$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: 3OoMvNxm9Dm6yGDA1W+HVdBC9+N84nx3QBRKclax8EA= Subject key identifier: 0E:F8:33:1E:10:C4:BD:49:73:C1:B3:2F:A1:C6:9E:15:29:DA:BD:73 Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 0295 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 0291 Signing time: Sat 05 Jul 2025 02:10:38 +0000 Manifest this update: Sat 05 Jul 2025 02:10:38 +0000 Manifest next update: Sat 12 Jul 2025 02:10:38 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: kiFJ30GTRoSoyBTHU1YMtNhIrcPCBdEw2fesTJRdDn0=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: tjanCdEnU91WZWuNneW5uPLOhcdnMX5ORciFEmcFL7c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 661 (0x295) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Jul 5 02:10:38 2025 GMT Not After : Jul 12 02:10:38 2025 GMT Subject: CN=6868899e-9c2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:44:fa:32:b0:a0:46:f0:1a:31:7b:60:d4:a5: 3a:ce:a3:88:55:6a:fd:33:0e:9c:8d:84:81:97:1a: f4:c4:f0:a4:b7:c0:85:33:63:58:c1:d4:73:cf:44: fc:7f:c3:dc:de:c4:db:dd:0b:84:49:59:3d:a8:2b: 10:d9:c9:a7:e0:97:0a:42:22:4a:41:86:99:d7:20: 7d:3a:01:c1:d7:88:a5:00:ea:b9:8d:60:7f:b6:a6: b3:d8:c0:53:70:dd:b3:ae:11:86:6f:04:c6:1a:30: 96:8c:59:90:e9:a1:bb:63:2c:47:6b:72:83:b8:d4: 02:16:bc:40:50:f8:18:90:60:1a:e3:74:9c:50:0f: a5:90:5a:dd:b7:af:54:f9:18:5c:2f:ed:77:5d:48: 9f:62:23:8e:1e:63:9f:1a:1f:d8:e1:90:58:07:46: 35:6b:1e:a6:07:a4:b7:a2:39:1b:4f:94:0a:da:74: 95:37:c8:e2:0a:b0:00:c2:b0:11:af:43:1b:02:20: 0c:05:b2:e1:1a:45:95:b0:25:55:22:4e:71:5a:b6: 04:f4:f4:0a:8f:cb:53:8d:d0:8c:cb:3c:9a:da:36: 08:c8:a7:42:2c:39:81:ca:fa:c6:8f:b8:86:de:bf: 09:0d:e0:ca:1c:2a:31:1d:93:be:7a:aa:66:16:3d: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:F8:33:1E:10:C4:BD:49:73:C1:B3:2F:A1:C6:9E:15:29:DA:BD:73 X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:a3:0e:a0:b7:87:e7:b2:a1:d4:6b:25:77:98:8a:88:33:a6: 02:f3:c4:c9:86:03:18:1f:87:36:f2:ac:01:0e:e1:2c:64:30: 70:36:d1:e3:46:21:ed:a3:3b:58:fd:eb:b8:01:20:e1:6c:02: 63:4c:66:15:a4:a3:0b:32:4e:58:3c:ca:86:e2:e4:8b:63:60: f7:7b:9a:a2:1b:a9:33:ad:93:9b:92:a0:67:20:6a:ac:ef:c2: 75:be:e3:e2:16:ee:f3:48:dd:4e:67:3d:56:84:59:15:c4:68: 50:9d:c6:0b:38:10:a4:c4:8f:cf:58:7f:32:93:3c:4e:e9:54: c6:e8:dc:fa:05:33:12:34:98:ce:61:ce:96:88:77:f9:1f:d3: 90:32:34:1b:4e:03:45:d4:83:d5:ee:0b:63:91:bf:87:72:e3: e6:d5:29:d1:3b:a0:ca:9d:3a:f8:29:e1:ac:a3:f4:6b:c2:8c: 23:d5:d2:2c:52:b4:76:d4:f4:fe:16:fe:6a:d2:a4:d6:34:e6: f3:b5:0c:82:d6:2f:e8:7f:d0:d0:0f:87:87:4e:92:54:83:6f: 54:02:f4:cd:1f:f1:71:91:2e:e0:64:83:fe:a2:ba:72:bd:ba: a0:2e:e0:61:03:8c:8b:db:a3:47:d7:e2:3d:0a:8a:73:64:cf: a2:b2:28:aa -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICApUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjUwNzA1MDIxMDM4WhcNMjUwNzEyMDIxMDM4WjAYMRYwFAYD VQQDEw02ODY4ODk5ZS05YzJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwkT6MrCgRvAaMXtg1KU6zqOIVWr9Mw6cjYSBlxr0xPCkt8CFM2NYwdRzz0T8 f8Pc3sTb3QuESVk9qCsQ2cmn4JcKQiJKQYaZ1yB9OgHB14ilAOq5jWB/tqaz2MBT cN2zrhGGbwTGGjCWjFmQ6aG7YyxHa3KDuNQCFrxAUPgYkGAa43ScUA+lkFrdt69U +RhcL+13XUifYiOOHmOfGh/Y4ZBYB0Y1ax6mB6S3ojkbT5QK2nSVN8jiCrAAwrAR r0MbAiAMBbLhGkWVsCVVIk5xWrYE9PQKj8tTjdCMyzya2jYIyKdCLDmByvrGj7iG 3r8JDeDKHCoxHZO+eqpmFj3GGwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFA74Mx4Q xL1Jc8GzL6HGnhUp2r1zMB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUow6gt4fnsqHUayV3mIqIM6YC88TJhgMYH4c28qwBDuEsZDBwNtHj RiHtoztY/eu4ASDhbAJjTGYVpKMLMk5YPMqG4uSLY2D3e5qiG6kzrZObkqBnIGqs 78J1vuPiFu7zSN1OZz1WhFkVxGhQncYLOBCkxI/PWH8ykzxO6VTG6Nz6BTMSNJjO Yc6WiHf5H9OQMjQbTgNF1IPV7gtjkb+HcuPm1SnRO6DKnTr4KeGso/Rrwowj1dIs UrR21PT+Fv5q0qTWNObztQyC1i/of9DQD4eHTpJUg29UAvTNH/FxkS7gZIP+orpy vbqgLuBhA4yL26NH1+I9CopzZM+isiiq -----END CERTIFICATE-----Generated at Sat Jul 5 11:41:30 2025 by rpki-client