$ rpki-client -vvf rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft File: 6sqCrlKk_xgNM2F5-DlQpasLx7M.mft (raw, json) Hash identifier: KPIjbk7WCGBgCkpYtv9Evv0bYAcx+Cehx5l+JtI6+Z0= Subject key identifier: 44:FD:F4:D3:9E:98:31:97:43:3F:17:B8:A3:C2:7E:08:B6:65:AC:EC Authority key identifier: EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 Certificate issuer: /CN=A91486D3/serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Certificate serial: 0101 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft Manifest number: FF Signing time: Wed 13 Aug 2025 05:42:43 +0000 Manifest this update: Wed 13 Aug 2025 05:42:42 +0000 Manifest next update: Wed 20 Aug 2025 05:42:42 +0000 Files and hashes: 1: 6sqCrlKk_xgNM2F5-DlQpasLx7M.crl (hash: tmqU4KbuEWiJmjiDNxPX4bAyRW5oOGTBLGxXAbtpKnA=) 2: C2A2E774EEC311EE8832C93AC4F9AE02.roa (hash: ms7snh2IzeS7RUyS63vDyik3Jw03vBKHQY1xlDWMLMg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 Aug 2025 04:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91486D3, serialNumber=EACA82AE52A4FF180D336179F83950A5AB0BC7B3 Validity Not Before: Aug 13 05:42:42 2025 GMT Not After : Aug 20 05:42:42 2025 GMT Subject: CN=689c25d2-0ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a0:d7:6b:92:c5:0a:ab:60:c4:0d:6b:cd:5c: d1:51:76:68:e5:35:c8:c6:56:37:c4:3c:8b:05:ca: 74:eb:aa:02:b2:f7:4e:37:6e:3a:21:06:74:43:25: 82:fa:2b:71:b5:d3:4f:a6:8e:ae:27:59:c9:59:ad: 37:60:cc:8b:2f:23:73:22:66:c5:52:eb:15:0d:50: 68:a5:23:3f:db:01:39:42:a0:d0:76:e4:7f:5b:1d: 0d:f1:7c:01:74:f8:98:cf:d5:50:c3:41:15:54:e8: a4:c8:55:76:8c:72:e3:46:45:f8:db:db:79:f2:26: a7:37:18:40:01:49:1d:0b:4a:a5:22:cc:ff:92:28: 5b:32:a7:91:ba:54:1a:b7:06:97:82:85:6a:f5:a5: b5:5d:b0:3a:fc:bd:e3:91:a8:32:8a:13:bc:0f:15: c5:84:58:23:54:81:19:d8:ad:94:0f:22:fb:b2:51: d4:53:f5:3f:59:40:05:b2:7b:1b:7f:ff:59:3f:6b: bc:f9:32:2e:fc:26:e6:67:7f:51:a5:2c:96:11:47: 2a:32:7a:cb:63:86:c6:8d:93:ca:64:e1:7a:59:cb: 45:c3:ba:e1:00:7e:e2:54:12:d1:aa:aa:b3:09:8d: 98:66:09:ff:51:8c:1e:f0:17:46:1c:e2:eb:7b:9a: 6d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FD:F4:D3:9E:98:31:97:43:3F:17:B8:A3:C2:7E:08:B6:65:AC:EC X509v3 Authority Key Identifier: keyid:EA:CA:82:AE:52:A4:FF:18:0D:33:61:79:F8:39:50:A5:AB:0B:C7:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6sqCrlKk_xgNM2F5-DlQpasLx7M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91486D3/1FA29114EEC311EEB2DBFB1BC4F9AE02/6sqCrlKk_xgNM2F5-DlQpasLx7M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 67:00:30:9b:a6:4a:95:6b:aa:3b:01:c6:4c:40:c9:67:04:0a: d7:f1:8f:65:5b:d1:df:d4:18:05:78:06:17:b1:97:7f:8b:8c: b4:a7:ec:47:dd:4e:bb:f9:db:fa:30:df:4e:d9:bb:3a:d0:2f: c7:3d:f0:58:30:b4:e3:7d:54:51:a4:28:27:89:1d:76:f4:bf: d8:b4:18:51:8a:e7:42:35:0f:cc:b0:65:99:ad:74:1e:58:5e: f7:1f:0d:2e:f0:8f:da:66:22:58:8d:d3:36:49:e7:93:0d:af: 97:a1:2f:31:b3:a6:91:73:86:1f:4c:e6:69:fc:5a:e5:4d:7b: 92:50:e5:12:8b:a7:18:53:52:92:de:73:25:8b:e5:53:5f:57: be:a4:89:56:aa:c0:65:f1:26:0f:20:c4:d5:89:00:fc:1d:86: 16:9e:71:6f:b4:06:f5:75:b5:eb:1f:73:42:43:57:11:e9:ea: 1d:f9:a6:62:99:8d:2d:2b:29:b9:ab:bc:96:8e:c1:96:86:50: e1:aa:a3:22:9c:39:69:c5:7e:8a:c9:7b:64:55:be:d7:aa:b1: 8b:d9:c8:96:73:05:5c:49:2e:16:ca:53:96:4e:f1:e5:d7:58: 95:21:09:04:6d:70:e9:60:9e:3a:d2:18:a9:8c:a3:10:a6:1f: 56:56:b2:d9 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg2RDMxMTAvBgNVBAUTKEVBQ0E4MkFFNTJBNEZGMTgwRDMzNjE3OUY4Mzk1MEE1 QUIwQkM3QjMwHhcNMjUwODEzMDU0MjQyWhcNMjUwODIwMDU0MjQyWjAYMRYwFAYD VQQDEw02ODljMjVkMi0wZWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2aDXa5LFCqtgxA1rzVzRUXZo5TXIxlY3xDyLBcp066oCsvdON246IQZ0QyWC +itxtdNPpo6uJ1nJWa03YMyLLyNzImbFUusVDVBopSM/2wE5QqDQduR/Wx0N8XwB dPiYz9VQw0EVVOikyFV2jHLjRkX429t58ianNxhAAUkdC0qlIsz/kihbMqeRulQa twaXgoVq9aW1XbA6/L3jkagyihO8DxXFhFgjVIEZ2K2UDyL7slHUU/U/WUAFsnsb f/9ZP2u8+TIu/CbmZ39RpSyWEUcqMnrLY4bGjZPKZOF6WctFw7rhAH7iVBLRqqqz CY2YZgn/UYwe8BdGHOLre5pt8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFET99NOe mDGXQz8XuKPCfgi2ZazsMB8GA1UdIwQYMBaAFOrKgq5SpP8YDTNhefg5UKWrC8ez MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODZEMy8xRkEyOTExNEVF QzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194Z05NMkY1LURsUXBhc0x4 N00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZzcUNybEtrX3hnTk0yRjUtRGxRcGFzTHg3TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODZEMy8xRkEyOTExNEVFQzMxMUVFQjJEQkZCMUJDNEY5QUUwMi82c3FDcmxLa194 Z05NMkY1LURsUXBhc0x4N00ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBnADCbpkqVa6o7AcZMQMlnBArX8Y9lW9Hf1BgFeAYXsZd/i4y0p+xH 3U67+dv6MN9O2bs60C/HPfBYMLTjfVRRpCgniR129L/YtBhRiudCNQ/MsGWZrXQe WF73Hw0u8I/aZiJYjdM2SeeTDa+XoS8xs6aRc4YfTOZp/FrlTXuSUOUSi6cYU1KS 3nMli+VTX1e+pIlWqsBl8SYPIMTViQD8HYYWnnFvtAb1dbXrH3NCQ1cR6eod+aZi mY0tKym5q7yWjsGWhlDhqqMinDlpxX6KyXtkVb7XqrGL2ciWcwVcSS4WylOWTvHl 11iVIQkEbXDpYJ460hipjKMQph9WVrLZ -----END CERTIFICATE-----Generated at Wed Aug 13 08:50:55 2025 by rpki-client