$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft File: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft (raw, json) Hash identifier: FhbEseGb9ijp6c14FsjRDnjmsYL11CH9djTlqzJc3hY= Subject key identifier: 40:12:E2:AF:96:39:22:82:72:02:07:08:37:36:57:FB:C8:CB:DE:E3 Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft Manifest number: 7D Signing time: Tue 19 Aug 2025 07:22:04 +0000 Manifest this update: Tue 19 Aug 2025 07:22:04 +0000 Manifest next update: Tue 26 Aug 2025 07:22:04 +0000 Files and hashes: 1: 6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl (hash: epKGQQHwXVG4c/4XT0E7ZSrvzQjjSJdzEvZRFZbf0kM=) 2: 0C2077B6D1B511EF944F205DC4F9AE02.roa (hash: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:22:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 131 (0x83) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Aug 19 07:22:04 2025 GMT Not After : Aug 26 07:22:04 2025 GMT Subject: CN=68a4261c-830a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:b0:97:1d:80:d6:6a:2e:37:09:b2:be:e9:f0: b2:ae:0a:a5:05:9c:d6:40:44:95:33:b6:73:48:53: c6:a8:28:c5:97:d0:aa:b9:10:fa:4e:cb:14:15:b6: ed:22:dd:f2:ff:f5:e8:d9:7e:63:fe:b8:91:50:7d: f8:b9:75:2b:33:98:b3:d8:c6:1e:a3:41:5b:39:1f: a5:76:33:1a:43:40:dd:07:2a:8f:c7:fc:9e:1b:b5: 48:cf:f2:52:73:96:29:bb:e6:fe:89:a3:37:a3:e6: 48:8f:f0:5b:81:9a:f4:5e:77:2b:4f:54:35:d3:02: f3:d9:3d:63:7d:7c:fc:af:ec:da:af:2a:de:d9:b4: fc:67:43:b3:19:00:2e:5f:21:f4:40:fe:af:36:f4: d5:d5:51:a0:b3:54:62:b3:70:42:d5:19:6d:44:04: 51:81:ec:91:57:52:fd:bf:da:23:7c:c7:15:3d:54: 4d:ee:22:2e:32:be:80:3c:eb:aa:74:cd:a6:96:df: 5b:97:3d:33:75:dc:4f:db:39:69:7c:7c:43:86:23: 46:c6:e7:fe:95:71:21:ad:5b:e4:48:43:69:cd:f6: bd:3f:d9:da:07:32:95:cf:23:dc:ab:0d:16:32:62: 4c:e3:b3:2a:e9:6c:ce:b1:70:4d:91:d2:c9:12:09: 5d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:12:E2:AF:96:39:22:82:72:02:07:08:37:36:57:FB:C8:CB:DE:E3 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 56:92:f9:45:79:a3:92:63:30:f6:12:6d:a1:43:89:1f:fa:f8: 58:38:75:d5:f6:9c:3f:84:36:ec:da:ac:11:95:08:57:bf:3e: c6:f8:5f:ab:ee:5c:53:03:44:49:48:4a:42:e5:de:a2:69:b0: b6:fb:3a:d8:b8:5f:ea:81:6c:47:b2:20:82:c7:ef:c5:57:7e: fe:30:3b:42:fc:d5:10:98:38:00:b6:08:4d:78:43:8e:c5:e8: 45:6d:d1:dc:4f:68:d5:b6:f3:1a:15:1a:03:72:51:49:23:71: 43:49:4d:1f:ed:53:7e:3a:77:fc:5c:f1:fd:3c:5e:e1:f7:a6: 72:93:f7:5c:18:5e:dc:30:6d:0a:3f:fd:be:ba:a6:fb:33:56: 49:44:32:c7:c3:67:dd:72:48:48:1a:27:b8:4e:00:70:fc:e6: ca:f9:46:aa:20:a1:bc:62:91:5d:f3:f9:2c:96:b3:2d:1f:76: 7b:48:d2:ae:71:0c:31:20:f4:a6:de:f6:c4:1d:30:80:18:ab: b0:05:53:36:8e:dc:3e:b0:04:2e:63:e7:ba:b6:ed:78:45:7f: 07:02:5d:60:c6:b1:7b:fc:e2:70:c8:24:2c:f4:89:8a:72:e7: b1:25:14:c5:1b:1f:e7:4e:90:ea:39:47:22:a5:3d:65:91:11: b2:60:3d:5b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTkwODMxMTAvBgNVBAUTKEU4Q0YyMkEwOEU0MzkxQ0FEMTUwRkEzMUI0NERDOTND OEFCODI1RUEwHhcNMjUwODE5MDcyMjA0WhcNMjUwODI2MDcyMjA0WjAYMRYwFAYD VQQDEw02OGE0MjYxYy04MzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyrCXHYDWai43CbK+6fCyrgqlBZzWQESVM7ZzSFPGqCjFl9CquRD6TssUFbbt It3y//Xo2X5j/riRUH34uXUrM5iz2MYeo0FbOR+ldjMaQ0DdByqPx/yeG7VIz/JS c5Ypu+b+iaM3o+ZIj/BbgZr0XncrT1Q10wLz2T1jfXz8r+zaryre2bT8Z0OzGQAu XyH0QP6vNvTV1VGgs1Ris3BC1RltRARRgeyRV1L9v9ojfMcVPVRN7iIuMr6APOuq dM2mlt9blz0zddxP2zlpfHxDhiNGxuf+lXEhrVvkSENpzfa9P9naBzKVzyPcqw0W MmJM47Mq6WzOsXBNkdLJEgld4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEAS4q+W OSKCcgIHCDc2V/vIy97jMB8GA1UdIwQYMBaAFOjPIqCOQ5HK0VD6MbRNyTyKuCXq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTA4My9DMDZGMkU0MkQx QjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtjclJVUG94dEUzSlBJcTRK ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEplby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTA4My9DMDZGMkU0MkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi82TThpb0k1RGtj clJVUG94dEUzSlBJcTRKZW8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBWkvlFeaOSYzD2Em2hQ4kf+vhYOHXV9pw/hDbs2qwRlQhXvz7G+F+r 7lxTA0RJSEpC5d6iabC2+zrYuF/qgWxHsiCCx+/FV37+MDtC/NUQmDgAtghNeEOO xehFbdHcT2jVtvMaFRoDclFJI3FDSU0f7VN+Onf8XPH9PF7h96Zyk/dcGF7cMG0K P/2+uqb7M1ZJRDLHw2fdckhIGie4TgBw/ObK+UaqIKG8YpFd8/kslrMtH3Z7SNKu cQwxIPSm3vbEHTCAGKuwBVM2jtw+sAQuY+e6tu14RX8HAl1gxrF7/OJwyCQs9ImK cuexJRTFGx/nTpDqOUcipT1lkRGyYD1b -----END CERTIFICATE-----Generated at Thu Aug 21 03:57:13 2025 by rpki-client