$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: EsPaWLlkI6lNJHOkxEJpYQyJNYyo98Ff5tTB30eGmOk= Subject key identifier: C0:FB:61:8D:04:6A:8E:1B:87:BE:E4:55:92:84:5C:5B:28:B8:58:1B Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 02B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 02AC Signing time: Sat 23 Aug 2025 01:46:20 +0000 Manifest this update: Sat 23 Aug 2025 01:46:19 +0000 Manifest next update: Sat 30 Aug 2025 01:46:19 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: 4A6Ky+ltsCgvOKfo7R/DmXgtHqNH/CelVwAOMrXiuwg=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:46:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 689 (0x2b1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Aug 23 01:46:19 2025 GMT Not After : Aug 30 01:46:19 2025 GMT Subject: CN=68a91d6b-7986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:df:9c:23:8f:0b:36:5b:62:76:fa:d6:4d:67: a9:09:34:eb:d3:f0:9f:79:cb:57:20:a8:48:fc:b6: 51:4c:54:42:10:29:ed:fe:ce:52:6a:96:45:97:cf: c3:73:93:95:e0:d7:98:83:52:84:28:fc:63:44:cb: 1d:ef:75:3e:f2:a8:93:0a:2b:c0:59:41:0a:fe:18: f5:0d:25:7a:cf:01:14:59:82:bc:06:f9:5f:6f:75: ca:42:69:ed:28:82:e3:1a:ef:91:5d:2d:7b:df:50: f5:4b:2e:60:cb:66:b9:cc:d0:e3:f9:7d:15:26:a7: 74:60:7d:33:6a:4c:1a:b4:a1:c3:b9:38:eb:aa:fc: e5:15:63:80:6a:32:61:fe:86:2f:72:78:de:b3:7a: 76:b0:35:85:84:f6:6f:d6:55:57:57:e4:53:ff:e0: 42:76:15:f5:4f:f5:46:01:d4:43:3a:2e:5c:05:07: c8:63:41:aa:72:04:36:0c:a1:90:de:65:47:7b:28: 13:9d:e6:82:66:3a:8f:66:0b:38:8b:d2:07:f7:7c: a5:2f:e4:66:96:00:de:ca:71:9e:84:20:46:9f:e2: 0a:30:87:28:93:39:c6:62:ed:1f:49:07:8c:4f:2a: f6:50:df:4e:84:30:dd:2d:c8:3e:91:5f:07:ff:04: cf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FB:61:8D:04:6A:8E:1B:87:BE:E4:55:92:84:5C:5B:28:B8:58:1B X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1d:59:d3:98:05:97:98:cd:f6:c3:ce:c2:d9:f3:3a:a4:44:28: b6:a5:f3:6b:b3:34:8f:25:cd:7b:8e:3b:90:60:f2:49:1b:06: 0f:bd:9d:e8:e8:ef:85:ae:40:92:55:ab:8f:75:99:ed:5f:8e: dc:8e:ec:38:43:79:88:bc:ed:b0:e9:22:ae:4f:1e:11:b2:75: 31:64:71:9a:c1:20:25:59:b3:3c:08:fc:2a:69:6e:a0:0f:aa: fb:36:20:cf:b6:27:d8:d8:94:5c:ec:01:7c:ff:60:4d:b6:89: a7:69:42:0d:14:cb:05:4e:5c:9a:d8:89:3e:3e:84:e3:ac:f0: c4:18:6b:f6:a1:76:34:fe:6f:c7:8c:9d:ec:f0:98:8c:78:6f: 4e:63:bb:47:f7:0f:ec:4e:b4:61:00:41:0a:4c:b8:9e:dd:34: 00:f1:56:82:91:ec:ac:c5:b1:73:17:cb:93:35:df:a7:a4:94: 65:71:78:cb:09:c0:d7:88:b3:8c:2c:f5:42:5f:41:70:47:28: 3d:02:f4:e4:91:d4:b8:43:07:39:8e:24:a0:ea:6b:c4:62:25: 6d:5f:37:78:70:7f:d4:2f:9c:ee:79:ba:4a:74:f1:88:4e:d2: 99:52:3d:39:08:8d:6f:34:8f:dd:b4:30:28:f2:25:a4:0c:69: 26:98:c8:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjUwODIzMDE0NjE5WhcNMjUwODMwMDE0NjE5WjAYMRYwFAYD VQQDEw02OGE5MWQ2Yi03OTg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAst+cI48LNltidvrWTWepCTTr0/CfectXIKhI/LZRTFRCECnt/s5SapZFl8/D c5OV4NeYg1KEKPxjRMsd73U+8qiTCivAWUEK/hj1DSV6zwEUWYK8Bvlfb3XKQmnt KILjGu+RXS1731D1Sy5gy2a5zNDj+X0VJqd0YH0zakwatKHDuTjrqvzlFWOAajJh /oYvcnjes3p2sDWFhPZv1lVXV+RT/+BCdhX1T/VGAdRDOi5cBQfIY0GqcgQ2DKGQ 3mVHeygTneaCZjqPZgs4i9IH93ylL+RmlgDeynGehCBGn+IKMIcokznGYu0fSQeM Tyr2UN9OhDDdLcg+kV8H/wTPewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMD7YY0E ao4bh77kVZKEXFsouFgbMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAdWdOYBZeYzfbDzsLZ8zqkRCi2pfNrszSPJc17jjuQYPJJGwYPvZ3o 6O+FrkCSVauPdZntX47cjuw4Q3mIvO2w6SKuTx4RsnUxZHGawSAlWbM8CPwqaW6g D6r7NiDPtifY2JRc7AF8/2BNtomnaUINFMsFTlya2Ik+PoTjrPDEGGv2oXY0/m/H jJ3s8JiMeG9OY7tH9w/sTrRhAEEKTLie3TQA8VaCkeysxbFzF8uTNd+npJRlcXjL CcDXiLOMLPVCX0FwRyg9AvTkkdS4Qwc5jiSg6mvEYiVtXzd4cH/UL5zuebpKdPGI TtKZUj05CI1vNI/dtDAo8iWkDGkmmMjT -----END CERTIFICATE-----Generated at Sun Aug 24 11:03:53 2025 by rpki-client