$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json) Hash identifier: m3dtVALrwJEZ5YYVA9nQ/7cKcMUDKTpy7moz3Mz3bVg= Subject key identifier: CD:B8:E4:1B:6E:3E:35:F3:8A:EF:BF:C3:77:55:A7:74:6C:F0:0A:EA Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Certificate serial: 03 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft Manifest number: 03 Signing time: Fri 22 Aug 2025 23:52:22 +0000 Manifest this update: Fri 22 Aug 2025 23:52:22 +0000 Manifest next update: Fri 29 Aug 2025 23:52:22 +0000 Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: /3aA8G96YnqqZNRwDFpDd6i8DAWMp/nWEptIKJv2RNQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Validity Not Before: Aug 22 23:52:22 2025 GMT Not After : Aug 29 23:52:22 2025 GMT Subject: CN=68a902b6-e6a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:05:23:2a:ac:10:01:25:09:20:95:30:73:63: 04:7d:01:01:8a:e9:07:fe:93:67:10:c1:dc:43:cd: f6:cc:b1:60:7d:46:7d:7d:16:56:36:58:b6:04:5d: 2c:5a:46:17:2c:fd:7b:33:09:99:a3:89:2e:e0:40: 19:ce:81:38:45:3b:81:be:f9:4f:e8:35:9a:d7:6d: 1c:33:d7:bf:26:bc:85:88:a4:64:5a:d9:5c:47:d6: 1f:74:98:99:c7:3f:1c:4b:21:17:b5:ba:16:49:6d: 57:59:7d:c0:96:78:00:f8:e5:ad:11:f8:44:ed:b1: 31:77:13:1a:f1:71:70:d5:4c:03:9a:9d:c0:3d:db: 30:e0:c2:4b:2d:36:51:7a:2d:69:64:38:2b:57:25: f4:8a:84:b0:30:b1:ec:79:8e:db:5f:a1:5d:35:78: 41:df:b4:c5:62:37:67:c4:3f:38:e8:c0:1b:56:00: 43:6d:41:1a:49:b0:8e:fa:26:44:bf:16:50:ae:d4: 98:82:35:1c:6b:39:56:2b:27:58:d8:8a:91:d6:27: 4b:af:1c:4f:52:7d:9b:7f:ed:03:46:7b:87:7c:4e: 39:b1:83:6f:5d:7a:95:d7:91:ca:21:74:d2:57:86: e9:80:8f:19:c2:b7:54:81:4a:5d:ed:57:e3:64:69: 49:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B8:E4:1B:6E:3E:35:F3:8A:EF:BF:C3:77:55:A7:74:6C:F0:0A:EA X509v3 Authority Key Identifier: keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:40:d8:00:5e:d9:86:76:e4:ec:a0:60:02:f4:7d:d1:33:3d: e9:2b:6c:96:6f:81:63:3a:11:08:4a:9e:1b:87:73:b0:02:77: b4:ed:27:ea:a5:07:c4:f0:81:f1:dc:3b:5e:1e:5c:c9:80:e1: 8c:9c:24:7e:03:a7:70:64:30:e3:30:d9:87:30:96:a4:1c:ea: 44:89:b2:42:78:a8:e4:09:c5:17:75:58:5f:73:03:50:99:29: c1:ee:ac:d8:2b:5f:8e:12:a6:97:e0:d6:c6:fb:68:e8:1e:e2: 3f:e2:2b:6d:d1:ae:27:04:b4:60:b9:2f:31:ee:8e:06:c0:4d: e5:19:3b:0b:cb:3c:16:ef:c1:45:ce:b0:0e:73:10:3d:aa:60: fd:13:18:17:6f:d3:83:75:53:ff:94:5d:20:42:ba:93:87:18: a3:22:81:e8:24:f3:f7:c3:41:fe:b7:21:7b:00:2f:b6:c9:69: 37:f9:b9:c3:b7:74:ce:8c:d1:b0:f6:70:96:18:0c:3a:b0:cf: 32:c2:16:6a:9f:0a:2d:3c:20:eb:3e:ab:4c:5c:8d:05:df:9e: a0:36:6e:1f:90:06:d4:fd:64:d2:2c:0a:d6:6d:62:77:60:da: 67:7a:ec:27:17:c8:5d:87:9c:b4:21:54:f7:d5:5c:1d:80:86: 98:8f:d0:92 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD M0I2QTJBMzAeFw0yNTA4MjIyMzUyMjJaFw0yNTA4MjkyMzUyMjJaMBgxFjAUBgNV BAMTDTY4YTkwMmI2LWU2YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDnBSMqrBABJQkglTBzYwR9AQGK6Qf+k2cQwdxDzfbMsWB9Rn19FlY2WLYEXSxa Rhcs/XszCZmjiS7gQBnOgThFO4G++U/oNZrXbRwz178mvIWIpGRa2VxH1h90mJnH PxxLIRe1uhZJbVdZfcCWeAD45a0R+ETtsTF3ExrxcXDVTAOancA92zDgwkstNlF6 LWlkOCtXJfSKhLAwsex5jttfoV01eEHftMViN2fEPzjowBtWAENtQRpJsI76JkS/ FlCu1JiCNRxrOVYrJ1jYipHWJ0uvHE9SfZt/7QNGe4d8Tjmxg29depXXkcohdNJX humAjxnCt1SBSl3tV+NkaUn1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUzbjkG24+ NfOK77/Dd1WndGzwCuowHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4 NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVA2ABe2YZ25OygYAL0fdEzPekrbJZvgWM6EQhKnhuHc7ACd7TtJ+ql B8TwgfHcO14eXMmA4YycJH4Dp3BkMOMw2YcwlqQc6kSJskJ4qOQJxRd1WF9zA1CZ KcHurNgrX44Sppfg1sb7aOge4j/iK23RricEtGC5LzHujgbATeUZOwvLPBbvwUXO sA5zED2qYP0TGBdv04N1U/+UXSBCupOHGKMigegk8/fDQf63IXsAL7bJaTf5ucO3 dM6M0bD2cJYYDDqwzzLCFmqfCi08IOs+q0xcjQXfnqA2bh+QBtT9ZNIsCtZtYndg 2md67CcXyF2HnLQhVPfVXB2AhpiP0JI= -----END CERTIFICATE-----Generated at Sat Aug 23 10:41:01 2025 by rpki-client