$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: +hbdyySbUYmehNv9Wbz92ZpT9A5Z8dYlTxssvBLzlcQ= Subject key identifier: 97:03:0D:20:8E:9C:0F:EA:36:8E:00:31:A5:CA:C5:7A:C3:BC:CE:5A Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 09D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 09C6 Signing time: Wed 20 Aug 2025 20:04:34 +0000 Manifest this update: Wed 20 Aug 2025 20:04:33 +0000 Manifest next update: Wed 27 Aug 2025 20:04:33 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: llHjzcfrvHdIRDBPdqYJF9Q0XiPBh9rcjxpAKtPGT5U=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 20:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2516 (0x9d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Aug 20 20:04:33 2025 GMT Not After : Aug 27 20:04:33 2025 GMT Subject: CN=68a62a52-4cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:01:2f:a1:ed:45:82:b3:73:c6:20:f3:09:fb: 4e:cb:19:e3:6b:25:0a:83:b3:8c:77:9e:19:92:9f: 1a:7c:67:ba:db:05:d6:5e:18:78:7c:2c:79:ed:7c: 86:24:1a:8d:b4:88:ad:9f:cf:42:8c:4d:ca:f4:e4: a0:be:ea:fa:7f:07:9c:80:ff:8b:5c:da:36:0e:2e: cc:fc:69:c8:95:69:9b:a0:be:fc:01:9c:e6:88:94: 1c:65:20:a7:f2:6c:22:98:f3:74:1a:19:10:5e:7f: 89:8e:16:dd:4d:16:aa:0c:74:6f:bf:1d:b2:70:b3: a2:ec:71:41:0c:49:0d:73:be:a4:fe:b6:1b:11:df: b2:3e:da:c7:b1:10:c8:e6:ae:36:7d:d7:96:52:a5: 0b:0b:f8:be:69:33:97:c4:d7:1a:71:82:cf:ad:9b: 42:db:92:0c:2c:eb:7c:ad:a7:12:bc:04:74:18:32: b1:70:53:26:06:97:7f:89:72:e7:47:36:bb:5d:10: 09:e4:38:a7:cc:f1:56:4f:3b:98:61:61:16:d2:1e: 59:14:9a:d3:09:84:18:a1:cc:87:3a:a5:3d:c3:9d: 40:e4:78:6f:c2:fd:e3:ef:37:d0:2f:b1:e0:f8:fb: 8a:b5:74:94:e4:0d:67:e0:aa:5a:57:e7:f1:c4:fe: 76:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:03:0D:20:8E:9C:0F:EA:36:8E:00:31:A5:CA:C5:7A:C3:BC:CE:5A X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 69:db:48:16:b2:bb:43:d8:6e:e6:78:0c:25:e8:13:d7:e8:14: 92:7c:2a:93:47:b3:f4:70:91:f5:e0:08:1e:6c:63:60:1d:ad: e7:fd:47:e0:f9:f1:53:23:39:3b:7d:55:e3:97:14:85:83:cf: e4:d5:45:69:92:b2:9e:96:c8:7f:c7:8d:cc:a2:ec:cc:22:e0: b4:47:49:c2:a3:20:d8:ba:fc:66:fe:7b:3a:4f:c3:b9:00:48: c2:61:ca:85:47:f2:aa:ed:c3:de:2f:9a:cc:4c:48:22:c3:dc: f5:87:23:bd:0e:4e:bc:65:76:6d:32:d6:5f:ea:80:2a:85:eb: 0c:4c:81:30:dc:51:df:63:21:42:96:c5:9b:0d:36:b4:a3:12: 82:4a:d2:9d:49:54:04:b3:97:7e:58:d9:27:c0:12:61:ca:ac: 76:89:cf:ff:f7:59:2e:00:4c:b0:03:12:21:24:81:29:5d:a4: b4:6e:9c:a9:ec:b4:34:30:14:57:06:fe:a8:41:be:ff:53:ee: 7b:fc:fc:ed:36:32:0c:4f:28:88:d2:98:8a:6f:46:2c:71:e3: 0a:4f:6b:0e:a5:84:ca:e0:8b:b5:73:4e:fe:4d:f5:16:87:e1: 47:c6:8c:41:ee:15:38:df:75:88:3a:f7:9e:3d:24:bc:5a:88: 47:22:9b:4c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCdQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUwODIwMjAwNDMzWhcNMjUwODI3MjAwNDMzWjAYMRYwFAYD VQQDEw02OGE2MmE1Mi00Y2Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6AEvoe1FgrNzxiDzCftOyxnjayUKg7OMd54Zkp8afGe62wXWXhh4fCx57XyG JBqNtIitn89CjE3K9OSgvur6fwecgP+LXNo2Di7M/GnIlWmboL78AZzmiJQcZSCn 8mwimPN0GhkQXn+JjhbdTRaqDHRvvx2ycLOi7HFBDEkNc76k/rYbEd+yPtrHsRDI 5q42fdeWUqULC/i+aTOXxNcacYLPrZtC25IMLOt8racSvAR0GDKxcFMmBpd/iXLn Rza7XRAJ5DinzPFWTzuYYWEW0h5ZFJrTCYQYocyHOqU9w51A5Hhvwv3j7zfQL7Hg +PuKtXSU5A1n4KpaV+fxxP52uQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJcDDSCO nA/qNo4AMaXKxXrDvM5aMB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBp20gWsrtD2G7meAwl6BPX6BSSfCqTR7P0cJH14AgebGNgHa3n/Ufg +fFTIzk7fVXjlxSFg8/k1UVpkrKelsh/x43MouzMIuC0R0nCoyDYuvxm/ns6T8O5 AEjCYcqFR/Kq7cPeL5rMTEgiw9z1hyO9Dk68ZXZtMtZf6oAqhesMTIEw3FHfYyFC lsWbDTa0oxKCStKdSVQEs5d+WNknwBJhyqx2ic//91kuAEywAxIhJIEpXaS0bpyp 7LQ0MBRXBv6oQb7/U+57/PztNjIMTyiI0piKb0YsceMKT2sOpYTK4Iu1c07+TfUW h+FHxoxB7hU433WIOveePSS8WohHIptM -----END CERTIFICATE-----Generated at Fri Aug 22 16:38:20 2025 by rpki-client