$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft File: K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft (raw, json) Hash identifier: YAbXhIbsbkSj3SCG1Sh3F0CHVUdswFLWyNyP0gIhlkQ= Subject key identifier: 56:8A:CB:BB:86:94:FE:6F:9A:57:5B:17:A4:CE:89:9D:EA:2E:47:32 Authority key identifier: 2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB Certificate issuer: /CN=A91FC1E4/serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB Certificate serial: FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft Manifest number: FA Signing time: Sat 23 Aug 2025 05:21:50 +0000 Manifest this update: Sat 23 Aug 2025 05:21:49 +0000 Manifest next update: Sat 30 Aug 2025 05:21:49 +0000 Files and hashes: 1: K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl (hash: /LirK/LWFEGF0/ZMm31xmS6lq+NC2irIVWk2HmC1ByM=) 2: C820C000061E11EFA13A0F4AC4F9AE02.roa (hash: 0DUWhAlOmYMH58y7cT6IWqOSq8FJJK/e/LROrKNRNG4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:21:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 253 (0xfd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FC1E4, serialNumber=2BA78BFED9C147EFFEC881D9C736F68F585534CB Validity Not Before: Aug 23 05:21:49 2025 GMT Not After : Aug 30 05:21:49 2025 GMT Subject: CN=68a94fee-7fc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c6:56:e0:11:a9:94:39:90:a3:93:90:88:80: 3a:42:31:bc:5f:22:03:f3:e4:b9:cb:4b:e9:50:d2: a9:34:20:dc:a2:94:94:53:e5:bf:0a:99:e0:48:96: ab:14:fc:48:ff:57:27:93:05:d0:1c:50:2d:a1:7e: 5b:d6:aa:15:56:54:a2:ee:de:de:7c:5f:cc:d4:7a: 07:d2:9c:a8:8b:62:a9:ea:4c:e5:14:c2:ce:86:fb: 64:6d:93:0a:c5:ff:79:ff:6a:c1:a6:8a:1c:b9:cc: 28:b2:9f:3a:71:22:a9:09:45:c1:91:00:b6:49:61: 8b:08:95:70:44:04:82:c5:8b:ae:47:df:dd:b2:b4: ac:8b:4b:b9:9e:ae:bf:25:3d:80:36:e5:44:60:44: 5d:2d:f5:cc:bc:71:d0:8a:fe:3b:7f:1c:5e:1e:6a: 5d:f3:e4:d2:63:a0:6d:58:81:40:ed:56:82:47:a7: 3d:df:75:3c:8e:c6:3e:70:4d:98:fe:72:eb:f6:fd: 24:e3:59:86:6c:75:23:df:48:fe:37:95:89:24:84: f9:a4:14:27:d5:d3:e8:b1:c4:35:10:ff:b3:f0:ff: fd:d1:4a:74:b4:30:ae:44:de:47:ae:a9:a8:21:e0: a9:89:26:5f:3b:16:ec:66:34:e5:cb:18:58:ad:b4: c0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8A:CB:BB:86:94:FE:6F:9A:57:5B:17:A4:CE:89:9D:EA:2E:47:32 X509v3 Authority Key Identifier: keyid:2B:A7:8B:FE:D9:C1:47:EF:FE:C8:81:D9:C7:36:F6:8F:58:55:34:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6eL_tnBR-_-yIHZxzb2j1hVNMs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1E4/2FD0CA98061911EFA926A723C4F9AE02/K6eL_tnBR-_-yIHZxzb2j1hVNMs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption af:09:fa:5e:69:71:7e:b7:f0:b6:5c:b8:18:cc:4b:f6:b6:2f: 5b:35:e0:ac:5c:20:18:2b:31:08:dd:78:7c:32:76:60:d4:5d: d2:c5:d6:86:18:7d:42:ed:d3:b0:5c:37:bb:c6:40:51:a3:64: c2:d5:41:9d:e9:3c:3e:86:6a:91:ee:00:cd:d3:ad:3f:4b:75: 61:84:16:70:58:c7:7d:4c:16:35:be:c4:5e:46:99:6e:25:cc: 22:39:ec:8d:e2:87:a3:47:c8:57:99:b2:14:26:8b:75:9a:36: 83:7c:73:bc:a4:3f:dc:2f:56:67:81:a0:00:da:80:62:72:67: fc:f1:47:d1:eb:4c:e9:66:9b:fd:39:55:a2:62:92:8d:21:40: 65:27:50:b3:5c:4f:10:f6:e5:bb:91:bc:9f:bb:c8:2d:80:6f: 58:41:3e:03:81:4b:ef:f6:a4:00:6a:5f:65:6f:09:a8:7c:14: 46:8e:ac:9a:e2:3b:c1:5a:4d:23:12:4d:44:5c:ef:51:12:d7: 0b:f2:95:03:9d:7b:2f:b9:38:3a:8a:55:3f:dc:70:fc:a1:72: 2a:3a:1a:83:68:27:33:51:41:67:0b:1f:1b:56:c6:6b:8b:68: e9:56:4c:88:d7:9c:ed:a5:10:ef:4c:48:5e:15:9c:78:15:7e: 58:96:84:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkMxRTQxMTAvBgNVBAUTKDJCQTc4QkZFRDlDMTQ3RUZGRUM4ODFEOUM3MzZGNjhG NTg1NTM0Q0IwHhcNMjUwODIzMDUyMTQ5WhcNMjUwODMwMDUyMTQ5WjAYMRYwFAYD VQQDEw02OGE5NGZlZS03ZmMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcZW4BGplDmQo5OQiIA6QjG8XyID8+S5y0vpUNKpNCDcopSUU+W/CpngSJar FPxI/1cnkwXQHFAtoX5b1qoVVlSi7t7efF/M1HoH0pyoi2Kp6kzlFMLOhvtkbZMK xf95/2rBpoocucwosp86cSKpCUXBkQC2SWGLCJVwRASCxYuuR9/dsrSsi0u5nq6/ JT2ANuVEYERdLfXMvHHQiv47fxxeHmpd8+TSY6BtWIFA7VaCR6c933U8jsY+cE2Y /nLr9v0k41mGbHUj30j+N5WJJIT5pBQn1dPoscQ1EP+z8P/90Up0tDCuRN5Hrqmo IeCpiSZfOxbsZjTlyxhYrbTAjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFaKy7uG lP5vmldbF6TOiZ3qLkcyMB8GA1UdIwQYMBaAFCuni/7ZwUfv/siB2cc29o9YVTTL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFFNC8yRkQwQ0E5ODA2 MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlItXy15SUhaeHpiMmoxaFZO TXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2ZUxfdG5CUi1fLXlJSFp4emIyajFoVk5Ncy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QzFFNC8yRkQwQ0E5ODA2MTkxMUVGQTkyNkE3MjNDNEY5QUUwMi9LNmVMX3RuQlIt Xy15SUhaeHpiMmoxaFZOTXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCvCfpeaXF+t/C2XLgYzEv2ti9bNeCsXCAYKzEI3Xh8MnZg1F3SxdaG GH1C7dOwXDe7xkBRo2TC1UGd6Tw+hmqR7gDN060/S3VhhBZwWMd9TBY1vsReRplu JcwiOeyN4oejR8hXmbIUJot1mjaDfHO8pD/cL1ZngaAA2oBicmf88UfR60zpZpv9 OVWiYpKNIUBlJ1CzXE8Q9uW7kbyfu8gtgG9YQT4DgUvv9qQAal9lbwmofBRGjqya 4jvBWk0jEk1EXO9REtcL8pUDnXsvuTg6ilU/3HD8oXIqOhqDaCczUUFnCx8bVsZr i2jpVkyI15ztpRDvTEheFZx4FX5YloSg -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:05 2025 by rpki-client