$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft File: K6PqbAvX8YRghmD5ogTlEYZaAN0.mft (raw, json) Hash identifier: xuYbpWjJXT/9aJd/fgCC1mvp3tRgw7vIoa4sTT+umcg= Subject key identifier: 3E:B4:72:F5:EC:1C:53:6B:5B:0E:69:75:31:88:FE:F6:45:10:6B:2C Authority key identifier: 2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD Certificate issuer: /CN=A91F1E8B/serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Certificate serial: 092D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft Manifest number: 0926 Signing time: Mon 30 Jun 2025 20:26:28 +0000 Manifest this update: Mon 30 Jun 2025 20:26:28 +0000 Manifest next update: Mon 07 Jul 2025 20:26:28 +0000 Files and hashes: 1: K6PqbAvX8YRghmD5ogTlEYZaAN0.crl (hash: BbnGP3n8xIiZbWSmFLC1j7yuP4+fTTuUb+HkG5Ovn+k=) 2: 33F713A8A3CF11EAA31D8C20C4F9AE02.roa (hash: U+2Kae/qqfcPAGDUNj2rc7ly1La28a/4nOUamtVuvAQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 20:26:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2349 (0x92d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1E8B, serialNumber=2BA3EA6C0BD7F184608660F9A204E511865A00DD Validity Not Before: Jun 30 20:26:28 2025 GMT Not After : Jul 7 20:26:28 2025 GMT Subject: CN=6862f2f4-2fd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d0:03:40:e8:08:24:f9:05:ef:d2:fa:52:7d: cb:f0:11:5f:a3:06:c3:50:4b:dd:c8:76:ba:33:66: d9:19:f4:96:c8:9b:d8:05:89:8b:ba:a4:f6:3b:07: 05:05:c2:9f:1a:7a:c7:b8:df:c3:b7:f7:80:16:5b: 71:cc:33:f3:35:67:df:c6:ce:39:ab:7e:b9:83:b1: 80:c1:fb:29:22:a6:35:cf:83:fa:56:e4:55:2e:a8: 8d:9e:38:4b:80:66:d1:26:e6:b5:01:b9:b1:59:60: 6a:6c:32:e3:dd:8b:fa:39:30:94:b8:d8:b3:ac:3f: 15:ec:76:48:c8:0a:bd:f7:08:86:f5:9c:a2:c1:9d: 8f:9b:f7:fb:9a:7b:7e:2e:85:71:97:ec:a8:79:d8: be:2f:b2:5b:3a:90:5d:82:d4:55:57:64:4d:7b:00: c2:03:26:3a:0a:80:a6:ad:cd:85:88:4a:3c:47:be: f9:1b:d7:c9:13:c7:86:67:5e:f4:a8:f1:1f:3a:4a: 79:b3:09:6f:1c:24:ce:80:82:96:fb:9f:99:bb:1c: a8:77:e7:46:36:ba:68:c2:2c:16:d5:de:77:5c:ec: cb:e2:99:d4:e9:f8:a3:71:f1:17:fe:39:88:fd:1a: 6b:bf:71:29:46:ec:61:5d:e6:cc:0b:33:46:e7:4f: a3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B4:72:F5:EC:1C:53:6B:5B:0E:69:75:31:88:FE:F6:45:10:6B:2C X509v3 Authority Key Identifier: keyid:2B:A3:EA:6C:0B:D7:F1:84:60:86:60:F9:A2:04:E5:11:86:5A:00:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/K6PqbAvX8YRghmD5ogTlEYZaAN0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1E8B/807DFDA0A3CE11EA8BAE6520C4F9AE02/K6PqbAvX8YRghmD5ogTlEYZaAN0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 00:c3:90:1f:04:d4:ca:12:cd:cf:d4:dc:e4:09:6b:54:77:66: 57:af:ff:0d:5b:28:81:d3:17:91:bf:34:0e:40:bd:f2:1c:41: 6c:74:0c:f1:96:84:01:af:82:48:01:80:25:51:69:72:d9:8c: a7:fe:7f:8b:73:b6:15:b6:a3:e1:6f:70:b2:78:3d:26:a1:6c: d5:82:21:21:85:c6:3a:fe:87:22:46:c8:b7:43:db:c9:6c:e8: 15:f8:90:2f:50:27:41:04:10:66:2b:af:14:0e:dc:60:91:5a: 32:fa:dc:0b:b9:0d:ee:87:40:4f:d6:83:e5:a0:04:4c:75:83: dc:fe:c1:79:d3:fd:eb:e1:0e:34:ec:52:7e:91:a0:93:76:30: 7f:48:10:41:09:fb:a9:31:79:37:61:1a:c7:18:41:ea:bf:6c: 31:04:ee:8a:d1:32:87:11:28:ed:0e:b2:0a:ba:37:db:82:5d: 17:bc:6f:2c:b7:d2:c3:c0:af:79:7b:3f:c1:e0:8f:7a:af:6a: 2d:4c:4c:4d:b7:28:65:32:f2:cf:8d:ae:0b:80:0b:9b:96:9c: 14:43:7e:4b:bc:3e:e8:73:e8:47:d9:62:64:ad:6e:2c:d3:ff: 36:94:d3:52:df:a5:4f:21:a9:58:29:57:70:43:8e:3d:d4:f7: c4:1c:ed:ea -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjFFOEIxMTAvBgNVBAUTKDJCQTNFQTZDMEJEN0YxODQ2MDg2NjBGOUEyMDRFNTEx ODY1QTAwREQwHhcNMjUwNjMwMjAyNjI4WhcNMjUwNzA3MjAyNjI4WjAYMRYwFAYD VQQDEw02ODYyZjJmNC0yZmQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmNADQOgIJPkF79L6Un3L8BFfowbDUEvdyHa6M2bZGfSWyJvYBYmLuqT2OwcF BcKfGnrHuN/Dt/eAFltxzDPzNWffxs45q365g7GAwfspIqY1z4P6VuRVLqiNnjhL gGbRJua1AbmxWWBqbDLj3Yv6OTCUuNizrD8V7HZIyAq99wiG9ZyiwZ2Pm/f7mnt+ LoVxl+yoedi+L7JbOpBdgtRVV2RNewDCAyY6CoCmrc2FiEo8R775G9fJE8eGZ170 qPEfOkp5swlvHCTOgIKW+5+Zuxyod+dGNrpowiwW1d53XOzL4pnU6fijcfEX/jmI /Rprv3EpRuxhXebMCzNG50+jLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD60cvXs HFNrWw5pdTGI/vZFEGssMB8GA1UdIwQYMBaAFCuj6mwL1/GEYIZg+aIE5RGGWgDd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMUU4Qi84MDdERkRBMEEz Q0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZUmdobUQ1b2dUbEVZWmFB TjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0s2UHFiQXZYOFlSZ2htRDVvZ1RsRVlaYUFOMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MUU4Qi84MDdERkRBMEEzQ0UxMUVBOEJBRTY1MjBDNEY5QUUwMi9LNlBxYkF2WDhZ UmdobUQ1b2dUbEVZWmFBTjAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAAw5AfBNTKEs3P1NzkCWtUd2ZXr/8NWyiB0xeRvzQOQL3yHEFsdAzx loQBr4JIAYAlUWly2Yyn/n+Lc7YVtqPhb3CyeD0moWzVgiEhhcY6/ociRsi3Q9vJ bOgV+JAvUCdBBBBmK68UDtxgkVoy+twLuQ3uh0BP1oPloARMdYPc/sF50/3r4Q40 7FJ+kaCTdjB/SBBBCfupMXk3YRrHGEHqv2wxBO6K0TKHESjtDrIKujfbgl0XvG8s t9LDwK95ez/B4I96r2otTExNtyhlMvLPja4LgAublpwUQ35LvD7oc+hH2WJkrW4s 0/82lNNS36VPIalYKVdwQ4491PfEHO3q -----END CERTIFICATE-----Generated at Tue Jul 1 19:38:51 2025 by rpki-client