$ rpki-client -vvf rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft File: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft (raw, json) Hash identifier: xqzl1jf4uErWV5DXOv7lXzwQk0oO0R04c5tc4W9bMH8= Subject key identifier: 8F:62:5F:6D:D5:58:39:93:F3:C7:1A:06:77:CB:28:E0:6C:F2:93:7F Authority key identifier: EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 Certificate issuer: /CN=A911BE01/serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft Manifest number: 0D Signing time: Sat 23 Aug 2025 08:22:28 +0000 Manifest this update: Sat 23 Aug 2025 08:22:28 +0000 Manifest next update: Sat 30 Aug 2025 08:22:27 +0000 Files and hashes: 1: 6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl (hash: np8684IgxXKhQSGrhk8ASY2wU5JxzS3pLM76r4NISr0=) 2: 8A2C40D474B911F08BA0CD37C4F9AE02.roa (hash: EWAFcedkF4KQQjCKc7J1r1NxEnBfI+A1I/eGLsYGq3I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BE01, serialNumber=EA05649944A2404237003A7F8BA41D8D8422E721 Validity Not Before: Aug 23 08:22:28 2025 GMT Not After : Aug 30 08:22:27 2025 GMT Subject: CN=68a97a44-e657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:10:74:b7:f7:e6:66:74:c9:33:9c:51:78: b0:9c:52:cc:37:55:9e:8e:ec:d1:fe:04:3b:5a:85: b2:14:8f:cf:e1:3f:54:32:2b:cc:73:8e:f5:3c:ff: e3:4d:ab:2c:28:69:8b:9a:f1:fd:e6:fe:f9:a7:1d: 17:d9:73:fc:d7:4b:bc:9a:c1:58:c4:90:fd:b9:34: 97:e2:5d:2f:63:31:17:4b:ba:62:45:c3:b6:e1:d9: 56:cc:3e:56:48:5c:8f:78:b9:eb:c1:22:58:a3:66: 7b:ef:ef:d8:2f:09:80:95:99:ca:6d:88:e0:23:38: 9e:8c:d4:d0:5f:8f:32:63:ae:61:aa:6d:28:fa:02: b9:96:3c:5d:ed:0d:3e:df:35:d2:fc:32:87:e8:2b: 55:c9:a0:21:63:86:d8:0b:5c:63:14:77:76:c7:b2: a2:31:15:23:42:17:fc:22:4d:56:e3:d4:dd:69:f2: 82:48:69:f9:0d:75:8b:d1:2e:88:2a:e0:ab:af:14: 15:fa:88:ad:e7:7a:08:f8:4b:53:82:6c:1e:f0:25: 53:5a:1b:c0:2c:7f:11:c8:22:87:45:22:e8:92:dc: cf:3c:48:c6:04:da:6c:a5:7b:68:7c:19:66:4d:e2: b0:2b:aa:2b:91:c2:01:dc:17:6b:7e:77:60:85:b3: e1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:62:5F:6D:D5:58:39:93:F3:C7:1A:06:77:CB:28:E0:6C:F2:93:7F X509v3 Authority Key Identifier: keyid:EA:05:64:99:44:A2:40:42:37:00:3A:7F:8B:A4:1D:8D:84:22:E7:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6gVkmUSiQEI3ADp_i6QdjYQi5yE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BE01/2323A49C749E11F08EAD2F65C4F9AE02/6gVkmUSiQEI3ADp_i6QdjYQi5yE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 35:53:bc:ce:34:5c:b0:56:84:3f:60:b2:5a:3e:24:e4:05:96: f0:60:b0:ed:8c:66:e5:2f:8e:24:4e:d6:10:99:58:2a:73:ec: 2d:56:1a:36:c9:18:44:c2:b7:75:84:14:24:00:79:3d:d4:ef: 30:65:85:2e:43:55:20:9d:0f:27:b2:31:29:19:87:42:70:df: 66:d0:88:85:ad:bd:78:2e:9e:57:ae:c6:7e:21:55:61:82:22: c7:a1:c8:af:2f:4d:23:79:fe:26:c8:57:00:4f:90:0b:11:4f: cb:81:96:ca:91:92:eb:66:34:e7:3d:56:c1:1e:72:1e:ec:53: 03:3a:33:cc:5e:84:0b:61:99:7d:03:99:09:23:59:39:cc:a1: 2e:e4:28:c8:e9:58:0d:e2:ef:08:15:f6:90:bb:40:1d:70:c1: 0d:92:31:dd:27:84:e7:f8:7b:95:b1:b4:57:63:64:4c:e9:3a: 28:c0:0d:80:be:34:c2:9a:42:f1:9f:13:0a:97:21:55:e3:10: 66:c8:ab:29:9f:77:b1:6b:9e:fa:4a:16:15:a0:c2:35:99:68: 38:44:01:79:6f:a4:fd:52:77:2d:3e:70:c7:53:54:93:28:6a: a2:b2:b4:72:4f:f8:e8:9d:85:28:55:13:7d:e9:6e:4b:e7:03: 1a:57:bc:d4 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx QkUwMTExMC8GA1UEBRMoRUEwNTY0OTk0NEEyNDA0MjM3MDAzQTdGOEJBNDFEOEQ4 NDIyRTcyMTAeFw0yNTA4MjMwODIyMjhaFw0yNTA4MzAwODIyMjdaMBgxFjAUBgNV BAMTDTY4YTk3YTQ0LWU2NTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8pBB0t/fmZnTJM5xReLCcUsw3VZ6O7NH+BDtahbIUj8/hP1QyK8xzjvU8/+NN qywoaYua8f3m/vmnHRfZc/zXS7yawVjEkP25NJfiXS9jMRdLumJFw7bh2VbMPlZI XI94uevBIlijZnvv79gvCYCVmcptiOAjOJ6M1NBfjzJjrmGqbSj6ArmWPF3tDT7f NdL8MofoK1XJoCFjhtgLXGMUd3bHsqIxFSNCF/wiTVbj1N1p8oJIafkNdYvRLogq 4KuvFBX6iK3negj4S1OCbB7wJVNaG8AsfxHIIodFIuiS3M88SMYE2myle2h8GWZN 4rArqiuRwgHcF2t+d2CFs+EPAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUj2JfbdVY OZPzxxoGd8so4Gzyk38wHwYDVR0jBBgwFoAU6gVkmUSiQEI3ADp/i6QdjYQi5yEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFCRTAxLzIzMjNBNDlDNzQ5 RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJM0FEcF9pNlFkallRaTV5 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNmdWa21VU2lRRUkzQURwX2k2UWRqWVFpNXlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFC RTAxLzIzMjNBNDlDNzQ5RTExRjA4RUFEMkY2NUM0RjlBRTAyLzZnVmttVVNpUUVJ M0FEcF9pNlFkallRaTV5RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBADVTvM40XLBWhD9gslo+JOQFlvBgsO2MZuUvjiRO1hCZWCpz7C1WGjbJ GETCt3WEFCQAeT3U7zBlhS5DVSCdDyeyMSkZh0Jw32bQiIWtvXgunleuxn4hVWGC IsehyK8vTSN5/ibIVwBPkAsRT8uBlsqRkutmNOc9VsEech7sUwM6M8xehAthmX0D mQkjWTnMoS7kKMjpWA3i7wgV9pC7QB1wwQ2SMd0nhOf4e5WxtFdjZEzpOijADYC+ NMKaQvGfEwqXIVXjEGbIqymfd7FrnvpKFhWgwjWZaDhEAXlvpP1Sdy0+cMdTVJMo aqKytHJP+OidhShVE33pbkvnAxpXvNQ= -----END CERTIFICATE-----Generated at Sat Aug 23 21:22:44 2025 by rpki-client