$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft File: znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json) Hash identifier: qLrZLbBYJPbAcVre9vfoPNald1VVOOhN/4rCITOjQKo= Subject key identifier: B4:68:17:3F:9C:C9:9F:85:DC:91:36:EC:BB:09:C7:67:66:79:5C:C6 Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 Certificate issuer: /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Certificate serial: 06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft Manifest number: 06 Signing time: Wed 17 Sep 2025 08:54:05 +0000 Manifest this update: Wed 17 Sep 2025 08:54:05 +0000 Manifest next update: Wed 24 Sep 2025 08:54:05 +0000 Files and hashes: 1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 9NnMCwX1GvluMxB1VXk1hHvX1KLK1c3JFOpXVa2i2ls=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 08:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28 Validity Not Before: Sep 17 08:54:05 2025 GMT Not After : Sep 24 08:54:05 2025 GMT Subject: CN=68ca772d-299d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:dd:7d:0b:ec:0f:5d:6a:21:b2:18:33:9e:3a: 11:8d:a1:f3:d3:ed:5b:ad:3a:e3:f4:de:2c:df:1a: 53:5b:78:6d:10:24:ee:9c:3d:81:b0:cf:99:74:ee: 74:08:9b:55:8f:3c:f6:a2:90:25:ea:76:fa:bf:34: 78:f6:c4:4b:79:72:e7:be:ce:43:60:ba:30:33:c2: 93:d2:ab:c0:19:01:ce:7e:d6:48:0a:d6:cc:dd:14: 95:ec:5c:37:b9:57:69:f7:08:93:00:4c:54:24:2f: 15:8d:bc:a6:99:ed:8f:23:71:43:d5:94:60:ff:12: 41:fc:d1:18:b0:bc:bb:58:ac:82:bd:fd:6b:f6:9c: 66:9b:ba:be:97:0f:1d:b7:47:c8:58:90:97:96:7a: e4:b2:e7:94:1b:6f:ce:5d:39:db:b5:9e:af:7e:06: fa:f4:9a:b4:74:aa:7d:aa:45:76:ac:33:69:c2:42: 32:1c:21:10:ad:5b:00:7d:b0:9b:cf:1e:59:40:91: 5c:26:d6:81:7a:63:f4:48:34:2b:94:ae:8b:fd:a3: a8:de:ed:97:88:bf:a5:45:7b:5a:bf:b4:82:72:32: 70:e9:e4:7a:1b:2b:bd:e5:cf:ed:c7:42:50:0c:2b: bc:72:c1:8f:db:77:0a:b7:3e:16:81:e9:85:89:57: 48:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:68:17:3F:9C:C9:9F:85:DC:91:36:EC:BB:09:C7:67:66:79:5C:C6 X509v3 Authority Key Identifier: keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8f:bc:81:2d:ea:b3:ca:73:98:17:57:96:d7:0d:8c:30:ed:00: c0:ea:80:26:2b:28:b2:ab:65:56:86:1b:ad:48:e6:6c:e4:71: 98:1e:66:8c:70:47:bf:f4:d3:ac:3a:7a:57:a4:28:44:3d:12: 52:de:50:09:a7:8a:37:80:49:8a:30:e4:0a:ee:fe:1f:2f:19: 04:65:17:af:ad:7f:ed:74:6c:b2:50:08:a5:2c:9e:4d:4e:45: 5e:a5:8b:f3:04:68:d3:82:6c:16:a9:3e:35:3f:42:be:c0:b7: 0f:84:f9:c4:05:d3:26:04:af:8d:7d:91:1b:eb:ac:d6:c1:35: 76:e2:23:7f:aa:14:a2:92:e4:4c:37:d3:6d:ff:66:bf:3e:ae: 9a:a5:35:64:55:53:f6:32:af:5f:c9:e2:f8:a8:f5:d3:51:28: bf:7d:51:45:4d:c5:60:b7:c1:e2:dc:1b:b3:d6:0c:d9:05:af: c6:07:fb:da:8e:f9:a3:1c:00:21:8f:74:5d:7d:2a:05:79:57: 99:ea:82:87:1f:f3:75:01:e9:5c:ce:4e:31:8e:82:65:0b:df: 95:3a:4e:31:b7:86:1d:3b:32:a2:3c:f8:5c:9a:0f:ac:a5:37: 6e:09:2f:b9:03:04:06:09:14:d6:fe:b4:b1:6c:89:51:6c:f9: 15:b3:35:5a -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 RTFGOTExMC8GA1UEBRMoQ0U3MzYwQkQxQTk0RTg5MTdCRDM2NzI0MzNGODIxRUM3 ODBBOEQyODAeFw0yNTA5MTcwODU0MDVaFw0yNTA5MjQwODU0MDVaMBgxFjAUBgNV BAMTDTY4Y2E3NzJkLTI5OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDD3X0L7A9daiGyGDOeOhGNofPT7VutOuP03izfGlNbeG0QJO6cPYGwz5l07nQI m1WPPPaikCXqdvq/NHj2xEt5cue+zkNgujAzwpPSq8AZAc5+1kgK1szdFJXsXDe5 V2n3CJMATFQkLxWNvKaZ7Y8jcUPVlGD/EkH80RiwvLtYrIK9/Wv2nGabur6XDx23 R8hYkJeWeuSy55Qbb85dOdu1nq9+Bvr0mrR0qn2qRXasM2nCQjIcIRCtWwB9sJvP HllAkVwm1oF6Y/RINCuUrov9o6je7ZeIv6VFe1q/tIJyMnDp5HobK73lz+3HQlAM K7xywY/bdwq3PhaB6YWJV0jdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUtGgXP5zJ n4XckTbsuwnHZ2Z5XMYwHwYDVR0jBBgwFoAUznNgvRqU6JF702ckM/gh7HgKjSgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMUY5L0FGRTRBOTBBOERF MjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpGNzAyY2tNX2doN0hnS2pT Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvem5OZ3ZScVU2SkY3MDJja01fZ2g3SGdLalNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF MUY5L0FGRTRBOTBBOERFMjExRjBBMzA4QUM3Q0M0RjlBRTAyL3puTmd2UnFVNkpG NzAyY2tNX2doN0hnS2pTZy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAI+8gS3qs8pzmBdXltcNjDDtAMDqgCYrKLKrZVaGG61I5mzkcZgeZoxw R7/006w6elekKEQ9ElLeUAmnijeASYow5Aru/h8vGQRlF6+tf+10bLJQCKUsnk1O RV6li/MEaNOCbBapPjU/Qr7Atw+E+cQF0yYEr419kRvrrNbBNXbiI3+qFKKS5Ew3 023/Zr8+rpqlNWRVU/Yyr1/J4vio9dNRKL99UUVNxWC3weLcG7PWDNkFr8YH+9qO +aMcACGPdF19KgV5V5nqgocf83UB6VzOTjGOgmUL35U6TjG3hh07MqI8+FyaD6yl N24JL7kDBAYJFNb+tLFsiVFs+RWzNVo= -----END CERTIFICATE-----Generated at Thu Sep 18 23:27:50 2025 by rpki-client