$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: w4sUY34X4rTB0RS2gt0hGByf/2d+qpltJiZBQV0j7nM= Subject key identifier: 60:C8:FB:2B:BF:44:C0:AF:22:84:92:54:EE:65:35:5E:B1:33:FE:EE Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BE2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2BD1 Signing time: Fri 22 Aug 2025 15:35:23 +0000 Manifest this update: Fri 22 Aug 2025 15:35:22 +0000 Manifest next update: Fri 29 Aug 2025 15:35:22 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: 2Yv5E5bTpJBWKySK54iujItDKyWRSXn6CfVPlv7sIh8=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11234 (0x2be2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Aug 22 15:35:22 2025 GMT Not After : Aug 29 15:35:22 2025 GMT Subject: CN=68a88e3a-b0cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:17:59:e9:ae:59:4f:0e:ce:69:75:ce:59:57: 6a:70:3d:50:33:9e:a6:fb:e3:55:65:e8:a3:90:f1: ee:d7:7b:a0:6d:a2:48:38:8a:73:1e:37:a4:58:a9: 16:6f:65:bb:43:45:6a:6c:ad:14:f8:ae:7b:a0:3c: 69:68:6d:d8:19:a5:90:0f:65:07:f6:8b:64:33:83: 8f:67:96:6a:d0:c8:7c:14:ee:06:fc:75:3d:7b:44: 15:65:3a:2b:a7:3e:1f:a9:3b:82:b4:44:c6:88:bd: db:c2:bf:66:97:e9:29:ff:4f:65:d6:10:39:31:14: d9:29:31:db:32:d5:12:58:8f:8a:f3:72:9d:c0:38: 22:8e:56:10:f0:df:0d:d1:e9:24:90:f7:d3:bc:ee: 77:ce:cb:5b:68:a3:7e:70:d5:50:8c:85:8c:0c:f3: a4:05:6e:33:b6:8b:6c:3f:8f:0b:2b:0d:bb:a4:9b: 1d:5d:dd:52:84:31:5e:50:e9:a2:b1:89:3f:2c:81: c9:a4:a5:7c:28:eb:1a:c5:a3:9e:a5:e9:a8:b3:91: c2:d0:fd:ee:fd:64:89:2b:dd:d8:8d:f7:5f:2b:df: 55:15:f6:05:68:90:58:74:97:21:80:8a:72:2b:ad: d3:7d:ba:9f:7a:ec:28:a7:20:07:46:12:e9:05:a3: 19:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C8:FB:2B:BF:44:C0:AF:22:84:92:54:EE:65:35:5E:B1:33:FE:EE X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:d4:e0:21:55:72:12:3f:27:f8:6a:c6:65:99:cc:83:74:53: a1:2e:75:73:c2:68:37:f2:91:d4:ee:8a:39:7b:45:8c:87:e9: 33:8f:91:4a:78:b8:70:3b:97:63:5d:25:dc:00:27:36:eb:be: c2:4b:76:4b:89:05:97:47:e6:f9:dd:92:44:17:23:2e:94:51: e6:54:fa:51:5e:93:45:39:b0:25:dd:49:3e:7c:c4:8c:f4:88: 11:f6:b0:17:05:75:c2:6b:50:a3:98:15:37:a6:d5:66:82:8f: 28:c7:08:26:30:cd:cd:7a:75:83:61:04:6b:5f:a5:27:aa:6c: 8a:c9:88:41:1e:2e:03:20:89:5f:f4:69:34:75:fe:df:30:a1: 07:9e:e5:a4:f5:71:11:d2:5b:c2:57:01:b3:13:72:4b:a4:76: 61:56:16:45:04:9d:62:82:e5:bd:56:4a:8c:4f:b1:3f:7a:ea: 14:7b:f2:42:54:ef:fa:15:39:04:e7:f0:10:ec:fd:84:d8:0b: 78:69:c1:12:54:49:e9:da:10:46:8b:46:cb:91:7a:2a:13:ad: ec:f4:7b:05:7e:6f:85:1a:0a:eb:2d:13:24:76:ad:1b:03:df: 4e:69:9f:b9:bc:be:3e:9c:11:e9:b5:4a:a2:c6:4c:c7:b7:c5: 6c:ff:f4:f0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwODIyMTUzNTIyWhcNMjUwODI5MTUzNTIyWjAYMRYwFAYD VQQDEw02OGE4OGUzYS1iMGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4BdZ6a5ZTw7OaXXOWVdqcD1QM56m++NVZeijkPHu13ugbaJIOIpzHjekWKkW b2W7Q0VqbK0U+K57oDxpaG3YGaWQD2UH9otkM4OPZ5Zq0Mh8FO4G/HU9e0QVZTor pz4fqTuCtETGiL3bwr9ml+kp/09l1hA5MRTZKTHbMtUSWI+K83KdwDgijlYQ8N8N 0ekkkPfTvO53zstbaKN+cNVQjIWMDPOkBW4ztotsP48LKw27pJsdXd1ShDFeUOmi sYk/LIHJpKV8KOsaxaOepemos5HC0P3u/WSJK93YjfdfK99VFfYFaJBYdJchgIpy K63TfbqfeuwopyAHRhLpBaMZtQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGDI+yu/ RMCvIoSSVO5lNV6xM/7uMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw1OAhVXISPyf4asZlmcyDdFOhLnVzwmg38pHU7oo5e0WMh+kzj5FK eLhwO5djXSXcACc2677CS3ZLiQWXR+b53ZJEFyMulFHmVPpRXpNFObAl3Uk+fMSM 9IgR9rAXBXXCa1CjmBU3ptVmgo8oxwgmMM3NenWDYQRrX6UnqmyKyYhBHi4DIIlf 9Gk0df7fMKEHnuWk9XER0lvCVwGzE3JLpHZhVhZFBJ1iguW9VkqMT7E/euoUe/JC VO/6FTkE5/AQ7P2E2At4acESVEnp2hBGi0bLkXoqE63s9HsFfm+FGgrrLRMkdq0b A99OaZ+5vL4+nBHptUqixkzHt8Vs//Tw -----END CERTIFICATE-----Generated at Sun Aug 24 06:36:47 2025 by rpki-client