$ rpki-client -vvf rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft File: sK6GHB6-i61uZW1AH391BglAdKA.mft (raw, json) Hash identifier: x1Xb1wdV5eXJVqLK9pbUuMDMzlUsPuWDUKLYhAekrZs= Subject key identifier: 18:62:98:78:F3:8F:31:6B:4B:18:D2:B5:92:8D:34:3E:08:F2:5F:CC Authority key identifier: B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 Certificate issuer: /CN=A91D322A/serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Certificate serial: 0D3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft Manifest number: 0D37 Signing time: Mon 04 Aug 2025 18:13:54 +0000 Manifest this update: Mon 04 Aug 2025 18:13:53 +0000 Manifest next update: Mon 11 Aug 2025 18:13:53 +0000 Files and hashes: 1: sK6GHB6-i61uZW1AH391BglAdKA.crl (hash: drLTIL5k5mzp4YdyTgwZHcF8u3YJyXgOhpB+gGnVxAI=) 2: 98B4FB32DB9011E996483B2BC4F9AE02.roa (hash: XXgLxgibvmpDaf+Wjs0zicx0P8XILsfLy/xTdFUHtdc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:13:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3390 (0xd3e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D322A, serialNumber=B0AE861C1EBE8BAD6E656D401F7F7506094074A0 Validity Not Before: Aug 4 18:13:53 2025 GMT Not After : Aug 11 18:13:53 2025 GMT Subject: CN=6890f862-820b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:8e:0d:97:09:33:c5:63:35:95:52:2a:d4:11: 9e:a8:ae:7c:11:d2:00:96:4f:8a:56:2c:35:b8:40: d8:73:5b:18:fc:a9:99:f9:73:64:13:2b:ce:fd:28: 2d:59:f1:cb:d0:6a:c2:05:76:9a:16:6d:32:1b:56: 23:63:87:ba:12:39:53:ef:4a:76:d6:9f:ba:4b:4e: c8:9e:18:8e:81:7f:eb:40:c1:d3:37:0d:e2:31:a4: 68:cc:34:37:8d:54:28:47:6a:08:52:c2:e0:a8:f0: 82:5e:ee:af:a9:ab:4b:07:c9:56:e0:46:57:92:68: c4:fb:be:52:e7:c1:08:14:a5:57:fc:fd:d2:b6:aa: a9:1a:44:61:0c:58:f6:5e:5d:9d:30:ff:0f:dd:5b: 32:d3:4a:cf:b7:7e:fd:6d:05:f7:e9:33:0f:cf:9d: 89:4d:9b:10:5c:fe:cb:86:b7:dc:93:b3:7c:78:48: 55:89:41:77:32:8f:bd:08:38:2c:4d:81:ac:97:07: 76:a9:95:05:d6:ac:68:f0:8b:9b:37:16:31:86:a7: 03:c8:e5:55:70:39:f4:fa:e0:48:7c:6a:c6:a8:b3: 99:f5:64:d0:f3:ed:51:bb:51:38:9d:eb:f2:4b:eb: 71:7e:dd:42:50:7a:2d:9e:e0:e5:9d:87:03:ea:e7: 21:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:62:98:78:F3:8F:31:6B:4B:18:D2:B5:92:8D:34:3E:08:F2:5F:CC X509v3 Authority Key Identifier: keyid:B0:AE:86:1C:1E:BE:8B:AD:6E:65:6D:40:1F:7F:75:06:09:40:74:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sK6GHB6-i61uZW1AH391BglAdKA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D322A/0DC1DF7CDB9011E99C25C52AC4F9AE02/sK6GHB6-i61uZW1AH391BglAdKA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 27:32:31:90:fa:97:73:bd:8e:ba:8f:0c:b8:79:64:0a:39:33: b6:09:5a:ed:c1:34:e5:fc:f5:00:c7:24:4e:4c:87:60:6a:4a: ad:03:ff:60:cf:02:23:5f:ec:f0:c8:cf:e8:db:b6:5f:0b:b5: 9b:61:aa:d1:44:fc:b4:f6:d7:a1:26:a5:a7:43:c7:96:c0:9d: 86:0e:f5:92:df:0b:5d:c7:bc:7f:ec:44:19:d3:74:ff:69:27: a6:fc:36:25:90:15:67:c8:96:80:40:a0:a5:da:1e:fd:a9:d8: 63:aa:c0:70:38:c3:19:97:18:2e:cd:bf:22:9e:6d:53:d4:9f: f7:91:86:e1:63:9d:37:e0:d3:7a:77:52:31:aa:54:de:5b:64: ca:0e:50:f4:2d:27:99:76:b3:e9:99:1a:d1:12:61:e7:4f:96: 8b:dd:e2:10:cd:a1:e9:3b:45:f2:63:ae:3b:b2:a7:1b:f7:71: ea:2a:d3:53:cf:30:09:d1:49:06:5b:59:6e:8b:9d:52:96:b9: d1:1f:28:50:a4:4a:20:28:18:c9:49:61:60:c7:c5:d4:c3:84: ce:cd:e8:f3:6d:20:38:46:f0:8f:69:5d:7f:0a:86:72:6b:83: 5d:2c:db:be:d7:86:10:23:ac:b4:c0:48:ee:d5:f2:8c:59:d8: ad:c7:8a:28 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMyMkExMTAvBgNVBAUTKEIwQUU4NjFDMUVCRThCQUQ2RTY1NkQ0MDFGN0Y3NTA2 MDk0MDc0QTAwHhcNMjUwODA0MTgxMzUzWhcNMjUwODExMTgxMzUzWjAYMRYwFAYD VQQDEw02ODkwZjg2Mi04MjBiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu44NlwkzxWM1lVIq1BGeqK58EdIAlk+KViw1uEDYc1sY/KmZ+XNkEyvO/Sgt WfHL0GrCBXaaFm0yG1YjY4e6EjlT70p21p+6S07InhiOgX/rQMHTNw3iMaRozDQ3 jVQoR2oIUsLgqPCCXu6vqatLB8lW4EZXkmjE+75S58EIFKVX/P3StqqpGkRhDFj2 Xl2dMP8P3Vsy00rPt379bQX36TMPz52JTZsQXP7Lhrfck7N8eEhViUF3Mo+9CDgs TYGslwd2qZUF1qxo8IubNxYxhqcDyOVVcDn0+uBIfGrGqLOZ9WTQ8+1Ru1E4nevy S+txft1CUHotnuDlnYcD6uchVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBhimHjz jzFrSxjStZKNND4I8l/MMB8GA1UdIwQYMBaAFLCuhhwevoutbmVtQB9/dQYJQHSg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzIyQS8wREMxREY3Q0RC OTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2MXVaVzFBSDM5MUJnbEFk S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLNkdIQjYtaTYxdVpXMUFIMzkxQmdsQWRLQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MzIyQS8wREMxREY3Q0RCOTAxMUU5OUMyNUM1MkFDNEY5QUUwMi9zSzZHSEI2LWk2 MXVaVzFBSDM5MUJnbEFkS0EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAnMjGQ+pdzvY66jwy4eWQKOTO2CVrtwTTl/PUAxyROTIdgakqtA/9g zwIjX+zwyM/o27ZfC7WbYarRRPy09tehJqWnQ8eWwJ2GDvWS3wtdx7x/7EQZ03T/ aSem/DYlkBVnyJaAQKCl2h79qdhjqsBwOMMZlxguzb8inm1T1J/3kYbhY5034NN6 d1IxqlTeW2TKDlD0LSeZdrPpmRrREmHnT5aL3eIQzaHpO0XyY647sqcb93HqKtNT zzAJ0UkGW1lui51SlrnRHyhQpEogKBjJSWFgx8XUw4TOzejzbSA4RvCPaV1/CoZy a4NdLNu+14YQI6y0wEju1fKMWditx4oo -----END CERTIFICATE-----Generated at Wed Aug 6 04:17:31 2025 by rpki-client