$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: yBmmxCeQzD75eVhqzpXz8ILK53CkAcY5VDgZmFXfeWs= Subject key identifier: F1:64:EE:F1:AF:31:09:47:93:49:84:BD:05:75:77:25:25:9F:CF:15 Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D7C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D73 Signing time: Sat 06 Sep 2025 18:05:12 +0000 Manifest this update: Sat 06 Sep 2025 18:05:12 +0000 Manifest next update: Sat 13 Sep 2025 18:05:12 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: 9ma8Fqw4TxnP5Vs1/JS4Lb0ygnwGt3awKpGun+r08hc=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3452 (0xd7c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: Sep 6 18:05:12 2025 GMT Not After : Sep 13 18:05:12 2025 GMT Subject: CN=68bc77d8-ea21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:b4:fd:7b:83:a5:4f:2c:8b:59:ac:f6:c4: 88:19:53:f3:32:03:8a:00:13:a2:6d:c2:24:f7:e2: 56:79:df:dd:2f:c2:8c:82:4e:53:88:d8:f9:b3:2a: bf:8c:63:03:8a:b3:38:3f:cc:1b:08:7c:ca:6d:ae: 4c:5f:a8:36:c2:86:3d:82:7f:53:68:81:4d:5f:11: ec:03:9b:1b:02:b5:35:02:80:16:ee:4d:1c:c2:30: e6:56:7d:a8:17:77:d0:0b:37:69:96:cf:4d:01:61: 7f:52:dc:05:6f:4a:87:cc:4a:a8:87:70:b0:f5:75: 2c:85:d8:90:e6:7c:3f:f7:dc:32:22:8e:13:cd:fb: 3e:9e:2d:38:7c:80:7a:0b:f3:3b:0d:82:fd:ab:b7: 30:ad:80:f0:98:8e:ba:45:c8:98:f9:db:da:b3:f3: 00:88:b4:14:ed:b3:82:90:1d:ea:54:33:bf:1a:e3: a9:a8:e9:23:a5:01:9f:fc:ca:97:8e:f8:58:06:09: b9:a1:39:8a:12:90:67:67:85:f4:32:cb:67:ca:96: 90:31:29:39:66:76:a7:fc:51:f2:b3:dd:34:ee:0f: 50:49:c1:4f:1c:53:75:de:6d:cd:90:aa:63:d0:63: 53:2d:26:fd:5a:1d:d2:00:d2:4c:4c:a9:57:06:ec: be:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:64:EE:F1:AF:31:09:47:93:49:84:BD:05:75:77:25:25:9F:CF:15 X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ac:9c:37:ce:19:1a:d2:44:b9:1b:14:c0:c2:a6:61:d3:e0:98: 19:9a:fc:be:ca:78:99:32:d4:bf:5c:06:bd:34:81:cc:96:ed: ac:08:45:41:84:d9:5f:01:cf:e2:ac:9f:d9:f4:db:6e:b9:8c: 65:42:a4:87:20:69:9d:b0:57:ae:1c:42:ac:a4:41:94:b3:a2: 36:10:3b:5c:46:e2:e5:49:fe:33:68:95:f5:70:fa:52:4e:30: fd:eb:20:ce:16:6c:a3:63:bf:4f:8d:b8:4e:63:5c:64:b4:74: e7:6e:48:f5:b6:a3:0e:af:d7:10:7a:88:6d:df:c9:c5:d3:37: cc:00:78:ce:d5:c2:fa:1a:f9:2d:e1:13:67:fa:c4:89:22:c8: 85:fe:33:32:be:db:e8:f6:e0:de:9b:47:49:4c:3e:62:80:df: d1:4e:dc:0a:0c:b5:de:1d:65:ef:5b:aa:9e:75:c7:fa:ea:70: 8d:d9:67:af:5e:a4:19:85:85:00:94:f4:ed:27:7a:e5:c8:bc: 5a:5f:a0:23:6f:40:cd:f5:1d:90:52:dc:90:30:a3:df:12:5c: ef:66:f0:90:84:b3:ae:d4:1f:62:12:6c:2a:eb:e3:36:48:e2: 2c:5c:b7:99:65:2d:e7:d5:66:a1:54:b4:fc:2d:d3:98:07:0d: 83:06:e8:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUwOTA2MTgwNTEyWhcNMjUwOTEzMTgwNTEyWjAYMRYwFAYD VQQDEw02OGJjNzdkOC1lYTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1cO0/XuDpU8si1ms9sSIGVPzMgOKABOibcIk9+JWed/dL8KMgk5TiNj5syq/ jGMDirM4P8wbCHzKba5MX6g2woY9gn9TaIFNXxHsA5sbArU1AoAW7k0cwjDmVn2o F3fQCzdpls9NAWF/UtwFb0qHzEqoh3Cw9XUshdiQ5nw/99wyIo4Tzfs+ni04fIB6 C/M7DYL9q7cwrYDwmI66RciY+dvas/MAiLQU7bOCkB3qVDO/GuOpqOkjpQGf/MqX jvhYBgm5oTmKEpBnZ4X0MstnypaQMSk5Znan/FHys9007g9QScFPHFN13m3NkKpj 0GNTLSb9Wh3SANJMTKlXBuy+zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPFk7vGv MQlHk0mEvQV1dyUln88VMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCsnDfOGRrSRLkbFMDCpmHT4JgZmvy+yniZMtS/XAa9NIHMlu2sCEVB hNlfAc/irJ/Z9NtuuYxlQqSHIGmdsFeuHEKspEGUs6I2EDtcRuLlSf4zaJX1cPpS TjD96yDOFmyjY79PjbhOY1xktHTnbkj1tqMOr9cQeoht38nF0zfMAHjO1cL6Gvkt 4RNn+sSJIsiF/jMyvtvo9uDem0dJTD5igN/RTtwKDLXeHWXvW6qedcf66nCN2Wev XqQZhYUAlPTtJ3rlyLxaX6Ajb0DN9R2QUtyQMKPfElzvZvCQhLOu1B9iEmwq6+M2 SOIsXLeZZS3n1WahVLT8LdOYBw2DBuiy -----END CERTIFICATE-----Generated at Mon Sep 8 17:40:28 2025 by rpki-client