$ rpki-client -vvf rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft File: sT6kk09B_Eg0zSpv-CGNQPepd4k.mft (raw, json) Hash identifier: DRNUBxgsmGuimVgL5vGqN1DgM5+bhYnauJMJgAAY93k= Subject key identifier: D1:B9:2B:D6:93:31:3B:9C:32:B9:54:75:5C:15:4E:39:F2:01:85:59 Authority key identifier: B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 Certificate issuer: /CN=A9168494/serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Certificate serial: 02BE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft Manifest number: 02B3 Signing time: Sat 23 Aug 2025 01:45:32 +0000 Manifest this update: Sat 23 Aug 2025 01:45:32 +0000 Manifest next update: Sat 30 Aug 2025 01:45:32 +0000 Files and hashes: 1: sT6kk09B_Eg0zSpv-CGNQPepd4k.crl (hash: lVcwXhcUZcPI1yJlBbrsA+ku851sb8nqeodlyfx4mcM=) 2: 941EE9A46BB911ED97343873C4F9AE02.roa (hash: fXr7QIQuwl7QzyFLTfd4eQUzsXhWZdcYU1jaS0SUF4Q=) 3: 932FE94E6BB911ED97343873C4F9AE02.roa (hash: O/GWNs45gL+188aJUtcbIy1ffH2qMFXWGJpc2ELIi9o=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 702 (0x2be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9168494, serialNumber=B13EA4934F41FC4834CD2A6FF8218D40F7A97789 Validity Not Before: Aug 23 01:45:32 2025 GMT Not After : Aug 30 01:45:32 2025 GMT Subject: CN=68a91d3c-4f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e8:f1:60:f4:fb:31:7f:45:36:ba:23:82:cd: 51:b2:3d:98:07:47:fc:6a:9d:27:e6:10:04:ad:62: ce:1e:ba:97:1e:3a:e8:12:7e:de:f1:b5:2c:42:6f: c2:3e:31:2f:a0:77:11:0b:97:a5:fc:6b:b2:ce:f5: c0:18:7c:3f:42:4b:4e:f6:91:f2:a7:13:53:e2:a1: 80:2c:2b:68:ae:05:0e:58:87:44:93:6a:b8:d9:1c: 55:28:00:32:13:81:b0:41:97:c9:1f:f9:a3:59:96: 96:09:e6:82:17:1a:4f:55:5f:75:64:e8:77:19:ae: 95:5f:ff:3f:b4:43:50:da:07:38:53:d8:8c:17:cd: a6:1f:e7:29:dc:b4:bd:0d:04:80:e4:ba:bb:ab:d8: 88:a8:a2:cd:05:42:46:eb:8e:c8:cc:e8:b9:c8:05: e1:ea:ac:06:69:52:64:e6:9f:cf:a7:59:8d:4b:27: d2:a6:b9:a9:be:6a:ba:70:27:e1:a5:7d:3b:47:e7: a6:6c:ad:19:46:50:cc:de:6b:b3:3a:41:8c:8c:b8: 40:51:9e:87:65:4d:51:f5:6a:ed:ad:84:3e:29:d0: 71:b7:5f:88:d1:22:d9:08:ea:78:d5:cc:b7:c7:be: 36:8c:8c:7d:09:78:ca:d0:33:c5:e3:a5:cc:35:82: a3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B9:2B:D6:93:31:3B:9C:32:B9:54:75:5C:15:4E:39:F2:01:85:59 X509v3 Authority Key Identifier: keyid:B1:3E:A4:93:4F:41:FC:48:34:CD:2A:6F:F8:21:8D:40:F7:A9:77:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/sT6kk09B_Eg0zSpv-CGNQPepd4k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168494/31B8263C099311EDB21C9B4BC4F9AE02/sT6kk09B_Eg0zSpv-CGNQPepd4k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b0:dc:91:0f:a8:1e:e9:02:eb:33:7f:4d:e4:a3:81:c3:b3:4a: 08:20:66:a7:da:fd:5b:08:47:71:dd:4d:c5:d6:c1:4b:ac:d7: ce:8d:d5:7c:64:7f:c3:25:b5:5b:85:00:83:22:c5:12:e2:76: e1:91:2f:e0:f8:c5:e0:5c:d6:89:be:96:b0:87:95:32:86:38: cc:f6:76:ba:08:6a:b3:05:fb:be:ad:12:21:12:de:52:f8:62: 19:06:02:9d:bb:8f:ce:f9:c2:b3:ae:f4:07:d4:93:36:05:48: 6d:e1:dc:8d:c3:2c:57:41:12:4c:1a:4a:f0:d1:c5:9f:7b:c7: b7:89:a7:66:96:f6:e3:11:34:11:63:e6:9a:e2:2f:9d:32:29: 2c:f4:8b:9d:35:1e:70:16:9e:c1:bf:ea:47:1b:47:f9:f3:45: fa:19:39:af:e9:70:10:16:42:10:b9:ad:43:f1:97:24:ad:e8: ff:fa:e3:ba:c7:21:82:98:90:b8:1d:11:35:aa:b6:ef:ef:e5: c4:90:0a:01:cf:03:50:6f:cc:c6:15:e7:aa:8d:12:37:66:4e: 76:f6:9b:68:ce:da:2b:31:04:8c:bd:8a:b5:fd:80:74:13:92: eb:d0:43:a5:68:e6:34:43:4f:13:f5:d2:ca:47:a2:2c:ff:b8: 21:0c:03:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAr4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0OTQxMTAvBgNVBAUTKEIxM0VBNDkzNEY0MUZDNDgzNENEMkE2RkY4MjE4RDQw RjdBOTc3ODkwHhcNMjUwODIzMDE0NTMyWhcNMjUwODMwMDE0NTMyWjAYMRYwFAYD VQQDEw02OGE5MWQzYy00ZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuOjxYPT7MX9FNrojgs1Rsj2YB0f8ap0n5hAErWLOHrqXHjroEn7e8bUsQm/C PjEvoHcRC5el/GuyzvXAGHw/QktO9pHypxNT4qGALCtorgUOWIdEk2q42RxVKAAy E4GwQZfJH/mjWZaWCeaCFxpPVV91ZOh3Ga6VX/8/tENQ2gc4U9iMF82mH+cp3LS9 DQSA5Lq7q9iIqKLNBUJG647IzOi5yAXh6qwGaVJk5p/Pp1mNSyfSprmpvmq6cCfh pX07R+embK0ZRlDM3muzOkGMjLhAUZ6HZU1R9WrtrYQ+KdBxt1+I0SLZCOp41cy3 x742jIx9CXjK0DPF46XMNYKj5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNG5K9aT MTucMrlUdVwVTjnyAYVZMB8GA1UdIwQYMBaAFLE+pJNPQfxINM0qb/ghjUD3qXeJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODQ5NC8zMUI4MjYzQzA5 OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9FZzB6U3B2LUNHTlFQZXBk NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3NUNmtrMDlCX0VnMHpTcHYtQ0dOUVBlcGQ0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODQ5NC8zMUI4MjYzQzA5OTMxMUVEQjIxQzlCNEJDNEY5QUUwMi9zVDZrazA5Ql9F ZzB6U3B2LUNHTlFQZXBkNGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCw3JEPqB7pAuszf03ko4HDs0oIIGan2v1bCEdx3U3F1sFLrNfOjdV8 ZH/DJbVbhQCDIsUS4nbhkS/g+MXgXNaJvpawh5UyhjjM9na6CGqzBfu+rRIhEt5S +GIZBgKdu4/O+cKzrvQH1JM2BUht4dyNwyxXQRJMGkrw0cWfe8e3iadmlvbjETQR Y+aa4i+dMiks9IudNR5wFp7Bv+pHG0f580X6GTmv6XAQFkIQua1D8Zckrej/+uO6 xyGCmJC4HRE1qrbv7+XEkAoBzwNQb8zGFeeqjRI3Zk529ptoztorMQSMvYq1/YB0 E5Lr0EOlaOY0Q08T9dLKR6Is/7ghDAOG -----END CERTIFICATE-----Generated at Sat Aug 23 19:03:37 2025 by rpki-client