$ rpki-client -vvf rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft File: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft (raw, json) Hash identifier: a0BNysRVz1igLpSt7epwV7SGVpVGIRG6wtjLbuAJneU= Subject key identifier: 68:C4:4F:B3:F0:9D:60:85:B6:5B:EA:DE:DE:20:0D:86:52:5A:A2:5F Authority key identifier: FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 Certificate issuer: /CN=A918FD87/serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Certificate serial: 0845 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft Manifest number: 083D Signing time: Mon 08 Sep 2025 20:46:43 +0000 Manifest this update: Mon 08 Sep 2025 20:46:43 +0000 Manifest next update: Mon 15 Sep 2025 20:46:43 +0000 Files and hashes: 1: -6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl (hash: WbAlUx7hVnn8tnq5MP3xZrR7Cs81Ahm8zLMoAo4ON0s=) 2: 35167F34DE0911EAA8F7452CC4F9AE02.roa (hash: 5iBEu4/lxuKcsTngGzKrbQO6HIpjDKLahJSiNgvhi+k=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:46:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2117 (0x845) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918FD87, serialNumber=FBA7C3ADF07F80B356C113B85256F57A4069EAE6 Validity Not Before: Sep 8 20:46:43 2025 GMT Not After : Sep 15 20:46:43 2025 GMT Subject: CN=68bf40b3-ea46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c7:29:69:9e:b7:53:5b:25:5c:00:1e:e6:54: d0:eb:e5:cc:d9:d3:34:d2:ab:46:8f:ea:95:6f:d8: e7:e8:c9:4b:da:7c:83:af:f2:a8:ab:54:f6:c0:11: 74:43:17:7c:ad:fb:d5:40:49:f1:14:38:70:2b:e6: 9c:4f:2e:89:c7:92:89:79:ab:24:ea:79:f9:89:55: ba:38:30:56:fd:86:00:74:23:c5:4f:3f:21:19:b1: f3:0a:fc:40:83:8b:42:cd:1d:df:10:11:bd:d1:32: 12:b6:dc:62:c7:9c:25:f7:17:a9:69:84:6e:42:bb: 94:1a:44:f3:8b:5d:78:bd:ab:19:86:7b:93:62:f0: 1a:fa:f8:e4:ce:ca:ff:e0:5c:57:cd:98:9e:73:41: 49:23:3f:4b:04:b7:b0:8b:40:07:07:4c:ef:16:e7: f9:45:a5:56:9b:74:13:f9:ca:1f:a1:da:c1:07:c0: 2e:3e:6c:e9:1a:e8:8d:0c:1d:83:5f:78:2f:62:3b: 93:12:b5:d9:fa:79:06:14:2a:f5:e1:1f:ce:c2:23: c2:2f:40:69:0c:5c:7d:c3:bd:1d:61:4b:35:7f:ed: d2:3c:03:a7:06:f1:7b:a1:35:9f:7e:0a:bd:d9:a5: 7d:1f:35:e9:8d:50:d1:63:00:b1:9c:78:08:e7:69: 6b:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C4:4F:B3:F0:9D:60:85:B6:5B:EA:DE:DE:20:0D:86:52:5A:A2:5F X509v3 Authority Key Identifier: keyid:FB:A7:C3:AD:F0:7F:80:B3:56:C1:13:B8:52:56:F5:7A:40:69:EA:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FD87/29AA9956DE0811EAA106B62BC4F9AE02/-6fDrfB_gLNWwRO4Ulb1ekBp6uY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:10:b1:b7:05:1d:04:65:fb:c5:ec:d5:e2:33:18:91:ff:9d: e1:57:c3:03:a9:4b:36:3b:37:10:c0:71:df:66:04:81:ba:79: 38:54:b9:e8:c2:f2:e0:ae:ac:3d:b7:9a:9e:ff:5f:66:b6:48: 1e:50:ca:34:91:bf:64:d0:c6:5e:a1:34:10:41:0e:c6:cf:fb: e3:cf:7f:b6:3a:e9:86:e5:f2:64:42:de:41:0c:43:ff:4a:7d: df:9c:06:6b:e5:9a:ff:b7:88:63:df:9a:aa:28:b6:07:36:a2: 2f:4e:9a:d7:59:67:7e:c2:54:07:36:3d:17:18:31:f4:0e:0d: a3:68:b3:37:36:27:14:2d:73:df:2a:d2:c7:5e:be:91:29:db: 59:78:ff:1b:41:fa:2d:24:eb:6c:09:e2:05:7a:99:84:dd:72: 66:fe:8e:43:95:ae:0f:af:a9:e5:58:98:f5:e3:4a:c4:63:94: 6d:fc:4e:03:25:aa:41:37:4b:2d:71:65:41:ff:83:1b:83:c9: f8:7c:46:46:01:24:8c:36:c6:cc:42:75:54:1f:dd:98:c7:e3: ea:b2:4c:b7:df:08:2d:6f:e5:b3:66:12:9c:5e:08:87:d5:28: fe:ff:44:65:dc:7a:8b:ac:f3:f9:e8:36:09:38:55:fd:d1:cb: 99:ad:b3:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEZEODcxMTAvBgNVBAUTKEZCQTdDM0FERjA3RjgwQjM1NkMxMTNCODUyNTZGNTdB NDA2OUVBRTYwHhcNMjUwOTA4MjA0NjQzWhcNMjUwOTE1MjA0NjQzWjAYMRYwFAYD VQQDEw02OGJmNDBiMy1lYTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxscpaZ63U1slXAAe5lTQ6+XM2dM00qtGj+qVb9jn6MlL2nyDr/Koq1T2wBF0 Qxd8rfvVQEnxFDhwK+acTy6Jx5KJeask6nn5iVW6ODBW/YYAdCPFTz8hGbHzCvxA g4tCzR3fEBG90TISttxix5wl9xepaYRuQruUGkTzi114vasZhnuTYvAa+vjkzsr/ 4FxXzZiec0FJIz9LBLewi0AHB0zvFuf5RaVWm3QT+cofodrBB8AuPmzpGuiNDB2D X3gvYjuTErXZ+nkGFCr14R/OwiPCL0BpDFx9w70dYUs1f+3SPAOnBvF7oTWffgq9 2aV9HzXpjVDRYwCxnHgI52lrcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGjET7Pw nWCFtlvq3t4gDYZSWqJfMB8GA1UdIwQYMBaAFPunw63wf4CzVsETuFJW9XpAaerm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkQ4Ny8yOUFBOTk1NkRF MDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dMTld3Uk80VWxiMWVrQnA2 dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy02ZkRyZkJfZ0xOV3dSTzRVbGIxZWtCcDZ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 RkQ4Ny8yOUFBOTk1NkRFMDgxMUVBQTEwNkI2MkJDNEY5QUUwMi8tNmZEcmZCX2dM Tld3Uk80VWxiMWVrQnA2dVkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUELG3BR0EZfvF7NXiMxiR/53hV8MDqUs2OzcQwHHfZgSBunk4VLno wvLgrqw9t5qe/19mtkgeUMo0kb9k0MZeoTQQQQ7Gz/vjz3+2OumG5fJkQt5BDEP/ Sn3fnAZr5Zr/t4hj35qqKLYHNqIvTprXWWd+wlQHNj0XGDH0Dg2jaLM3NicULXPf KtLHXr6RKdtZeP8bQfotJOtsCeIFepmE3XJm/o5Dla4Pr6nlWJj140rEY5Rt/E4D JapBN0stcWVB/4Mbg8n4fEZGASSMNsbMQnVUH92Yx+Pqsky33wgtb+WzZhKcXgiH 1Sj+/0Rl3HqLrPP56DYJOFX90cuZrbOK -----END CERTIFICATE-----Generated at Tue Sep 9 09:20:21 2025 by rpki-client