$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: 8K+iFCS+HTiyplzIePlHvIMCccXiBzdrlkmMJoQnqIA= Subject key identifier: 0C:12:1F:06:BD:6B:38:DD:A7:03:03:3C:0C:22:D5:0B:AE:8E:1A:27 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0214 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 020B Signing time: Mon 11 Aug 2025 02:28:07 +0000 Manifest this update: Mon 11 Aug 2025 02:28:06 +0000 Manifest next update: Mon 18 Aug 2025 02:28:06 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: mXxDTOpikCFWvpYRBNIPbb9TlVy3h9bDRI69fkEXp88=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 532 (0x214) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Aug 11 02:28:06 2025 GMT Not After : Aug 18 02:28:06 2025 GMT Subject: CN=68995536-613a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:08:56:fe:78:b9:05:3d:7b:ed:bc:a5:d3:f4: 9c:b6:19:2f:51:7a:6a:2b:45:be:a6:ca:3a:9e:2a: 40:a8:6b:d9:b9:80:c3:e6:2a:9d:c3:cd:68:2c:ff: f0:cf:37:63:9a:c0:57:6c:1a:3c:d4:b1:1c:10:dd: 24:cc:15:66:06:4f:cf:d3:d1:2b:9e:de:89:b5:bd: 0a:c4:1f:53:96:45:28:37:28:35:2f:4a:d9:8d:af: bf:b9:22:c2:9e:47:d6:16:ef:56:84:60:66:1e:4a: d4:fc:d8:e9:84:38:35:1c:4f:4f:1c:6d:a4:c6:71: a6:c9:39:8b:a9:2f:69:a5:f8:ad:c2:4b:db:19:bc: b9:84:30:a1:68:8b:bb:32:9e:b4:6b:62:91:a4:4a: 74:2f:07:2b:f5:90:2a:3f:42:52:77:02:01:a6:d5: d7:2c:68:73:be:26:92:3a:9c:6a:3e:08:f3:9c:37: 76:e4:fe:fe:0f:5e:4c:7d:27:c6:1a:48:02:24:dc: 9c:e1:6b:d2:c6:db:4d:08:66:f9:ba:45:14:d4:65: 58:e1:d1:64:42:ba:2b:4e:ca:8d:e0:18:20:3e:b0: e4:46:58:4e:82:91:06:8d:e2:34:41:dc:2b:16:22: 32:25:3a:a7:28:74:f8:a1:de:b2:13:44:2e:53:e3: 5a:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:12:1F:06:BD:6B:38:DD:A7:03:03:3C:0C:22:D5:0B:AE:8E:1A:27 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a0:f0:10:c5:85:77:d9:03:ad:ea:a8:3e:68:9e:12:6a:e6:3f: e2:24:c4:e1:02:e0:a9:3f:a6:a3:06:14:3f:f3:42:00:73:81: cd:9f:e4:34:a2:6a:76:fd:37:ee:f8:6f:dc:1b:25:76:6f:ef: 79:e0:a3:38:3f:74:21:fa:52:20:22:88:90:e1:9c:25:08:e7: 3d:ae:87:39:76:1d:49:40:bb:4f:c9:2b:91:8e:16:6e:09:0d: d4:61:42:2e:cb:9f:aa:67:c5:b2:00:83:bb:6d:43:31:94:02: 72:18:a3:b6:9a:31:68:c4:9a:75:65:0b:62:17:cf:02:f2:36: 21:56:fb:d1:5d:4b:80:4d:9c:1c:83:4d:ec:0a:c4:64:5d:7e: 90:77:70:2d:c5:cc:ca:77:bb:13:75:d7:c4:65:5a:44:8c:3c: 44:f0:bb:dc:9f:c0:57:aa:1b:dc:41:ac:64:16:5b:d6:13:ae: 53:25:84:a3:d9:96:b8:4f:27:8d:24:37:3a:63:c2:f3:be:26: 3f:b8:b1:d9:66:29:f3:d8:64:f2:c3:9f:d7:6f:bd:4f:18:02: 4a:92:c7:b6:65:d5:c7:ac:d9:22:1f:1c:c6:21:b8:12:bf:09: e4:92:00:b3:1c:f1:64:fd:ad:85:a3:aa:37:cf:4e:84:00:05: 88:32:0e:53 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwODExMDIyODA2WhcNMjUwODE4MDIyODA2WjAYMRYwFAYD VQQDEw02ODk5NTUzNi02MTNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxwhW/ni5BT177byl0/ScthkvUXpqK0W+pso6nipAqGvZuYDD5iqdw81oLP/w zzdjmsBXbBo81LEcEN0kzBVmBk/P09Ernt6Jtb0KxB9TlkUoNyg1L0rZja+/uSLC nkfWFu9WhGBmHkrU/NjphDg1HE9PHG2kxnGmyTmLqS9ppfitwkvbGby5hDChaIu7 Mp60a2KRpEp0Lwcr9ZAqP0JSdwIBptXXLGhzviaSOpxqPgjznDd25P7+D15MfSfG GkgCJNyc4WvSxttNCGb5ukUU1GVY4dFkQrorTsqN4BggPrDkRlhOgpEGjeI0Qdwr FiIyJTqnKHT4od6yE0QuU+Na+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwSHwa9 azjdpwMDPAwi1QuujhonMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCg8BDFhXfZA63qqD5onhJq5j/iJMThAuCpP6ajBhQ/80IAc4HNn+Q0 omp2/Tfu+G/cGyV2b+954KM4P3Qh+lIgIoiQ4ZwlCOc9roc5dh1JQLtPySuRjhZu CQ3UYUIuy5+qZ8WyAIO7bUMxlAJyGKO2mjFoxJp1ZQtiF88C8jYhVvvRXUuATZwc g03sCsRkXX6Qd3AtxczKd7sTddfEZVpEjDxE8Lvcn8BXqhvcQaxkFlvWE65TJYSj 2Za4TyeNJDc6Y8LzviY/uLHZZinz2GTyw5/Xb71PGAJKkse2ZdXHrNkiHxzGIbgS vwnkkgCzHPFk/a2Fo6o3z06EAAWIMg5T -----END CERTIFICATE-----Generated at Mon Aug 11 04:10:38 2025 by rpki-client