$ rpki-client -vvf rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft File: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft (raw, json) Hash identifier: bbaSs0ke5FaRMbKy3TOa4dtRz3Rh2rKPSV0XbdQWaUk= Subject key identifier: 0B:3B:57:E8:BC:F0:70:D8:20:87:7A:8E:AB:56:CA:B9:EA:ED:A9:BC Authority key identifier: EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E Certificate issuer: /CN=A9154B7E/serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Certificate serial: 0AE0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft Manifest number: 0ACB Signing time: Sat 06 Sep 2025 19:39:37 +0000 Manifest this update: Sat 06 Sep 2025 19:39:36 +0000 Manifest next update: Sat 13 Sep 2025 19:39:36 +0000 Files and hashes: 1: 6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl (hash: D1V2GaE3j6O+Bez8aftfRcUhlzMlEyRFSUOSvD7PFqY=) 2: 45A83CC809EE11EBAD92B66BC4F9AE02.roa (hash: BMLck7ad8d48GKkf5hIYa+BMluvYHrRfqqVkHmYs2MI=) 3: 144D1F865F7F11EBB5C08239C4F9AE02.roa (hash: xk3hG5cT6tov5WpRqBgw1GYiI5TquI6c93azZDBwgS8=) 4: 2996029C591611EA86D2A42DC4F9AE02.roa (hash: YdPahH5dD4zuJY8bYiwVpnXjRlbDVfqoQdod66sRqWI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:39:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2784 (0xae0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9154B7E, serialNumber=EAF152BD1DD470EF73A51D4B951D4FA0AA4CCD8E Validity Not Before: Sep 6 19:39:36 2025 GMT Not After : Sep 13 19:39:36 2025 GMT Subject: CN=68bc8df8-537e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:c1:86:ab:c0:06:48:1f:19:83:4a:c1:ac:a5: 83:d3:3a:6f:5b:fd:6a:f1:db:6a:83:2f:d1:16:6b: 9a:d4:81:b9:29:89:c0:00:e6:eb:5b:ce:82:75:0a: 8c:cb:51:be:7a:09:ca:dd:1b:23:b4:86:d6:d9:e5: dc:80:e5:eb:7d:74:5b:95:ae:55:15:1e:09:7d:0b: e5:c0:5c:b5:16:07:69:50:e2:ef:94:00:5a:62:ca: d6:b1:ff:ee:c6:d7:e0:5e:c6:25:4a:ee:16:7f:f2: 61:48:11:a6:3b:29:87:01:6f:35:95:df:31:9b:ec: 38:05:f7:7d:7d:95:1b:f3:40:74:a2:73:00:3c:08: 41:2b:72:b4:fc:9e:0e:35:16:ae:fd:97:db:2d:bd: b5:d3:90:6d:0d:8b:6e:de:73:f4:a9:51:83:f6:55: 04:6e:4b:e4:6f:f6:f3:38:31:5e:39:4f:bf:a5:69: 3f:66:87:d1:8e:32:cf:19:3b:2d:9c:de:ff:81:a9: 3f:68:46:fe:59:d3:58:b5:1a:04:de:a4:90:2d:77: d5:7e:d6:37:1e:96:f5:d2:3b:04:a8:e0:5c:97:83: 54:55:04:f4:32:95:82:ef:64:0c:c8:8b:0a:0f:29: 2b:3d:22:e1:cf:47:1d:1b:94:d3:56:95:63:5a:52: 4e:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3B:57:E8:BC:F0:70:D8:20:87:7A:8E:AB:56:CA:B9:EA:ED:A9:BC X509v3 Authority Key Identifier: keyid:EA:F1:52:BD:1D:D4:70:EF:73:A5:1D:4B:95:1D:4F:A0:AA:4C:CD:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6vFSvR3UcO9zpR1LlR1PoKpMzY4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154B7E/3F35C084591511EAB3F2A12CC4F9AE02/6vFSvR3UcO9zpR1LlR1PoKpMzY4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 30:88:0c:3f:6a:20:d4:e1:19:6c:95:34:45:03:ae:19:6b:c9: f1:8e:60:0c:e0:29:66:31:34:df:d2:a6:18:70:12:45:5b:31: ad:5e:31:f3:a2:a9:79:cd:a3:0e:e4:d4:e3:71:52:af:15:dd: a7:ae:c1:73:9d:7c:de:80:77:b7:ab:4a:76:b2:d6:6b:44:57: 87:53:34:ca:90:3b:da:e0:d4:57:03:cf:4c:33:c6:34:af:b3: 82:b2:7c:d1:a5:57:96:f3:43:5e:ca:90:60:0f:88:75:14:ae: 50:e6:74:c4:ee:4a:a2:1d:38:98:30:97:12:b1:87:1e:ac:46: 73:d3:a1:10:18:c6:6e:ae:0d:98:0f:6f:ca:0b:41:90:c5:98: de:89:c0:c0:88:63:78:40:e1:3b:f7:36:23:3b:8c:39:5f:4b: ea:d0:66:ec:15:68:3a:b0:a1:f5:63:34:dc:8e:64:3e:ba:65: 17:67:98:eb:67:7b:78:e0:7d:3c:61:85:55:b3:33:32:f2:a6: fe:a4:01:00:d7:dc:a5:f6:db:01:41:d2:93:5e:1e:fa:c5:ce: a6:0c:2e:65:50:0b:01:e7:df:e2:15:82:93:d9:09:cb:15:83: f9:6d:06:04:50:24:f5:08:a4:14:49:5a:8e:1d:90:0d:c8:c0: bc:91:4c:68 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCuAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTRCN0UxMTAvBgNVBAUTKEVBRjE1MkJEMURENDcwRUY3M0E1MUQ0Qjk1MUQ0RkEw QUE0Q0NEOEUwHhcNMjUwOTA2MTkzOTM2WhcNMjUwOTEzMTkzOTM2WjAYMRYwFAYD VQQDEw02OGJjOGRmOC01MzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqMGGq8AGSB8Zg0rBrKWD0zpvW/1q8dtqgy/RFmua1IG5KYnAAObrW86CdQqM y1G+egnK3RsjtIbW2eXcgOXrfXRbla5VFR4JfQvlwFy1FgdpUOLvlABaYsrWsf/u xtfgXsYlSu4Wf/JhSBGmOymHAW81ld8xm+w4Bfd9fZUb80B0onMAPAhBK3K0/J4O NRau/ZfbLb2105BtDYtu3nP0qVGD9lUEbkvkb/bzODFeOU+/pWk/ZofRjjLPGTst nN7/gak/aEb+WdNYtRoE3qSQLXfVftY3Hpb10jsEqOBcl4NUVQT0MpWC72QMyIsK DykrPSLhz0cdG5TTVpVjWlJO8QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAs7V+i8 8HDYIId6jqtWyrnq7am8MB8GA1UdIwQYMBaAFOrxUr0d1HDvc6UdS5UdT6CqTM2O MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NEI3RS8zRjM1QzA4NDU5 MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNPOXpwUjFMbFIxUG9LcE16 WTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ2RlN2UjNVY085enBSMUxsUjFQb0twTXpZNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NEI3RS8zRjM1QzA4NDU5MTUxMUVBQjNGMkExMkNDNEY5QUUwMi82dkZTdlIzVWNP OXpwUjFMbFIxUG9LcE16WTQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAwiAw/aiDU4RlslTRFA64Za8nxjmAM4ClmMTTf0qYYcBJFWzGtXjHz oql5zaMO5NTjcVKvFd2nrsFznXzegHe3q0p2stZrRFeHUzTKkDva4NRXA89MM8Y0 r7OCsnzRpVeW80NeypBgD4h1FK5Q5nTE7kqiHTiYMJcSsYcerEZz06EQGMZurg2Y D2/KC0GQxZjeicDAiGN4QOE79zYjO4w5X0vq0GbsFWg6sKH1YzTcjmQ+umUXZ5jr Z3t44H08YYVVszMy8qb+pAEA19yl9tsBQdKTXh76xc6mDC5lUAsB59/iFYKT2QnL FYP5bQYEUCT1CKQUSVqOHZANyMC8kUxo -----END CERTIFICATE-----Generated at Sun Sep 7 15:21:12 2025 by rpki-client