$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: 84akI6sRT0668krnu1/QeoxUA0x/6BuDaaOlfDzVYAI= Subject key identifier: 88:FA:30:D5:D1:AE:E4:3A:B6:E0:A8:9F:07:F6:85:05:6B:6D:7E:76 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2A2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2A1E Signing time: Tue 12 Aug 2025 14:20:31 +0000 Manifest this update: Tue 12 Aug 2025 14:20:30 +0000 Manifest next update: Tue 19 Aug 2025 14:20:30 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: DaFi6KZHgXt5baAHv2eY44n6swKF18OqGa0x8TylDGI=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:20:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10799 (0x2a2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Aug 12 14:20:30 2025 GMT Not After : Aug 19 14:20:30 2025 GMT Subject: CN=689b4daf-7dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:40:6a:2d:81:4b:8a:bd:b8:58:be:31:3a:d8: 30:7d:9e:b9:ba:fa:30:ac:ac:1b:ef:dc:2b:17:fc: 45:62:97:58:a7:81:7b:a8:e9:e8:df:8b:f3:c0:c6: 03:bd:e2:ed:a4:b9:47:74:a7:e3:f9:8b:ca:00:36: 63:28:c3:44:4d:de:bc:33:54:a6:13:8a:a6:01:ca: d4:c6:3a:eb:bf:a4:d4:85:07:29:90:bf:c1:88:7b: d8:b6:76:66:b9:da:34:c4:48:19:9c:ae:35:0f:9d: a0:c0:f0:53:7c:7c:7c:f4:96:a5:64:63:66:c5:7a: cd:23:60:c2:cf:05:5f:aa:50:1a:ea:73:c4:45:54: 45:31:e9:79:b9:24:7b:a0:d6:11:40:8a:47:8f:4b: 81:b1:09:e6:7d:6a:07:ed:6d:f7:51:60:a9:a8:7d: 82:73:66:46:06:33:da:34:51:f8:36:f2:69:d5:e0: 72:23:29:53:da:c4:26:ae:c5:2a:83:58:5e:8e:16: c4:32:31:e4:79:56:56:de:44:f9:12:0f:e9:7f:57: b6:f7:57:30:ce:9c:dc:cc:b4:74:00:fa:7a:f9:a3: 41:12:ee:c7:11:0c:df:a6:65:f5:6a:a4:6b:dd:20: b8:41:26:91:69:46:14:33:a9:c7:ef:62:c7:fc:48: 4d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:FA:30:D5:D1:AE:E4:3A:B6:E0:A8:9F:07:F6:85:05:6B:6D:7E:76 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 02:7a:8a:2c:d1:56:2e:c4:aa:41:c9:c6:d0:93:6a:d7:45:e5: 55:36:0c:88:c9:6d:4b:50:fc:46:cc:3d:db:41:fe:c3:6c:2b: f7:10:f5:4f:47:b6:d6:13:c2:39:e2:e2:1b:cd:e6:0f:93:91: 85:a2:64:41:4d:d8:b1:8d:1e:de:56:89:62:90:1e:80:a3:ad: 39:17:ab:d2:7e:0a:ab:a7:d4:ff:0a:8e:28:2a:1c:8a:0f:2a: f3:b9:d3:a6:7b:f8:0b:9c:18:4d:e3:8a:05:7c:80:4e:9a:44: d0:e5:51:1b:c3:45:37:be:59:d7:1a:67:9f:98:d1:3c:84:8b: b9:fb:0b:95:51:89:e1:f6:df:b5:65:e7:ee:3f:93:2b:7f:48: ff:52:43:8b:7c:f1:11:86:b1:2d:a1:c2:82:c3:ed:9d:13:3d: 67:bc:9b:5d:9e:a3:b8:56:38:7e:fb:19:fd:62:b5:40:50:f8: cd:9c:35:17:1f:3a:7a:5c:12:15:be:ea:b9:81:5b:8b:a3:c2: e7:3c:d1:7e:be:06:3e:b0:3e:8f:49:d1:52:0e:21:f5:df:03: 42:bc:03:0b:17:3f:d7:64:20:49:30:3a:f3:88:e7:91:ff:bc: bf:7d:37:b4:09:ab:f4:86:f2:27:22:88:9c:20:32:3d:ee:c2: 8d:3e:4f:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKi8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUwODEyMTQyMDMwWhcNMjUwODE5MTQyMDMwWjAYMRYwFAYD VQQDEw02ODliNGRhZi03ZGQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx0BqLYFLir24WL4xOtgwfZ65uvowrKwb79wrF/xFYpdYp4F7qOno34vzwMYD veLtpLlHdKfj+YvKADZjKMNETd68M1SmE4qmAcrUxjrrv6TUhQcpkL/BiHvYtnZm udo0xEgZnK41D52gwPBTfHx89JalZGNmxXrNI2DCzwVfqlAa6nPERVRFMel5uSR7 oNYRQIpHj0uBsQnmfWoH7W33UWCpqH2Cc2ZGBjPaNFH4NvJp1eByIylT2sQmrsUq g1hejhbEMjHkeVZW3kT5Eg/pf1e291cwzpzczLR0APp6+aNBEu7HEQzfpmX1aqRr 3SC4QSaRaUYUM6nH72LH/EhNAQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIj6MNXR ruQ6tuConwf2hQVrbX52MB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQACeoos0VYuxKpBycbQk2rXReVVNgyIyW1LUPxGzD3bQf7DbCv3EPVP R7bWE8I54uIbzeYPk5GFomRBTdixjR7eVolikB6Ao605F6vSfgqrp9T/Co4oKhyK DyrzudOme/gLnBhN44oFfIBOmkTQ5VEbw0U3vlnXGmefmNE8hIu5+wuVUYnh9t+1 ZefuP5Mrf0j/UkOLfPERhrEtocKCw+2dEz1nvJtdnqO4Vjh++xn9YrVAUPjNnDUX Hzp6XBIVvuq5gVuLo8LnPNF+vgY+sD6PSdFSDiH13wNCvAMLFz/XZCBJMDrziOeR /7y/fTe0Cav0hvInIoicIDI97sKNPk9A -----END CERTIFICATE-----Generated at Wed Aug 13 04:25:38 2025 by rpki-client