$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: I8L/zr6L6KrqTCBI+siE4iG6rRzuRO0vrvBU140kdGI= Subject key identifier: C5:C3:77:9A:5C:20:3A:82:72:44:9F:CF:FA:CC:26:E0:04:30:7E:D0 Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 041A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 040F Signing time: Thu 07 Aug 2025 00:56:44 +0000 Manifest this update: Thu 07 Aug 2025 00:56:44 +0000 Manifest next update: Thu 14 Aug 2025 00:56:44 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: uFlkxKgi9r9WNMRrBCIAEBsRktdoZZmsK4UP0xdqWpY=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 00:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1050 (0x41a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Aug 7 00:56:44 2025 GMT Not After : Aug 14 00:56:44 2025 GMT Subject: CN=6893f9cc-154d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:9a:d0:cb:68:5e:0f:1d:58:08:e6:e7:c6:2e: 99:72:ea:b5:a7:a7:a8:64:46:e9:c7:f0:51:f7:2b: 3b:f2:4c:e9:33:98:90:11:8b:a3:12:89:94:32:6e: 0b:35:0f:9e:6f:5d:d9:9a:fe:81:b1:1b:c3:8b:ea: c3:76:88:df:5b:bf:23:ed:50:3e:83:2c:29:f9:bc: c8:bd:34:0e:b0:82:a5:b3:6f:4c:80:f7:fc:d7:98: e2:a7:5a:37:58:60:e5:13:74:2e:5a:5f:20:89:27: b8:40:b6:91:89:5b:7e:35:28:c2:cf:47:6e:bb:27: f7:19:4b:a1:cb:81:4e:46:70:51:f0:47:c1:fc:eb: f4:64:53:b3:3b:d3:87:04:19:6f:bb:fa:bb:6a:55: b5:0d:31:53:10:3f:ba:92:8d:66:79:c7:48:15:b4: f7:c3:a7:91:d1:ac:a5:5b:af:ac:85:b4:8b:ce:e7: df:4f:e2:7e:55:e3:e5:53:85:fa:59:c9:f9:07:f0: 5d:90:de:7e:24:64:c4:cb:64:84:0e:23:f4:cd:b8: 81:c3:3b:61:de:c2:ee:6a:42:63:0e:0b:95:0f:df: 15:6c:1c:92:c0:c4:11:6a:42:d8:d2:9a:69:38:b3: 2f:85:49:2c:78:21:25:04:dd:69:a6:f6:2c:15:cc: ec:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:C3:77:9A:5C:20:3A:82:72:44:9F:CF:FA:CC:26:E0:04:30:7E:D0 X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:92:2d:62:c9:cb:26:34:b3:dd:a7:28:b4:86:a5:59:c4:b6: 34:04:0d:54:5a:86:68:14:d0:ce:db:de:ab:b2:19:ed:2b:7c: 34:71:bd:63:69:a6:b0:f9:ae:1e:1b:c4:64:77:7b:bc:5c:c4: 82:77:e4:70:36:80:c3:e0:75:a6:c4:e6:76:3b:20:45:3a:0e: e3:2e:07:3c:d9:8d:3d:2a:50:49:cd:42:a6:be:ac:f3:54:10: 78:bb:92:99:05:e8:73:c5:25:1a:db:48:4b:36:c8:3e:2f:0a: 7b:32:a7:b6:db:5c:a2:87:9b:02:b8:b6:a0:a0:75:cd:7c:40: 0d:4d:83:8b:05:ca:47:f4:f9:01:76:3c:52:b7:8c:a0:e8:bd: de:86:7a:d6:21:e5:81:df:46:61:c0:4c:c9:cc:fd:6d:e0:28: bc:7a:c1:57:72:b2:8b:75:0d:ce:c2:6e:6b:dc:29:df:18:34: 3f:cd:0b:ca:27:8a:ce:c9:c5:f8:30:20:c9:30:0d:09:33:07: b7:63:ac:30:02:0e:3f:5f:8a:e4:12:72:f9:22:b9:11:f6:ad: 6e:5a:7e:62:2a:16:81:3b:0d:c9:4c:bc:14:f3:7e:96:ec:b2: e4:0a:47:5c:91:ef:d5:1b:d7:42:6a:85:17:5a:db:40:2f:0f: c0:b9:c7:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBBowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwODA3MDA1NjQ0WhcNMjUwODE0MDA1NjQ0WjAYMRYwFAYD VQQDEw02ODkzZjljYy0xNTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA25rQy2heDx1YCObnxi6Zcuq1p6eoZEbpx/BR9ys78kzpM5iQEYujEomUMm4L NQ+eb13Zmv6BsRvDi+rDdojfW78j7VA+gywp+bzIvTQOsIKls29MgPf815jip1o3 WGDlE3QuWl8giSe4QLaRiVt+NSjCz0duuyf3GUuhy4FORnBR8EfB/Ov0ZFOzO9OH BBlvu/q7alW1DTFTED+6ko1mecdIFbT3w6eR0aylW6+shbSLzuffT+J+VePlU4X6 Wcn5B/BdkN5+JGTEy2SEDiP0zbiBwzth3sLuakJjDguVD98VbBySwMQRakLY0ppp OLMvhUkseCElBN1ppvYsFczsWwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMXDd5pc IDqCckSfz/rMJuAEMH7QMB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCcki1iycsmNLPdpyi0hqVZxLY0BA1UWoZoFNDO296rshntK3w0cb1j aaaw+a4eG8Rkd3u8XMSCd+RwNoDD4HWmxOZ2OyBFOg7jLgc82Y09KlBJzUKmvqzz VBB4u5KZBehzxSUa20hLNsg+Lwp7Mqe221yih5sCuLagoHXNfEANTYOLBcpH9PkB djxSt4yg6L3ehnrWIeWB30ZhwEzJzP1t4Ci8esFXcrKLdQ3Owm5r3CnfGDQ/zQvK J4rOycX4MCDJMA0JMwe3Y6wwAg4/X4rkEnL5IrkR9q1uWn5iKhaBOw3JTLwU836W 7LLkCkdcke/VG9dCaoUXWttALw/AucfT -----END CERTIFICATE-----Generated at Fri Aug 8 00:33:30 2025 by rpki-client