85:d3:55:1b:68:30:3d:9c:24:2f:04:62:50:8d:51: ff:33:d2:36:25:ba:65:ce:20:88:8e:d2:31:4e:e6: c2:75:21:8e:8a:1d:df:ff:a9:2f:c5:0d:80:01:41: 67:e2:a5:82:6f:b0:2b:1c:63:39:de:de:d7:1f:40: 78:1d:f9:88:ed:00:a1:21:d2:5d:7f:ad:c0:21:d9: 5f:c2:01:0f:16:e2:af:76:54:d4:1d:10:6a:a8:aa: 05:61:6d:ac:46:25:20:66:7e:77:fc:50:dc:02:7d: a3:cc:23:84:15:77:55:bf:0a:4a:4a:01:64:6b:f0: 76:f9:aa:25:4d:d4:4e:9b:a6:12:3c:68:4f:85:f5: 93:52:88:17:0b:58:f4:0e:d1:5f:3c:0f:e8:fb:cc: f5:68:04:48:69:49:97:04:1e:ca:71:d9:af:ad:b0: e0:fd:5b:d2:4f:73:46:3c:6e:69:31:9f:9f:3a:a4: b5:35:fa:9e:df:b1:65:9d:42:ce:04:cf:95:6d:4f: 85:f4:2f:c9:8a:d0:da:bd:0f:e3:08:1b:51:97:28: 97:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:28:BE:9A:67:69:FF:A4:F7:40:9D:73:02:9E:04:57:A6:92:3E:4B X509v3 Authority Key Identifier: keyid:EB:59:7F:E8:DF:07:EA:97:99:8B:03:F8:28:34:3B:C8:87:5A:ED:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61l_6N8H6peZiwP4KDQ7yIda7Qg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCF7C/CD3B748C87CC11EB984FA748C4F9AE02/61l_6N8H6peZiwP4KDQ7yIda7Qg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:0b:9c:7b:74:d1:6c:fa:95:cf:fe:aa:fc:6f:73:14:56:d8: 70:53:f2:a3:e6:5f:25:28:f9:b8:3b:bf:05:cf:7d:cf:4a:2c: 9c:2c:84:9c:8e:26:cc:65:79:ed:7e:8a:6c:2d:21:4c:01:51: 7f:38:95:32:0e:5b:21:c9:1f:e8:7c:50:28:0b:6d:43:6f:1b: 0f:77:24:57:e7:eb:d3:1e:fb:ce:f8:9a:90:d8:94:d3:e3:6b: 20:ff:10:fa:09:6b:51:24:23:24:ab:4c:3e:0b:5d:52:ca:db: 3c:4c:d2:f7:46:02:c2:5b:c3:a7:dd:2a:e2:ab:34:9e:6a:da: d4:1e:2a:01:8f:5b:e5:eb:d2:3b:8b:90:33:0f:79:8f:e9:3b: 90:da:b5:66:4d:86:19:88:60:e2:9c:fc:ff:16:82:00:ac:e8: 81:c3:86:38:4b:ea:7c:8b:d5:84:ef:e4:41:ba:b1:34:4c:4a: 31:83:d9:68:76:0f:4b:1c:c5:ab:63:4d:45:8f:1b:c3:e0:e8: de:64:59:8a:bf:10:d5:53:ab:d9:db:a9:d9:59:bd:5a:ef:33: 61:16:af:06:cf:d5:51:06:5e:37:bc:c5:7b:29:b4:7a:af:85: bc:08:ee:b4:24:f1:9d:97:49:61:6b:0a:b4:1f:6b:32:f3:ca: 3c:52:e2:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNGN0MxMTAvBgNVBAUTKEVCNTk3RkU4REYwN0VBOTc5OThCMDNGODI4MzQzQkM4 ODc1QUVEMDgwHhcNMjUwODIyMjIzNDAzWhcNMjUwODI5MjIzNDAzWjAYMRYwFAYD VQQDEw02OGE4ZjA1Yi1mODNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy4DnKAMDYJ1cneW0zysk4uaprEzbsggfi3wdqPZVtx1l6x7tAvfVmX7TfcWF 01UbaDA9nCQvBGJQjVH/M9I2JbplziCIjtIxTubCdSGOih3f/6kvxQ2AAUFn4qWC b7ArHGM53t7XH0B4HfmI7QChIdJdf63AIdlfwgEPFuKvdlTUHRBqqKoFYW2sRiUg Zn53/FDcAn2jzCOEFXdVvwpKSgFka/B2+aolTdROm6YSPGhPhfWTUogXC1j0DtFf PA/o+8z1aARIaUmXBB7KcdmvrbDg/VvST3NGPG5pMZ+fOqS1Nfqe37FlnULOBM+V bU+F9C/JitDavQ/jCBtRlyiXQQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCoovppn af+k90CdcwKeBFemkj5LMB8GA1UdIwQYMBaAFOtZf+jfB+qXmYsD+Cg0O8iHWu0I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0Y3Qy9DRDNCNzQ4Qzg3 Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZwZVppd1A0S0RRN3lJZGE3 UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxbF82TjhINnBlWml3UDRLRFE3eUlkYTdRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG Q0Y3Qy9DRDNCNzQ4Qzg3Q0MxMUVCOTg0RkE3NDhDNEY5QUUwMi82MWxfNk44SDZw ZVppd1A0S0RRN3lJZGE3UWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxC5x7dNFs+pXP/qr8b3MUVthwU/Kj5l8lKPm4O78Fz33PSiycLISc jibMZXntfopsLSFMAVF/OJUyDlshyR/ofFAoC21DbxsPdyRX5+vTHvvO+JqQ2JTT 42sg/xD6CWtRJCMkq0w+C11Syts8TNL3RgLCW8On3SriqzSeatrUHioBj1vl69I7 i5AzD3mP6TuQ2rVmTYYZiGDinPz/FoIArOiBw4Y4S+p8i9WE7+RBurE0TEoxg9lo dg9LHMWrY01FjxvD4OjeZFmKvxDVU6vZ26nZWb1a7zNhFq8Gz9VRBl43vMV7KbR6 r4W8CO60JPGdl0lhawq0H2sy88o8UuJA -----END CERTIFICATE-----Generated at Sat Aug 23 13:53:10 2025 by rpki-client