$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft File: R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft (raw, json) Hash identifier: iNqbMkoCEFRDtvgWpBqmngiwJ1UDvnVRYZiiMdQ7g3s= Subject key identifier: 67:26:7F:F5:09:17:35:5A:70:30:C0:61:F6:B1:9A:01:20:D6:C7:7D Authority key identifier: 47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 Certificate issuer: /CN=A91583E2/serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Certificate serial: 26 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft Manifest number: 25 Signing time: Tue 05 Aug 2025 08:29:12 +0000 Manifest this update: Tue 05 Aug 2025 08:29:12 +0000 Manifest next update: Tue 12 Aug 2025 08:29:12 +0000 Files and hashes: 1: R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl (hash: DgDOBll/aE+sUrBDkeO5ALWUfDSuPbRfQ976JzG3New=) 2: B0E8BC383B9911F09DE90D79C4F9AE02.roa (hash: DBehkehjj1Vjada20+g+EkMiIesYAdzyY1KoJXBbQUk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 08:29:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=47A6190AC05C30807ED15F40921BB232DB552484 Validity Not Before: Aug 5 08:29:12 2025 GMT Not After : Aug 12 08:29:12 2025 GMT Subject: CN=6891c0d8-a426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:37:74:e0:e7:2b:b5:eb:e8:f8:ab:fb:d3:84: aa:a2:12:e8:2d:ff:6b:3c:6e:5c:a9:d2:66:bf:fa: b1:ee:d5:7a:3e:1b:89:6d:49:45:46:4e:8a:4d:b5: cf:7c:36:97:b0:c8:c3:d9:db:25:cb:f0:e4:57:ac: 05:14:5c:5a:cd:ae:e0:54:4c:d5:99:9d:06:51:5c: 4d:4e:d0:35:27:a7:94:95:59:c8:3a:6c:ea:5e:63: a4:20:da:dc:1a:4a:e4:f1:e1:00:96:e7:15:d9:84: 86:da:8d:dc:8d:01:0f:d8:bd:e4:66:77:bf:90:6a: 52:30:5e:60:83:70:1a:49:5a:be:17:70:03:2b:18: 99:04:b7:93:26:16:e1:e6:07:72:cf:46:76:56:a9: a1:3c:56:6e:78:a9:2b:6c:8f:57:49:b1:07:7f:62: 4b:f9:81:66:3a:8c:e0:2f:b0:81:46:94:af:f5:87: df:72:46:b9:15:05:72:ff:60:ef:11:7b:61:aa:60: 61:21:cf:df:29:d0:82:fd:ca:2f:74:1a:be:b2:68: 32:f3:83:26:0f:5e:f1:9c:eb:8d:b5:8e:01:52:28: cf:20:b7:8f:81:65:12:87:65:d9:d0:dc:af:a5:2a: 80:2c:2c:2a:3b:13:ec:80:97:87:54:76:89:7e:c5: 7a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:26:7F:F5:09:17:35:5A:70:30:C0:61:F6:B1:9A:01:20:D6:C7:7D X509v3 Authority Key Identifier: keyid:47:A6:19:0A:C0:5C:30:80:7E:D1:5F:40:92:1B:B2:32:DB:55:24:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R6YZCsBcMIB-0V9AkhuyMttVJIQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/4D3CC08A3B9911F0A0CC5978C4F9AE02/R6YZCsBcMIB-0V9AkhuyMttVJIQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bf:52:62:52:78:e0:e3:f0:b7:c9:d6:47:3e:17:66:de:33: 8f:e7:d7:ed:71:ad:9b:e4:cd:f1:07:1d:96:47:dd:bd:6b:55: e4:ea:3d:fe:b9:8c:c4:fb:4d:8e:35:2b:a6:6e:f9:c1:02:3b: 12:de:f4:02:7c:8b:8f:24:a3:93:44:3e:ea:1f:af:c3:f7:51: 50:21:5c:ab:75:5b:ae:2e:9a:78:20:0f:03:9e:34:9e:4e:36: fb:3b:1d:90:49:01:bb:d6:ac:0c:07:43:4f:73:f1:5f:a2:13: 10:04:b8:96:6d:a0:80:6a:c1:6e:44:2d:18:7f:61:5f:a7:6b: 37:a5:9f:09:54:6a:30:a0:85:60:19:47:10:56:83:d0:88:8d: 25:01:75:66:23:0f:0f:dc:6d:ae:5c:2d:ca:b7:32:81:5f:31: d3:d6:9f:a8:20:cb:ed:b0:cb:53:a3:6f:9b:06:6c:c8:1b:03: 76:96:87:64:70:70:72:65:66:d0:39:50:fc:ab:cb:ef:ae:e7: 2e:1a:30:99:1a:bc:a3:94:25:dd:ab:7c:8d:cb:6f:68:55:d8: 2b:0a:0f:6e:91:9a:d2:4d:92:9f:0e:fd:08:6b:ce:d7:89:e0: 17:1f:ef:59:fb:c8:5b:94:c8:ed:1c:55:80:8d:07:7d:00:c7: 1b:8c:5a:7a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNDdBNjE5MEFDMDVDMzA4MDdFRDE1RjQwOTIxQkIyMzJE QjU1MjQ4NDAeFw0yNTA4MDUwODI5MTJaFw0yNTA4MTIwODI5MTJaMBgxFjAUBgNV BAMTDTY4OTFjMGQ4LWE0MjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrN3Tg5yu16+j4q/vThKqiEugt/2s8blyp0ma/+rHu1Xo+G4ltSUVGTopNtc98 NpewyMPZ2yXL8ORXrAUUXFrNruBUTNWZnQZRXE1O0DUnp5SVWcg6bOpeY6Qg2twa SuTx4QCW5xXZhIbajdyNAQ/YveRmd7+QalIwXmCDcBpJWr4XcAMrGJkEt5MmFuHm B3LPRnZWqaE8Vm54qStsj1dJsQd/Ykv5gWY6jOAvsIFGlK/1h99yRrkVBXL/YO8R e2GqYGEhz98p0IL9yi90Gr6yaDLzgyYPXvGc6421jgFSKM8gt4+BZRKHZdnQ3K+l KoAsLCo7E+yAl4dUdol+xXpTAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZyZ/9QkX NVpwMMBh9rGaASDWx30wHwYDVR0jBBgwFoAUR6YZCsBcMIB+0V9AkhuyMttVJIQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzREM0NDMDhBM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlCLTBWOUFraHV5TXR0VkpJ US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvUjZZWkNzQmNNSUItMFY5QWtodXlNdHRWSklRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4 M0UyLzREM0NDMDhBM0I5OTExRjBBMENDNTk3OEM0RjlBRTAyL1I2WVpDc0JjTUlC LTBWOUFraHV5TXR0VkpJUS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAF6/UmJSeODj8LfJ1kc+F2beM4/n1+1xrZvkzfEHHZZH3b1rVeTqPf65 jMT7TY41K6Zu+cECOxLe9AJ8i48ko5NEPuofr8P3UVAhXKt1W64umnggDwOeNJ5O Nvs7HZBJAbvWrAwHQ09z8V+iExAEuJZtoIBqwW5ELRh/YV+nazelnwlUajCghWAZ RxBWg9CIjSUBdWYjDw/cba5cLcq3MoFfMdPWn6ggy+2wy1Ojb5sGbMgbA3aWh2Rw cHJlZtA5UPyry++u5y4aMJkavKOUJd2rfI3Lb2hV2CsKD26RmtJNkp8O/QhrzteJ 4Bcf71n7yFuUyO0cVYCNB30AxxuMWno= -----END CERTIFICATE-----Generated at Thu Aug 7 05:13:43 2025 by rpki-client