$ rpki-client -vvf rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft File: rM6Cte30ohwyAbjitAAMgyRRNQs.mft (raw, json) Hash identifier: tv6ANsOyIXrh8+fi1YCqcXksnalQOBwGKc4nhAkXWmU= Subject key identifier: D4:CC:4E:2B:6D:84:DF:C0:BE:B9:42:18:6D:9D:5E:3D:32:59:13:7D Authority key identifier: AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B Certificate issuer: /CN=A919F213/serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Certificate serial: 02B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft Manifest number: 02B4 Signing time: Sun 07 Sep 2025 01:55:16 +0000 Manifest this update: Sun 07 Sep 2025 01:55:15 +0000 Manifest next update: Sun 14 Sep 2025 01:55:15 +0000 Files and hashes: 1: rM6Cte30ohwyAbjitAAMgyRRNQs.crl (hash: Sc1xjwR3aqXb7uwui72EwCdDoOEI/Dli4lja65JAdLA=) 2: C59B1D6E0C1811EDA9B32927C4F9AE02.roa (hash: mxX4AKL91owHWzEHb/qZfzEc1LLhMztNgoc1pmTwinI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 01:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F213, serialNumber=ACCE82B5EDF4A21C3201B8E2B4000C832451350B Validity Not Before: Sep 7 01:55:15 2025 GMT Not After : Sep 14 01:55:15 2025 GMT Subject: CN=68bce604-d15e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:74:02:4d:8e:b2:05:1a:11:b1:93:de:9a:93: 0f:9b:75:29:09:dc:ad:2e:3e:c2:b5:64:53:b8:20: dd:e8:bf:42:9c:4c:ba:ba:01:62:e3:32:0c:4f:b0: 16:6c:85:7b:02:f1:8a:5b:81:74:fe:3e:ee:ca:1f: 6d:d5:9d:87:bb:6c:9a:fd:6f:68:eb:39:cb:9f:ce: a1:9c:d9:30:eb:c6:09:82:e6:ef:ab:df:e6:3d:3a: 62:88:dc:33:ec:6f:b0:0e:46:bb:7b:ab:78:b9:6c: 64:fb:41:74:14:be:a2:7d:a9:6a:6a:06:88:d2:a9: db:0c:84:13:72:63:86:06:53:72:c6:03:df:84:97: 71:63:44:f2:e1:69:3b:8f:b8:28:29:61:fd:f4:e8: 2a:72:f1:f8:3e:36:2c:a3:82:85:4f:e0:44:93:18: 1a:c6:66:39:da:e7:a8:31:86:81:2a:08:64:95:90: e6:f2:d8:9f:f9:d5:8f:95:2e:4e:3b:81:7e:31:38: b2:61:80:d4:08:b5:77:3e:0a:dd:1e:55:9b:04:c2: 18:23:84:5d:86:88:eb:c4:3f:30:68:35:cc:4b:25: 11:4e:2d:a0:c4:cc:f2:39:c3:80:63:c8:15:50:70: eb:5b:5d:58:98:39:89:03:e7:57:6b:79:9d:ff:6f: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:CC:4E:2B:6D:84:DF:C0:BE:B9:42:18:6D:9D:5E:3D:32:59:13:7D X509v3 Authority Key Identifier: keyid:AC:CE:82:B5:ED:F4:A2:1C:32:01:B8:E2:B4:00:0C:83:24:51:35:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rM6Cte30ohwyAbjitAAMgyRRNQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F213/7234DDC40C1611EDB401F425C4F9AE02/rM6Cte30ohwyAbjitAAMgyRRNQs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 60:36:93:b5:1f:36:d1:84:5c:31:ca:68:bd:2b:52:8a:d5:29: 00:bc:e0:94:10:32:df:d9:89:21:71:d2:58:10:4c:44:16:92: b8:f3:a7:19:30:5f:52:f2:8e:64:27:51:cc:53:0b:ad:4c:36: 80:0d:4f:bb:f8:9b:64:38:e5:6f:24:50:f3:16:d3:a7:01:7b: 2b:f9:52:d1:39:f6:f3:74:fb:9d:cf:30:5b:d5:7c:c2:79:63: 68:4c:41:de:02:5c:c2:c3:75:ae:06:8c:d8:5e:29:73:e4:5a: ba:32:56:ec:f2:77:d5:07:a6:39:77:7f:94:4c:e9:1d:1c:be: 14:eb:d0:85:81:76:50:d5:96:44:4d:c4:99:06:88:35:a5:ff: 29:d1:5e:d4:60:03:af:9d:c3:2a:9d:38:bb:c5:54:7f:d2:cc: 46:11:37:9f:bb:42:71:71:5a:e1:90:ad:b6:6a:f0:f3:d4:3e: 9d:0b:bb:03:a5:8d:1a:97:ce:0b:e0:a6:2b:f3:cc:70:a6:34: cc:c7:c2:23:d2:9f:60:ce:b6:56:f2:7b:f2:7e:fc:16:1d:80: ff:97:53:e3:2d:0e:cd:2e:29:af:8e:14:20:70:aa:ca:b2:ac: 79:6f:0c:87:64:ed:dc:f7:53:69:cc:ae:7e:a5:63:2d:c8:9a: 10:00:6e:f8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUYyMTMxMTAvBgNVBAUTKEFDQ0U4MkI1RURGNEEyMUMzMjAxQjhFMkI0MDAwQzgz MjQ1MTM1MEIwHhcNMjUwOTA3MDE1NTE1WhcNMjUwOTE0MDE1NTE1WjAYMRYwFAYD VQQDEw02OGJjZTYwNC1kMTVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlnQCTY6yBRoRsZPempMPm3UpCdytLj7CtWRTuCDd6L9CnEy6ugFi4zIMT7AW bIV7AvGKW4F0/j7uyh9t1Z2Hu2ya/W9o6znLn86hnNkw68YJgubvq9/mPTpiiNwz 7G+wDka7e6t4uWxk+0F0FL6ifalqagaI0qnbDIQTcmOGBlNyxgPfhJdxY0Ty4Wk7 j7goKWH99OgqcvH4PjYso4KFT+BEkxgaxmY52ueoMYaBKghklZDm8tif+dWPlS5O O4F+MTiyYYDUCLV3PgrdHlWbBMIYI4RdhojrxD8waDXMSyURTi2gxMzyOcOAY8gV UHDrW11YmDmJA+dXa3md/2/JVQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNTMTitt hN/AvrlCGG2dXj0yWRN9MB8GA1UdIwQYMBaAFKzOgrXt9KIcMgG44rQADIMkUTUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjIxMy83MjM0RERDNDBD MTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9od3lBYmppdEFBTWd5UlJO UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3JNNkN0ZTMwb2h3eUFiaml0QUFNZ3lSUk5Rcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RjIxMy83MjM0RERDNDBDMTYxMUVEQjQwMUY0MjVDNEY5QUUwMi9yTTZDdGUzMG9o d3lBYmppdEFBTWd5UlJOUXMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBgNpO1HzbRhFwxymi9K1KK1SkAvOCUEDLf2YkhcdJYEExEFpK486cZ MF9S8o5kJ1HMUwutTDaADU+7+JtkOOVvJFDzFtOnAXsr+VLROfbzdPudzzBb1XzC eWNoTEHeAlzCw3WuBozYXilz5Fq6Mlbs8nfVB6Y5d3+UTOkdHL4U69CFgXZQ1ZZE TcSZBog1pf8p0V7UYAOvncMqnTi7xVR/0sxGETefu0JxcVrhkK22avDz1D6dC7sD pY0al84L4KYr88xwpjTMx8Ij0p9gzrZW8nvyfvwWHYD/l1PjLQ7NLimvjhQgcKrK sqx5bwyHZO3c91NpzK5+pWMtyJoQAG74 -----END CERTIFICATE-----Generated at Sun Sep 7 14:39:51 2025 by rpki-client