$ rpki-client -vvf rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft File: 6zLfknQ0rG06hoR937o9LoEAETE.mft (raw, json) Hash identifier: zSYQ1c9Pn7qRah9GLfHRLCZfQzSvBG3Fvap8vQY4idA= Subject key identifier: 8E:EC:7C:D0:1E:F5:D0:30:3D:D9:FA:0D:FF:06:12:80:D3:DC:49:54 Authority key identifier: EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 Certificate issuer: /CN=A911945B/serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Certificate serial: F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft Manifest number: EE Signing time: Sat 23 Aug 2025 05:28:21 +0000 Manifest this update: Sat 23 Aug 2025 05:28:21 +0000 Manifest next update: Sat 30 Aug 2025 05:28:21 +0000 Files and hashes: 1: 6zLfknQ0rG06hoR937o9LoEAETE.crl (hash: 50BIu757phyZwyI3Ph0ciYStGjY1dy1CUnghMFnIqF4=) 2: C562775017FD11EF9A320864C4F9AE02.roa (hash: mT/xhxJVAPolN6BiWxF1pYh0qrq0TTClAYLDrh0UW5A=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 05:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 241 (0xf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911945B, serialNumber=EB32DF927434AC6D3A86847DDFBA3D2E81001131 Validity Not Before: Aug 23 05:28:21 2025 GMT Not After : Aug 30 05:28:21 2025 GMT Subject: CN=68a95175-4fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:22:29:63:b1:74:76:b8:45:74:98:e7:2a:ed: 98:22:0d:c7:dd:7c:5b:07:fd:d8:e3:65:4a:d1:d1: a8:59:75:8e:1b:ff:14:5b:0b:17:07:78:ff:92:35: ff:63:d1:06:83:4b:f1:64:94:ae:d1:af:84:d0:55: 7c:37:84:db:cc:de:69:25:83:15:7d:27:b7:2d:a1: e1:c4:f4:c7:e7:1b:f7:ff:90:a8:6d:b3:a2:a0:69: bc:61:8a:e6:a4:72:66:90:4c:06:65:15:91:c4:ad: 0f:cc:14:82:22:49:fc:b7:8e:55:d5:03:b2:dc:7f: 6b:6d:90:68:cc:c0:34:b8:0a:a8:e9:40:2c:e0:aa: 1c:5d:31:c0:3c:1a:55:bd:80:b1:ea:3c:1e:6f:78: 25:8e:ba:ac:0f:f4:87:b5:ad:4f:fc:c3:2a:ae:4a: ad:02:e2:6c:a6:86:34:ee:59:2f:ab:98:e5:f2:94: be:d8:51:8c:f4:c5:a3:63:ba:e3:b5:ce:c0:37:01: 6e:22:57:dc:c0:49:ee:7e:5f:32:8f:58:9b:d7:19: 3b:0a:0e:84:c1:b2:e3:6b:e7:17:f9:02:c7:a1:e9: a8:cf:14:c1:3a:40:14:70:a3:0e:0b:37:c9:61:44: db:43:26:de:88:78:95:2a:66:f3:c2:e5:07:e4:ef: 54:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:EC:7C:D0:1E:F5:D0:30:3D:D9:FA:0D:FF:06:12:80:D3:DC:49:54 X509v3 Authority Key Identifier: keyid:EB:32:DF:92:74:34:AC:6D:3A:86:84:7D:DF:BA:3D:2E:81:00:11:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6zLfknQ0rG06hoR937o9LoEAETE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911945B/3ACF70C017FD11EF8C083063C4F9AE02/6zLfknQ0rG06hoR937o9LoEAETE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:5b:3b:e8:22:e1:b5:a3:3f:f2:26:85:94:42:ca:61:d2:e6: a0:3d:74:9b:ad:5e:c9:4e:dc:e1:c2:a6:ef:f3:bf:6b:46:01: 51:9f:4b:41:41:0f:a0:7c:36:52:f3:46:57:f2:46:ae:82:ef: 5d:5c:5a:69:08:2d:5a:18:85:18:7a:e4:22:f9:03:e6:12:cd: 09:56:46:6a:a2:65:dc:0d:b1:8c:68:64:96:1b:bb:20:ca:02: d7:f9:2c:74:82:a2:e5:9a:a7:9b:1f:f9:12:38:ff:d5:ad:07: 7b:ff:ea:e7:77:3c:04:ba:c2:5d:b9:9b:09:d0:18:d0:6b:1b: 1b:98:a0:a9:38:c4:5c:64:e0:41:4f:98:5d:0c:bc:58:55:dc: 1a:b9:5b:9e:bc:0e:5e:fc:02:0f:87:de:80:b1:84:c0:2c:f5: 23:4c:d2:29:7f:88:f4:c0:d3:73:e1:28:f8:d0:3d:17:2a:3a: 7c:a6:b6:0a:f5:7a:ab:59:39:21:b9:dc:7a:94:59:64:15:5a: 3f:27:d9:1d:d8:4b:b8:d2:21:f4:76:b4:35:5d:9e:31:f0:a1: 94:30:44:ae:f3:a1:8e:89:9c:1b:01:d1:ce:37:9c:10:e0:66: 02:6a:4c:57:86:47:7d:8b:8d:8b:9c:3e:11:e3:8f:f1:ed:46: 41:14:8d:59 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAPEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk0NUIxMTAvBgNVBAUTKEVCMzJERjkyNzQzNEFDNkQzQTg2ODQ3RERGQkEzRDJF ODEwMDExMzEwHhcNMjUwODIzMDUyODIxWhcNMjUwODMwMDUyODIxWjAYMRYwFAYD VQQDEw02OGE5NTE3NS00ZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5CIpY7F0drhFdJjnKu2YIg3H3XxbB/3Y42VK0dGoWXWOG/8UWwsXB3j/kjX/ Y9EGg0vxZJSu0a+E0FV8N4TbzN5pJYMVfSe3LaHhxPTH5xv3/5CobbOioGm8YYrm pHJmkEwGZRWRxK0PzBSCIkn8t45V1QOy3H9rbZBozMA0uAqo6UAs4KocXTHAPBpV vYCx6jweb3gljrqsD/SHta1P/MMqrkqtAuJspoY07lkvq5jl8pS+2FGM9MWjY7rj tc7ANwFuIlfcwEnufl8yj1ib1xk7Cg6EwbLja+cX+QLHoemozxTBOkAUcKMOCzfJ YUTbQybeiHiVKmbzwuUH5O9UewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFI7sfNAe 9dAwPdn6Df8GEoDT3ElUMB8GA1UdIwQYMBaAFOsy35J0NKxtOoaEfd+6PS6BABEx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTQ1Qi8zQUNGNzBDMDE3 RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJHMDZob1I5MzdvOUxvRUFF VEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ6TGZrblEwckcwNmhvUjkzN285TG9FQUVURS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTQ1Qi8zQUNGNzBDMDE3RkQxMUVGOEMwODMwNjNDNEY5QUUwMi82ekxma25RMHJH MDZob1I5MzdvOUxvRUFFVEUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzWzvoIuG1oz/yJoWUQsph0uagPXSbrV7JTtzhwqbv879rRgFRn0tB QQ+gfDZS80ZX8kaugu9dXFppCC1aGIUYeuQi+QPmEs0JVkZqomXcDbGMaGSWG7sg ygLX+Sx0gqLlmqebH/kSOP/VrQd7/+rndzwEusJduZsJ0BjQaxsbmKCpOMRcZOBB T5hdDLxYVdwauVuevA5e/AIPh96AsYTALPUjTNIpf4j0wNNz4Sj40D0XKjp8prYK 9XqrWTkhudx6lFlkFVo/J9kd2Eu40iH0drQ1XZ4x8KGUMESu86GOiZwbAdHON5wQ 4GYCakxXhkd9i42LnD4R44/x7UZBFI1Z -----END CERTIFICATE-----Generated at Sat Aug 23 18:25:28 2025 by rpki-client