$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: ZjxkTCKWPCJ171CCYUQi8nlmTp9+Wz17fH2BKrp3LeI= Subject key identifier: D3:40:EF:C6:73:0C:3F:CF:E4:7B:A3:31:4E:1A:24:42:3D:A0:81:2C Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0D6D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0D64 Signing time: Fri 22 Aug 2025 18:05:56 +0000 Manifest this update: Fri 22 Aug 2025 18:05:55 +0000 Manifest next update: Fri 29 Aug 2025 18:05:55 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: Rwcz3UmzOabJ0u44cfLyGB6IWgmeJG20Qd5EXyONyqs=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3437 (0xd6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Aug 22 18:05:55 2025 GMT Not After : Aug 29 18:05:55 2025 GMT Subject: CN=68a8b184-44fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:ef:f9:aa:c0:50:74:8e:e1:19:bf:32:ea:05: cb:b6:8c:86:37:0c:c7:e8:43:4b:6b:45:fc:40:6f: 5b:78:1e:b2:8a:cb:27:3a:2f:9a:39:f1:46:87:4c: c6:f5:77:18:13:92:49:69:2f:d2:c1:3e:d6:09:20: d7:90:1c:48:7a:4e:5f:b7:91:e1:46:38:09:06:1f: 0a:bb:a7:e1:08:3b:f1:a7:42:f1:a2:a6:d1:1d:53: ba:a8:33:6b:ff:ff:9e:7f:0d:53:8e:b9:94:dd:c6: fd:69:b3:cc:90:2b:9c:c5:d2:c7:5f:7d:60:db:a5: 66:11:78:8b:aa:a0:ce:df:e0:c3:91:e6:d7:d6:0a: 70:08:51:73:bb:aa:22:92:d6:4e:bf:87:c7:b1:60: 73:58:31:39:d6:ab:31:17:6f:5e:69:71:96:0e:41: eb:8e:4c:97:b0:b4:36:06:d4:36:a9:09:fa:06:37: de:cb:b3:ae:ad:53:aa:d7:29:bb:ed:ad:d2:ae:d3: ac:71:d9:45:98:b6:48:43:2f:8f:9a:56:4a:05:e3: eb:38:4b:f1:c8:bd:18:96:9e:50:cc:6a:cf:7c:fd: 7f:62:d2:8d:1b:4e:36:86:d2:87:9c:fe:4e:29:6f: a4:2a:92:63:15:b2:52:6a:cd:9f:15:1d:e1:8a:e7: cf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:40:EF:C6:73:0C:3F:CF:E4:7B:A3:31:4E:1A:24:42:3D:A0:81:2C X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:6f:6f:5a:c6:a8:b8:b8:68:74:43:72:cc:44:5b:3d:5f:a5: 05:0e:0f:17:d3:7a:2a:fd:a9:25:18:6e:b1:2f:ba:42:24:ef: af:e4:9b:8d:3e:6d:4b:1c:34:41:3d:ac:1b:f8:72:4d:97:06: e2:6a:a2:7f:73:9f:c2:d7:9c:92:05:85:76:0d:89:d7:51:37: 83:33:be:f1:78:85:34:e4:13:10:46:b6:4e:18:9b:53:06:11: 47:a0:19:bc:74:15:65:a8:11:80:75:b2:d8:9b:4e:23:c4:7b: 8b:a5:da:da:41:22:67:e8:e2:bb:c0:31:c8:ee:87:ab:63:55: 9f:43:53:09:fa:c5:66:b1:4a:68:c9:d4:d8:d7:c6:7c:8f:4d: db:9b:da:0d:14:99:16:20:3d:f2:6b:88:61:76:d8:c0:23:8f: c7:a3:2d:99:8d:08:1b:63:51:19:16:d7:6d:88:8c:b3:2b:38: a7:44:47:de:a2:23:32:90:e9:87:4b:b7:1f:a4:a5:24:47:9e: eb:e2:6e:5d:fd:f7:23:89:06:ff:ea:bb:bd:71:93:35:0a:9c: 69:35:71:a2:3d:95:57:77:a5:79:5d:f2:df:aa:58:da:26:d3: 2d:2d:3a:4d:54:03:39:09:a6:66:30:b1:4d:2a:97:43:41:85: e6:bc:f7:7c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUwODIyMTgwNTU1WhcNMjUwODI5MTgwNTU1WjAYMRYwFAYD VQQDEw02OGE4YjE4NC00NGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2O/5qsBQdI7hGb8y6gXLtoyGNwzH6ENLa0X8QG9beB6yissnOi+aOfFGh0zG 9XcYE5JJaS/SwT7WCSDXkBxIek5ft5HhRjgJBh8Ku6fhCDvxp0LxoqbRHVO6qDNr //+efw1TjrmU3cb9abPMkCucxdLHX31g26VmEXiLqqDO3+DDkebX1gpwCFFzu6oi ktZOv4fHsWBzWDE51qsxF29eaXGWDkHrjkyXsLQ2BtQ2qQn6Bjfey7OurVOq1ym7 7a3SrtOscdlFmLZIQy+PmlZKBePrOEvxyL0Ylp5QzGrPfP1/YtKNG042htKHnP5O KW+kKpJjFbJSas2fFR3hiufP6wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNNA78Zz DD/P5HujMU4aJEI9oIEsMB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6b29axqi4uGh0Q3LMRFs9X6UFDg8X03oq/aklGG6xL7pCJO+v5JuN Pm1LHDRBPawb+HJNlwbiaqJ/c5/C15ySBYV2DYnXUTeDM77xeIU05BMQRrZOGJtT BhFHoBm8dBVlqBGAdbLYm04jxHuLpdraQSJn6OK7wDHI7oerY1WfQ1MJ+sVmsUpo ydTY18Z8j03bm9oNFJkWID3ya4hhdtjAI4/Hoy2ZjQgbY1EZFtdtiIyzKzinREfe oiMykOmHS7cfpKUkR57r4m5d/fcjiQb/6ru9cZM1CpxpNXGiPZVXd6V5XfLfqlja JtMtLTpNVAM5CaZmMLFNKpdDQYXmvPd8 -----END CERTIFICATE-----Generated at Sat Aug 23 19:34:21 2025 by rpki-client