$ rpki-client -vvf rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft File: p6JnToSEYDkgd5o1LFWATlU2UBQ.mft (raw, json) Hash identifier: HzLk2iDVwFguTybjQfNhpOFFpQE+xWgDa0Xk0Wn4Hcs= Subject key identifier: 09:C4:01:6F:AD:37:6E:86:99:9F:A5:43:E8:71:36:1B:66:9F:C5:1B Authority key identifier: A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 Certificate issuer: /CN=A9185CF3/serialNumber=A7A2674E8484603920779A352C55804E55365014 Certificate serial: 0BDC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft Manifest number: 0BD5 Signing time: Fri 08 Aug 2025 19:07:39 +0000 Manifest this update: Fri 08 Aug 2025 19:07:39 +0000 Manifest next update: Fri 15 Aug 2025 19:07:39 +0000 Files and hashes: 1: p6JnToSEYDkgd5o1LFWATlU2UBQ.crl (hash: eAlBFzDQ5cCsydz+sgw99wxCv1GMiTzuXBLMagvEM5I=) 2: 53B6182C213611EAB9F02B49C4F9AE02.roa (hash: RvdTnjVHgMOyaT2D6NI7RBOs0ab70zz7muos4KwEa2g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3036 (0xbdc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9185CF3, serialNumber=A7A2674E8484603920779A352C55804E55365014 Validity Not Before: Aug 8 19:07:39 2025 GMT Not After : Aug 15 19:07:39 2025 GMT Subject: CN=68964afb-3076 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:96:24:97:71:2f:41:f8:2a:4c:06:eb:93:80: 03:37:ab:d1:3a:ea:c7:96:08:76:05:f5:6f:bf:98: 66:e3:f5:1e:b7:06:56:fb:bf:4f:86:9e:f2:28:a5: 3b:63:67:0b:e9:36:c8:d3:81:c6:04:05:a5:57:14: e8:53:b6:c2:f2:39:47:0e:25:cc:18:e8:cc:8a:c2: ee:40:e4:85:af:10:b2:8e:c7:9e:b2:d2:ee:a7:e0: 02:bb:8f:5e:49:87:15:09:30:9f:46:f5:f8:db:4d: cf:03:40:4b:bd:a6:09:d1:4a:5e:35:37:99:5c:ef: f2:dc:c5:d3:5e:8a:5a:2e:08:48:1d:3a:76:b7:02: 2e:09:45:11:7d:c5:19:72:2f:d2:20:88:6f:0e:a5: 23:b0:b2:59:5b:67:49:ff:29:30:ea:94:39:d3:54: 7d:67:0f:8b:d2:7c:a9:cd:ca:bd:60:f9:91:e8:b8: 91:5f:db:32:a2:1b:c6:0e:5a:b4:92:31:76:91:18: 4e:89:4a:6f:a6:10:97:f9:ae:2c:2c:c2:9d:33:bd: ba:53:3e:f9:7d:67:76:25:ec:31:51:7d:87:87:13: 60:d0:0c:27:03:95:c8:e1:ce:3e:37:94:be:8c:d7: 5c:eb:23:86:da:fa:1b:a3:aa:33:c2:cf:8e:c4:7d: ee:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C4:01:6F:AD:37:6E:86:99:9F:A5:43:E8:71:36:1B:66:9F:C5:1B X509v3 Authority Key Identifier: keyid:A7:A2:67:4E:84:84:60:39:20:77:9A:35:2C:55:80:4E:55:36:50:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p6JnToSEYDkgd5o1LFWATlU2UBQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185CF3/4BDD518E213511EABE488747C4F9AE02/p6JnToSEYDkgd5o1LFWATlU2UBQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption c1:7b:22:09:62:27:49:7b:b8:24:3a:31:70:61:6e:4a:ca:1a: 4e:73:c5:b0:73:f8:d3:d8:f2:f8:c0:10:56:4c:db:20:42:be: 0c:da:40:0a:3f:bb:67:cd:d1:94:c5:d9:fb:2b:71:94:45:f4: 7f:ce:22:2c:4d:01:6f:4c:3f:ca:fc:5f:ce:2a:a6:9a:12:ba: 0a:56:02:55:ed:d2:cc:06:52:04:86:0a:7e:68:34:76:11:33: fd:6b:ea:89:9c:be:e0:3a:7f:cb:9c:f5:fa:26:f5:d4:d5:93: 8a:30:e5:69:9c:13:94:e9:33:49:7a:62:1b:11:41:be:5d:7a: 4a:d1:5b:db:08:ca:04:e2:91:b8:82:de:f9:1e:b1:4c:9b:ad: c3:a0:16:fc:a8:7a:82:7a:03:bd:51:cf:11:45:f5:4a:27:0a: 0c:55:b4:5d:e6:a8:63:24:65:92:9e:38:73:7a:4c:ec:44:94: 28:52:9d:9e:e5:af:7a:92:60:3d:b0:de:e5:b8:ee:bd:cf:9f: 11:91:01:74:c4:e7:74:79:ec:86:6e:f5:6b:af:95:ab:f0:ff: 37:3d:1d:b9:9d:fb:f7:2c:c0:23:a1:fb:91:0b:8e:52:24:55: 82:a0:fb:cb:25:99:54:0d:ae:b2:ca:82:e7:2d:a2:cc:10:da: 3d:7e:fa:bf -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC9wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODVDRjMxMTAvBgNVBAUTKEE3QTI2NzRFODQ4NDYwMzkyMDc3OUEzNTJDNTU4MDRF NTUzNjUwMTQwHhcNMjUwODA4MTkwNzM5WhcNMjUwODE1MTkwNzM5WjAYMRYwFAYD VQQDEw02ODk2NGFmYi0zMDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0JYkl3EvQfgqTAbrk4ADN6vROurHlgh2BfVvv5hm4/UetwZW+79Php7yKKU7 Y2cL6TbI04HGBAWlVxToU7bC8jlHDiXMGOjMisLuQOSFrxCyjseestLup+ACu49e SYcVCTCfRvX4203PA0BLvaYJ0UpeNTeZXO/y3MXTXopaLghIHTp2twIuCUURfcUZ ci/SIIhvDqUjsLJZW2dJ/ykw6pQ501R9Zw+L0nypzcq9YPmR6LiRX9syohvGDlq0 kjF2kRhOiUpvphCX+a4sLMKdM726Uz75fWd2JewxUX2HhxNg0AwnA5XI4c4+N5S+ jNdc6yOG2vobo6ozws+OxH3uywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAnEAW+t N26GmZ+lQ+hxNhtmn8UbMB8GA1UdIwQYMBaAFKeiZ06EhGA5IHeaNSxVgE5VNlAU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NUNGMy80QkRENTE4RTIx MzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlEa2dkNW8xTEZXQVRsVTJV QlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3A2Sm5Ub1NFWURrZ2Q1bzFMRldBVGxVMlVCUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 NUNGMy80QkRENTE4RTIxMzUxMUVBQkU0ODg3NDdDNEY5QUUwMi9wNkpuVG9TRVlE a2dkNW8xTEZXQVRsVTJVQlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDBeyIJYidJe7gkOjFwYW5KyhpOc8Wwc/jT2PL4wBBWTNsgQr4M2kAK P7tnzdGUxdn7K3GURfR/ziIsTQFvTD/K/F/OKqaaEroKVgJV7dLMBlIEhgp+aDR2 ETP9a+qJnL7gOn/LnPX6JvXU1ZOKMOVpnBOU6TNJemIbEUG+XXpK0VvbCMoE4pG4 gt75HrFMm63DoBb8qHqCegO9Uc8RRfVKJwoMVbRd5qhjJGWSnjhzekzsRJQoUp2e 5a96kmA9sN7luO69z58RkQF0xOd0eeyGbvVrr5Wr8P83PR25nfv3LMAjofuRC45S JFWCoPvLJZlUDa6yyoLnLaLMENo9fvq/ -----END CERTIFICATE-----Generated at Sat Aug 9 23:17:55 2025 by rpki-client