$ rpki-client -vvf rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft File: 6HvQXvddUFllr1CWfUKLtf_-HME.mft (raw, json) Hash identifier: RyoDT1QKKo8gEhX94CIUOiB0lGtumcB9FUJF92XFDJc= Subject key identifier: CC:64:33:BC:26:36:36:02:29:6E:6C:21:F3:C9:31:40:19:1C:D5:8A Authority key identifier: E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 Certificate issuer: /CN=A9112327/serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Certificate serial: 09AE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft Manifest number: 09A7 Signing time: Sun 24 Aug 2025 20:04:27 +0000 Manifest this update: Sun 24 Aug 2025 20:04:27 +0000 Manifest next update: Sun 31 Aug 2025 20:04:27 +0000 Files and hashes: 1: 6HvQXvddUFllr1CWfUKLtf_-HME.crl (hash: 8gwvrO8DZrUULfodaq3pR8v9xywH/l1+W+i2J5LMOv4=) 2: 03643212905F11EA94823C28C4F9AE02.roa (hash: HOv6woKgZ16Bnc6yr+WXy4C1GAOaPia/dFqUxc6c7eU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 19:03:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2478 (0x9ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9112327, serialNumber=E87BD05EF75D505965AF50967D428BB5FFFE1CC1 Validity Not Before: Aug 24 20:04:27 2025 GMT Not After : Aug 31 20:04:27 2025 GMT Subject: CN=68ab704b-c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:75:e8:4b:67:b1:ba:ec:e3:02:3f:6b:66:0b: 5c:7c:b0:2c:39:1d:76:fa:56:43:19:7f:83:8a:6d: 78:bf:61:be:2e:fd:b9:8d:fb:f1:88:20:67:60:4f: d3:c1:15:94:87:a8:6a:32:b7:c9:79:8d:9d:fe:73: b8:24:d8:59:fb:67:b7:0a:a0:cf:a5:8b:24:01:88: 3f:98:ec:75:38:7b:65:9e:dc:30:6b:ba:2b:a7:d9: 1f:d1:99:70:9c:ea:c2:d0:fd:e6:ca:b6:78:73:d5: ff:57:d7:a3:5c:5b:c5:d7:c2:52:5e:be:1a:df:27: a9:d8:e6:f9:cf:10:17:ea:5b:a9:a4:49:ef:81:50: 82:7b:63:03:d4:25:dd:09:77:97:fa:1a:4a:0e:b0: e6:01:ff:a6:5d:1b:2a:6f:c9:bd:e3:b0:1b:95:45: 9d:df:e9:d6:a2:3e:29:a5:23:23:e9:fc:77:de:9e: 7a:4f:8c:47:7a:c9:a6:bb:5e:65:e4:de:4e:98:c6: 44:58:8c:16:44:7c:65:c4:f3:8e:f0:1d:cf:88:bd: 8e:f4:0e:86:ef:0c:65:57:b9:0d:64:ea:09:6d:fc: 02:23:27:5d:54:be:99:0e:20:b0:00:4e:a4:82:4c: 0a:19:e9:a8:aa:54:c6:e8:13:c7:50:7b:43:3e:7b: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:64:33:BC:26:36:36:02:29:6E:6C:21:F3:C9:31:40:19:1C:D5:8A X509v3 Authority Key Identifier: keyid:E8:7B:D0:5E:F7:5D:50:59:65:AF:50:96:7D:42:8B:B5:FF:FE:1C:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6HvQXvddUFllr1CWfUKLtf_-HME.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9112327/6DD2C034905D11EAA7BF7725C4F9AE02/6HvQXvddUFllr1CWfUKLtf_-HME.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:e5:a2:a4:eb:7b:84:60:7c:c2:da:cf:50:c3:d7:6e:31:46: 4e:04:a7:e0:c5:67:43:61:25:e0:21:ef:7d:f9:2d:c2:4e:b6: c5:7e:34:b7:cf:8a:8e:86:90:6c:ef:74:4b:26:4a:5d:80:cb: ea:93:3f:2a:4b:4b:e8:7a:11:03:7a:70:d6:db:70:6c:15:3b: 65:37:44:36:13:b4:f8:2c:b7:41:dc:e4:2f:ea:e8:93:cd:c2: 3f:a3:83:2a:43:d1:f9:3c:4a:44:e6:76:aa:28:b9:b0:8a:3d: 9e:c1:5e:1d:51:2f:0e:b8:81:6a:bd:55:d8:62:69:60:e2:c2: 7d:cf:e9:77:7f:07:4d:65:b7:8f:fc:68:d6:b2:7b:99:52:76: ea:de:9b:ad:5d:60:98:9b:32:1d:f4:9d:ed:27:c4:c4:a3:4d: e4:a7:3b:93:46:82:01:33:5d:8b:32:39:28:42:c2:9a:37:d9: 10:c7:f1:49:11:d1:ef:19:fc:3b:00:51:fe:d7:b9:a8:ec:b8: df:f5:03:05:79:51:99:ab:b6:a9:d6:3b:1e:58:d9:96:f9:e8: 0d:ba:cd:98:42:06:35:ff:b7:cc:09:6d:c8:83:f0:99:7d:f0: 8c:1e:d5:0e:2a:a6:e9:1e:a4:e3:4d:57:5e:70:cd:37:5a:d6: 8f:c5:45:20 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTIzMjcxMTAvBgNVBAUTKEU4N0JEMDVFRjc1RDUwNTk2NUFGNTA5NjdENDI4QkI1 RkZGRTFDQzEwHhcNMjUwODI0MjAwNDI3WhcNMjUwODMxMjAwNDI3WjAYMRYwFAYD VQQDEw02OGFiNzA0Yi1jN2UzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAznXoS2exuuzjAj9rZgtcfLAsOR12+lZDGX+Dim14v2G+Lv25jfvxiCBnYE/T wRWUh6hqMrfJeY2d/nO4JNhZ+2e3CqDPpYskAYg/mOx1OHtlntwwa7orp9kf0Zlw nOrC0P3myrZ4c9X/V9ejXFvF18JSXr4a3yep2Ob5zxAX6luppEnvgVCCe2MD1CXd CXeX+hpKDrDmAf+mXRsqb8m947AblUWd3+nWoj4ppSMj6fx33p56T4xHesmmu15l 5N5OmMZEWIwWRHxlxPOO8B3PiL2O9A6G7wxlV7kNZOoJbfwCIyddVL6ZDiCwAE6k gkwKGemoqlTG6BPHUHtDPnuURQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMxkM7wm NjYCKW5sIfPJMUAZHNWKMB8GA1UdIwQYMBaAFOh70F73XVBZZa9Qln1Ci7X//hzB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMjMyNy82REQyQzAzNDkw NUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVGbGxyMUNXZlVLTHRmXy1I TUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZIdlFYdmRkVUZsbHIxQ1dmVUtMdGZfLUhNRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjMyNy82REQyQzAzNDkwNUQxMUVBQTdCRjc3MjVDNEY5QUUwMi82SHZRWHZkZFVG bGxyMUNXZlVLTHRmXy1ITUUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBR5aKk63uEYHzC2s9Qw9duMUZOBKfgxWdDYSXgIe99+S3CTrbFfjS3 z4qOhpBs73RLJkpdgMvqkz8qS0voehEDenDW23BsFTtlN0Q2E7T4LLdB3OQv6uiT zcI/o4MqQ9H5PEpE5naqKLmwij2ewV4dUS8OuIFqvVXYYmlg4sJ9z+l3fwdNZbeP /GjWsnuZUnbq3putXWCYmzId9J3tJ8TEo03kpzuTRoIBM12LMjkoQsKaN9kQx/FJ EdHvGfw7AFH+17mo7Ljf9QMFeVGZq7ap1jseWNmW+egNus2YQgY1/7fMCW3Ig/CZ ffCMHtUOKqbpHqTjTVdecM03WtaPxUUg -----END CERTIFICATE-----Generated at Sun Aug 24 22:11:24 2025 by rpki-client