$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: xlmcOw9iMPhhqEO1ZQmwDdbueR9CiZMITSnE6CvrEng= Subject key identifier: 3E:32:9A:42:D9:9B:A4:0C:7C:FD:7E:0E:F9:8A:31:F1:05:85:35:C3 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 02AB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 02A6 Signing time: Mon 11 Aug 2025 01:46:43 +0000 Manifest this update: Mon 11 Aug 2025 01:46:43 +0000 Manifest next update: Mon 18 Aug 2025 01:46:43 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: m+MIYgbqC0ucIb+yzVRT/10AnWlQe/D4oskMSnELSY0=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 683 (0x2ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Aug 11 01:46:43 2025 GMT Not After : Aug 18 01:46:43 2025 GMT Subject: CN=68994b83-b880 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:9c:56:36:09:28:c3:c9:4a:7a:4f:6a:03: 05:9b:0a:67:64:b7:ce:5d:d0:e4:cf:00:f7:f4:23: dd:a7:e7:d0:48:41:a2:e4:62:e7:bf:84:9a:02:73: 27:26:6c:87:f1:fc:60:86:9d:5d:de:fb:83:09:a4: 0d:b7:a7:5b:74:6c:26:6f:79:0e:1a:2f:bb:22:df: 34:8a:fe:f9:ae:4f:c6:f8:22:01:19:30:51:87:56: b2:7c:42:8b:ee:ee:69:3a:02:df:b7:dd:03:35:a2: 65:eb:65:dd:36:86:81:18:43:3c:68:14:d9:95:2a: a0:5a:20:a5:96:21:9e:b5:1d:2f:80:fa:ce:e9:05: 84:15:84:0a:29:a1:8a:75:a2:29:97:b7:27:a7:15: 9a:2c:8c:37:9c:89:d0:30:1b:ba:0f:0a:cc:be:c9: 7a:7c:7a:93:18:c9:54:09:d3:35:d9:7e:da:c1:4f: c3:48:fb:59:f5:91:54:15:3c:ad:a6:ce:b3:2b:85: 97:9c:dc:72:6c:02:5a:e2:4e:fc:16:9d:2a:1e:df: ec:33:a7:2f:da:65:b4:4a:52:67:43:14:3c:84:55: 1e:00:63:18:e4:23:7f:ac:96:55:ed:b8:ee:9f:90: f0:0d:1d:21:56:38:a6:65:f9:ba:79:e4:d9:61:e5: ac:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:32:9A:42:D9:9B:A4:0C:7C:FD:7E:0E:F9:8A:31:F1:05:85:35:C3 X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:47:83:6b:2e:60:ab:eb:49:cf:6c:95:00:53:f8:bb:7a:27: 8a:74:bb:28:e6:00:fe:d4:df:45:57:74:9e:a6:96:37:b7:89: db:31:cc:2d:51:67:46:88:0c:42:a7:55:a3:ad:88:5d:8c:c6: ea:9b:ad:cf:e0:e8:aa:7f:03:98:98:10:32:1d:cf:0b:32:1f: 65:fa:ce:19:41:d7:ff:a9:ec:35:14:86:a8:7c:99:5d:9a:86: 90:77:a1:bb:04:fa:bc:78:f4:05:d7:87:47:00:51:96:f5:99: 0a:2c:74:95:8e:73:31:bf:5a:14:6c:b6:da:7b:5e:17:c4:b5: 67:73:d8:a4:21:04:fe:5c:22:0d:3f:74:7b:b9:b6:99:f6:dc: 19:f3:65:21:2a:e8:57:95:49:bc:8c:24:6d:10:41:f4:d3:b4: d5:7c:f2:1e:8f:7c:70:b2:d2:1b:7d:41:f5:23:07:3f:37:e1: 01:fc:ec:c8:69:ae:4f:a5:de:9c:27:fe:69:cd:0b:4d:49:16: 10:74:82:5e:5b:e6:3c:67:49:25:e8:35:bd:04:a1:30:85:73: 44:07:5b:90:1b:cd:b6:23:24:ce:2b:69:ec:e1:a1:b9:86:25: 45:38:d6:c7:6c:b6:ed:5e:55:09:85:50:28:d6:3c:99:c6:a4: b3:41:58:9f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjUwODExMDE0NjQzWhcNMjUwODE4MDE0NjQzWjAYMRYwFAYD VQQDEw02ODk5NGI4My1iODgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxKcVjYJKMPJSnpPagMFmwpnZLfOXdDkzwD39CPdp+fQSEGi5GLnv4SaAnMn JmyH8fxghp1d3vuDCaQNt6dbdGwmb3kOGi+7It80iv75rk/G+CIBGTBRh1ayfEKL 7u5pOgLft90DNaJl62XdNoaBGEM8aBTZlSqgWiClliGetR0vgPrO6QWEFYQKKaGK daIpl7cnpxWaLIw3nInQMBu6DwrMvsl6fHqTGMlUCdM12X7awU/DSPtZ9ZFUFTyt ps6zK4WXnNxybAJa4k78Fp0qHt/sM6cv2mW0SlJnQxQ8hFUeAGMY5CN/rJZV7bju n5DwDR0hVjimZfm6eeTZYeWsLQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD4ymkLZ m6QMfP1+DvmKMfEFhTXDMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0R4NrLmCr60nPbJUAU/i7eieKdLso5gD+1N9FV3SeppY3t4nbMcwt UWdGiAxCp1WjrYhdjMbqm63P4OiqfwOYmBAyHc8LMh9l+s4ZQdf/qew1FIaofJld moaQd6G7BPq8ePQF14dHAFGW9ZkKLHSVjnMxv1oUbLbae14XxLVnc9ikIQT+XCIN P3R7ubaZ9twZ82UhKuhXlUm8jCRtEEH007TVfPIej3xwstIbfUH1Iwc/N+EB/OzI aa5Ppd6cJ/5pzQtNSRYQdIJeW+Y8Z0kl6DW9BKEwhXNEB1uQG822IyTOK2ns4aG5 hiVFONbHbLbtXlUJhVAo1jyZxqSzQVif -----END CERTIFICATE-----Generated at Mon Aug 11 04:16:30 2025 by rpki-client