$ rpki-client -vvf rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft File: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft (raw, json) Hash identifier: E2o/BeEGCBjYIQBuVzGjPbVrFBiwqPs1pQpixsgXJu0= Subject key identifier: AF:9A:6E:70:1B:A2:C7:AD:2F:3E:52:D8:0A:CD:E2:34:48:E2:9B:A2 Authority key identifier: 9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF Certificate issuer: /CN=A9115854/serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Certificate serial: 0E46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft Manifest number: 0E36 Signing time: Fri 22 Aug 2025 17:54:12 +0000 Manifest this update: Fri 22 Aug 2025 17:54:11 +0000 Manifest next update: Fri 29 Aug 2025 17:54:11 +0000 Files and hashes: 1: m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl (hash: bYm29I3hsRgLeSgVr2a5EW4QedImgAz5AeKcYle+LX8=) 2: 80C4CAC6AE5311E983E98A4FC4F9AE02.roa (hash: zo9mu3CIKHxn5JBCXZx0YbgatQ9CRvKR2Y0tN2tuG84=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3654 (0xe46) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9115854, serialNumber=9BA3951CCB5D83A9F3DC4A75BEA01FF5AFD71FFF Validity Not Before: Aug 22 17:54:11 2025 GMT Not After : Aug 29 17:54:11 2025 GMT Subject: CN=68a8aec4-1c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:16:cd:92:a2:ca:02:75:3d:62:5e:00:8e: ce:cc:4e:a7:46:7f:dd:ad:2d:d2:e5:34:e7:3f:12: 58:c7:9d:4c:db:6b:73:b9:97:a6:72:7e:2d:e2:d9: ee:c7:bf:6d:f6:78:55:2e:62:53:69:bc:55:29:85: 72:c6:3f:3a:6f:57:09:d8:6b:c7:57:bb:d1:4c:6a: 91:32:4a:f0:82:7e:f9:d1:19:d0:69:2d:11:ab:fd: 86:18:fe:66:2f:57:68:d0:f7:84:01:3c:5c:76:32: 43:4d:66:17:b2:a6:19:4e:fa:7b:04:2c:91:dc:8b: 74:81:ce:8c:2f:af:9a:98:70:ef:71:e7:9d:31:97: 59:cc:d7:af:27:a2:20:73:31:d1:36:b8:d7:24:4e: 5a:6d:03:f1:5b:42:cc:63:d8:f0:24:33:c4:ac:d6: b5:bd:93:4c:c0:c3:b2:91:5f:1b:a1:30:df:0b:51: 55:e6:b7:e0:ab:4a:ed:e4:e0:8f:6b:aa:a4:3e:d4: 15:bf:78:93:82:12:83:16:60:91:5b:59:76:f1:d8: 2a:4f:05:ab:d7:89:2d:c5:b2:cb:65:23:d6:db:8d: 13:20:47:ae:52:60:f3:64:79:dc:1b:0a:3b:51:2a: 05:e8:e9:48:a6:c7:84:b3:b4:e4:d5:0f:c6:f2:95: 8a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:9A:6E:70:1B:A2:C7:AD:2F:3E:52:D8:0A:CD:E2:34:48:E2:9B:A2 X509v3 Authority Key Identifier: keyid:9B:A3:95:1C:CB:5D:83:A9:F3:DC:4A:75:BE:A0:1F:F5:AF:D7:1F:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9115854/36380FAAACC711E982890253C4F9AE02/m6OVHMtdg6nz3Ep1vqAf9a_XH_8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:dc:c3:16:9a:2b:fd:7b:7c:7a:24:0c:09:e2:b9:7b:dd:f3: d7:39:82:13:32:c3:e6:e5:bc:55:99:a6:c7:2b:c0:0a:34:4d: 23:1a:86:d1:25:66:81:7c:cd:fe:e8:e0:db:7b:8e:0f:e2:5f: 5f:05:41:4b:3d:b8:d7:45:a9:d9:76:99:09:09:88:38:f7:ce: ac:73:d6:ef:47:37:75:fc:91:8d:14:90:00:c4:67:d6:2d:9a: 55:ee:16:84:45:3d:a3:89:6e:58:0e:91:db:8a:8d:7d:ed:a1: 9f:b1:de:96:03:e9:f0:47:c1:9b:40:19:f7:6e:35:3e:6f:7d: cc:18:13:db:51:66:5f:ed:ca:5d:ca:33:b4:ec:f5:ba:98:5f: 62:a4:70:f3:6f:19:44:32:84:1a:5a:eb:43:0d:78:96:b4:e4: 10:1a:81:53:62:87:6c:24:ac:8b:9b:59:13:5a:87:82:79:67: 61:2b:da:7c:45:42:bf:49:e3:7b:0a:07:24:ef:6d:d8:78:ab: 7c:47:fb:3a:f4:64:6f:83:2e:87:1a:a2:33:a6:28:8f:c9:41: b2:11:34:fe:c8:c3:d8:82:82:85:d6:1e:9c:65:21:f9:a3:13: 69:2d:33:2a:5d:69:9c:69:c4:a2:fd:ef:45:52:1b:22:00:77: fa:74:4d:81 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDkYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU4NTQxMTAvBgNVBAUTKDlCQTM5NTFDQ0I1RDgzQTlGM0RDNEE3NUJFQTAxRkY1 QUZENzFGRkYwHhcNMjUwODIyMTc1NDExWhcNMjUwODI5MTc1NDExWjAYMRYwFAYD VQQDEw02OGE4YWVjNC0xYzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuY8WzZKiygJ1PWJeAI7OzE6nRn/drS3S5TTnPxJYx51M22tzuZemcn4t4tnu x79t9nhVLmJTabxVKYVyxj86b1cJ2GvHV7vRTGqRMkrwgn750RnQaS0Rq/2GGP5m L1do0PeEATxcdjJDTWYXsqYZTvp7BCyR3It0gc6ML6+amHDvceedMZdZzNevJ6Ig czHRNrjXJE5abQPxW0LMY9jwJDPErNa1vZNMwMOykV8boTDfC1FV5rfgq0rt5OCP a6qkPtQVv3iTghKDFmCRW1l28dgqTwWr14ktxbLLZSPW240TIEeuUmDzZHncGwo7 USoF6OlIpseEs7Tk1Q/G8pWKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFK+abnAb osetLz5S2ArN4jRI4puiMB8GA1UdIwQYMBaAFJujlRzLXYOp89xKdb6gH/Wv1x// MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTg1NC8zNjM4MEZBQUFD QzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2bnozRXAxdnFBZjlhX1hI XzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL202T1ZITXRkZzZuejNFcDF2cUFmOWFfWEhfOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NTg1NC8zNjM4MEZBQUFDQzcxMUU5ODI4OTAyNTNDNEY5QUUwMi9tNk9WSE10ZGc2 bnozRXAxdnFBZjlhX1hIXzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBg3MMWmiv9e3x6JAwJ4rl73fPXOYITMsPm5bxVmabHK8AKNE0jGobR JWaBfM3+6ODbe44P4l9fBUFLPbjXRanZdpkJCYg4986sc9bvRzd1/JGNFJAAxGfW LZpV7haERT2jiW5YDpHbio197aGfsd6WA+nwR8GbQBn3bjU+b33MGBPbUWZf7cpd yjO07PW6mF9ipHDzbxlEMoQaWutDDXiWtOQQGoFTYodsJKyLm1kTWoeCeWdhK9p8 RUK/SeN7Cgck723YeKt8R/s69GRvgy6HGqIzpiiPyUGyETT+yMPYgoKF1h6cZSH5 oxNpLTMqXWmcacSi/e9FUhsiAHf6dE2B -----END CERTIFICATE-----Generated at Sat Aug 23 17:54:12 2025 by rpki-client