$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: TLLhY1wTE8jkbO8a3OY5tZjujxm37GhbdC4Jb+cyd+Q= Subject key identifier: 30:63:44:8D:D3:33:C5:5D:50:D7:FC:8A:DB:04:46:30:14:14:F1:11 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B69 Signing time: Fri 22 Aug 2025 19:12:35 +0000 Manifest this update: Fri 22 Aug 2025 19:12:35 +0000 Manifest next update: Fri 29 Aug 2025 19:12:35 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: OqbmaiT0YxIoYzQq8DDN8y2SJsKTSUOZrSUfGvdhB3w=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:12:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2929 (0xb71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Aug 22 19:12:35 2025 GMT Not After : Aug 29 19:12:35 2025 GMT Subject: CN=68a8c123-57de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:fe:31:02:54:4c:38:7b:80:e0:ef:86:e7: 9c:b4:59:c5:0c:75:9d:3d:9d:3e:cd:9e:37:ba:c3: 75:59:73:aa:35:4d:6a:36:fb:22:72:92:85:2e:be: fb:5c:04:e6:8b:9c:13:20:5c:c6:fb:24:e0:e1:2b: 9a:fb:f8:eb:81:0b:ca:7b:dc:8f:c2:5b:df:68:f7: d3:1f:1e:af:6c:cd:60:7a:07:4a:e1:93:a9:17:da: 29:e6:82:28:33:b1:7a:f6:47:3f:51:92:ce:a0:06: 68:49:9b:cc:d6:d0:86:b5:aa:81:0e:69:58:95:9b: c3:1a:e4:66:ac:4e:64:fd:56:9c:90:aa:a1:35:8d: 26:76:e4:73:67:db:4a:ff:54:c9:27:4c:2c:d2:2e: 06:bf:29:18:88:f1:2b:03:6a:fb:30:ad:03:b1:7a: a0:f4:a0:f9:f6:4b:20:d5:b0:83:74:4f:39:ed:d5: 83:a0:d4:bb:2f:9c:68:9b:45:94:d6:34:54:6c:b8: c6:4a:9e:d6:a1:11:13:b1:66:71:a9:62:d9:9f:3d: e4:9d:cb:95:fd:af:2e:af:1d:b3:c1:80:ef:52:52: 04:83:52:f1:e8:5a:52:2b:23:fe:bc:f1:ee:3f:c9: b5:2e:8e:02:88:f9:ea:a1:7e:ef:15:ad:9c:5e:fd: 11:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:63:44:8D:D3:33:C5:5D:50:D7:FC:8A:DB:04:46:30:14:14:F1:11 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3e:06:14:5e:8d:7e:8f:ab:63:d3:e1:87:12:d8:c0:c8:f3:1d: 96:02:27:7b:c8:47:21:bf:8b:1c:05:4a:e7:ac:28:5b:5a:2a: e6:cc:19:a8:03:ef:2e:1b:7e:bd:0a:93:0a:6c:9c:2a:c7:2f: 9d:9f:3b:c5:21:26:10:57:6c:5f:1b:de:bc:48:c1:cd:79:95: 30:c9:fe:1a:cb:83:62:e4:70:8b:ba:14:ec:8e:a5:4a:3b:66: b3:65:5b:39:78:66:85:cd:21:c8:41:2f:39:13:cf:4b:05:f0: 6c:e7:35:55:96:e7:0f:30:a2:f7:89:2d:4f:45:71:b5:1a:40: 4b:b4:25:97:98:b7:f6:a4:6e:a2:6c:55:d1:99:13:8d:e4:d9: 48:f4:20:bc:f4:c3:de:ef:a9:57:c3:44:c6:9a:98:2a:a4:a5: 3f:3e:e9:cb:cf:a5:43:c6:cb:7c:bc:64:21:6c:f5:19:cd:23: 73:b0:e6:ef:f2:d9:38:c7:81:b0:8f:af:1d:8c:24:80:2c:91: da:bd:0e:53:a4:cc:b8:41:a5:30:32:00:fe:65:23:1d:8c:ca: 39:83:a0:99:91:57:e4:7f:bb:16:f5:a3:2d:16:5f:e0:12:58: 46:aa:a0:f1:a5:0d:e3:dc:92:08:e0:2d:6d:25:5c:53:de:5d: b7:ea:cc:cc -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwODIyMTkxMjM1WhcNMjUwODI5MTkxMjM1WjAYMRYwFAYD VQQDEw02OGE4YzEyMy01N2RlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6f+MQJUTDh7gODvhuectFnFDHWdPZ0+zZ43usN1WXOqNU1qNvsicpKFLr77 XATmi5wTIFzG+yTg4Sua+/jrgQvKe9yPwlvfaPfTHx6vbM1gegdK4ZOpF9op5oIo M7F69kc/UZLOoAZoSZvM1tCGtaqBDmlYlZvDGuRmrE5k/VackKqhNY0mduRzZ9tK /1TJJ0ws0i4GvykYiPErA2r7MK0DsXqg9KD59ksg1bCDdE857dWDoNS7L5xom0WU 1jRUbLjGSp7WoRETsWZxqWLZnz3kncuV/a8urx2zwYDvUlIEg1Lx6FpSKyP+vPHu P8m1Lo4CiPnqoX7vFa2cXv0RZwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDBjRI3T M8VdUNf8itsERjAUFPERMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA+BhRejX6Pq2PT4YcS2MDI8x2WAid7yEchv4scBUrnrChbWirmzBmo A+8uG369CpMKbJwqxy+dnzvFISYQV2xfG968SMHNeZUwyf4ay4Ni5HCLuhTsjqVK O2azZVs5eGaFzSHIQS85E89LBfBs5zVVlucPMKL3iS1PRXG1GkBLtCWXmLf2pG6i bFXRmRON5NlI9CC89MPe76lXw0TGmpgqpKU/PunLz6VDxst8vGQhbPUZzSNzsObv 8tk4x4Gwj68djCSALJHavQ5TpMy4QaUwMgD+ZSMdjMo5g6CZkVfkf7sW9aMtFl/g ElhGqqDxpQ3j3JII4C1tJVxT3l236szM -----END CERTIFICATE-----Generated at Sat Aug 23 19:33:35 2025 by rpki-client