$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json) Hash identifier: BuN3Di4l8Xedr1Jjio6qydxLsfQe/r1CMAFt2ccK69s= Subject key identifier: FD:0D:54:82:F3:73:62:A6:54:09:BF:A5:AD:7F:BA:3F:C6:B6:DD:43 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft Manifest number: 01E4 Signing time: Tue 05 Aug 2025 03:22:53 +0000 Manifest this update: Tue 05 Aug 2025 03:22:53 +0000 Manifest next update: Tue 12 Aug 2025 03:22:53 +0000 Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: Nq6uLm8L9BACNndBZoEPl3G3yQFJSzpbRXVk/2oSQZk=) 2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 03:22:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Aug 5 03:22:53 2025 GMT Not After : Aug 12 03:22:53 2025 GMT Subject: CN=6891790d-c349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:51:92:7f:e7:d8:22:c5:79:3e:62:01:96:a9: 7e:af:96:3d:e0:af:46:f8:1f:59:95:83:b8:ff:ab: 64:be:28:54:b9:9c:ac:d2:d7:d4:05:b8:5f:df:f4: eb:d3:07:fb:34:67:5b:0d:c8:a3:ac:8c:2c:d3:12: 0c:78:ae:e3:95:92:fa:1b:5e:42:e6:f5:dc:33:f0: 44:7d:5a:b6:82:ca:60:29:2c:65:16:25:51:38:1a: 1f:f7:a0:2f:9b:28:f7:04:71:1c:ec:52:19:46:a1: 88:1a:4c:e9:d5:fb:73:f9:59:e5:ef:6c:93:5d:7f: e4:88:f7:80:9e:67:04:a2:b2:3a:62:f8:7d:aa:28: 8a:87:6d:2e:9a:62:cf:16:63:80:2b:2a:c1:66:34: 6d:52:fb:ed:93:cd:56:13:74:40:18:06:95:57:e0: 93:79:3c:3f:e5:cf:c1:e6:1f:ee:c0:2b:7c:81:94: 51:aa:ac:d8:d4:7a:ca:72:1c:28:f4:6d:c5:af:9f: b7:c4:9c:a4:78:36:14:4d:33:bf:dc:95:51:74:ee: 7e:52:cb:2d:08:37:85:d2:62:65:e3:a3:47:07:51: 8d:6d:30:91:66:3f:f8:88:d6:44:36:60:52:a9:ba: d7:8f:fb:ad:e1:aa:31:6a:ce:37:db:59:60:ea:fd: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0D:54:82:F3:73:62:A6:54:09:BF:A5:AD:7F:BA:3F:C6:B6:DD:43 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6c:4a:d5:85:b6:f7:f3:b9:aa:15:92:37:bd:f7:fe:cd:3a:7f: 99:0e:fb:fb:05:3a:9d:af:dc:34:2a:ec:85:2e:fc:8b:95:c1: ea:a2:b1:2a:3a:3e:44:6f:30:60:69:84:d0:bc:04:11:d6:bb: f1:2c:ae:e2:3a:82:d1:98:46:a2:45:7a:57:d2:16:94:fc:fd: d4:cf:16:2a:d1:d5:79:5d:ff:1c:4d:59:d8:fb:4c:a6:7d:2c: 79:db:30:c3:f9:0d:1d:76:fe:8e:98:23:88:be:93:fb:a4:5b: c0:4f:cb:35:8f:51:b5:8b:6b:fd:57:33:b0:5b:e2:54:74:68: 6d:10:1b:d3:ca:53:75:d2:a1:ad:8b:df:1c:28:6c:e5:e1:f7: 3a:c9:02:c4:05:6f:67:d8:a4:06:18:02:16:7e:91:12:79:d3: a4:34:e9:e5:03:55:70:a0:00:ff:6a:a9:e2:70:b2:e4:0c:3b: 60:b1:2c:ba:a1:fc:72:e4:5f:ae:83:15:20:c9:91:da:12:ba: 6d:17:87:c4:65:70:13:6b:24:1e:a8:c5:71:92:39:c9:34:d6: 66:91:f4:fd:16:a6:bd:85:bc:98:70:35:8f:ae:c2:80:45:f6: 5f:46:ea:1b:dc:12:58:32:57:8d:ee:30:90:63:b1:31:b3:23: 1a:f8:c3:dc -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTA4MDUwMzIyNTNaFw0yNTA4MTIwMzIyNTNaMBgxFjAUBgNV BAMTDTY4OTE3OTBkLWMzNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDWUZJ/59gixXk+YgGWqX6vlj3gr0b4H1mVg7j/q2S+KFS5nKzS19QFuF/f9OvT B/s0Z1sNyKOsjCzTEgx4ruOVkvobXkLm9dwz8ER9WraCymApLGUWJVE4Gh/3oC+b KPcEcRzsUhlGoYgaTOnV+3P5WeXvbJNdf+SI94CeZwSisjpi+H2qKIqHbS6aYs8W Y4ArKsFmNG1S++2TzVYTdEAYBpVX4JN5PD/lz8HmH+7AK3yBlFGqrNjUespyHCj0 bcWvn7fEnKR4NhRNM7/clVF07n5Syy0IN4XSYmXjo0cHUY1tMJFmP/iI1kQ2YFKp uteP+63hqjFqzjfbWWDq/dlzAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU/Q1UgvNz YqZUCb+lrX+6P8a23UMwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MkFGL0YzRUZCODk4QkNCQTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xX QjYzakRtQzhkNFNwS1lBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGxK1YW29/O5qhWSN733/s06f5kO+/sFOp2v3DQq7IUu/IuVweqisSo6 PkRvMGBphNC8BBHWu/EsruI6gtGYRqJFelfSFpT8/dTPFirR1Xld/xxNWdj7TKZ9 LHnbMMP5DR12/o6YI4i+k/ukW8BPyzWPUbWLa/1XM7Bb4lR0aG0QG9PKU3XSoa2L 3xwobOXh9zrJAsQFb2fYpAYYAhZ+kRJ506Q06eUDVXCgAP9qqeJwsuQMO2CxLLqh /HLkX66DFSDJkdoSum0Xh8RlcBNrJB6oxXGSOck01maR9P0Wpr2FvJhwNY+uwoBF 9l9G6hvcElgyV43uMJBjsTGzIxr4w9w= -----END CERTIFICATE-----Generated at Wed Aug 6 16:26:31 2025 by rpki-client