$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: LyqveNXlfzr3RUWMOlU5IXB3gZ7FiMyUJbPeBlGCM1U= Subject key identifier: C3:9A:20:D4:0C:4F:38:AB:60:67:FB:8E:E8:4C:CC:C9:6A:09:63:45 Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 116A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 115D Signing time: Mon 08 Sep 2025 17:16:31 +0000 Manifest this update: Mon 08 Sep 2025 17:16:31 +0000 Manifest next update: Mon 15 Sep 2025 17:16:31 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: XG1hHwuVDInbVvPXlinXZ2OiF8lCFuXWg67pclG7KbU=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 17:16:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4458 (0x116a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Sep 8 17:16:31 2025 GMT Not After : Sep 15 17:16:31 2025 GMT Subject: CN=68bf0f6f-9353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:9c:56:a9:16:d7:4b:05:b8:de:dd:79:f3: 23:54:c3:b3:5b:88:2c:00:bf:45:28:77:b0:9d:41: 09:33:41:4d:71:ce:59:82:df:94:a5:75:97:9d:51: 87:b5:d9:1a:76:03:b8:50:b7:23:8f:21:34:9d:85: 68:27:9e:07:8d:ac:c5:2f:e5:04:2d:52:5a:60:06: f4:0e:df:25:9e:27:b7:0e:3a:6e:47:9d:58:3d:85: 08:c6:75:82:a6:1d:ff:34:a4:5e:dd:63:15:9a:1a: d8:fc:0d:89:59:d7:a0:c3:7a:68:53:7a:7e:c4:35: f5:9e:55:5c:9d:e0:c8:aa:90:1d:a9:ed:e7:12:20: 98:48:62:95:7e:6d:e1:2c:51:3a:1f:ca:0c:aa:a3: b9:cb:7c:cc:64:5c:81:f7:ef:4b:5e:9b:69:51:86: 2c:6a:43:7a:ca:a5:03:47:6e:8f:2a:78:d2:4b:a4: bb:17:e1:81:58:b2:82:68:f1:7a:2f:26:4b:0a:0e: 00:88:d2:28:bb:36:9a:d6:c1:77:fe:2c:7c:9d:a7: 2f:ea:7a:a5:3c:e3:a0:ad:4b:4f:5c:21:15:c6:bc: 07:d3:58:72:a5:27:18:a9:b4:d1:4e:49:41:56:a2: 15:0d:86:78:b3:69:89:51:d9:eb:88:6d:40:61:ac: d8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:9A:20:D4:0C:4F:38:AB:60:67:FB:8E:E8:4C:CC:C9:6A:09:63:45 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 75:28:1f:a7:5e:ea:27:36:10:43:91:5c:77:18:75:05:1d:b8: 9f:8c:f2:de:de:e8:85:6b:4e:25:af:c3:ce:ce:d0:e1:f4:e9: e3:47:94:8e:1f:83:47:b5:d4:94:a6:61:b5:63:64:47:b7:9c: 92:e5:c1:5e:6c:75:74:8b:7e:34:66:a3:0d:57:e6:5b:55:9c: 28:46:e1:90:bf:de:dc:f1:58:be:7d:d0:50:e5:b2:e0:14:d5: aa:1d:92:52:dd:63:ea:60:50:ce:24:f1:ab:b2:83:78:9f:1f: df:a8:06:d4:e9:d1:0a:ee:0b:6a:50:06:36:34:95:55:8a:3a: ff:df:3b:0d:d5:83:83:5d:40:55:18:08:c2:65:3b:c4:02:b3: 67:94:95:f1:09:fa:1b:81:ca:dc:f2:af:d2:02:b5:f3:db:b5: 9d:1e:40:9c:46:a1:1f:98:66:30:29:5c:62:c1:ec:8b:95:02: 2d:3f:bf:67:23:21:27:bb:87:fd:11:b3:91:35:29:60:a3:fb: 6d:98:23:9a:44:70:2e:54:c4:8d:65:d9:aa:db:cf:2b:6e:19: f8:eb:14:99:71:3f:53:9f:f5:3f:2d:c5:07:fd:85:7b:50:19: 83:a1:39:8d:2d:a3:e6:b4:bf:30:c1:7e:f1:3f:6b:56:d9:67: e2:df:d5:9a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwOTA4MTcxNjMxWhcNMjUwOTE1MTcxNjMxWjAYMRYwFAYD VQQDEw02OGJmMGY2Zi05MzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpKcVqkW10sFuN7defMjVMOzW4gsAL9FKHewnUEJM0FNcc5Zgt+UpXWXnVGH tdkadgO4ULcjjyE0nYVoJ54HjazFL+UELVJaYAb0Dt8lnie3DjpuR51YPYUIxnWC ph3/NKRe3WMVmhrY/A2JWdegw3poU3p+xDX1nlVcneDIqpAdqe3nEiCYSGKVfm3h LFE6H8oMqqO5y3zMZFyB9+9LXptpUYYsakN6yqUDR26PKnjSS6S7F+GBWLKCaPF6 LyZLCg4AiNIouzaa1sF3/ix8nacv6nqlPOOgrUtPXCEVxrwH01hypScYqbTRTklB VqIVDYZ4s2mJUdnriG1AYazY6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMOaINQM TzirYGf7juhMzMlqCWNFMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB1KB+nXuonNhBDkVx3GHUFHbifjPLe3uiFa04lr8POztDh9OnjR5SO H4NHtdSUpmG1Y2RHt5yS5cFebHV0i340ZqMNV+ZbVZwoRuGQv97c8Vi+fdBQ5bLg FNWqHZJS3WPqYFDOJPGrsoN4nx/fqAbU6dEK7gtqUAY2NJVVijr/3zsN1YODXUBV GAjCZTvEArNnlJXxCfobgcrc8q/SArXz27WdHkCcRqEfmGYwKVxiweyLlQItP79n IyEnu4f9EbORNSlgo/ttmCOaRHAuVMSNZdmq288rbhn46xSZcT9Tn/U/LcUH/YV7 UBmDoTmNLaPmtL8wwX7xP2tW2Wfi39Wa -----END CERTIFICATE-----Generated at Mon Sep 8 21:37:42 2025 by rpki-client