$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: sUHtVdNi0/hhKEADCDIfXqokmK4V+26IE+SyR7kamdw= Subject key identifier: 4E:E7:1C:7A:0C:D6:F4:4E:E2:08:2C:EF:DE:F1:AB:09:3C:EB:5A:4F Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 083C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 0834 Signing time: Fri 22 Aug 2025 20:55:29 +0000 Manifest this update: Fri 22 Aug 2025 20:55:29 +0000 Manifest next update: Fri 29 Aug 2025 20:55:29 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: RS7SXhodgNDr95lviNICq40L+/weZJ6CR5dKVrmjt7I=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:55:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Aug 22 20:55:29 2025 GMT Not After : Aug 29 20:55:29 2025 GMT Subject: CN=68a8d941-bdac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:09:23:90:c3:91:7d:4b:14:5c:18:d1:5c:43: 91:26:23:04:eb:f9:8a:ec:84:ad:44:f7:be:5f:e7: 72:e0:38:fd:b8:cd:67:b7:48:5f:62:c8:b0:42:b6: bb:91:91:d5:c3:02:bd:e3:17:84:fe:4a:13:8a:67: 76:03:c4:90:1f:68:a2:3d:25:10:fe:39:f2:f4:57: 4c:9b:41:2b:62:23:08:22:ea:9d:98:33:e0:85:fb: 15:34:d8:a9:40:52:48:dd:45:d2:0f:7b:3e:58:8b: b2:52:27:0c:3b:9c:c4:05:98:77:9f:ef:d3:c9:8f: 82:41:bc:c2:3f:de:38:d1:04:83:a8:eb:d5:44:30: b5:a2:6f:6e:49:b6:5f:06:fc:75:13:92:a6:96:bc: ee:a4:ae:8d:f8:ae:ae:11:a2:fa:ce:ea:2d:55:8c: de:c1:eb:8c:32:21:82:ac:f4:63:bf:9a:f1:23:60: 88:07:00:3c:9e:56:c0:70:95:82:87:0c:fa:ac:17: 38:49:1e:57:9c:25:ed:6c:a6:c5:80:f3:e9:45:23: c3:a5:16:20:8e:e7:96:17:8f:24:2d:8d:73:e0:90: 19:49:20:8c:8f:3f:81:2e:5d:d2:94:fc:15:96:81: 8f:4c:04:b2:01:b2:63:89:1c:af:4a:56:b6:b1:b8: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E7:1C:7A:0C:D6:F4:4E:E2:08:2C:EF:DE:F1:AB:09:3C:EB:5A:4F X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a2:d5:38:0e:72:07:5e:a2:48:0d:e6:e3:3b:88:53:f6:58:c3: b0:81:d3:4f:da:76:57:91:ec:dc:5d:b5:2e:bc:2c:ce:52:ac: 3d:a4:94:e1:f9:90:bb:24:ef:e5:88:0a:f4:34:ee:54:f4:44: cc:63:88:6b:38:c2:5b:95:34:ab:ea:02:a3:a3:14:f1:33:1a: d4:9d:fd:cf:b3:33:dc:3b:f0:6b:8d:bb:3d:72:05:7a:52:9b: 29:45:eb:1d:d8:75:da:c1:0c:e4:52:9c:9d:8c:1d:50:78:1b: e6:3f:75:03:83:8a:cf:3d:64:1e:b6:12:fa:26:89:d9:ca:8e: 6e:62:9a:ef:d9:18:ac:1e:bb:0a:29:e5:c2:74:b4:11:b1:16: 70:5d:36:c0:61:c2:a0:52:ed:dd:6f:80:0a:0c:49:94:a8:bf: cc:16:ec:b1:1a:0e:c4:3b:36:5d:80:2c:fd:86:20:79:2f:8b: 91:bc:94:38:f1:16:7a:4b:6c:25:15:93:63:48:d4:f6:9f:2b: 3f:e4:88:60:33:dc:19:de:ff:bf:c4:c5:4d:b1:c3:0d:ba:8a: 83:0d:fb:fa:41:cb:83:ff:6b:80:a1:98:7d:3b:61:9f:07:80: f9:84:2a:13:55:ef:ef:f2:ea:87:63:40:d6:51:3e:7d:65:88: 63:38:9c:85 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwODIyMjA1NTI5WhcNMjUwODI5MjA1NTI5WjAYMRYwFAYD VQQDEw02OGE4ZDk0MS1iZGFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwgkjkMORfUsUXBjRXEORJiME6/mK7IStRPe+X+dy4Dj9uM1nt0hfYsiwQra7 kZHVwwK94xeE/koTimd2A8SQH2iiPSUQ/jny9FdMm0ErYiMIIuqdmDPghfsVNNip QFJI3UXSD3s+WIuyUicMO5zEBZh3n+/TyY+CQbzCP9440QSDqOvVRDC1om9uSbZf Bvx1E5KmlrzupK6N+K6uEaL6zuotVYzeweuMMiGCrPRjv5rxI2CIBwA8nlbAcJWC hwz6rBc4SR5XnCXtbKbFgPPpRSPDpRYgjueWF48kLY1z4JAZSSCMjz+BLl3SlPwV loGPTASyAbJjiRyvSla2sbhY5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFE7nHHoM 1vRO4ggs797xqwk861pPMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCi1TgOcgdeokgN5uM7iFP2WMOwgdNP2nZXkezcXbUuvCzOUqw9pJTh +ZC7JO/liAr0NO5U9ETMY4hrOMJblTSr6gKjoxTxMxrUnf3PszPcO/Brjbs9cgV6 UpspResd2HXawQzkUpydjB1QeBvmP3UDg4rPPWQethL6JonZyo5uYprv2RisHrsK KeXCdLQRsRZwXTbAYcKgUu3db4AKDEmUqL/MFuyxGg7EOzZdgCz9hiB5L4uRvJQ4 8RZ6S2wlFZNjSNT2nys/5IhgM9wZ3v+/xMVNscMNuoqDDfv6QcuD/2uAoZh9O2Gf B4D5hCoTVe/v8uqHY0DWUT59ZYhjOJyF -----END CERTIFICATE-----Generated at Sun Aug 24 00:52:10 2025 by rpki-client