$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft File: 6WkLu582wJ1MLtT2bPVdw1J1-3I.mft (raw, json) Hash identifier: VeM1dPJgOnpKWB06rNZeJZNzx3ARLVwc5Mc3sAo5NBk= Subject key identifier: 34:21:FB:AD:E5:2C:96:30:03:70:09:CD:7B:9A:98:E7:55:D4:41:72 Authority key identifier: E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 Certificate issuer: /CN=A91BA9CE/serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Certificate serial: 0CB1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft Manifest number: 0C8A Signing time: Sun 10 Aug 2025 18:18:07 +0000 Manifest this update: Sun 10 Aug 2025 18:18:06 +0000 Manifest next update: Sun 17 Aug 2025 18:18:06 +0000 Files and hashes: 1: 6WkLu582wJ1MLtT2bPVdw1J1-3I.crl (hash: vmCTxn/G+qO49L4edzkj9IckaZnVIeDp2WAaVBShNYE=) 2: 703918CC69EA11EE83318C50C4F9AE02.roa (hash: sl3iOiIpHmamaoTiyabLQSY+b6gx0pCXz/Ji33uFHt4=) 3: DC79515C011411EAAB0EF153C4F9AE02.roa (hash: S09PILGMyTlUME8baJPdO5/QImyMfRyviwRhAxvfwcM=) 4: 843F754669EA11EE90D6585BC4F9AE02.roa (hash: JzYOC6lX/mEpxkty6VDIE3Zxqj0b88u+IzzJMZUEq3s=) 5: DBED3B7C011411EAAB0EF153C4F9AE02.roa (hash: Om0jdNklpNSJZKsNEHd4KcWViukVVvJhi2Cyd/8/qjc=) 6: DB63CF9A011411EAAB0EF153C4F9AE02.roa (hash: wGD4GgZYH8Wu637cB2mtopho5iC5QPWCCDSkj49GCdU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 17 Aug 2025 18:18:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA9CE, serialNumber=E9690BBB9F36C09D4C2ED4F66CF55DC35275FB72 Validity Not Before: Aug 10 18:18:06 2025 GMT Not After : Aug 17 18:18:06 2025 GMT Subject: CN=6898e25f-4916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:38:04:55:c1:95:58:ff:73:d5:1f:60:0d:3e: dc:10:b1:90:b4:79:d3:b3:dc:54:12:cb:58:46:e1: 95:ba:71:e1:e2:28:a6:93:03:a3:ba:0d:42:cf:2b: 68:eb:84:07:70:28:e1:47:96:b8:93:9f:d2:9d:9d: 33:26:b2:c3:ed:0e:84:ac:be:83:d3:5d:ba:c4:8c: 5c:d8:9a:08:c5:aa:08:7f:92:28:d2:0b:be:fb:b1: 42:01:24:e0:97:01:98:24:b9:6b:b0:89:e2:44:15: 38:ed:ff:2f:13:df:5c:38:ca:57:c2:20:6d:83:d3: 81:06:b6:79:b4:24:08:f4:68:ac:11:06:12:92:9d: 35:72:61:f6:ff:b0:c2:b7:eb:1c:d5:69:fd:43:87: ae:09:77:ef:08:18:c4:0b:31:d5:d0:fe:4c:14:39: 41:10:87:28:c4:61:e7:8d:01:94:3d:79:34:25:6b: db:ce:20:e2:83:2b:3b:d3:85:e8:00:64:fc:b6:23: 5f:b5:88:e8:81:5e:23:ae:ea:e7:5a:74:1e:95:e0: e9:eb:54:cd:b0:d7:41:4b:af:6d:b9:47:50:98:df: 3e:83:95:c1:2f:ee:b1:f0:0e:b0:55:24:26:ce:16: 58:04:2a:b6:3d:b1:9a:87:80:b3:df:da:33:ab:95: 37:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:21:FB:AD:E5:2C:96:30:03:70:09:CD:7B:9A:98:E7:55:D4:41:72 X509v3 Authority Key Identifier: keyid:E9:69:0B:BB:9F:36:C0:9D:4C:2E:D4:F6:6C:F5:5D:C3:52:75:FB:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6WkLu582wJ1MLtT2bPVdw1J1-3I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA9CE/54F15DA4011111EABD4F0A49C4F9AE02/6WkLu582wJ1MLtT2bPVdw1J1-3I.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:08:8b:4d:56:6e:18:65:2c:c0:53:2a:86:eb:c1:92:2f:3a: f4:c1:e3:7e:e7:14:74:fb:94:a9:3e:56:b3:71:19:6c:19:87: 6e:dd:fc:7c:48:7c:b5:60:eb:82:f6:e6:ed:8a:7c:0b:ae:8a: c0:18:19:9d:1f:e0:fb:4a:39:73:02:cc:7e:36:63:03:74:c6: a2:74:7e:44:32:c9:e2:2a:e2:d6:58:d9:7d:3b:6b:bf:50:82: a7:1a:de:7a:48:5f:52:e3:29:42:4c:79:95:c1:2c:e9:ae:80: c6:84:5e:20:2c:1c:2c:c1:d2:9e:50:7f:bf:ef:5e:ab:56:75: 53:17:80:2e:e5:9d:e5:90:a9:c9:16:60:09:cc:58:04:2a:de: ae:30:cb:4a:31:15:cf:c8:2a:9e:0d:12:22:97:ae:e8:88:b4: 20:ae:7c:f2:d6:d2:0b:92:46:3b:20:c0:0b:eb:3a:1f:97:cc: de:28:85:9c:ef:45:94:63:99:d5:14:1b:c3:f7:af:a9:66:08: 42:b9:c0:aa:96:46:cf:0a:0d:44:0a:f6:be:25:28:50:b8:d9: d5:0b:ff:7f:ab:6c:38:c7:6a:47:a9:89:4b:33:a5:46:1f:c3: e4:58:b6:e1:65:71:af:ed:9c:b4:0c:f3:e3:72:1d:02:09:1f: f6:96:19:62 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkE5Q0UxMTAvBgNVBAUTKEU5NjkwQkJCOUYzNkMwOUQ0QzJFRDRGNjZDRjU1REMz NTI3NUZCNzIwHhcNMjUwODEwMTgxODA2WhcNMjUwODE3MTgxODA2WjAYMRYwFAYD VQQDEw02ODk4ZTI1Zi00OTE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnTgEVcGVWP9z1R9gDT7cELGQtHnTs9xUEstYRuGVunHh4iimkwOjug1Czyto 64QHcCjhR5a4k5/SnZ0zJrLD7Q6ErL6D0126xIxc2JoIxaoIf5Io0gu++7FCASTg lwGYJLlrsIniRBU47f8vE99cOMpXwiBtg9OBBrZ5tCQI9GisEQYSkp01cmH2/7DC t+sc1Wn9Q4euCXfvCBjECzHV0P5MFDlBEIcoxGHnjQGUPXk0JWvbziDigys704Xo AGT8tiNftYjogV4jrurnWnQeleDp61TNsNdBS69tuUdQmN8+g5XBL+6x8A6wVSQm zhZYBCq2PbGah4Cz39ozq5U3xQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDQh+63l LJYwA3AJzXuamOdV1EFyMB8GA1UdIwQYMBaAFOlpC7ufNsCdTC7U9mz1XcNSdfty MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQTlDRS81NEYxNURBNDAx MTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndKMU1MdFQyYlBWZHcxSjEt M0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZXa0x1NTgyd0oxTUx0VDJiUFZkdzFKMS0zSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTlDRS81NEYxNURBNDAxMTExMUVBQkQ0RjBBNDlDNEY5QUUwMi82V2tMdTU4MndK MU1MdFQyYlBWZHcxSjEtM0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALCItNVm4YZSzAUyqG68GSLzr0weN+5xR0+5SpPlazcRlsGYdu3fx8 SHy1YOuC9ubtinwLrorAGBmdH+D7SjlzAsx+NmMDdMaidH5EMsniKuLWWNl9O2u/ UIKnGt56SF9S4ylCTHmVwSzproDGhF4gLBwswdKeUH+/716rVnVTF4Au5Z3lkKnJ FmAJzFgEKt6uMMtKMRXPyCqeDRIil67oiLQgrnzy1tILkkY7IMAL6zofl8zeKIWc 70WUY5nVFBvD96+pZghCucCqlkbPCg1ECva+JShQuNnVC/9/q2w4x2pHqYlLM6VG H8PkWLbhZXGv7Zy0DPPjch0CCR/2lhli -----END CERTIFICATE-----Generated at Tue Aug 12 14:36:58 2025 by rpki-client