$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft File: mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft (raw, json) Hash identifier: EGs2FLKeWZuGqZGQxEterq+ExVjIS9EikcBN9NnqwAQ= Subject key identifier: F2:E0:88:17:CF:1F:43:37:E4:03:A2:AE:CE:48:AD:C9:4E:B8:75:2B Authority key identifier: 9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 Certificate issuer: /CN=A91CB21D/serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Certificate serial: 01DC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft Manifest number: 01D8 Signing time: Thu 21 Aug 2025 02:48:00 +0000 Manifest this update: Thu 21 Aug 2025 02:47:59 +0000 Manifest next update: Thu 28 Aug 2025 02:47:59 +0000 Files and hashes: 1: mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl (hash: xkO+NuL0kOwi48vwcOn43Kq7FeShcsqe53cX2cSr5QI=) 2: 11F911FAA8D811ED90192E3CC4F9AE02.roa (hash: 1slDbS6OMsVzRicTRklA2Gp5/wmmSnjZBoyP9DPcUVQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 02:47:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 476 (0x1dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB21D, serialNumber=9B1E8188CE64397E8B4241E6758D429DA0FF2E70 Validity Not Before: Aug 21 02:47:59 2025 GMT Not After : Aug 28 02:47:59 2025 GMT Subject: CN=68a688df-be68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:c5:10:7c:47:07:db:80:d1:16:5d:93:34: 5f:a5:b6:19:ee:e2:c0:58:67:ab:0a:a2:55:4b:a7: 8d:08:18:45:4a:a7:37:4c:aa:d4:ed:83:97:c3:3c: f0:04:ae:e2:cc:b9:59:ce:02:38:62:4e:79:ed:6b: 23:84:30:cc:bf:c5:ca:95:ea:ab:b9:a1:d2:fb:f1: 5a:7d:6a:a3:75:6b:ba:84:df:6e:be:fb:d5:b4:95: b4:2a:ca:92:1c:3d:b8:23:f4:4a:8a:86:83:4a:0f: 8e:37:1e:eb:5a:7d:60:f0:3a:78:1b:ef:c0:de:f9: 29:38:bc:fb:52:02:34:d0:0c:0e:a3:82:a1:94:66: 0d:92:8f:0e:6c:9d:8f:51:e5:38:52:64:fc:21:d7: 26:00:37:a5:3a:d5:1b:08:2a:b0:6f:f7:40:42:6c: de:ce:50:54:b2:a2:65:3b:4e:5e:cc:6e:f7:5f:73: c6:9f:bc:4a:b4:9e:1e:f6:6b:77:a8:32:59:78:da: e8:4a:c3:c9:36:da:2f:9e:63:c1:d4:9e:0a:6b:25: b6:4f:37:1f:cc:f6:10:ec:50:66:64:38:cc:2d:69: 9c:ec:78:8a:a2:fd:ad:d9:fe:ef:62:fa:72:4f:f2: 9d:55:a5:06:9a:07:32:a2:6c:20:64:b7:77:45:b5: 51:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E0:88:17:CF:1F:43:37:E4:03:A2:AE:CE:48:AD:C9:4E:B8:75:2B X509v3 Authority Key Identifier: keyid:9B:1E:81:88:CE:64:39:7E:8B:42:41:E6:75:8D:42:9D:A0:FF:2E:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mx6BiM5kOX6LQkHmdY1CnaD_LnA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB21D/632CD3E6A7F611EDB9D60C43C4F9AE02/mx6BiM5kOX6LQkHmdY1CnaD_LnA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:6c:49:a4:40:68:f0:d6:70:98:e5:4b:26:8c:54:ac:d7:4f: 73:8a:8d:fd:aa:d8:40:d8:82:46:cf:84:cb:7d:53:97:8e:a2: b8:12:0f:66:40:24:69:ac:5e:1a:aa:a1:ae:97:94:dc:60:9a: 17:40:30:18:d7:75:73:2c:c8:ad:fe:8a:1a:56:34:82:7a:71: 7a:77:56:bc:b3:51:44:c5:63:9f:49:95:5f:70:e7:de:05:7a: 6f:ae:52:59:2b:2b:92:c6:95:a2:7a:36:69:2d:8f:7a:58:4a: e1:ab:2f:d4:ff:a6:9d:f1:7d:66:ac:d5:18:d0:be:2d:79:b9: c9:68:75:08:8c:ec:40:f4:2e:26:e0:7b:fb:c8:f4:c3:b3:ce: be:02:d7:55:8f:cb:7b:22:ee:e8:cc:25:f8:59:e5:76:71:42: e7:5d:da:28:4a:7d:51:81:df:96:3a:6c:ef:a4:7a:74:9e:f2: 08:54:91:71:f9:f4:9b:21:be:67:31:f6:5a:e0:c5:80:b3:1d: 79:0c:be:4f:85:9a:76:12:c6:3e:27:bf:73:b1:ec:63:de:cb: 24:b2:70:bb:8c:fd:75:10:26:0c:1e:2d:c1:83:dd:d3:48:57: c5:2d:59:5f:dc:6d:71:8a:c5:4f:56:2a:af:9e:be:4e:b0:72: 7b:13:d1:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IyMUQxMTAvBgNVBAUTKDlCMUU4MTg4Q0U2NDM5N0U4QjQyNDFFNjc1OEQ0MjlE QTBGRjJFNzAwHhcNMjUwODIxMDI0NzU5WhcNMjUwODI4MDI0NzU5WjAYMRYwFAYD VQQDEw02OGE2ODhkZi1iZTY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArSfFEHxHB9uA0RZdkzRfpbYZ7uLAWGerCqJVS6eNCBhFSqc3TKrU7YOXwzzw BK7izLlZzgI4Yk557WsjhDDMv8XKleqruaHS+/FafWqjdWu6hN9uvvvVtJW0KsqS HD24I/RKioaDSg+ONx7rWn1g8Dp4G+/A3vkpOLz7UgI00AwOo4KhlGYNko8ObJ2P UeU4UmT8IdcmADelOtUbCCqwb/dAQmzezlBUsqJlO05ezG73X3PGn7xKtJ4e9mt3 qDJZeNroSsPJNtovnmPB1J4KayW2TzcfzPYQ7FBmZDjMLWmc7HiKov2t2f7vYvpy T/KdVaUGmgcyomwgZLd3RbVRvQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPLgiBfP H0M35AOirs5IrclOuHUrMB8GA1UdIwQYMBaAFJsegYjOZDl+i0JB5nWNQp2g/y5w MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjIxRC82MzJDRDNFNkE3 RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09YNkxRa0htZFkxQ25hRF9M bkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL214NkJpTTVrT1g2TFFrSG1kWTFDbmFEX0xuQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjIxRC82MzJDRDNFNkE3RjYxMUVEQjlENjBDNDNDNEY5QUUwMi9teDZCaU01a09Y NkxRa0htZFkxQ25hRF9MbkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTbEmkQGjw1nCY5UsmjFSs109zio39qthA2IJGz4TLfVOXjqK4Eg9m QCRprF4aqqGul5TcYJoXQDAY13VzLMit/ooaVjSCenF6d1a8s1FExWOfSZVfcOfe BXpvrlJZKyuSxpWiejZpLY96WErhqy/U/6ad8X1mrNUY0L4tebnJaHUIjOxA9C4m 4Hv7yPTDs86+AtdVj8t7Iu7ozCX4WeV2cULnXdooSn1Rgd+WOmzvpHp0nvIIVJFx +fSbIb5nMfZa4MWAsx15DL5PhZp2EsY+J79zsexj3ssksnC7jP11ECYMHi3Bg93T SFfFLVlf3G1xisVPViqvnr5OsHJ7E9Eq -----END CERTIFICATE-----Generated at Fri Aug 22 16:15:46 2025 by rpki-client