$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json) Hash identifier: 58zIsORKD28E1+01tsUPuoklgdZ3nvvWHw6WR2I3Gks= Subject key identifier: 1A:AA:4D:E7:24:2F:40:93:18:01:C8:57:F5:A2:4F:C3:53:4D:8C:5B Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft Manifest number: CC Signing time: Thu 03 Jul 2025 05:57:29 +0000 Manifest this update: Thu 03 Jul 2025 05:57:28 +0000 Manifest next update: Thu 10 Jul 2025 05:57:28 +0000 Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: avauMDAB5Gs1XM69UyYIKnd1ih6DU5FFzI+ukkrusf8=) 2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: Rih/Wk+3SaEqReLV35PtgcGk6bxkA/LfVhv9nN+xmq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Validity Not Before: Jul 3 05:57:28 2025 GMT Not After : Jul 10 05:57:28 2025 GMT Subject: CN=68661bc9-c288 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e3:49:c6:3d:d9:f8:83:ac:b3:5b:19:63:23: 46:75:9e:c1:3f:7c:38:cf:91:bd:7f:cd:1d:28:72: f6:d3:98:25:51:2e:ef:48:c5:ef:66:8c:d3:71:60: cf:b2:06:bf:73:9e:1b:a5:cc:c9:01:7c:cb:f5:14: c8:20:89:4f:ed:31:e2:87:f2:af:58:dc:da:0b:ec: f8:b3:b1:42:03:a7:46:0e:bd:21:ab:8c:9f:78:c4: a8:77:a9:ae:8e:e1:a7:ed:91:f4:e0:73:89:3e:4b: 97:c5:e3:08:c8:08:f1:80:68:a1:b6:a3:a2:4d:30: 66:7c:3f:84:c4:8e:78:c5:b6:d3:73:27:ee:81:1e: bb:dc:66:b8:8f:87:7e:2f:92:f8:08:ed:d9:48:93: 5d:9a:ef:9f:be:60:f0:95:82:b8:28:52:ce:3a:48: d8:95:57:1c:25:89:0d:81:41:8c:fa:e0:60:44:c5: 20:80:66:f6:43:ed:f6:7f:65:38:f5:d4:82:55:66: 1f:85:11:54:3f:81:a1:f0:f7:f8:5d:a8:27:64:48: ef:77:38:8a:93:11:82:21:f2:51:b1:d9:9c:60:83: 3d:41:4c:42:2a:45:85:19:6c:f9:39:c9:36:36:0e: b6:b4:b2:9e:ea:29:51:09:2f:f3:73:6a:a4:cc:bb: 5d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:AA:4D:E7:24:2F:40:93:18:01:C8:57:F5:A2:4F:C3:53:4D:8C:5B X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:1a:24:53:84:55:1d:76:64:14:e0:c2:f4:c0:d5:55:40:02: 7f:c2:bb:54:1a:44:01:2c:eb:3b:f0:12:22:cc:71:68:0f:73: d7:80:0c:76:bc:b2:90:e1:ec:b0:fd:09:bf:18:d9:8d:15:4f: 50:36:82:83:c5:9f:dd:18:6b:76:a0:ee:31:12:b3:d8:e6:f5: 98:39:28:c6:74:42:90:ac:56:6f:73:95:9f:df:c9:25:fc:5e: f2:25:ef:fb:71:75:21:02:25:12:87:0e:9a:85:ff:c7:4a:75: 36:29:fb:67:e7:75:9a:d5:d0:71:4d:a7:59:95:1f:84:82:44: d1:e1:62:35:7b:2e:f9:41:7f:a8:88:b2:a8:61:6d:06:a9:c5: 76:3c:d5:35:41:06:5c:84:f7:3f:b5:3f:f8:2d:92:5b:69:d1: 72:9a:68:8b:fb:78:5d:c6:fa:4d:09:2e:02:e8:9e:fe:12:63: cf:c5:ed:a5:d7:86:7c:98:b5:b4:ab:33:47:a3:a5:3e:91:8f: 11:b1:4b:e3:f5:bf:bf:ea:5e:6b:8f:f2:76:5a:76:94:aa:b2: 9a:58:1d:92:12:3a:9a:52:2d:8d:1c:e6:2c:36:39:f0:01:79: f4:07:82:a2:cd:e2:58:d1:19:b9:b9:b8:56:e5:57:7f:7a:35: f2:ab:de:77 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKEU4ODc2QjUxQUIyQjE3NzQ0MENENEM0Q0QyRTRGMEE1 OThFMDM4MUMwHhcNMjUwNzAzMDU1NzI4WhcNMjUwNzEwMDU1NzI4WjAYMRYwFAYD VQQDEw02ODY2MWJjOS1jMjg4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2uNJxj3Z+IOss1sZYyNGdZ7BP3w4z5G9f80dKHL205glUS7vSMXvZozTcWDP sga/c54bpczJAXzL9RTIIIlP7THih/KvWNzaC+z4s7FCA6dGDr0hq4yfeMSod6mu juGn7ZH04HOJPkuXxeMIyAjxgGihtqOiTTBmfD+ExI54xbbTcyfugR673Ga4j4d+ L5L4CO3ZSJNdmu+fvmDwlYK4KFLOOkjYlVccJYkNgUGM+uBgRMUggGb2Q+32f2U4 9dSCVWYfhRFUP4Gh8Pf4XagnZEjvdziKkxGCIfJRsdmcYIM9QUxCKkWFGWz5Ock2 Ng62tLKe6ilRCS/zc2qkzLtdywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBqqTeck L0CTGAHIV/WiT8NTTYxbMB8GA1UdIwQYMBaAFOiHa1GrKxd0QM1MTNLk8KWY4Dgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zQTcyQUJGQTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYzUkF6VXhNMHVUd3BaamdP QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09Cdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zQTcyQUJGQTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYz UkF6VXhNMHVUd3BaamdPQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBMGiRThFUddmQU4ML0wNVVQAJ/wrtUGkQBLOs78BIizHFoD3PXgAx2 vLKQ4eyw/Qm/GNmNFU9QNoKDxZ/dGGt2oO4xErPY5vWYOSjGdEKQrFZvc5Wf38kl /F7yJe/7cXUhAiUShw6ahf/HSnU2Kftn53Wa1dBxTadZlR+EgkTR4WI1ey75QX+o iLKoYW0GqcV2PNU1QQZchPc/tT/4LZJbadFymmiL+3hdxvpNCS4C6J7+EmPPxe2l 14Z8mLW0qzNHo6U+kY8RsUvj9b+/6l5rj/J2WnaUqrKaWB2SEjqaUi2NHOYsNjnw AXn0B4KizeJY0Rm5ubhW5Vd/ejXyq953 -----END CERTIFICATE-----Generated at Thu Jul 3 09:32:21 2025 by rpki-client