$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: n2TeAANQDbA4zvibDD1W4JJSDiyFh8uoYv8xgddbpiM= Subject key identifier: B4:94:30:D1:AF:2E:64:3A:6C:1D:41:97:6E:CB:13:98:BF:ED:6B:20 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0228 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 0208 Signing time: Mon 11 Aug 2025 02:33:58 +0000 Manifest this update: Mon 11 Aug 2025 02:33:57 +0000 Manifest next update: Mon 18 Aug 2025 02:33:57 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: yRJ29wT9VoExn9gT281hGWnAw1PDnFwfjachfUu0eDU=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 552 (0x228) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Aug 11 02:33:57 2025 GMT Not After : Aug 18 02:33:57 2025 GMT Subject: CN=68995696-7a90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:9f:90:57:c8:de:65:2f:32:4b:a1:14:66:c1: 1f:03:08:11:3c:45:30:1b:8f:92:c1:de:d7:76:d6: c0:93:e6:e3:91:1a:d0:64:0d:30:ab:ca:3a:75:3c: 0d:84:fe:ac:eb:2e:45:2c:9b:f6:6e:cb:6b:5a:2a: 0c:ef:67:3c:df:9f:8f:78:2e:20:f5:32:2b:5f:a4: 79:22:bd:59:de:cf:88:4d:57:70:06:f6:e4:48:6e: 81:7d:15:48:57:d6:2c:c3:6c:75:de:5d:52:a5:ba: 66:73:d9:9e:ad:a0:4a:24:f1:11:3d:e7:26:31:b4: dc:d6:b5:d4:dd:0a:c7:21:be:71:6f:03:0e:76:ad: b4:b9:cb:56:07:6f:4a:a9:4a:a9:b3:7a:c5:a0:38: 6d:e4:36:74:1f:b6:1d:9e:54:14:d5:41:59:9d:df: 2e:04:0d:fa:3d:74:3c:19:2b:75:e7:1f:fa:c0:ca: 99:41:eb:b3:de:86:0b:93:f1:03:14:0a:15:61:1e: 93:bc:d6:a8:a4:69:a9:cb:ed:9a:1f:1d:fc:d2:42: ca:a4:3d:c7:00:a2:fb:e1:29:4c:d6:4e:ff:06:27: f5:a1:52:dc:32:11:f0:07:11:c0:ba:8b:e8:34:a1: 81:f9:d1:38:e1:77:80:ad:95:99:4d:52:a7:2c:78: 72:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:94:30:D1:AF:2E:64:3A:6C:1D:41:97:6E:CB:13:98:BF:ED:6B:20 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 47:48:0a:71:b8:db:f8:70:3a:9e:3f:8e:72:51:df:f0:35:00: 0e:58:e0:20:a7:22:2b:04:38:fd:22:93:e6:ac:5e:5e:64:ce: 8f:82:46:31:07:36:fd:16:51:f5:e6:79:0a:e6:ed:7e:d9:86: 8f:93:2d:1b:0c:ae:da:b2:3c:e6:ae:b9:29:2d:2f:51:69:83: d2:ca:ca:e3:aa:76:38:e7:d1:05:f1:4f:67:2f:02:1e:ce:25: fb:46:95:91:5f:96:91:ec:98:11:50:77:f5:50:b5:c5:bf:fa: 6f:0d:44:e0:48:f8:f7:58:f9:d5:85:64:21:3c:dc:f7:14:2a: 54:4a:90:c3:dc:11:3d:d0:8d:e6:a0:e5:90:e4:ae:b3:95:d3: 48:6e:82:85:85:a5:58:3c:b5:8e:c4:2b:9b:0c:50:2f:ca:08: 3e:e4:e5:93:23:28:76:87:cf:4f:39:40:cd:3e:d5:46:14:67: 9b:0f:e9:22:58:a1:eb:05:23:a4:d1:3e:56:83:7c:a0:d0:70: 2b:0e:de:a5:78:e6:59:33:4b:cf:d9:9b:0e:55:b6:6e:86:13: f3:7a:c6:03:ed:ce:bc:24:be:41:ac:37:33:03:24:9f:8d:1c: fc:a1:64:8a:bb:d9:44:61:9a:3c:f1:59:e7:35:cb:55:f3:06: 0b:dc:b9:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAigwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwODExMDIzMzU3WhcNMjUwODE4MDIzMzU3WjAYMRYwFAYD VQQDEw02ODk5NTY5Ni03YTkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9Z+QV8jeZS8yS6EUZsEfAwgRPEUwG4+Swd7XdtbAk+bjkRrQZA0wq8o6dTwN hP6s6y5FLJv2bstrWioM72c835+PeC4g9TIrX6R5Ir1Z3s+ITVdwBvbkSG6BfRVI V9Ysw2x13l1Spbpmc9meraBKJPERPecmMbTc1rXU3QrHIb5xbwMOdq20uctWB29K qUqps3rFoDht5DZ0H7YdnlQU1UFZnd8uBA36PXQ8GSt15x/6wMqZQeuz3oYLk/ED FAoVYR6TvNaopGmpy+2aHx380kLKpD3HAKL74SlM1k7/Bif1oVLcMhHwBxHAuovo NKGB+dE44XeArZWZTVKnLHhy+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLSUMNGv LmQ6bB1Bl27LE5i/7WsgMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBHSApxuNv4cDqeP45yUd/wNQAOWOAgpyIrBDj9IpPmrF5eZM6PgkYx Bzb9FlH15nkK5u1+2YaPky0bDK7asjzmrrkpLS9RaYPSysrjqnY459EF8U9nLwIe ziX7RpWRX5aR7JgRUHf1ULXFv/pvDUTgSPj3WPnVhWQhPNz3FCpUSpDD3BE90I3m oOWQ5K6zldNIboKFhaVYPLWOxCubDFAvygg+5OWTIyh2h89POUDNPtVGFGebD+ki WKHrBSOk0T5Wg3yg0HArDt6leOZZM0vP2ZsOVbZuhhPzesYD7c68JL5BrDczAySf jRz8oWSKu9lEYZo88VnnNctV8wYL3Lk5 -----END CERTIFICATE-----Generated at Mon Aug 11 04:18:37 2025 by rpki-client