$ rpki-client -vvf rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft File: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft (raw, json) Hash identifier: HetBJ2/yohNRoQWtDDwN9f7QD26HPfsvUA2/QsfHRvw= Subject key identifier: 0C:30:AB:9A:3C:76:32:13:3D:FA:1F:5C:0C:EF:D7:9B:AF:BD:C7:C8 Authority key identifier: 83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 Certificate issuer: /CN=A91C705E/serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Certificate serial: 02E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft Manifest number: 02E0 Signing time: Sat 23 Aug 2025 01:33:54 +0000 Manifest this update: Sat 23 Aug 2025 01:33:54 +0000 Manifest next update: Sat 30 Aug 2025 01:33:54 +0000 Files and hashes: 1: g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl (hash: 8FfkgdqWwF110PkLOFpK4KOjRkc2gTq+5x1hDZLLoNA=) 2: CB5ED75AF62811EC9205771CC4F9AE02.roa (hash: NW6HBZRtebEmp/7i48MrWPcyNaPh4Ushzt7ufQ/dX6A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:33:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 742 (0x2e6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C705E, serialNumber=83ACB50F96F6443F4B83D391F857BE7CB57E34C1 Validity Not Before: Aug 23 01:33:54 2025 GMT Not After : Aug 30 01:33:54 2025 GMT Subject: CN=68a91a82-207b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:72:78:32:ce:58:cd:95:56:70:c0:bf:ff:6b: 7b:4a:2b:e7:4b:cd:c6:93:1a:e5:5e:6d:51:23:48: f6:43:b3:18:a4:a5:fb:a7:28:5d:f7:5d:9a:cb:1c: b1:18:52:26:b5:b6:8a:84:fc:71:c7:6a:9d:b8:51: 61:c7:76:4b:33:f2:bd:c8:e7:be:5a:19:2d:d7:89: 2e:51:94:ea:66:fc:b4:15:8e:40:58:db:53:56:6c: 61:0b:75:fb:18:86:b4:f6:3e:cc:16:97:b2:2d:c2: ef:0b:d1:0b:b3:a9:b1:8e:1e:44:b0:8e:6f:86:06: 70:a4:b9:4c:30:dc:0a:16:79:27:04:17:9f:0e:2b: 97:9e:ce:ba:5f:bc:14:25:52:a7:a3:65:df:65:75: 4c:9a:41:f5:6b:87:5c:8f:e0:1f:46:4f:c7:35:7e: a4:51:3d:a5:af:06:4d:3d:54:11:68:26:6b:6b:a7: c9:96:c9:1e:fa:dd:8a:15:7a:a7:3f:cd:b9:36:73: 3a:72:7a:58:7d:98:dc:14:f4:49:b5:6d:f2:61:2b: 99:eb:eb:e0:3b:16:5c:64:da:28:f7:ca:11:15:5c: d7:11:d5:36:3c:54:8c:5e:44:5c:b4:9b:04:ad:bf: 88:f6:c0:8e:8b:29:f7:ce:dc:7d:b6:25:e4:b0:4b: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:30:AB:9A:3C:76:32:13:3D:FA:1F:5C:0C:EF:D7:9B:AF:BD:C7:C8 X509v3 Authority Key Identifier: keyid:83:AC:B5:0F:96:F6:44:3F:4B:83:D3:91:F8:57:BE:7C:B5:7E:34:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C705E/34DD4EE6F62411EC97234814C4F9AE02/g6y1D5b2RD9Lg9OR-Fe-fLV-NME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 92:52:c7:7b:27:ce:ef:7b:55:2c:c5:37:19:4a:37:0c:a4:24: 7d:29:97:df:5d:43:70:ae:fe:03:b0:41:7d:07:de:f4:72:72: 0a:4d:4f:c1:ad:6c:34:92:bf:56:8d:e7:d7:ac:dd:af:07:0e: 79:ba:5d:91:93:2e:dd:5b:61:13:14:e6:71:9c:a8:e4:52:f9: 0c:ad:3c:85:0e:84:ff:d8:b0:83:5c:aa:94:04:53:05:b8:54: 0d:86:26:67:9d:38:59:98:e2:f2:19:77:12:2e:cc:68:11:bc: 4b:8c:8f:a7:88:b8:2e:8c:b0:ef:a9:ea:22:67:e9:0e:5c:b9: 6e:7a:77:32:28:ed:dc:d3:fa:87:aa:57:f2:cf:7b:2e:c8:b1: 84:f0:76:14:67:8f:17:f7:0b:94:d1:81:f4:b0:7e:9c:a7:3b: a2:64:56:71:34:59:b7:44:6e:ac:e3:ef:d1:df:62:c6:f1:aa: d4:c0:74:e1:04:14:3c:4a:7e:58:48:b2:d6:d6:f6:0d:3e:cf: 26:5f:4d:be:c4:4e:44:e9:90:b2:37:46:f6:94:94:c0:bb:8c: 7d:5d:2a:c6:9d:19:72:fa:9b:e0:ad:b9:a0:9d:33:7a:b0:71: 0b:ab:a5:1d:fe:12:2e:a5:58:3e:2e:05:1b:57:ba:ed:29:66: 18:9e:e1:23 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAuYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzcwNUUxMTAvBgNVBAUTKDgzQUNCNTBGOTZGNjQ0M0Y0QjgzRDM5MUY4NTdCRTdD QjU3RTM0QzEwHhcNMjUwODIzMDEzMzU0WhcNMjUwODMwMDEzMzU0WjAYMRYwFAYD VQQDEw02OGE5MWE4Mi0yMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0nJ4Ms5YzZVWcMC//2t7SivnS83GkxrlXm1RI0j2Q7MYpKX7pyhd912ayxyx GFImtbaKhPxxx2qduFFhx3ZLM/K9yOe+Whkt14kuUZTqZvy0FY5AWNtTVmxhC3X7 GIa09j7MFpeyLcLvC9ELs6mxjh5EsI5vhgZwpLlMMNwKFnknBBefDiuXns66X7wU JVKno2XfZXVMmkH1a4dcj+AfRk/HNX6kUT2lrwZNPVQRaCZra6fJlske+t2KFXqn P825NnM6cnpYfZjcFPRJtW3yYSuZ6+vgOxZcZNoo98oRFVzXEdU2PFSMXkRctJsE rb+I9sCOiyn3ztx9tiXksEvFfQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAwwq5o8 djITPfofXAzv15uvvcfIMB8GA1UdIwQYMBaAFIOstQ+W9kQ/S4PTkfhXvny1fjTB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzA1RS8zNERENEVFNkY2 MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJEOUxnOU9SLUZlLWZMVi1O TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2c2eTFENWIyUkQ5TGc5T1ItRmUtZkxWLU5NRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NzA1RS8zNERENEVFNkY2MjQxMUVDOTcyMzQ4MTRDNEY5QUUwMi9nNnkxRDViMlJE OUxnOU9SLUZlLWZMVi1OTUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCSUsd7J87ve1UsxTcZSjcMpCR9KZffXUNwrv4DsEF9B970cnIKTU/B rWw0kr9WjefXrN2vBw55ul2Rky7dW2ETFOZxnKjkUvkMrTyFDoT/2LCDXKqUBFMF uFQNhiZnnThZmOLyGXcSLsxoEbxLjI+niLgujLDvqeoiZ+kOXLluencyKO3c0/qH qlfyz3suyLGE8HYUZ48X9wuU0YH0sH6cpzuiZFZxNFm3RG6s4+/R32LG8arUwHTh BBQ8Sn5YSLLW1vYNPs8mX02+xE5E6ZCyN0b2lJTAu4x9XSrGnRly+pvgrbmgnTN6 sHELq6Ud/hIupVg+LgUbV7rtKWYYnuEj -----END CERTIFICATE-----Generated at Sat Aug 23 18:58:43 2025 by rpki-client