$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json) Hash identifier: KaGk9GtlEY/4fawVqXBMeStiYGijqzM5ERD/3smu7T8= Subject key identifier: EA:CD:12:04:B6:59:91:35:F3:7E:9B:E1:A6:62:2B:85:92:A5:A3:44 Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Certificate serial: 2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft Manifest number: 28 Signing time: Wed 03 Sep 2025 08:28:12 +0000 Manifest this update: Wed 03 Sep 2025 08:28:11 +0000 Manifest next update: Wed 10 Sep 2025 08:28:11 +0000 Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: sLBzYfIRGLMvGuyROxk5lYMwKA2puyBtZ7VSAQhWjtk=) 2: 554EE88487D911F08B837C49C4F9AE02.roa (hash: mrqENyuiKG5xVgDdo7UrrcMh5yOfyP2Su4rVIqkeeYw=) 3: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42 (0x2a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Validity Not Before: Sep 3 08:28:11 2025 GMT Not After : Sep 10 08:28:11 2025 GMT Subject: CN=68b7fc1b-bb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:6d:a4:6c:9e:a1:9b:e8:ed:22:4e:61:2d: d4:f2:f4:81:ce:71:e6:c0:b2:e6:aa:96:4f:ab:af: a6:b7:30:6a:33:ff:53:01:0a:f0:30:32:cc:ee:9f: 2e:09:ce:5f:92:19:a3:9d:9d:41:d6:3c:9d:6f:22: 76:98:ca:66:8d:2e:ff:e1:d7:72:f0:38:2c:e2:98: 69:7a:23:0e:32:91:99:53:8a:13:ca:6e:ff:4e:3a: 8c:c2:e8:8c:f2:f2:50:3b:51:dc:f6:c0:51:ab:88: 91:ef:80:f4:e7:d9:23:66:7b:dd:f4:1a:8b:5d:89: dd:0c:27:ba:49:6a:61:9c:c6:23:7f:72:9c:1b:bc: 73:89:8e:b0:7c:5c:e1:1a:25:ae:89:dd:84:7f:25: 7e:60:e9:f2:97:a1:1a:98:dd:ff:70:7f:bb:22:25: d4:a8:fb:f7:7e:71:4a:89:f7:88:b0:fa:60:d1:f5: 18:d3:39:21:3d:88:b3:d7:27:ac:6b:82:95:09:89: 76:f4:fb:ac:36:1a:f6:24:36:71:85:27:b6:a5:a6: d6:20:63:b1:58:bd:b0:f2:75:83:14:56:90:cb:6f: 66:e4:17:5f:43:85:ee:74:ed:cd:75:e8:75:54:e9: 38:4a:e5:55:31:7e:b3:cc:82:37:f9:22:41:09:55: 2a:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:CD:12:04:B6:59:91:35:F3:7E:9B:E1:A6:62:2B:85:92:A5:A3:44 X509v3 Authority Key Identifier: keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 15:a5:85:13:fb:bc:96:48:2e:28:01:5e:86:56:d3:94:fd:23: 58:22:ed:37:8a:aa:2e:33:59:33:f1:36:40:71:0b:d6:eb:b4: 76:37:24:ae:56:17:48:dd:cb:aa:44:48:ec:c8:1a:0f:f0:05: 29:cf:ad:29:a6:32:c9:b6:b4:64:c5:0e:93:77:cd:c3:c8:a1: 3f:7a:e3:5b:62:14:b2:34:16:e1:8b:b0:d5:05:87:41:2d:0b: ec:e2:bc:19:df:41:b0:65:d4:b2:32:a5:8c:6d:a1:0a:4c:4c: 58:10:76:2a:0d:7c:5e:81:9f:03:d1:61:ef:69:c0:55:6e:31: fc:40:a3:b4:ff:53:5b:9a:b6:c4:f6:8f:5c:eb:4b:74:14:52: 1d:cf:c6:98:13:db:28:1f:59:7f:bd:5b:3c:4f:77:a7:27:de: 44:0d:9d:f4:3f:fa:9a:79:97:1f:fc:72:67:f6:c2:bd:e3:27: 94:1d:ab:fa:49:5b:48:c7:41:a9:3c:0b:3b:57:d4:21:27:91: d1:76:cc:05:83:e6:36:1f:89:03:e5:41:7c:0a:e5:78:42:c1: 28:bb:ce:d1:15:80:ce:d7:77:9d:29:23:d0:4e:73:b4:17:31: f7:70:3b:20:5f:2b:55:52:03:5c:16:f9:46:d3:76:ae:50:ec: 3f:67:f1:7b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBKjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5 N0MwQTYzRjAeFw0yNTA5MDMwODI4MTFaFw0yNTA5MTAwODI4MTFaMBgxFjAUBgNV BAMTDTY4YjdmYzFiLWJiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC6m22kbJ6hm+jtIk5hLdTy9IHOcebAsuaqlk+rr6a3MGoz/1MBCvAwMszuny4J zl+SGaOdnUHWPJ1vInaYymaNLv/h13LwOCzimGl6Iw4ykZlTihPKbv9OOozC6Izy 8lA7Udz2wFGriJHvgPTn2SNme930Gotdid0MJ7pJamGcxiN/cpwbvHOJjrB8XOEa Ja6J3YR/JX5g6fKXoRqY3f9wf7siJdSo+/d+cUqJ94iw+mDR9RjTOSE9iLPXJ6xr gpUJiXb0+6w2GvYkNnGFJ7alptYgY7FYvbDydYMUVpDLb2bkF19Dhe507c116HVU 6ThK5VUxfrPMgjf5IkEJVSqHAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU6s0SBLZZ kTXzfpvhpmIrhZKlo0QwHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1 M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABWlhRP7vJZILigBXoZW05T9I1gi7TeKqi4zWTPxNkBxC9brtHY3JK5W F0jdy6pESOzIGg/wBSnPrSmmMsm2tGTFDpN3zcPIoT9641tiFLI0FuGLsNUFh0Et C+zivBnfQbBl1LIypYxtoQpMTFgQdioNfF6BnwPRYe9pwFVuMfxAo7T/U1uatsT2 j1zrS3QUUh3PxpgT2ygfWX+9WzxPd6cn3kQNnfQ/+pp5lx/8cmf2wr3jJ5Qdq/pJ W0jHQak8CztX1CEnkdF2zAWD5jYfiQPlQXwK5XhCwSi7ztEVgM7Xd50pI9BOc7QX MfdwOyBfK1VSA1wW+UbTdq5Q7D9n8Xs= -----END CERTIFICATE-----Generated at Thu Sep 4 14:06:17 2025 by rpki-client