$ rpki-client -vvf rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft File: 6GcXUDRPGMKvdH_68lWFDrx50B8.mft (raw, json) Hash identifier: 0TRlibsnhkVqizahfxn35Qrm1dsC+nwz3bO56jaWPc0= Subject key identifier: 01:B3:D2:AD:9D:BC:AE:50:62:99:6B:CB:D1:5D:3A:C0:40:75:DE:B1 Authority key identifier: E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F Certificate issuer: /CN=A9114DDF/serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Certificate serial: 03B4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft Manifest number: 03AC Signing time: Sat 23 Aug 2025 00:59:43 +0000 Manifest this update: Sat 23 Aug 2025 00:59:43 +0000 Manifest next update: Sat 30 Aug 2025 00:59:43 +0000 Files and hashes: 1: 6GcXUDRPGMKvdH_68lWFDrx50B8.crl (hash: P5NzSTKbFijedoK5A+qu93DMoJecwNy+ZC6aZ/Z1nDQ=) 2: FFFC26F0A51C11EC8394365BC4F9AE02.roa (hash: lo57P9VBB46ycGdmIW/WQMt7Bnu1G5Vu55lF8eOkAJo=) 3: FF46137EA51C11EC8394365BC4F9AE02.roa (hash: pjuKTxitr3okr7uU46xmlWjTNZ4Ce4fMa5LiHSn7lO8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 948 (0x3b4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114DDF, serialNumber=E8671750344F18C2AF747FFAF255850EBC79D01F Validity Not Before: Aug 23 00:59:43 2025 GMT Not After : Aug 30 00:59:43 2025 GMT Subject: CN=68a9127f-d94c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:80:63:1d:b2:90:0f:05:7e:07:6e:ab:33:f7: d8:da:95:9a:6f:9f:3c:ee:0e:8a:26:1d:42:ee:9c: 63:51:f1:6a:fe:42:12:35:31:17:d1:bd:5b:e6:78: bb:f7:c2:d1:c9:2a:ec:1e:99:e9:af:df:d4:b5:28: 2a:5e:27:71:20:27:ca:5c:ec:58:f2:f4:2f:b9:af: 00:d5:0e:fc:09:79:7b:5b:be:a9:1d:cd:b9:18:d6: af:58:05:f0:7d:86:b1:65:ff:f4:b7:ad:a6:16:24: 75:c0:ce:b6:b0:5b:b4:58:e5:ea:b0:71:f9:a5:6a: 5f:98:c2:b0:a5:46:84:cc:7b:95:ba:f0:80:a0:4b: 42:00:03:5d:d4:ff:e6:be:98:ca:15:ef:fd:5d:c7: d2:ce:b3:df:92:9c:c0:35:0c:87:a7:f3:1c:5c:51: 43:c8:41:ad:74:ba:1d:fc:24:05:a1:a9:c1:bc:81: e5:af:48:4e:ab:9e:d6:da:d2:dd:0d:94:7d:20:e7: 4b:39:a6:a2:32:e1:a7:fb:66:62:7b:6a:4d:a5:72: 36:fe:b9:d0:69:61:5f:bd:e5:df:cf:9d:52:1c:e5: 2a:a6:e6:42:d4:b3:29:8d:1d:65:49:22:1d:16:4d: e5:26:1b:57:54:e2:bf:05:0a:09:95:51:af:60:98: e4:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B3:D2:AD:9D:BC:AE:50:62:99:6B:CB:D1:5D:3A:C0:40:75:DE:B1 X509v3 Authority Key Identifier: keyid:E8:67:17:50:34:4F:18:C2:AF:74:7F:FA:F2:55:85:0E:BC:79:D0:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6GcXUDRPGMKvdH_68lWFDrx50B8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114DDF/5B06FEF2A50A11ECB2778D5CC4F9AE02/6GcXUDRPGMKvdH_68lWFDrx50B8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 28:5b:51:f7:a0:b0:9b:9f:ec:49:03:79:4a:e0:17:9c:95:f3: 41:24:24:85:b9:b3:15:b4:50:89:6f:85:af:62:c3:b7:e7:a2: 72:74:6a:f1:92:00:19:4a:97:20:c3:91:e9:d5:a6:1b:08:c3: d5:66:e3:d0:8c:93:2f:22:3e:8f:2a:bb:17:19:8b:0d:14:0a: 83:1c:74:73:38:46:f1:ae:60:93:3f:4f:0e:fb:c5:eb:89:56: bd:f6:09:ee:36:ad:22:eb:ce:89:77:4b:da:89:5d:db:7a:af: 83:68:4c:5c:51:40:f4:b9:a5:90:2a:ad:fa:9c:a4:a7:d0:36: 29:c2:83:22:66:58:41:ec:b7:66:eb:51:b6:d3:0d:d5:ba:b0: bd:e3:e2:79:a3:b6:a1:5d:38:ca:33:eb:5d:57:e2:60:d6:22: 12:6d:f1:7c:d4:a1:9b:5c:b8:05:d1:a5:17:5f:c0:fe:f4:38: c2:f0:08:99:97:63:ba:04:7c:87:91:95:ed:28:e8:77:9a:57: e5:92:8b:d9:2f:70:ed:83:7e:e7:85:d3:98:8c:26:2b:b2:5c: 31:19:6c:36:b8:33:b7:c2:07:d9:24:d8:0d:17:25:94:69:35: 11:1d:0a:05:20:68:48:7e:3f:87:1d:6c:ce:21:4c:39:c2:08: 1e:33:26:b8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICA7QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTREREYxMTAvBgNVBAUTKEU4NjcxNzUwMzQ0RjE4QzJBRjc0N0ZGQUYyNTU4NTBF QkM3OUQwMUYwHhcNMjUwODIzMDA1OTQzWhcNMjUwODMwMDA1OTQzWjAYMRYwFAYD VQQDEw02OGE5MTI3Zi1kOTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1oBjHbKQDwV+B26rM/fY2pWab5887g6KJh1C7pxjUfFq/kISNTEX0b1b5ni7 98LRySrsHpnpr9/UtSgqXidxICfKXOxY8vQvua8A1Q78CXl7W76pHc25GNavWAXw fYaxZf/0t62mFiR1wM62sFu0WOXqsHH5pWpfmMKwpUaEzHuVuvCAoEtCAANd1P/m vpjKFe/9XcfSzrPfkpzANQyHp/McXFFDyEGtdLod/CQFoanBvIHlr0hOq57W2tLd DZR9IOdLOaaiMuGn+2Zie2pNpXI2/rnQaWFfveXfz51SHOUqpuZC1LMpjR1lSSId Fk3lJhtXVOK/BQoJlVGvYJjkbQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAGz0q2d vK5QYplry9FdOsBAdd6xMB8GA1UdIwQYMBaAFOhnF1A0TxjCr3R/+vJVhQ68edAf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNERERi81QjA2RkVGMkE1 MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdNS3ZkSF82OGxXRkRyeDUw QjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZHY1hVRFJQR01LdmRIXzY4bFdGRHJ4NTBCOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NERERi81QjA2RkVGMkE1MEExMUVDQjI3NzhENUNDNEY5QUUwMi82R2NYVURSUEdN S3ZkSF82OGxXRkRyeDUwQjgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAoW1H3oLCbn+xJA3lK4BeclfNBJCSFubMVtFCJb4WvYsO356JydGrx kgAZSpcgw5Hp1aYbCMPVZuPQjJMvIj6PKrsXGYsNFAqDHHRzOEbxrmCTP08O+8Xr iVa99gnuNq0i686Jd0vaiV3beq+DaExcUUD0uaWQKq36nKSn0DYpwoMiZlhB7Ldm 61G20w3VurC94+J5o7ahXTjKM+tdV+Jg1iISbfF81KGbXLgF0aUXX8D+9DjC8AiZ l2O6BHyHkZXtKOh3mlflkovZL3Dtg37nhdOYjCYrslwxGWw2uDO3wgfZJNgNFyWU aTURHQoFIGhIfj+HHWzOIUw5wggeMya4 -----END CERTIFICATE-----Generated at Sun Aug 24 06:46:34 2025 by rpki-client