$ rpki-client -vvf rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft File: r7qhUW6eF_JM-RRbjHzUuoGlekA.mft (raw, json) Hash identifier: 0Px5ahJh98J6bpBFDhkK4P0fTFWJL/P8zDUN6a+7SFQ= Subject key identifier: 9D:6A:31:A9:1A:31:86:EA:3D:81:70:2E:BE:A1:ED:14:18:EF:01:69 Authority key identifier: AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 Certificate issuer: /CN=A91568A0/serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft Manifest number: 06 Signing time: Mon 15 Sep 2025 08:35:56 +0000 Manifest this update: Mon 15 Sep 2025 08:35:55 +0000 Manifest next update: Mon 22 Sep 2025 08:35:55 +0000 Files and hashes: 1: r7qhUW6eF_JM-RRbjHzUuoGlekA.crl (hash: E0B53+2PRi35chfLxv2/IStCr9LByPz0n2+a6Ti/Gdk=) 2: 492317188E2A11F0B9BB726BC4F9AE02.roa (hash: g7RZU/wRy/WcZYbu6OOC41FcuLTqxTBZLD2lxc5r+0s=) 3: 1D0A29A68E2911F08D963C69C4F9AE02.roa (hash: 4ic8CmF7ut7Pvp2iYIvf/QMf2ZOGMMwbhjJKgiRPMl8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 22 Sep 2025 08:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568A0, serialNumber=AFBAA1516E9E17F24CF9145B8C7CD4BA81A57A40 Validity Not Before: Sep 15 08:35:55 2025 GMT Not After : Sep 22 08:35:55 2025 GMT Subject: CN=68c7cfec-8f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d1:a7:0b:ba:75:84:98:89:46:e0:52:a2:84: 9a:c0:12:be:0d:85:dd:51:bd:88:4b:89:46:a8:33: 47:23:ef:f6:95:6c:8b:1b:11:cd:e2:34:3a:e6:65: 13:76:3b:a8:13:e3:7c:8c:7a:bb:ea:13:c7:96:cd: 73:78:d1:d6:b6:c3:91:89:ce:ea:97:79:3e:b6:de: 31:a2:60:0d:51:6b:d5:28:76:6f:92:d2:60:1e:be: a0:22:c7:e8:d2:ec:20:e1:24:06:49:e8:01:4a:2e: 87:b9:9c:be:c2:ac:aa:52:35:b1:e5:20:73:51:fc: af:d3:a5:32:92:70:a2:82:9f:bc:99:af:a8:6e:83: 31:5e:c9:34:37:5d:3d:f6:b3:15:82:56:96:14:d4: f1:36:c2:d7:9a:b7:c4:5c:ab:84:01:28:a6:54:bd: 96:83:7f:a1:48:4e:ca:00:40:a6:3c:5d:72:88:53: 1c:52:f5:29:0d:15:a8:f1:f2:9b:01:1a:dc:8d:97: 1b:06:f2:e4:71:23:52:28:54:71:ff:61:22:5b:7b: 79:81:2f:3d:b5:21:db:ad:c9:1a:c9:c8:90:28:ec: 99:5e:8b:d7:bf:63:73:b6:94:77:ff:22:7c:c0:c8: 55:bd:2a:ad:59:3f:54:ad:1d:13:6c:16:8e:4d:13: c9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6A:31:A9:1A:31:86:EA:3D:81:70:2E:BE:A1:ED:14:18:EF:01:69 X509v3 Authority Key Identifier: keyid:AF:BA:A1:51:6E:9E:17:F2:4C:F9:14:5B:8C:7C:D4:BA:81:A5:7A:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r7qhUW6eF_JM-RRbjHzUuoGlekA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568A0/B2068CF88E2811F09C2A6B49C4F9AE02/r7qhUW6eF_JM-RRbjHzUuoGlekA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8a:02:a2:57:90:2a:7f:7c:11:2f:c6:f1:90:76:1e:f6:15:7d: 35:66:aa:ed:48:77:33:ee:57:42:bc:c2:7d:69:80:1c:c6:8a: 82:3d:e1:1d:7d:51:9f:4b:97:de:7f:be:52:95:78:e8:a8:5f: ae:73:df:11:1b:92:b5:ea:f5:5f:a1:c2:0f:b4:27:46:61:de: 98:c3:39:0a:03:7b:81:8b:5e:0e:89:27:10:9f:02:88:17:05: 60:9f:fe:22:b0:ba:50:be:d7:d2:33:1c:47:1d:b4:bd:72:60: fc:b7:29:55:a0:83:a6:5d:74:74:26:54:11:e5:d6:53:a9:27: 11:53:02:e7:89:fe:12:5b:5f:dc:4b:0b:6c:f4:b2:79:92:6b: 43:36:a2:e0:73:f7:36:f6:74:2a:67:16:1f:27:4b:0e:92:1e: 59:47:18:72:87:65:92:28:c1:c7:dc:5b:85:14:bb:a0:74:e8: b0:50:d2:23:72:c5:6e:f2:06:6a:0e:c5:bb:8b:16:99:e8:e2: d0:44:cf:73:54:51:34:73:45:7c:b9:dc:f6:37:bb:5c:16:c9: c5:19:60:00:5f:ee:57:29:dd:0f:fe:d3:36:12:f5:88:8c:76: 34:02:8b:e8:b4:ad:53:1c:59:9b:32:5d:78:0a:a4:b7:4c:bf: bb:21:4d:56 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NjhBMDExMC8GA1UEBRMoQUZCQUExNTE2RTlFMTdGMjRDRjkxNDVCOEM3Q0Q0QkE4 MUE1N0E0MDAeFw0yNTA5MTUwODM1NTVaFw0yNTA5MjIwODM1NTVaMBgxFjAUBgNV BAMTDTY4YzdjZmVjLThmM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDS0acLunWEmIlG4FKihJrAEr4Nhd1RvYhLiUaoM0cj7/aVbIsbEc3iNDrmZRN2 O6gT43yMervqE8eWzXN40da2w5GJzuqXeT623jGiYA1Ra9Uodm+S0mAevqAix+jS 7CDhJAZJ6AFKLoe5nL7CrKpSNbHlIHNR/K/TpTKScKKCn7yZr6hugzFeyTQ3XT32 sxWCVpYU1PE2wteat8Rcq4QBKKZUvZaDf6FITsoAQKY8XXKIUxxS9SkNFajx8psB GtyNlxsG8uRxI1IoVHH/YSJbe3mBLz21IdutyRrJyJAo7Jlei9e/Y3O2lHf/InzA yFW9Kq1ZP1StHRNsFo5NE8mfAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUnWoxqRox huo9gXAuvqHtFBjvAWkwHwYDVR0jBBgwFoAUr7qhUW6eF/JM+RRbjHzUuoGlekAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2OEEwL0IyMDY4Q0Y4OEUy ODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9KTS1SUmJqSHpVdW9HbGVr QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvcjdxaFVXNmVGX0pNLVJSYmpIelV1b0dsZWtBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU2 OEEwL0IyMDY4Q0Y4OEUyODExRjA5QzJBNkI0OUM0RjlBRTAyL3I3cWhVVzZlRl9K TS1SUmJqSHpVdW9HbGVrQS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAIoColeQKn98ES/G8ZB2HvYVfTVmqu1IdzPuV0K8wn1pgBzGioI94R19 UZ9Ll95/vlKVeOioX65z3xEbkrXq9V+hwg+0J0Zh3pjDOQoDe4GLXg6JJxCfAogX BWCf/iKwulC+19IzHEcdtL1yYPy3KVWgg6ZddHQmVBHl1lOpJxFTAueJ/hJbX9xL C2z0snmSa0M2ouBz9zb2dCpnFh8nSw6SHllHGHKHZZIowcfcW4UUu6B06LBQ0iNy xW7yBmoOxbuLFpno4tBEz3NUUTRzRXy53PY3u1wWycUZYABf7lcp3Q/+0zYS9YiM djQCi+i0rVMcWZsyXXgKpLdMv7shTVY= -----END CERTIFICATE-----Generated at Tue Sep 16 05:47:43 2025 by rpki-client