$ rpki-client -vvf rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft File: _u6fNgpd0TKL4cgqF3B5iWh1nUg.mft (raw, json) Hash identifier: cS7jAeapGH5K6Krz7uopLy0gXQA36bZnPeuTR2K8U6M= Subject key identifier: 6F:CD:CB:1C:24:B4:AE:CF:E6:A5:1F:62:FA:0D:76:31:DF:9B:AC:4E Authority key identifier: FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 Certificate issuer: /CN=A91390D6/serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Certificate serial: 03C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft Manifest number: 03C2 Signing time: Wed 13 Aug 2025 01:11:29 +0000 Manifest this update: Wed 13 Aug 2025 01:11:28 +0000 Manifest next update: Wed 20 Aug 2025 01:11:28 +0000 Files and hashes: 1: _u6fNgpd0TKL4cgqF3B5iWh1nUg.crl (hash: 1Tdp4J2NVI3yNz0Q8toN/Rex8s1cdmS3OUhMY2OaQmM=) 2: 018377CA9AF111EC9717F22AC4F9AE02.roa (hash: Eke8Nptjc+wFFIze4nM4012uB/SRIMQBKPKAnolzw/g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 01:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 966 (0x3c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91390D6, serialNumber=FEEE9F360A5DD1328BE1C82A1770798968759D48 Validity Not Before: Aug 13 01:11:28 2025 GMT Not After : Aug 20 01:11:28 2025 GMT Subject: CN=689be641-7ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c9:53:81:07:39:3a:f3:91:25:c4:6c:a9:64: 4e:80:00:16:bf:4c:32:1c:2c:e8:07:b1:bf:28:42: 94:d7:e3:e6:a4:08:ac:dd:fb:63:60:6f:47:7b:5e: d6:b6:ee:51:a4:35:38:f3:64:e4:b7:67:84:42:ce: ca:84:78:54:fa:04:59:7c:bc:42:25:24:62:61:23: 99:9e:b4:6a:56:23:32:9c:c4:7d:e5:19:86:dd:a0: c6:4c:30:7a:1a:5a:0d:fc:44:65:8f:b7:f2:77:53: 59:bb:47:2f:14:1d:67:d8:32:70:18:3b:62:57:60: 82:15:6e:e3:23:03:48:ac:a4:b4:42:91:c5:0d:43: 1d:33:c8:a5:dd:7f:8f:fb:9c:98:be:1b:43:91:4d: 97:59:a3:b5:75:91:da:6e:e1:ea:0d:7d:94:5f:7d: 5e:e6:40:e5:7b:a2:02:b8:0e:b5:10:50:d2:1c:4f: 24:8d:9e:41:6b:5a:14:a4:33:56:2e:c1:5f:2c:2c: e4:00:1b:ad:26:3c:fb:52:ff:4c:e2:35:ef:13:89: 6f:4f:1d:9e:8f:ca:52:dc:47:f9:eb:fa:e3:80:08: 71:06:d2:16:28:f3:eb:ac:81:4c:ca:6f:43:9f:ac: 35:62:79:9d:86:0b:2b:64:41:17:ee:82:7a:00:3c: a6:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:CD:CB:1C:24:B4:AE:CF:E6:A5:1F:62:FA:0D:76:31:DF:9B:AC:4E X509v3 Authority Key Identifier: keyid:FE:EE:9F:36:0A:5D:D1:32:8B:E1:C8:2A:17:70:79:89:68:75:9D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_u6fNgpd0TKL4cgqF3B5iWh1nUg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91390D6/F964BC329AED11ECBF42E427C4F9AE02/_u6fNgpd0TKL4cgqF3B5iWh1nUg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 22:c5:d0:b6:55:df:7f:86:64:bc:76:3d:66:25:ec:c6:1c:50: 3a:b4:4d:b2:34:00:c5:41:63:7e:6e:85:10:34:4a:23:a9:bb: 16:10:c3:b4:33:74:3d:11:d3:09:ba:90:63:f8:67:11:a8:35: 1f:35:96:9c:a1:51:c3:4b:62:e7:fd:b7:41:a9:c4:cc:e6:67: f1:40:41:49:c6:96:be:3e:ad:46:8e:a4:29:4d:ec:b7:e6:2e: 6d:ea:ad:3b:69:5c:4a:b1:64:c6:cb:60:79:3c:e6:66:41:f4: f5:ea:c9:9d:7a:47:21:32:3c:03:69:6b:f8:fd:ea:5d:9e:8c: 1e:e5:2a:1e:1d:95:c9:18:21:94:c0:22:1c:80:da:8d:15:5d: e0:6f:14:50:d3:a5:e7:af:aa:a1:e8:41:60:87:23:a1:fe:a2: e0:ad:5d:ee:10:2f:a4:2c:07:b9:65:33:0c:f1:c1:11:86:9d: 10:4d:7a:ec:04:80:96:66:b8:69:e7:85:1b:e7:2f:f5:76:b4: 76:1b:1c:51:ea:f6:fd:4c:56:a8:c0:2b:cd:0d:70:48:08:07: 8e:d9:2c:15:ae:e1:3b:26:e2:e2:d2:02:d1:d5:23:99:97:7f: 20:37:e4:31:d6:85:d8:d1:77:13:a5:62:56:48:2a:0a:76:68: 0c:49:5a:34 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA8YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzkwRDYxMTAvBgNVBAUTKEZFRUU5RjM2MEE1REQxMzI4QkUxQzgyQTE3NzA3OTg5 Njg3NTlENDgwHhcNMjUwODEzMDExMTI4WhcNMjUwODIwMDExMTI4WjAYMRYwFAYD VQQDEw02ODliZTY0MS03Y2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzclTgQc5OvORJcRsqWROgAAWv0wyHCzoB7G/KEKU1+PmpAis3ftjYG9He17W tu5RpDU482Tkt2eEQs7KhHhU+gRZfLxCJSRiYSOZnrRqViMynMR95RmG3aDGTDB6 GloN/ERlj7fyd1NZu0cvFB1n2DJwGDtiV2CCFW7jIwNIrKS0QpHFDUMdM8il3X+P +5yYvhtDkU2XWaO1dZHabuHqDX2UX31e5kDle6ICuA61EFDSHE8kjZ5Ba1oUpDNW LsFfLCzkAButJjz7Uv9M4jXvE4lvTx2ej8pS3Ef56/rjgAhxBtIWKPPrrIFMym9D n6w1YnmdhgsrZEEX7oJ6ADymjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG/Nyxwk tK7P5qUfYvoNdjHfm6xOMB8GA1UdIwQYMBaAFP7unzYKXdEyi+HIKhdweYlodZ1I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTBENi9GOTY0QkMzMjlB RUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBUS0w0Y2dxRjNCNWlXaDFu VWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL191NmZOZ3BkMFRLTDRjZ3FGM0I1aVdoMW5VZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OTBENi9GOTY0QkMzMjlBRUQxMUVDQkY0MkU0MjdDNEY5QUUwMi9fdTZmTmdwZDBU S0w0Y2dxRjNCNWlXaDFuVWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAixdC2Vd9/hmS8dj1mJezGHFA6tE2yNADFQWN+boUQNEojqbsWEMO0 M3Q9EdMJupBj+GcRqDUfNZacoVHDS2Ln/bdBqcTM5mfxQEFJxpa+Pq1GjqQpTey3 5i5t6q07aVxKsWTGy2B5POZmQfT16smdekchMjwDaWv4/epdnowe5SoeHZXJGCGU wCIcgNqNFV3gbxRQ06Xnr6qh6EFghyOh/qLgrV3uEC+kLAe5ZTMM8cERhp0QTXrs BICWZrhp54Ub5y/1drR2GxxR6vb9TFaowCvNDXBICAeO2SwVruE7JuLi0gLR1SOZ l38gN+Qx1oXY0XcTpWJWSCoKdmgMSVo0 -----END CERTIFICATE-----Generated at Wed Aug 13 05:34:01 2025 by rpki-client