$ rpki-client -vvf rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft File: a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft (raw, json) Hash identifier: HqK5N/sGXCdg/mimtskzML55sXOoaAvapVha3olqC88= Subject key identifier: D8:B0:85:3A:0B:48:07:BD:93:8C:46:6E:EA:81:7F:C7:5A:E3:F5:E8 Authority key identifier: 6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E Certificate issuer: /CN=A91977B8/serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Certificate serial: 0111 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft Manifest number: 0109 Signing time: Wed 23 Jul 2025 05:24:02 +0000 Manifest this update: Wed 23 Jul 2025 05:24:01 +0000 Manifest next update: Wed 30 Jul 2025 05:24:01 +0000 Files and hashes: 1: a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl (hash: Dp5czjhxKHzn2wMG4xLEOJ+nRMBWeD1nap396N6R39U=) 2: B35DF2B8FBA211EEA8D1C351C4F9AE02.roa (hash: zfwutZduKqp+OFtvgPQ9BbGwso4D1FrRlH6RE6jDpUM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Jul 2025 05:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 273 (0x111) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91977B8, serialNumber=6BA99ED6391A67CCA610E565F453EB0912514F0E Validity Not Before: Jul 23 05:24:01 2025 GMT Not After : Jul 30 05:24:01 2025 GMT Subject: CN=688071f1-783c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a7:2d:d9:5e:66:c3:36:5e:30:2b:68:8d:7e: cc:d7:e7:8c:d1:a2:e4:3d:a8:52:21:7e:9d:cd:35: 2f:8b:91:ea:16:9a:3a:d6:df:32:cf:7c:50:9c:75: c5:9a:1b:58:a1:d6:b6:7d:52:23:77:f1:60:c4:aa: 21:a7:e6:ed:d4:b9:64:a7:c9:1a:1a:0b:d3:73:9f: 3e:36:1b:06:d5:27:21:d3:54:8a:fb:4e:f6:1e:57: 98:38:0b:93:85:04:08:22:21:1c:a4:44:df:4a:8d: d1:92:6e:fe:8b:9a:b2:16:47:df:dc:26:ad:ed:a3: 0b:a2:f0:ca:30:c7:63:fc:67:fe:35:63:86:ae:6b: f0:13:fd:d9:04:d4:36:cf:72:32:83:ab:29:53:3a: 20:06:dd:e8:cd:f2:25:9f:26:95:50:4c:75:18:37: ca:bb:eb:b5:80:bc:37:17:f8:1e:2c:86:d3:a8:67: 5e:0b:f7:30:0e:18:59:e1:b0:a9:0b:0b:8a:d0:2c: 42:05:6d:76:ee:66:04:8e:e8:c3:b2:ce:18:62:23: 00:db:1d:3a:b1:75:43:5f:9c:5d:e3:ca:c5:98:f7: 79:62:6e:f3:a2:8a:54:77:1c:0c:04:d0:a6:24:95: 3d:de:07:51:f6:57:c3:54:33:5c:87:43:37:0b:34: 98:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B0:85:3A:0B:48:07:BD:93:8C:46:6E:EA:81:7F:C7:5A:E3:F5:E8 X509v3 Authority Key Identifier: keyid:6B:A9:9E:D6:39:1A:67:CC:A6:10:E5:65:F4:53:EB:09:12:51:4F:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a6me1jkaZ8ymEOVl9FPrCRJRTw4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91977B8/0AB07404E1F011EE901A6085C4F9AE02/a6me1jkaZ8ymEOVl9FPrCRJRTw4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d8:01:ac:8e:f4:5a:2e:98:14:50:cd:95:b9:20:df:39:ca: b4:bf:4c:8e:a0:1e:51:7a:e5:28:1f:10:08:af:0e:3d:82:c8: b0:5c:dc:d3:8d:e8:e6:84:cc:f8:1a:08:5f:ff:cd:a7:b3:bb: 4f:c3:49:16:55:c7:b6:a8:a5:a0:7a:a9:e9:57:aa:a8:1a:c0: 6a:2b:d4:bc:7f:bc:a2:a9:8d:17:1b:bf:53:c1:f7:43:3f:77: 08:13:b2:88:b6:e2:87:9b:bb:c9:27:16:21:7c:a3:c3:4a:9d: e2:47:f7:73:29:5e:75:ec:7a:d0:99:2a:bf:3e:64:0e:89:c5: 46:2f:48:77:35:00:c8:ab:88:83:d9:2b:d3:77:88:d3:35:99: 52:ed:dd:56:19:ea:c5:ea:be:86:f0:78:0f:36:af:73:e0:34: 4a:04:36:0d:57:d3:ba:d4:1d:05:f7:21:b7:80:ea:e7:e1:50: 1e:90:31:9c:66:c6:00:12:5a:cc:5b:73:b4:28:73:4c:8e:33: 57:7b:91:49:80:60:60:b8:ce:b2:d3:c2:c9:5e:73:b4:18:41: 5b:e6:11:5b:c8:1a:10:ed:a0:6d:07:78:da:59:ad:28:61:b3: b1:fb:ae:94:ec:17:9c:ee:4d:97:28:33:e5:69:18:7d:81:f5: 8c:a0:6a:e4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAREwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTc3QjgxMTAvBgNVBAUTKDZCQTk5RUQ2MzkxQTY3Q0NBNjEwRTU2NUY0NTNFQjA5 MTI1MTRGMEUwHhcNMjUwNzIzMDUyNDAxWhcNMjUwNzMwMDUyNDAxWjAYMRYwFAYD VQQDEw02ODgwNzFmMS03ODNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6ct2V5mwzZeMCtojX7M1+eM0aLkPahSIX6dzTUvi5HqFpo61t8yz3xQnHXF mhtYoda2fVIjd/FgxKohp+bt1Llkp8kaGgvTc58+NhsG1Sch01SK+072HleYOAuT hQQIIiEcpETfSo3Rkm7+i5qyFkff3Cat7aMLovDKMMdj/Gf+NWOGrmvwE/3ZBNQ2 z3Iyg6spUzogBt3ozfIlnyaVUEx1GDfKu+u1gLw3F/geLIbTqGdeC/cwDhhZ4bCp CwuK0CxCBW127mYEjujDss4YYiMA2x06sXVDX5xd48rFmPd5Ym7zoopUdxwMBNCm JJU93gdR9lfDVDNch0M3CzSYuQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNiwhToL SAe9k4xGbuqBf8da4/XoMB8GA1UdIwQYMBaAFGupntY5GmfMphDlZfRT6wkSUU8O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzdCOC8wQUIwNzQwNEUx RjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4eW1FT1ZsOUZQckNSSlJU dzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2E2bWUxamthWjh5bUVPVmw5RlByQ1JKUlR3NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzdCOC8wQUIwNzQwNEUxRjAxMUVFOTAxQTYwODVDNEY5QUUwMi9hNm1lMWprYVo4 eW1FT1ZsOUZQckNSSlJUdzQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBq2AGsjvRaLpgUUM2VuSDfOcq0v0yOoB5ReuUoHxAIrw49gsiwXNzT jejmhMz4Gghf/82ns7tPw0kWVce2qKWgeqnpV6qoGsBqK9S8f7yiqY0XG79TwfdD P3cIE7KItuKHm7vJJxYhfKPDSp3iR/dzKV517HrQmSq/PmQOicVGL0h3NQDIq4iD 2SvTd4jTNZlS7d1WGerF6r6G8HgPNq9z4DRKBDYNV9O61B0F9yG3gOrn4VAekDGc ZsYAElrMW3O0KHNMjjNXe5FJgGBguM6y08LJXnO0GEFb5hFbyBoQ7aBtB3jaWa0o YbOx+66U7Bec7k2XKDPlaRh9gfWMoGrk -----END CERTIFICATE-----Generated at Thu Jul 24 12:17:43 2025 by rpki-client