$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: iAuddKtA9BLxYk4Hq3UuvFwhMfXfixoTsizuK8hMIrk= Subject key identifier: D6:69:B2:A0:24:10:AE:8D:B6:40:97:47:A3:CE:E8:24:66:44:A3:E4 Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 022E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 020E Signing time: Sat 23 Aug 2025 02:30:52 +0000 Manifest this update: Sat 23 Aug 2025 02:30:52 +0000 Manifest next update: Sat 30 Aug 2025 02:30:52 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: DB8REGOGSwvGEsBSmG9IWiJRehAVVxId7qFMhBlqHuE=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 558 (0x22e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Aug 23 02:30:52 2025 GMT Not After : Aug 30 02:30:52 2025 GMT Subject: CN=68a927dc-3cd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b2:ef:40:26:5b:0f:15:19:1a:c2:ff:11:9e: 17:75:d3:e7:a5:93:37:bb:fe:37:91:a7:67:8a:66: 39:f6:a5:13:52:d6:18:98:8e:66:0b:82:54:fb:ca: ef:fb:86:d1:43:c5:03:bd:42:b7:30:ea:f7:de:1b: 2e:fd:2e:e9:7e:83:07:69:de:8f:1d:eb:bf:d4:9b: 49:d2:b9:2c:7d:f8:8d:98:58:f4:fe:d9:33:0b:0d: 25:b6:cf:d3:63:0a:33:34:25:5b:4a:2c:43:6b:e2: 9c:fc:95:b7:6b:b9:6c:44:b1:0a:ea:40:d7:61:ef: a4:e1:2f:c6:47:50:4c:3b:ea:9b:98:4a:2a:4a:3b: 0f:f8:1c:cb:bb:d5:50:76:c2:5f:fc:54:35:54:a7: 03:8b:0c:1e:3a:40:64:95:06:2d:e9:c2:ce:fd:56: 5f:34:de:4f:85:c7:37:cf:0f:99:d4:73:cd:6d:db: b9:cf:a7:36:0d:11:4d:22:ba:0e:26:1e:27:7e:12: 52:cc:0d:58:7f:a6:63:42:dd:e9:bb:7a:08:23:f2: c5:dd:79:00:c1:83:94:64:13:09:27:97:e6:6a:98: b3:ba:01:1d:1b:f6:66:dc:6e:c0:5a:47:34:49:7a: 59:20:4e:49:80:fa:3e:c6:db:14:7e:f3:3e:bd:60: 59:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:69:B2:A0:24:10:AE:8D:B6:40:97:47:A3:CE:E8:24:66:44:A3:E4 X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5f:08:ab:e3:89:c5:f7:69:f4:ef:4d:11:ff:b4:18:3b:4e:e6: a6:7e:87:70:bd:83:a9:66:32:11:1d:00:42:53:54:30:9e:15: c4:73:6b:1d:dd:7f:71:71:32:f4:37:5b:75:8d:73:ef:ed:b5: 5e:21:86:1a:7b:cc:08:06:c9:99:be:13:b9:17:f0:ab:ff:6b: a2:ab:36:85:dd:a0:82:ee:e2:f4:8e:c6:b3:11:77:8e:24:29: 5f:03:10:52:6f:28:c6:47:69:51:9f:2d:ae:a0:5d:49:de:a0: 74:57:8b:c0:af:10:f3:86:12:93:91:67:f7:0e:7f:3c:fa:91: 4b:89:1d:e6:d2:f0:57:f4:71:c7:4a:93:01:89:56:f2:7c:c2: 91:f5:33:2f:24:69:1b:a8:ae:a3:f7:77:4b:a1:19:c6:ed:20: 1d:c9:84:02:9f:e8:f0:80:45:51:ff:4e:4c:79:45:d8:4c:fd: 7c:77:d5:d2:45:99:5f:20:22:b8:dc:3f:d5:44:91:32:c6:55: 54:d8:2a:dd:c2:b7:a2:b2:36:96:4b:c1:3e:a5:68:de:29:ae: 40:fe:99:78:05:d8:c7:c6:7f:e0:58:5f:0c:91:aa:38:1a:59: 45:43:91:7d:53:10:b8:46:3a:64:35:f7:b7:9e:df:59:67:30: 65:23:a5:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAi4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwODIzMDIzMDUyWhcNMjUwODMwMDIzMDUyWjAYMRYwFAYD VQQDEw02OGE5MjdkYy0zY2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbLvQCZbDxUZGsL/EZ4XddPnpZM3u/43kadnimY59qUTUtYYmI5mC4JU+8rv +4bRQ8UDvUK3MOr33hsu/S7pfoMHad6PHeu/1JtJ0rksffiNmFj0/tkzCw0lts/T YwozNCVbSixDa+Kc/JW3a7lsRLEK6kDXYe+k4S/GR1BMO+qbmEoqSjsP+BzLu9VQ dsJf/FQ1VKcDiwweOkBklQYt6cLO/VZfNN5Phcc3zw+Z1HPNbdu5z6c2DRFNIroO Jh4nfhJSzA1Yf6ZjQt3pu3oII/LF3XkAwYOUZBMJJ5fmapizugEdG/Zm3G7AWkc0 SXpZIE5JgPo+xtsUfvM+vWBZ+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNZpsqAk EK6NtkCXR6PO6CRmRKPkMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBfCKvjicX3afTvTRH/tBg7TuamfodwvYOpZjIRHQBCU1QwnhXEc2sd 3X9xcTL0N1t1jXPv7bVeIYYae8wIBsmZvhO5F/Cr/2uiqzaF3aCC7uL0jsazEXeO JClfAxBSbyjGR2lRny2uoF1J3qB0V4vArxDzhhKTkWf3Dn88+pFLiR3m0vBX9HHH SpMBiVbyfMKR9TMvJGkbqK6j93dLoRnG7SAdyYQCn+jwgEVR/05MeUXYTP18d9XS RZlfICK43D/VRJEyxlVU2CrdwreisjaWS8E+pWjeKa5A/pl4BdjHxn/gWF8Mkao4 GllFQ5F9UxC4RjpkNfe3nt9ZZzBlI6X9 -----END CERTIFICATE-----Generated at Sun Aug 24 00:43:30 2025 by rpki-client