$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft File: 6GFAAj8MoF8XFLinDcmVX_eXvbE.mft (raw, json) Hash identifier: 2ADkompC9xTgWADgu2q6Of/Xpql267dYpFsZ4J9/1yk= Subject key identifier: C0:3E:D2:77:8B:C5:13:2B:B6:CB:E4:5D:17:45:4E:12:3A:ED:02:B5 Authority key identifier: E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 Certificate issuer: /CN=A91A0847/serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Certificate serial: A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft Manifest number: A2 Signing time: Thu 21 Aug 2025 06:30:21 +0000 Manifest this update: Thu 21 Aug 2025 06:30:20 +0000 Manifest next update: Thu 28 Aug 2025 06:30:20 +0000 Files and hashes: 1: 6GFAAj8MoF8XFLinDcmVX_eXvbE.crl (hash: hWEr1tAb5+OCXFSmR92fgtYqMWfu3WNpDrXPegBPK4A=) 2: 9A36771A8C8E11EF86852961C4F9AE02.roa (hash: 9OuRCyTKARyxu0HVGwX+7EOD8zJcO3DB6HwcIsyXsFM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 06:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 163 (0xa3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0847, serialNumber=E86140023F0CA05F1714B8A70DC9955FF797BDB1 Validity Not Before: Aug 21 06:30:20 2025 GMT Not After : Aug 28 06:30:20 2025 GMT Subject: CN=68a6bcfc-2e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:27:18:b0:d1:50:d5:ed:72:42:5e:9f:ea:61: 3a:fa:c0:89:ec:df:66:f8:ee:a5:5f:4e:01:1c:66: f1:70:aa:fe:4b:6f:c3:71:41:be:71:d1:bb:bf:fb: 73:d7:39:ed:c3:52:9c:b1:31:32:d7:42:8e:37:9d: b4:11:9d:76:33:c5:ea:fa:f6:76:ef:10:34:0f:e4: ce:b9:b1:52:87:b1:39:96:01:82:8c:a0:3f:d5:40: b8:74:d0:72:0b:7e:b7:a1:4b:9f:20:ce:32:5a:fc: d5:25:51:99:0e:fa:5d:a4:d2:62:a3:2c:95:86:b1: 99:0e:d8:bc:89:54:42:72:66:e4:30:98:f8:6c:fd: a5:fb:f4:a8:52:d6:ab:c9:a2:71:8a:44:03:11:d5: 5d:91:69:e0:57:2b:7a:76:84:01:96:71:4f:3f:e4: 02:b3:56:86:b7:31:32:ea:28:01:1c:e5:8f:82:46: ee:08:95:63:7c:56:3d:40:f4:f9:1b:41:00:67:31: 7d:ba:6e:88:f7:bc:a8:20:47:e2:03:76:01:bd:61: af:a4:14:43:42:65:6c:e3:28:88:1c:ae:2c:57:3c: d7:2f:bd:ba:c6:5e:84:fe:b0:86:0e:e7:c9:5c:37: 95:fd:fa:67:ee:f5:30:66:cf:25:cc:f9:48:57:dc: 76:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:3E:D2:77:8B:C5:13:2B:B6:CB:E4:5D:17:45:4E:12:3A:ED:02:B5 X509v3 Authority Key Identifier: keyid:E8:61:40:02:3F:0C:A0:5F:17:14:B8:A7:0D:C9:95:5F:F7:97:BD:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GFAAj8MoF8XFLinDcmVX_eXvbE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0847/33B23F7E8C8E11EFA2DC5360C4F9AE02/6GFAAj8MoF8XFLinDcmVX_eXvbE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 21:31:e7:d6:6e:f7:fa:4f:8c:a7:b7:3d:19:07:1d:b1:e3:bb: ab:a9:11:85:e8:9a:f1:41:5d:e8:4b:b5:d1:e2:2a:84:1e:71: 38:35:1d:9e:85:ed:fa:34:ab:f4:1e:d3:2a:d2:10:ae:b0:42: 1f:4d:3c:03:e1:b5:8d:4a:2e:30:02:2e:f4:ee:97:65:a2:81: 83:ef:e4:e1:32:5a:75:25:83:3f:40:53:d5:e3:e8:83:16:de: 16:c0:37:5b:53:9e:52:aa:f1:1d:eb:f4:5b:ef:33:c1:7f:a7: 9a:df:c1:e1:c4:45:ca:b9:dc:ca:0f:fd:9e:4e:5a:ef:52:3d: 94:58:46:82:77:61:8e:3a:1d:f5:54:0f:e3:12:c6:ca:e8:b0: c7:4f:9b:f2:94:17:94:c5:a2:ae:47:c5:98:3d:34:55:f3:e2: 1a:44:2c:cb:a9:f1:2a:f0:84:f6:5d:cc:58:8e:23:39:0b:21: 66:56:07:55:23:99:7d:39:60:62:ab:f3:ff:07:04:bf:40:15: eb:0c:46:9c:a9:79:8d:49:e6:2a:fe:04:0a:a3:05:25:3b:7e: 7c:cc:fc:7c:f5:eb:04:c8:08:6e:1b:43:59:8d:d5:a9:e0:b1: 6d:0f:56:8f:92:eb:9a:d4:a1:5d:c3:85:e6:c7:9d:00:38:3d: fb:01:f3:94 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4NDcxMTAvBgNVBAUTKEU4NjE0MDAyM0YwQ0EwNUYxNzE0QjhBNzBEQzk5NTVG Rjc5N0JEQjEwHhcNMjUwODIxMDYzMDIwWhcNMjUwODI4MDYzMDIwWjAYMRYwFAYD VQQDEw02OGE2YmNmYy0yZTA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ScYsNFQ1e1yQl6f6mE6+sCJ7N9m+O6lX04BHGbxcKr+S2/DcUG+cdG7v/tz 1zntw1KcsTEy10KON520EZ12M8Xq+vZ27xA0D+TOubFSh7E5lgGCjKA/1UC4dNBy C363oUufIM4yWvzVJVGZDvpdpNJioyyVhrGZDti8iVRCcmbkMJj4bP2l+/SoUtar yaJxikQDEdVdkWngVyt6doQBlnFPP+QCs1aGtzEy6igBHOWPgkbuCJVjfFY9QPT5 G0EAZzF9um6I97yoIEfiA3YBvWGvpBRDQmVs4yiIHK4sVzzXL726xl6E/rCGDufJ XDeV/fpn7vUwZs8lzPlIV9x2zQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMA+0neL xRMrtsvkXRdFThI67QK1MB8GA1UdIwQYMBaAFOhhQAI/DKBfFxS4pw3JlV/3l72x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDg0Ny8zM0IyM0Y3RThD OEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9GOFhGTGluRGNtVlhfZVh2 YkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHRkFBajhNb0Y4WEZMaW5EY21WWF9lWHZiRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MDg0Ny8zM0IyM0Y3RThDOEUxMUVGQTJEQzUzNjBDNEY5QUUwMi82R0ZBQWo4TW9G OFhGTGluRGNtVlhfZVh2YkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAhMefWbvf6T4yntz0ZBx2x47urqRGF6JrxQV3oS7XR4iqEHnE4NR2e he36NKv0HtMq0hCusEIfTTwD4bWNSi4wAi707pdlooGD7+ThMlp1JYM/QFPV4+iD Ft4WwDdbU55SqvEd6/Rb7zPBf6ea38HhxEXKudzKD/2eTlrvUj2UWEaCd2GOOh31 VA/jEsbK6LDHT5vylBeUxaKuR8WYPTRV8+IaRCzLqfEq8IT2XcxYjiM5CyFmVgdV I5l9OWBiq/P/BwS/QBXrDEacqXmNSeYq/gQKowUlO358zPx89esEyAhuG0NZjdWp 4LFtD1aPkuua1KFdw4Xmx50AOD37AfOU -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:43 2025 by rpki-client