$ rpki-client -vvf rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft File: B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft (raw, json) Hash identifier: x5aHnT3X3tzKxNScm7j/Epie0oub7nCPDtjR0u3olMg= Subject key identifier: E4:9B:1C:D8:83:CE:3E:66:98:FD:6E:5B:40:33:19:D4:A4:96:89:53 Authority key identifier: 07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 Certificate issuer: /CN=A9152E70/serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Certificate serial: 0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft Manifest number: 0A Signing time: Thu 04 Sep 2025 23:55:56 +0000 Manifest this update: Thu 04 Sep 2025 23:55:55 +0000 Manifest next update: Thu 11 Sep 2025 23:55:55 +0000 Files and hashes: 1: B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl (hash: T6+E5TDLDGOX0qjaRsV8ob+o+chIIfIeJZ0yU7LDHnA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 23:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9152E70, serialNumber=07FE89630201DEF37F4D68A20ED133A9C3B6A2A3 Validity Not Before: Sep 4 23:55:55 2025 GMT Not After : Sep 11 23:55:55 2025 GMT Subject: CN=68ba270b-9318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:67:21:ff:f6:0f:36:af:9c:f2:9e:9d:ac:f0: 48:14:a6:f5:6d:5f:e4:99:32:87:1c:2d:fc:07:83: 33:1e:22:c8:1f:10:f6:84:bb:2f:77:63:88:c5:73: 15:db:b2:fb:27:99:65:17:5d:8f:c9:60:c5:50:cb: 65:df:38:2a:e2:88:a7:32:c6:27:6d:d8:67:71:6e: 41:cc:dd:38:7a:e4:9e:02:c2:6f:cb:17:fe:eb:cb: 05:af:19:73:a3:f4:f2:22:c1:f2:78:ac:1d:fe:33: 2f:8e:42:b6:7e:5d:e0:1a:25:c2:f7:fb:f4:b9:d5: 72:fd:ff:a9:c7:04:90:d6:44:72:63:b0:4a:41:e2: b7:65:fc:4a:13:f2:27:93:03:88:07:91:27:05:bb: ee:32:96:2b:ca:8f:7c:4a:e0:b6:fd:b6:11:74:38: d3:76:07:ad:76:0d:05:22:37:a8:e8:b7:d2:93:6b: a2:51:25:80:0f:c4:a3:09:74:e8:68:6c:12:f7:56: 44:f4:19:05:47:0e:f1:f6:33:93:6a:2d:66:2f:11: 84:4e:53:70:fe:64:75:6f:52:8d:30:84:30:56:56: 51:4e:53:12:80:d9:ad:80:09:2a:ac:fb:c5:33:9d: 05:d2:16:fe:51:4e:75:aa:7c:8d:72:41:53:00:99: 01:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:9B:1C:D8:83:CE:3E:66:98:FD:6E:5B:40:33:19:D4:A4:96:89:53 X509v3 Authority Key Identifier: keyid:07:FE:89:63:02:01:DE:F3:7F:4D:68:A2:0E:D1:33:A9:C3:B6:A2:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/B_6JYwIB3vN_TWiiDtEzqcO2oqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152E70/E60E937C7D8611F08FB0E879C4F9AE02/B_6JYwIB3vN_TWiiDtEzqcO2oqM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:fb:9f:40:ed:a9:52:2d:e1:13:10:a9:88:0c:95:a5:51:07: 22:66:cb:49:97:59:9b:4f:98:77:ae:01:e5:66:1a:5d:76:55: 3f:bb:43:a1:15:e8:93:48:99:07:0e:d0:b1:1a:7d:3c:f5:85: a9:11:c5:6c:c7:21:a0:33:5f:d8:d7:03:62:2e:23:51:ab:81: 2b:7e:68:6a:12:05:79:29:a5:9a:65:2d:f1:05:32:92:7a:81: a1:68:d8:ef:13:a7:fb:af:7c:f7:9a:ef:78:2b:83:8c:1c:09: 9b:e3:2a:7c:dd:a7:c7:58:54:54:5b:6b:dc:3b:29:2a:fc:a9: cb:ab:20:3f:e2:46:67:93:45:01:48:8a:99:0f:9b:54:f6:41: a1:82:7e:a8:f7:24:0b:79:aa:60:f2:ef:77:a5:4e:fb:7d:03: 87:40:db:f2:4b:6f:cf:89:40:ea:dd:c9:8e:2e:0d:05:cf:9c: 04:45:91:55:40:9c:a7:80:4a:b9:72:63:91:ac:0d:df:6c:be: bc:32:5f:ef:dc:eb:aa:98:c4:ee:bb:52:63:cf:09:24:bc:13: 9c:4b:fd:6e:62:4e:31:94:68:16:91:eb:97:2d:6b:aa:b8:9e: 3c:1b:8a:63:3f:ca:65:da:58:6a:f4:62:97:3d:23:c6:7c:96: 88:ec:3d:87 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 MkU3MDExMC8GA1UEBRMoMDdGRTg5NjMwMjAxREVGMzdGNEQ2OEEyMEVEMTMzQTlD M0I2QTJBMzAeFw0yNTA5MDQyMzU1NTVaFw0yNTA5MTEyMzU1NTVaMBgxFjAUBgNV BAMTDTY4YmEyNzBiLTkzMTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC3ZyH/9g82r5zynp2s8EgUpvVtX+SZMoccLfwHgzMeIsgfEPaEuy93Y4jFcxXb svsnmWUXXY/JYMVQy2XfOCriiKcyxidt2GdxbkHM3Th65J4Cwm/LF/7rywWvGXOj 9PIiwfJ4rB3+My+OQrZ+XeAaJcL3+/S51XL9/6nHBJDWRHJjsEpB4rdl/EoT8ieT A4gHkScFu+4ylivKj3xK4Lb9thF0ONN2B612DQUiN6jot9KTa6JRJYAPxKMJdOho bBL3VkT0GQVHDvH2M5NqLWYvEYROU3D+ZHVvUo0whDBWVlFOUxKA2a2ACSqs+8Uz nQXSFv5RTnWqfI1yQVMAmQG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU5Jsc2IPO PmaY/W5bQDMZ1KSWiVMwHwYDVR0jBBgwFoAUB/6JYwIB3vN/TWiiDtEzqcO2oqMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUyRTcwL0U2MEU5MzdDN0Q4 NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZOX1RXaWlEdEV6cWNPMm9x TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQl82Sll3SUIzdk5fVFdpaUR0RXpxY08yb3FNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUy RTcwL0U2MEU5MzdDN0Q4NjExRjA4RkIwRTg3OUM0RjlBRTAyL0JfNkpZd0lCM3ZO X1RXaWlEdEV6cWNPMm9xTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIT7n0DtqVIt4RMQqYgMlaVRByJmy0mXWZtPmHeuAeVmGl12VT+7Q6EV 6JNImQcO0LEafTz1hakRxWzHIaAzX9jXA2IuI1GrgSt+aGoSBXkppZplLfEFMpJ6 gaFo2O8Tp/uvfPea73grg4wcCZvjKnzdp8dYVFRba9w7KSr8qcurID/iRmeTRQFI ipkPm1T2QaGCfqj3JAt5qmDy73elTvt9A4dA2/JLb8+JQOrdyY4uDQXPnARFkVVA nKeASrlyY5GsDd9svrwyX+/c66qYxO67UmPPCSS8E5xL/W5iTjGUaBaR65cta6q4 njwbimM/ymXaWGr0Ypc9I8Z8lojsPYc= -----END CERTIFICATE-----Generated at Sat Sep 6 21:06:14 2025 by rpki-client