$ rpki-client -vvf rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft File: 6tgeRb5BR2cpw1YqNG-29i_IH70.mft (raw, json) Hash identifier: V5iW0Zyh64KiRl53o1vNd7hRCBdns2mI2MaeU3V8X7M= Subject key identifier: 91:B1:62:7C:3E:F8:24:E0:69:A7:44:CB:79:32:A4:E0:4A:5D:02:5F Authority key identifier: EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD Certificate issuer: /CN=A9119624/serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Certificate serial: 0D74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft Manifest number: 0D6B Signing time: Fri 22 Aug 2025 18:04:56 +0000 Manifest this update: Fri 22 Aug 2025 18:04:55 +0000 Manifest next update: Fri 29 Aug 2025 18:04:55 +0000 Files and hashes: 1: 6tgeRb5BR2cpw1YqNG-29i_IH70.crl (hash: Ri2AZOhXKrVKSXhKIvlkC3PcvmrEMQzELRzEhgOAz4g=) 2: 0FA62A50214011EA90EFFE63C4F9AE02.roa (hash: b2eeZFRX3Cfrh2KgUNSH2XUFjtsQ8yv94mtfUkRiNmk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3444 (0xd74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9119624, serialNumber=EAD81E45BE41476729C3562A346FB6F62FC81FBD Validity Not Before: Aug 22 18:04:55 2025 GMT Not After : Aug 29 18:04:55 2025 GMT Subject: CN=68a8b147-e616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a6:71:1c:9a:f6:5d:f5:fc:64:5f:bc:3c:1c: f6:41:ad:02:a9:c4:8d:11:e1:30:2f:80:e1:da:ba: 43:f6:d0:6c:57:f1:71:e3:30:fc:94:9a:d1:28:65: 25:15:4a:e8:54:49:6b:74:d0:86:bc:ca:5b:59:aa: 7d:bd:3e:ec:b7:d8:86:17:55:61:d1:fe:bc:ef:ab: e7:ed:52:43:dc:c3:b3:0a:28:84:98:8a:3e:8f:35: 01:9a:bd:8e:53:a8:ca:16:02:91:fc:6b:f0:08:e5: 78:84:f9:8e:81:8a:d4:e6:c8:1d:41:f4:09:d2:07: 92:12:e1:91:13:1f:6b:1d:17:df:36:2a:e7:70:d8: d6:3d:c7:61:08:a7:71:75:45:34:90:74:54:84:93: 81:77:1b:87:4e:e8:65:3c:da:34:be:61:a9:7b:a6: 88:30:28:87:1a:2f:5b:a6:01:ec:c4:de:e6:ed:37: e3:08:85:a8:47:e8:e6:cb:37:7b:ed:8a:09:c9:0c: 7c:60:f9:f6:db:a7:b5:cb:5f:8d:72:d9:b4:22:25: cf:fd:75:49:cc:8d:1e:89:81:61:2c:ea:a2:90:2d: f0:40:49:cf:9c:51:01:96:b5:6e:9e:d8:89:8e:9c: 58:05:72:dd:30:8e:cc:68:6f:63:30:b5:61:94:8f: 7c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:B1:62:7C:3E:F8:24:E0:69:A7:44:CB:79:32:A4:E0:4A:5D:02:5F X509v3 Authority Key Identifier: keyid:EA:D8:1E:45:BE:41:47:67:29:C3:56:2A:34:6F:B6:F6:2F:C8:1F:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6tgeRb5BR2cpw1YqNG-29i_IH70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119624/3D4A5A84D44D11E9A383A35BC4F9AE02/6tgeRb5BR2cpw1YqNG-29i_IH70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ab:df:80:0c:25:6c:78:99:fd:66:93:44:76:be:e2:a6:f4:5c: 28:e8:b4:da:a7:44:3f:43:40:65:40:f8:03:6b:71:b4:17:a7: 23:c9:a1:b8:72:db:33:41:61:e5:4f:04:84:31:8f:5b:1e:18: 2b:7e:d8:8c:5c:a0:d1:5c:90:0c:63:28:1e:c9:91:b6:3c:62: 3c:64:7c:7a:91:0a:2d:7f:ec:77:22:93:be:87:89:1b:0a:31: f3:4c:55:25:8d:25:46:5d:95:df:32:cb:ec:23:dc:85:fd:6f: b8:1e:d9:dd:df:06:6a:20:b8:47:b2:13:b2:e1:b9:e5:46:56: 9a:f7:13:3c:c0:04:e2:77:ee:30:e7:7c:f4:88:48:dd:bf:bf: e6:77:12:0b:2d:7f:ee:1d:b7:d4:99:0b:05:47:e4:f1:b5:aa: 7c:f9:ea:2b:35:6f:7e:4b:65:29:f2:4e:36:6c:fd:7e:e7:b3: 37:91:0c:32:69:46:68:74:ca:74:93:16:37:a9:84:49:99:d2: 63:a8:17:d4:a7:27:a0:25:3c:36:49:28:9c:83:0b:b0:e2:33: 96:ee:95:15:49:10:b5:4e:85:2d:ef:34:f2:d0:18:4e:82:96: fb:44:04:7a:8f:5d:3c:f5:7b:b0:03:1f:4e:f5:dd:50:50:68: 3e:d8:3f:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk2MjQxMTAvBgNVBAUTKEVBRDgxRTQ1QkU0MTQ3NjcyOUMzNTYyQTM0NkZCNkY2 MkZDODFGQkQwHhcNMjUwODIyMTgwNDU1WhcNMjUwODI5MTgwNDU1WjAYMRYwFAYD VQQDEw02OGE4YjE0Ny1lNjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo6ZxHJr2XfX8ZF+8PBz2Qa0CqcSNEeEwL4Dh2rpD9tBsV/Fx4zD8lJrRKGUl FUroVElrdNCGvMpbWap9vT7st9iGF1Vh0f6876vn7VJD3MOzCiiEmIo+jzUBmr2O U6jKFgKR/GvwCOV4hPmOgYrU5sgdQfQJ0geSEuGREx9rHRffNirncNjWPcdhCKdx dUU0kHRUhJOBdxuHTuhlPNo0vmGpe6aIMCiHGi9bpgHsxN7m7TfjCIWoR+jmyzd7 7YoJyQx8YPn226e1y1+Nctm0IiXP/XVJzI0eiYFhLOqikC3wQEnPnFEBlrVuntiJ jpxYBXLdMI7MaG9jMLVhlI98CwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJGxYnw+ +CTgaadEy3kypOBKXQJfMB8GA1UdIwQYMBaAFOrYHkW+QUdnKcNWKjRvtvYvyB+9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTYyNC8zRDRBNUE4NEQ0 NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIyY3B3MVlxTkctMjlpX0lI NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ0Z2VSYjVCUjJjcHcxWXFORy0yOWlfSUg3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTYyNC8zRDRBNUE4NEQ0NEQxMUU5QTM4M0EzNUJDNEY5QUUwMi82dGdlUmI1QlIy Y3B3MVlxTkctMjlpX0lINzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCr34AMJWx4mf1mk0R2vuKm9Fwo6LTap0Q/Q0BlQPgDa3G0F6cjyaG4 ctszQWHlTwSEMY9bHhgrftiMXKDRXJAMYygeyZG2PGI8ZHx6kQotf+x3IpO+h4kb CjHzTFUljSVGXZXfMsvsI9yF/W+4Htnd3wZqILhHshOy4bnlRlaa9xM8wATid+4w 53z0iEjdv7/mdxILLX/uHbfUmQsFR+Txtap8+eorNW9+S2Up8k42bP1+57M3kQwy aUZodMp0kxY3qYRJmdJjqBfUpyegJTw2SSicgwuw4jOW7pUVSRC1ToUt7zTy0BhO gpb7RAR6j1089XuwAx9O9d1QUGg+2D81 -----END CERTIFICATE-----Generated at Sat Aug 23 21:25:41 2025 by rpki-client