$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft File: N6Zf20DoxlmxflAA-ommVoCXbVs.mft (raw, json) Hash identifier: nKMowU2ppPCBO4waGaQA4pGf1Qr3MkuDbdf9wOmSZME= Subject key identifier: 0D:59:24:88:FC:A5:3F:55:C8:04:53:D9:9B:F7:51:6E:D9:FC:12:97 Authority key identifier: 37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B Certificate issuer: /CN=A91A6F56/serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Certificate serial: 14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft Manifest number: 11 Signing time: Sat 23 Aug 2025 08:19:58 +0000 Manifest this update: Sat 23 Aug 2025 08:19:58 +0000 Manifest next update: Sat 30 Aug 2025 08:19:58 +0000 Files and hashes: 1: N6Zf20DoxlmxflAA-ommVoCXbVs.crl (hash: WOweTAuYB4fU3HeTr3WYEWSo3LSv3jpII9FxWx8H9Pw=) 2: 482874AE710E11F0B4CBA430C4F9AE02.roa (hash: ZwA3RLDFZuJuq+OnGHO5YHGm+YL4BWQ+qyec67LETqc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20 (0x14) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F56, serialNumber=37A65FDB40E8C659B17E5000FA89A65680976D5B Validity Not Before: Aug 23 08:19:58 2025 GMT Not After : Aug 30 08:19:58 2025 GMT Subject: CN=68a979ae-d8f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:a0:df:8e:6d:75:2e:53:11:77:87:9a:d2:9e: e4:8f:26:42:a8:61:95:a8:69:88:63:d4:ca:69:e3: ae:8f:e8:82:f6:ce:71:d5:23:0d:c8:69:22:d7:97: eb:f1:d8:1a:34:d8:9a:17:03:69:84:9b:58:f2:09: a1:ed:22:43:36:84:bf:a3:56:ac:87:dc:f8:97:1d: 41:f4:71:3d:dc:9d:ad:4a:11:d6:42:c4:e6:c6:7c: 3b:b5:0e:e4:bb:2b:16:dd:d1:69:ef:75:2f:75:93: 4c:0a:cd:3e:c4:8c:4a:92:82:91:80:13:23:b8:2a: 9e:55:fc:3c:15:7b:53:6e:a2:14:cc:df:9b:aa:49: c8:6d:61:8a:47:62:30:a5:f9:3f:93:39:5a:93:6a: c4:cf:c9:b3:91:b5:bf:a7:ea:3f:a8:33:ea:cd:73: 1f:fb:91:f0:58:8a:24:e5:55:d3:35:42:e1:76:89: 51:0a:6d:fe:ee:0d:49:9d:3c:2c:8f:e3:e2:cc:90: 80:01:d8:d5:d3:f6:f2:9a:eb:c1:1f:94:12:60:6c: a0:7f:15:66:47:79:fe:12:6d:d2:f5:d7:c2:d0:96: f3:29:d2:7c:fe:d9:4e:a3:77:18:07:de:ee:d0:87: 53:04:91:a7:dd:36:28:e3:e9:1d:ec:25:5b:3f:76: 76:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:59:24:88:FC:A5:3F:55:C8:04:53:D9:9B:F7:51:6E:D9:FC:12:97 X509v3 Authority Key Identifier: keyid:37:A6:5F:DB:40:E8:C6:59:B1:7E:50:00:FA:89:A6:56:80:97:6D:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N6Zf20DoxlmxflAA-ommVoCXbVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F56/8812FBE46E8811F0AD5D1A12C4F9AE02/N6Zf20DoxlmxflAA-ommVoCXbVs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b9:2a:c1:3e:41:22:ca:5e:12:75:3a:c9:0c:7a:0b:82:39:b9: 79:37:90:1d:ce:0f:56:ad:51:3a:ed:55:ce:c9:53:ae:c5:a7: 64:2d:e4:12:13:13:bf:9c:21:a3:15:40:33:19:1a:c5:3c:e1: c0:06:83:10:a2:ef:ca:b2:71:58:7b:c2:d6:97:af:ca:4f:1b: e0:b3:96:2f:fc:8e:bb:69:ef:2a:9a:53:db:60:41:e5:a5:8e: 5d:fc:40:2b:4f:d0:4c:77:ad:4d:22:75:d2:14:e1:e8:31:ba: 7e:98:51:c9:2b:bc:53:8c:2f:b9:ef:d3:ae:ec:e8:6e:64:3c: d4:ae:53:8c:0b:54:2b:2d:e8:32:10:f3:8e:f0:98:92:36:72: 52:b9:91:d3:e6:ec:2f:b3:6a:b2:27:b9:d2:43:70:62:05:98: fa:55:ce:3f:87:17:3f:b2:36:22:8d:57:e4:55:5f:4a:e4:06: bc:8c:0e:2e:4d:1c:3f:dc:18:16:10:7b:69:ca:c1:3b:0b:da: 0b:bf:14:80:90:4e:60:ef:b6:05:1a:0e:df:c8:63:43:b8:67: 84:ff:7f:b4:5a:03:8b:2c:f6:06:0b:2f:1e:f8:54:8a:8d:06: db:ea:dd:0b:a5:8f:97:52:06:50:86:3d:df:d0:77:5c:01:22: 08:9b:be:3c -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBFDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY1NjExMC8GA1UEBRMoMzdBNjVGREI0MEU4QzY1OUIxN0U1MDAwRkE4OUE2NTY4 MDk3NkQ1QjAeFw0yNTA4MjMwODE5NThaFw0yNTA4MzAwODE5NThaMBgxFjAUBgNV BAMTDTY4YTk3OWFlLWQ4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEoN+ObXUuUxF3h5rSnuSPJkKoYZWoaYhj1Mpp466P6IL2znHVIw3IaSLXl+vx 2Bo02JoXA2mEm1jyCaHtIkM2hL+jVqyH3PiXHUH0cT3cna1KEdZCxObGfDu1DuS7 Kxbd0WnvdS91k0wKzT7EjEqSgpGAEyO4Kp5V/DwVe1NuohTM35uqSchtYYpHYjCl +T+TOVqTasTPybORtb+n6j+oM+rNcx/7kfBYiiTlVdM1QuF2iVEKbf7uDUmdPCyP 4+LMkIAB2NXT9vKa68EflBJgbKB/FWZHef4SbdL118LQlvMp0nz+2U6jdxgH3u7Q h1MEkafdNijj6R3sJVs/dnZlAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUDVkkiPyl P1XIBFPZm/dRbtn8EpcwHwYDVR0jBBgwFoAUN6Zf20DoxlmxflAA+ommVoCXbVsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjU2Lzg4MTJGQkU0NkU4 ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxteGZsQUEtb21tVm9DWGJW cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjZaZjIwRG94bG14ZmxBQS1vbW1Wb0NYYlZzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2 RjU2Lzg4MTJGQkU0NkU4ODExRjBBRDVEMUExMkM0RjlBRTAyL042WmYyMERveGxt eGZsQUEtb21tVm9DWGJWcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBALkqwT5BIspeEnU6yQx6C4I5uXk3kB3OD1atUTrtVc7JU67Fp2Qt5BIT E7+cIaMVQDMZGsU84cAGgxCi78qycVh7wtaXr8pPG+Czli/8jrtp7yqaU9tgQeWl jl38QCtP0Ex3rU0iddIU4egxun6YUckrvFOML7nv067s6G5kPNSuU4wLVCst6DIQ 847wmJI2clK5kdPm7C+zarInudJDcGIFmPpVzj+HFz+yNiKNV+RVX0rkBryMDi5N HD/cGBYQe2nKwTsL2gu/FICQTmDvtgUaDt/IY0O4Z4T/f7RaA4ss9gYLLx74VIqN Btvq3Qulj5dSBlCGPd/Qd1wBIgibvjw= -----END CERTIFICATE-----Generated at Sat Aug 23 10:28:46 2025 by rpki-client