$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft File: 6IdrUasrF3RAzUxM0uTwpZjgOBw.mft (raw, json) Hash identifier: uULWUOYCRz4ntvuOhhcEBjMxv1aUgobDduLRkUcsKPI= Subject key identifier: D5:CF:57:B9:A6:E5:A5:6A:C9:7E:6E:83:81:00:96:4D:11:8C:6F:F6 Authority key identifier: E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C Certificate issuer: /CN=A913AE23/serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Certificate serial: DD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft Manifest number: D5 Signing time: Mon 21 Jul 2025 05:49:08 +0000 Manifest this update: Mon 21 Jul 2025 05:49:08 +0000 Manifest next update: Mon 28 Jul 2025 05:49:07 +0000 Files and hashes: 1: 6IdrUasrF3RAzUxM0uTwpZjgOBw.crl (hash: Ruu4qXrD/UudVGaPfNV9W5LHuT533y947xOmVyDf7YM=) 2: 20B02A7A2C6D11EF9E3D5230C4F9AE02.roa (hash: Rih/Wk+3SaEqReLV35PtgcGk6bxkA/LfVhv9nN+xmq4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 05:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=E8876B51AB2B177440CD4C4CD2E4F0A598E0381C Validity Not Before: Jul 21 05:49:08 2025 GMT Not After : Jul 28 05:49:07 2025 GMT Subject: CN=687dd4d4-a594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f5:c8:60:e1:fd:99:a4:c2:42:d2:26:01:fb: 7b:98:11:13:6a:d5:ea:2e:ad:21:ac:4e:fd:56:f4: 1a:ca:4a:b5:52:fd:33:78:24:af:65:9b:62:d9:14: bb:02:01:c6:15:d7:b3:42:ff:75:40:ee:28:97:d3: 4d:2f:4c:ec:4f:11:39:8d:39:54:78:16:94:de:71: 76:cf:98:cd:2b:2d:98:7e:70:0b:d4:91:2d:bc:6f: 48:90:4c:f3:35:0c:f9:22:c5:36:bc:2a:6a:6b:e5: 12:59:47:0b:f1:54:06:a9:f1:d4:80:78:5d:5e:29: de:71:c6:26:61:fd:91:5e:46:28:1d:c9:ad:21:54: 10:2d:ed:69:2b:8a:28:b5:d0:2d:ea:bb:9f:ed:58: 31:7d:c0:d4:17:ea:e5:45:12:cb:22:f1:0a:b4:30: b4:03:e6:7e:59:38:97:8b:94:19:ec:83:a0:fc:56: e0:6c:06:f3:e0:a3:08:1c:5a:d3:9e:4c:c5:73:a2: 97:92:70:d5:66:f9:e1:c2:5a:38:cf:ac:b3:de:a2: d1:57:61:89:e9:86:81:5f:44:34:b9:8a:8f:1e:16: 07:f7:7c:b8:9e:14:e2:90:89:d8:c5:2c:86:c2:c4: 2c:07:4b:8c:28:65:f7:26:dc:68:ba:27:8b:3c:fa: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:CF:57:B9:A6:E5:A5:6A:C9:7E:6E:83:81:00:96:4D:11:8C:6F:F6 X509v3 Authority Key Identifier: keyid:E8:87:6B:51:AB:2B:17:74:40:CD:4C:4C:D2:E4:F0:A5:98:E0:38:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6IdrUasrF3RAzUxM0uTwpZjgOBw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/3A72ABFA2C6C11EFA346942DC4F9AE02/6IdrUasrF3RAzUxM0uTwpZjgOBw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 29:29:45:c6:c8:4d:7c:38:f2:d7:e7:6e:4e:c1:86:76:aa:89: 39:8b:ee:21:89:93:a5:43:b3:9b:ac:27:20:76:a5:11:85:2b: 73:60:71:b1:ca:ea:03:ad:30:d2:6c:02:ca:0c:2a:52:bf:82: 9d:3c:29:7e:1b:4d:d5:db:6c:c1:f4:f9:fa:b6:ba:b4:74:c8: c5:bf:a7:e0:48:2f:39:56:c7:de:88:6a:14:58:25:bf:df:f1: 2b:fb:07:e2:13:b7:41:1b:28:50:1c:c1:54:c9:d8:de:78:90: f1:e8:9e:a2:47:9a:2a:2b:0e:ea:38:79:c3:33:a9:5a:2e:d1: e4:43:49:ec:5a:8e:1a:8b:3b:84:da:93:a1:e1:cb:d3:7b:a0: 6c:5b:78:14:36:76:d0:5b:57:6d:d0:c0:cb:d1:ec:69:f1:fd: c4:06:e1:e0:07:77:0a:b1:ed:ae:1d:03:74:22:e5:fc:70:2c: f2:5d:81:40:47:2a:b8:49:9e:e8:49:5e:73:30:f4:11:2a:a8: f1:a4:eb:0a:5b:01:26:aa:41:fb:5d:cd:ab:8e:8e:74:22:4c: a8:19:16:5a:46:f2:d5:a2:6f:1d:69:b7:16:2f:88:65:e4:63: 9e:59:91:f7:e5:22:d0:4a:5d:37:af:2c:3c:5f:32:8d:51:13: eb:1d:39:40 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKEU4ODc2QjUxQUIyQjE3NzQ0MENENEM0Q0QyRTRGMEE1 OThFMDM4MUMwHhcNMjUwNzIxMDU0OTA4WhcNMjUwNzI4MDU0OTA3WjAYMRYwFAYD VQQDEw02ODdkZDRkNC1hNTk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1fXIYOH9maTCQtImAft7mBETatXqLq0hrE79VvQaykq1Uv0zeCSvZZti2RS7 AgHGFdezQv91QO4ol9NNL0zsTxE5jTlUeBaU3nF2z5jNKy2YfnAL1JEtvG9IkEzz NQz5IsU2vCpqa+USWUcL8VQGqfHUgHhdXineccYmYf2RXkYoHcmtIVQQLe1pK4oo tdAt6ruf7VgxfcDUF+rlRRLLIvEKtDC0A+Z+WTiXi5QZ7IOg/FbgbAbz4KMIHFrT nkzFc6KXknDVZvnhwlo4z6yz3qLRV2GJ6YaBX0Q0uYqPHhYH93y4nhTikInYxSyG wsQsB0uMKGX3JtxouieLPPpBqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNXPV7mm 5aVqyX5ug4EAlk0RjG/2MB8GA1UdIwQYMBaAFOiHa1GrKxd0QM1MTNLk8KWY4Dgc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zQTcyQUJGQTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYzUkF6VXhNMHVUd3BaamdP QncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJZHJVYXNyRjNSQXpVeE0wdVR3cFpqZ09Cdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz QUUyMy8zQTcyQUJGQTJDNkMxMUVGQTM0Njk0MkRDNEY5QUUwMi82SWRyVWFzckYz UkF6VXhNMHVUd3BaamdPQncubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQApKUXGyE18OPLX525OwYZ2qok5i+4hiZOlQ7ObrCcgdqURhStzYHGx yuoDrTDSbALKDCpSv4KdPCl+G03V22zB9Pn6trq0dMjFv6fgSC85VsfeiGoUWCW/ 3/Er+wfiE7dBGyhQHMFUydjeeJDx6J6iR5oqKw7qOHnDM6laLtHkQ0nsWo4aizuE 2pOh4cvTe6BsW3gUNnbQW1dt0MDL0exp8f3EBuHgB3cKse2uHQN0IuX8cCzyXYFA Ryq4SZ7oSV5zMPQRKqjxpOsKWwEmqkH7Xc2rjo50IkyoGRZaRvLVom8dabcWL4hl 5GOeWZH35SLQSl03ryw8XzKNURPrHTlA -----END CERTIFICATE-----Generated at Tue Jul 22 05:20:28 2025 by rpki-client