$ rpki-client -vvf rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft File: 6EKSkSMrng-5SFoKrUk9fgfH5NE.mft (raw, json) Hash identifier: OgQL+iTbzmFYRNzQcEymzy5q5GwlaS8OPH5ssbn9nFo= Subject key identifier: F9:9B:B7:9F:CE:CE:35:94:59:5E:BD:06:E5:C1:33:C2:BB:5C:AB:79 Authority key identifier: E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 Certificate issuer: /CN=A9199696/serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Certificate serial: 5E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft Manifest number: 5D Signing time: Sat 23 Aug 2025 07:20:25 +0000 Manifest this update: Sat 23 Aug 2025 07:20:25 +0000 Manifest next update: Sat 30 Aug 2025 07:20:24 +0000 Files and hashes: 1: 6EKSkSMrng-5SFoKrUk9fgfH5NE.crl (hash: tOrcY9N7kfQax4wq3OSGjIFSB1/Xp645jO6PGFP+jMY=) 2: 1A44E27AF1A711EFA441E72CC4F9AE02.roa (hash: +T8xPEy3qOwqRDiq3fa/SHDl3cgx+ER91jGPjiK2GbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 94 (0x5e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9199696, serialNumber=E8429291232B9E0FB9485A0AAD493D7E07C7E4D1 Validity Not Before: Aug 23 07:20:25 2025 GMT Not After : Aug 30 07:20:24 2025 GMT Subject: CN=68a96bb9-01dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c5:12:8f:72:88:36:14:6e:77:2f:20:56:ac: 08:2c:89:f5:76:3d:e5:31:1a:d2:09:93:05:12:5b: 34:8b:92:bb:13:30:24:a5:2f:d1:43:a4:4f:96:c0: 09:6f:e1:85:43:f4:ca:a4:e0:08:9c:fb:23:e7:b0: 13:7e:85:39:25:24:ed:18:fd:26:72:0e:6f:e0:6f: ec:a5:2d:5c:1a:58:68:83:5e:a7:7a:d9:9d:e4:3f: c2:d1:f9:40:20:66:bf:8a:e0:01:c5:e5:09:48:d7: d6:0d:df:76:fe:ac:4a:6c:33:52:54:4e:f4:b8:01: 24:96:db:fd:ab:87:ec:1b:a9:12:00:08:ee:4b:ed: 0c:33:97:08:b8:0c:c5:34:d9:be:11:7f:0a:72:cb: c7:9a:29:f2:e9:39:87:df:e1:0c:95:31:b9:04:cf: 7c:54:15:15:73:a6:7e:fe:a2:6d:6d:22:c3:0b:a0: 5d:d5:5f:ae:8f:10:aa:eb:b8:6e:61:8f:9f:14:7f: a9:37:8f:83:44:7f:6b:cc:41:cf:ce:70:ef:b9:01: 5d:49:f1:25:e9:eb:19:cf:90:68:e9:94:f4:a6:6e: 8e:2c:8f:cd:82:58:00:0f:15:3e:71:f0:ef:28:43: e3:c9:5e:80:6a:1c:ef:e7:19:ce:86:c8:51:d7:3e: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:9B:B7:9F:CE:CE:35:94:59:5E:BD:06:E5:C1:33:C2:BB:5C:AB:79 X509v3 Authority Key Identifier: keyid:E8:42:92:91:23:2B:9E:0F:B9:48:5A:0A:AD:49:3D:7E:07:C7:E4:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EKSkSMrng-5SFoKrUk9fgfH5NE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199696/2B811656F1A411EF8448EB22C4F9AE02/6EKSkSMrng-5SFoKrUk9fgfH5NE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4c:4e:59:70:ec:f0:ee:f0:f8:cc:c2:41:98:55:b5:97:da:3f: 3b:f2:a2:d2:1b:a9:07:02:19:8e:39:a0:0d:d2:51:a4:fb:01: 2c:5d:dd:7b:92:29:25:7c:e3:f5:94:3b:fb:5e:8d:76:2b:77: 65:7d:03:69:50:be:65:05:1f:75:16:33:d5:d8:5f:0f:08:c7: b2:fa:89:a8:91:39:98:c6:f8:db:f2:1d:97:21:4f:03:f0:c0: 89:75:b5:bf:40:68:ed:6e:b3:43:b5:11:7b:b2:74:2d:32:15: b3:b0:7e:58:89:8d:f0:b8:ff:bd:99:5d:fa:a6:10:c9:47:99: f1:b1:96:95:5d:38:54:27:b4:3d:8d:6e:80:5d:3f:21:89:60: 29:a4:53:1d:b6:24:f2:2d:a6:94:13:96:7f:7a:90:05:09:54: cd:8c:6b:86:d9:86:70:5f:34:79:bb:21:56:9b:ff:c3:7e:93: 35:60:27:44:13:8e:ec:d0:f1:f5:00:4f:25:d0:5e:8f:a5:21: 1e:a0:e8:14:f7:89:49:6e:b1:f7:d8:a9:dc:46:93:53:76:bf: 6e:c7:cf:70:55:7d:be:e1:84:88:c0:af:80:b1:10:aa:52:51: 61:e0:f7:ff:0a:d6:4b:ed:43:fa:20:7f:cf:8b:bb:b9:0d:8f: 80:80:0f:ca -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBXjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 OTY5NjExMC8GA1UEBRMoRTg0MjkyOTEyMzJCOUUwRkI5NDg1QTBBQUQ0OTNEN0Uw N0M3RTREMTAeFw0yNTA4MjMwNzIwMjVaFw0yNTA4MzAwNzIwMjRaMBgxFjAUBgNV BAMTDTY4YTk2YmI5LTAxZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwxRKPcog2FG53LyBWrAgsifV2PeUxGtIJkwUSWzSLkrsTMCSlL9FDpE+WwAlv 4YVD9Mqk4Aic+yPnsBN+hTklJO0Y/SZyDm/gb+ylLVwaWGiDXqd62Z3kP8LR+UAg Zr+K4AHF5QlI19YN33b+rEpsM1JUTvS4ASSW2/2rh+wbqRIACO5L7Qwzlwi4DMU0 2b4Rfwpyy8eaKfLpOYff4QyVMbkEz3xUFRVzpn7+om1tIsMLoF3VX66PEKrruG5h j58Uf6k3j4NEf2vMQc/OcO+5AV1J8SXp6xnPkGjplPSmbo4sj82CWAAPFT5x8O8o Q+PJXoBqHO/nGc6GyFHXPtS3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU+Zu3n87O NZRZXr0G5cEzwrtcq3kwHwYDVR0jBBgwFoAU6EKSkSMrng+5SFoKrUk9fgfH5NEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5Njk2LzJCODExNjU2RjFB NDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmctNVNGb0tyVWs5ZmdmSDVO RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVLU2tTTXJuZy01U0ZvS3JVazlmZ2ZINU5FLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk5 Njk2LzJCODExNjU2RjFBNDExRUY4NDQ4RUIyMkM0RjlBRTAyLzZFS1NrU01ybmct NVNGb0tyVWs5ZmdmSDVORS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAExOWXDs8O7w+MzCQZhVtZfaPzvyotIbqQcCGY45oA3SUaT7ASxd3XuS KSV84/WUO/tejXYrd2V9A2lQvmUFH3UWM9XYXw8Ix7L6iaiROZjG+NvyHZchTwPw wIl1tb9AaO1us0O1EXuydC0yFbOwfliJjfC4/72ZXfqmEMlHmfGxlpVdOFQntD2N boBdPyGJYCmkUx22JPItppQTln96kAUJVM2Ma4bZhnBfNHm7IVab/8N+kzVgJ0QT juzQ8fUATyXQXo+lIR6g6BT3iUlusffYqdxGk1N2v27Hz3BVfb7hhIjAr4CxEKpS UWHg9/8K1kvtQ/ogf8+Lu7kNj4CAD8o= -----END CERTIFICATE-----Generated at Sun Aug 24 22:18:31 2025 by rpki-client