$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: YEcJDqSUV3dx6Sc3POQfGDLCg9o+W1ZONy+kyeTrJuA= Subject key identifier: F4:F9:1C:E2:1C:3A:67:98:76:A5:58:BF:08:05:47:85:BD:51:C6:C5 Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: E7 Signing time: Sat 09 Aug 2025 05:48:50 +0000 Manifest this update: Sat 09 Aug 2025 05:48:50 +0000 Manifest next update: Sat 16 Aug 2025 05:48:50 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: y1bEsfszTNqwS7A/W79Lm+dikqtUkHBjk0R5csYc+JY=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: Aug 9 05:48:50 2025 GMT Not After : Aug 16 05:48:50 2025 GMT Subject: CN=6896e142-c793 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:bd:f8:16:22:ea:57:48:d4:13:0c:cc:e6:24: 50:c7:f5:49:f9:e3:8f:37:02:03:46:cb:d7:46:fd: fb:d4:c9:6a:58:17:f6:99:06:9e:b6:59:7f:c8:cb: 34:c0:7a:d0:eb:8f:0d:28:7f:60:eb:c8:55:9e:44: b2:e7:2a:b6:b2:d8:cc:87:f1:7b:8d:06:5e:ac:cc: dd:c6:7c:66:c1:33:19:91:e8:61:91:e2:38:7b:3e: 4f:41:ff:16:a6:26:27:82:f8:77:e4:35:e3:5d:91: b7:72:15:4a:21:ac:74:9c:2f:f2:23:20:a4:e2:3d: d9:82:6a:f0:36:40:ba:6a:e8:14:24:ab:33:8c:f7: 31:0d:f1:ba:34:7d:70:0d:4d:8c:b1:05:17:05:66: 9b:5f:6d:5a:15:c9:36:27:24:da:67:0d:69:ff:e0: cf:69:aa:6e:06:0d:ba:62:fa:9d:07:72:2f:2f:36: 0c:8a:24:e2:ee:01:8f:8d:48:11:78:a3:30:89:55: df:a3:e9:07:99:8e:9e:5c:41:fb:00:54:fc:00:36: f4:f0:33:47:7b:4a:cf:96:a4:45:9e:dd:be:0d:f9: c3:7a:9a:b7:53:f8:f3:16:21:7e:11:48:eb:61:81: 2a:40:43:02:1b:d9:d3:3d:f1:78:1e:99:e9:08:2e: 0a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F9:1C:E2:1C:3A:67:98:76:A5:58:BF:08:05:47:85:BD:51:C6:C5 X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:9e:2c:ec:03:af:d6:ff:d0:ae:f4:66:e9:c6:fc:35:21:c5: b4:c0:8c:a0:89:79:79:25:99:84:5e:7d:bc:c2:da:00:6e:cf: 83:16:03:94:be:b6:62:75:7b:23:e4:c0:67:42:58:a3:cc:04: 5a:71:8b:ac:13:45:a1:91:35:6c:a5:ce:ce:4d:d5:e2:98:05: 46:f2:85:dc:d9:1c:ee:59:74:56:ad:c7:2f:65:a7:0a:43:0e: 8e:0a:e9:f6:58:85:de:2a:8a:37:20:99:ba:26:66:22:fd:f4: bc:2b:c9:91:60:f1:83:a8:42:bf:40:65:b6:d1:ff:89:7e:2f: 68:6d:6e:bd:a6:e3:92:0b:98:39:7d:38:0c:90:eb:cf:35:2b: 42:6a:1b:41:6b:0b:64:0d:6d:8d:88:2e:d9:97:23:a5:12:3e: 45:e0:6d:56:44:85:2c:d2:d2:49:b0:f0:ae:fd:74:0c:0c:bc: ec:9b:67:a7:cd:e9:c9:59:10:ae:32:dd:65:b6:a7:83:3d:6b: 5e:7d:fb:ad:da:40:a7:cd:cf:0b:dd:f3:18:be:5a:60:39:c9: f6:2a:c6:76:ec:66:89:77:b9:91:4d:0e:6f:74:17:14:a3:92: 2b:35:a8:d1:ff:ac:f0:5d:ce:37:2a:42:19:d6:22:1b:92:10: 1a:f6:e1:cf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUwODA5MDU0ODUwWhcNMjUwODE2MDU0ODUwWjAYMRYwFAYD VQQDEw02ODk2ZTE0Mi1jNzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApr34FiLqV0jUEwzM5iRQx/VJ+eOPNwIDRsvXRv371MlqWBf2mQaetll/yMs0 wHrQ648NKH9g68hVnkSy5yq2stjMh/F7jQZerMzdxnxmwTMZkehhkeI4ez5PQf8W piYngvh35DXjXZG3chVKIax0nC/yIyCk4j3ZgmrwNkC6augUJKszjPcxDfG6NH1w DU2MsQUXBWabX21aFck2JyTaZw1p/+DPaapuBg26YvqdB3IvLzYMiiTi7gGPjUgR eKMwiVXfo+kHmY6eXEH7AFT8ADb08DNHe0rPlqRFnt2+DfnDepq3U/jzFiF+EUjr YYEqQEMCG9nTPfF4HpnpCC4KNwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPT5HOIc OmeYdqVYvwgFR4W9UcbFMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBenizsA6/W/9Cu9Gbpxvw1IcW0wIygiXl5JZmEXn28wtoAbs+DFgOU vrZidXsj5MBnQlijzARacYusE0WhkTVspc7OTdXimAVG8oXc2RzuWXRWrccvZacK Qw6OCun2WIXeKoo3IJm6JmYi/fS8K8mRYPGDqEK/QGW20f+Jfi9obW69puOSC5g5 fTgMkOvPNStCahtBawtkDW2NiC7ZlyOlEj5F4G1WRIUs0tJJsPCu/XQMDLzsm2en zenJWRCuMt1ltqeDPWteffut2kCnzc8L3fMYvlpgOcn2KsZ27GaJd7mRTQ5vdBcU o5IrNajR/6zwXc43KkIZ1iIbkhAa9uHP -----END CERTIFICATE-----Generated at Sun Aug 10 15:58:49 2025 by rpki-client