$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft File: h6VQYbdfHcLFxbuH0omOgzB9hw8.mft (raw, json) Hash identifier: BR0wC2um9MCEHx+9pfpJh76iR+iodEJu65gMcLgh/1A= Subject key identifier: F2:15:CE:0B:6D:8D:C1:D8:58:14:F5:25:22:31:27:FC:24:37:3C:49 Authority key identifier: 87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F Certificate issuer: /CN=A91DD42F/serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Certificate serial: 0764 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft Manifest number: 0755 Signing time: Wed 02 Jul 2025 21:57:55 +0000 Manifest this update: Wed 02 Jul 2025 21:57:54 +0000 Manifest next update: Wed 09 Jul 2025 21:57:54 +0000 Files and hashes: 1: h6VQYbdfHcLFxbuH0omOgzB9hw8.crl (hash: Pk+9RiAO+ZOqy8B2/uK4A8SMvvQhDsg6pcNyia9Ou94=) 2: E20C4942DC7D11EDA2F7B651C4F9AE02.roa (hash: yD7Oq9ELTSwJW2k9G7WxgHSnfxXNkpi3+nKcvJopyDM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 21:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1892 (0x764) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD42F, serialNumber=87A55061B75F1DC2C5C5BB87D2898E83307D870F Validity Not Before: Jul 2 21:57:54 2025 GMT Not After : Jul 9 21:57:54 2025 GMT Subject: CN=6865ab62-e220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:f5:14:80:25:69:0a:95:e6:e2:18:14:9a: 83:0d:51:03:3d:22:45:64:bd:39:10:4e:7a:c5:51: 59:c6:34:60:e5:be:b4:cc:32:99:c5:95:56:db:2a: ad:98:52:72:82:65:5e:36:fb:3a:66:2c:e7:a9:55: 99:c3:de:97:b7:a1:a1:8c:29:16:5c:ff:45:4a:77: 72:04:10:02:70:d1:3b:7d:ff:e4:dc:bf:a9:89:aa: c0:2f:a2:3a:3f:1f:0e:e2:a1:a5:54:63:57:90:95: c8:85:90:bf:15:e4:0e:37:8d:ba:72:3b:cd:43:35: bf:30:ca:09:2a:79:6d:6a:72:8f:1f:3a:0b:5c:12: 09:43:01:9e:8b:8d:48:a9:b1:0a:b6:0b:d5:0f:e6: 9b:3d:47:90:77:69:f0:ec:12:78:65:20:85:44:db: e2:6f:f5:d8:1c:5e:c3:0c:f2:65:1c:ad:ed:c4:b6: 55:c2:66:4f:d2:db:86:52:20:62:81:63:f9:72:ad: 4d:94:d1:49:98:7d:05:c4:d6:15:6c:bf:f8:5a:3d: 4e:6c:cc:2a:c2:10:f9:10:27:49:e5:50:b8:e6:b9: 04:df:22:42:ae:40:f3:4b:52:9e:6f:63:0f:df:0c: da:6d:fe:f6:1a:4b:55:b4:16:50:38:0d:ac:9d:c3: 45:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:15:CE:0B:6D:8D:C1:D8:58:14:F5:25:22:31:27:FC:24:37:3C:49 X509v3 Authority Key Identifier: keyid:87:A5:50:61:B7:5F:1D:C2:C5:C5:BB:87:D2:89:8E:83:30:7D:87:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6VQYbdfHcLFxbuH0omOgzB9hw8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD42F/C8BA01BC2E2B11EB80EB7080C4F9AE02/h6VQYbdfHcLFxbuH0omOgzB9hw8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f1:44:8a:6a:7f:34:7e:7f:ed:92:50:df:1a:ab:06:f6:3d: cd:57:a6:71:23:d7:9f:ce:79:73:37:62:02:4e:7d:a2:85:d1: 28:eb:11:2f:8c:0f:b7:54:ec:6d:24:01:b4:98:79:30:cd:74: 58:f2:fb:82:de:17:1c:0d:6a:a3:79:fd:fb:8b:2e:3d:67:15: 6a:cd:33:ec:bb:2d:26:28:3c:17:32:0b:ce:fa:e2:8e:68:ae: 3b:86:e3:d0:8c:8a:38:3e:d5:bd:c9:a4:cc:79:cb:65:33:46: b9:e8:fb:11:c7:7d:f0:ef:95:de:0c:4a:e0:03:73:4d:1d:a9: a2:53:1f:8e:c4:09:2c:20:dd:c7:ed:e9:52:3c:88:46:bf:73: f0:07:ca:3d:30:5a:93:da:e4:1b:a6:0e:28:78:c9:f2:fd:e3: 2b:59:b1:6e:e7:57:00:d7:ef:10:2f:48:da:18:f7:b4:d0:52: 42:13:d8:ff:98:3f:56:0b:45:4c:d6:e0:86:90:09:62:18:61: 01:c8:77:2d:8e:a2:c0:cd:ad:a1:fc:5f:a2:19:7d:51:c7:26: 68:97:44:48:ff:56:e3:4d:a8:8f:f3:58:cb:2e:b0:dc:9a:94: df:cb:4f:39:f1:86:30:dd:ce:52:9e:65:29:c8:52:62:5c:d6: f0:3b:d3:0d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICB2QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQ0MkYxMTAvBgNVBAUTKDg3QTU1MDYxQjc1RjFEQzJDNUM1QkI4N0QyODk4RTgz MzA3RDg3MEYwHhcNMjUwNzAyMjE1NzU0WhcNMjUwNzA5MjE1NzU0WjAYMRYwFAYD VQQDEw02ODY1YWI2Mi1lMjIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2LD1FIAlaQqV5uIYFJqDDVEDPSJFZL05EE56xVFZxjRg5b60zDKZxZVW2yqt mFJygmVeNvs6ZiznqVWZw96Xt6GhjCkWXP9FSndyBBACcNE7ff/k3L+piarAL6I6 Px8O4qGlVGNXkJXIhZC/FeQON426cjvNQzW/MMoJKnltanKPHzoLXBIJQwGei41I qbEKtgvVD+abPUeQd2nw7BJ4ZSCFRNvib/XYHF7DDPJlHK3txLZVwmZP0tuGUiBi gWP5cq1NlNFJmH0FxNYVbL/4Wj1ObMwqwhD5ECdJ5VC45rkE3yJCrkDzS1Keb2MP 3wzabf72GktVtBZQOA2sncNFdwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPIVzgtt jcHYWBT1JSIxJ/wkNzxJMB8GA1UdIwQYMBaAFIelUGG3Xx3CxcW7h9KJjoMwfYcP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDQyRi9DOEJBMDFCQzJF MkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhjTEZ4YnVIMG9tT2d6Qjlo dzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2VlFZYmRmSGNMRnhidUgwb21PZ3pCOWh3OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDQyRi9DOEJBMDFCQzJFMkIxMUVCODBFQjcwODBDNEY5QUUwMi9oNlZRWWJkZkhj TEZ4YnVIMG9tT2d6QjlodzgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq8USKan80fn/tklDfGqsG9j3NV6ZxI9efznlzN2ICTn2ihdEo6xEv jA+3VOxtJAG0mHkwzXRY8vuC3hccDWqjef37iy49ZxVqzTPsuy0mKDwXMgvO+uKO aK47huPQjIo4PtW9yaTMectlM0a56PsRx33w75XeDErgA3NNHamiUx+OxAksIN3H 7elSPIhGv3PwB8o9MFqT2uQbpg4oeMny/eMrWbFu51cA1+8QL0jaGPe00FJCE9j/ mD9WC0VM1uCGkAliGGEByHctjqLAza2h/F+iGX1RxyZol0RI/1bjTaiP81jLLrDc mpTfy0858YYw3c5SnmUpyFJiXNbwO9MN -----END CERTIFICATE-----Generated at Fri Jul 4 21:17:00 2025 by rpki-client