$ rpki-client -vvf rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft File: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft (raw, json) Hash identifier: 0aSHCxW9O2kWoByUSNa6FqR1Vqng2X+UAHHQqY0B/ic= Subject key identifier: 23:83:38:86:B3:66:31:A3:9B:5E:DF:2D:16:9E:91:20:74:7D:B6:49 Authority key identifier: AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 Certificate issuer: /CN=A91E8CB0/serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Certificate serial: 020A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft Manifest number: 0205 Signing time: Sat 23 Aug 2025 02:26:15 +0000 Manifest this update: Sat 23 Aug 2025 02:26:14 +0000 Manifest next update: Sat 30 Aug 2025 02:26:14 +0000 Files and hashes: 1: r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl (hash: UYZ+KBu61uA4biMu+bZmSPO8pLCDcD3rxNi31nAe9tM=) 2: F11BA4EA75B811EDA34F9687C4F9AE02.roa (hash: ZxJWdKT+dhhJyfungVSpx3334JD5sGMO+S5A+zHFl74=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 522 (0x20a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E8CB0, serialNumber=AFA6D7BDC37B64C8F146EEA61736D3D45178FB37 Validity Not Before: Aug 23 02:26:14 2025 GMT Not After : Aug 30 02:26:14 2025 GMT Subject: CN=68a926c6-50f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:96:d0:d1:43:eb:a3:62:36:14:1e:8d:5b:82: 5d:2c:f4:9c:46:18:d2:27:49:5f:2e:fd:ed:e9:7d: 27:98:4e:76:47:f6:21:69:dc:7f:91:f9:41:d1:9e: 18:ab:d0:14:1d:ac:39:e9:c2:11:ec:6b:6d:c3:7e: e2:1e:13:93:c1:f3:fa:ce:ee:07:ea:62:1c:41:7d: ce:0d:1b:62:9f:44:9f:30:99:c8:af:99:8d:d9:65: 4f:c2:00:3c:a5:03:42:43:94:5e:cb:f9:51:ef:64: a8:37:3d:66:74:b0:42:0b:6d:00:24:7b:06:5d:29: af:e6:6a:35:cb:9a:ca:db:49:94:14:55:22:14:ec: 32:7d:51:e6:9d:8a:89:6d:fa:b4:ec:b7:86:62:8c: fb:6a:22:09:ef:f2:74:41:9c:fe:56:ce:74:22:59: 78:26:2b:47:85:8c:7f:d5:6f:c6:7f:47:65:17:fd: 1a:11:4b:14:b1:3f:22:6d:d1:32:b7:27:64:21:94: e4:2d:5a:6c:e4:fe:77:87:a4:85:25:b1:7d:d8:cb: 91:79:c3:cc:cd:c8:b6:3d:50:98:15:96:3b:dd:f5: ca:1e:a4:17:57:80:19:bf:0e:e6:01:e3:30:9a:df: b5:17:32:ed:b5:bb:0e:e1:95:5d:d4:2f:de:5b:1d: d2:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:83:38:86:B3:66:31:A3:9B:5E:DF:2D:16:9E:91:20:74:7D:B6:49 X509v3 Authority Key Identifier: keyid:AF:A6:D7:BD:C3:7B:64:C8:F1:46:EE:A6:17:36:D3:D4:51:78:FB:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E8CB0/3770124E6BC511ED866A7D5EC4F9AE02/r6bXvcN7ZMjxRu6mFzbT1FF4-zc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c1:e3:11:35:7e:ee:d3:22:8f:64:83:36:41:ba:30:7b:7d: 36:41:70:35:0b:ff:e6:4d:48:96:48:3e:8b:15:cb:b4:68:90: 9e:92:47:1b:19:3c:e8:bc:4d:a0:70:cb:84:13:06:f5:78:b5: 3a:15:3d:73:3d:0f:c6:81:6e:d3:c1:8c:c1:16:f0:f1:78:cb: 4f:4a:aa:af:55:28:0a:20:82:28:e1:72:06:8a:6a:63:22:08: bc:23:24:de:74:61:34:e2:b0:c8:57:cf:22:ec:9c:46:a2:61: b2:7f:cf:04:4d:56:b8:60:8c:6a:8e:41:47:34:14:ea:e4:32: bd:66:db:73:17:b8:ee:29:f8:00:7b:5e:07:71:79:10:43:07: a7:4d:69:a2:c6:b2:77:18:a7:7b:6f:52:6d:d4:86:d7:1b:cf: 62:51:f5:1e:db:9c:b5:a3:6a:ba:00:17:0c:cd:b5:da:98:bd: 19:12:88:c7:3e:6e:be:df:ae:30:95:82:7d:f3:5d:83:07:25: 59:64:5e:e6:aa:69:55:2e:44:8a:14:4b:d4:ad:67:71:15:91: 51:e2:ba:ce:5c:98:29:c2:a7:10:3e:15:63:a3:7d:5f:41:eb: b2:40:9d:a7:1c:90:fa:0f:33:a0:ea:ed:67:3d:20:9b:8f:9b: bf:08:6b:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAgowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RThDQjAxMTAvBgNVBAUTKEFGQTZEN0JEQzM3QjY0QzhGMTQ2RUVBNjE3MzZEM0Q0 NTE3OEZCMzcwHhcNMjUwODIzMDIyNjE0WhcNMjUwODMwMDIyNjE0WjAYMRYwFAYD VQQDEw02OGE5MjZjNi01MGYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA75bQ0UPro2I2FB6NW4JdLPScRhjSJ0lfLv3t6X0nmE52R/Yhadx/kflB0Z4Y q9AUHaw56cIR7Gttw37iHhOTwfP6zu4H6mIcQX3ODRtin0SfMJnIr5mN2WVPwgA8 pQNCQ5Rey/lR72SoNz1mdLBCC20AJHsGXSmv5mo1y5rK20mUFFUiFOwyfVHmnYqJ bfq07LeGYoz7aiIJ7/J0QZz+Vs50Ill4JitHhYx/1W/Gf0dlF/0aEUsUsT8ibdEy tydkIZTkLVps5P53h6SFJbF92MuRecPMzci2PVCYFZY73fXKHqQXV4AZvw7mAeMw mt+1FzLttbsO4ZVd1C/eWx3SJwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCODOIaz ZjGjm17fLRaekSB0fbZJMB8GA1UdIwQYMBaAFK+m173De2TI8Ubuphc209RRePs3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOENCMC8zNzcwMTI0RTZC QzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pNanhSdTZtRnpiVDFGRjQt emMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3I2Ylh2Y043Wk1qeFJ1Nm1GemJUMUZGNC16Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF OENCMC8zNzcwMTI0RTZCQzUxMUVEODY2QTdENUVDNEY5QUUwMi9yNmJYdmNON1pN anhSdTZtRnpiVDFGRjQtemMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtweMRNX7u0yKPZIM2Qbowe302QXA1C//mTUiWSD6LFcu0aJCekkcb GTzovE2gcMuEEwb1eLU6FT1zPQ/GgW7TwYzBFvDxeMtPSqqvVSgKIIIo4XIGimpj Igi8IyTedGE04rDIV88i7JxGomGyf88ETVa4YIxqjkFHNBTq5DK9ZttzF7juKfgA e14HcXkQQwenTWmixrJ3GKd7b1Jt1IbXG89iUfUe25y1o2q6ABcMzbXamL0ZEojH Pm6+364wlYJ9812DByVZZF7mqmlVLkSKFEvUrWdxFZFR4rrOXJgpwqcQPhVjo31f QeuyQJ2nHJD6DzOg6u1nPSCbj5u/CGv9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:04:01 2025 by rpki-client