$ rpki-client -vvf rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft File: 6BH2N9bdhj5cdPMuKbziePqyWPc.mft (raw, json) Hash identifier: 35M94cTqUxjBktQubFqMKgJsIimk/HFGcyBLX06Vtyw= Subject key identifier: 26:D7:8E:AD:21:8D:EE:5C:6F:D0:18:64:CF:8C:56:76:0A:DD:03:E5 Authority key identifier: E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 Certificate issuer: /CN=A912B751/serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Certificate serial: 02D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft Manifest number: 02D1 Signing time: Sat 23 Aug 2025 01:37:47 +0000 Manifest this update: Sat 23 Aug 2025 01:37:47 +0000 Manifest next update: Sat 30 Aug 2025 01:37:47 +0000 Files and hashes: 1: 6BH2N9bdhj5cdPMuKbziePqyWPc.crl (hash: TZmex7PW81LpbdcMt6K6plf37eMSJANsBjmLPOwQq9Y=) 2: 96BC85E8145711EF8ED9C174C4F9AE02.roa (hash: 4GDdy9q4wSFCaH7TyIGJPMZ9fzgci85d7rldFyKz8WA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 01:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 728 (0x2d8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912B751, serialNumber=E811F637D6DD863E5C74F32E29BCE278FAB258F7 Validity Not Before: Aug 23 01:37:47 2025 GMT Not After : Aug 30 01:37:47 2025 GMT Subject: CN=68a91b6b-1d7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:b8:14:a4:47:30:cb:b7:79:a1:fb:56:23: 28:f1:a6:58:39:7e:41:e9:7c:0c:bb:f2:79:bf:c4: d2:a9:79:e1:ed:4e:df:7b:61:71:f6:0a:c4:0f:c8: 46:c1:10:3b:1f:09:37:8d:e0:53:6e:c5:87:80:c8: 13:f4:5c:d9:26:7d:af:08:53:54:e5:9e:12:f3:c8: 1c:87:1c:ec:45:ff:e0:09:87:07:72:3e:f0:66:5a: 2c:02:5b:72:1e:d5:fd:bf:de:00:26:4f:bf:0c:fa: b9:a7:1e:c4:40:b0:2f:b1:63:41:e7:d0:c6:b1:71: 20:b6:47:ae:18:5d:23:26:3c:2b:7b:69:e0:9b:e0: 9e:39:5d:5a:51:bf:22:f8:2e:bf:83:f4:a6:a4:38: 98:e9:05:f3:9e:1e:cb:40:d5:f2:e6:97:ac:6c:b8: 2a:7b:16:8d:51:d6:5f:e0:49:8c:fa:13:a6:c5:33: 38:5e:e2:8b:2f:62:e4:8b:79:4e:87:19:99:7b:c1: 57:6f:a0:f7:18:35:e9:9d:57:1a:7f:4f:80:12:0b: 2a:3c:11:15:da:d1:d2:d5:11:ea:50:a1:19:8c:91: 4f:90:35:6f:fd:2f:9b:9e:f3:52:0d:94:80:ea:4e: 54:58:7a:ca:d6:72:6c:80:9c:bf:c8:53:f1:95:ef: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:D7:8E:AD:21:8D:EE:5C:6F:D0:18:64:CF:8C:56:76:0A:DD:03:E5 X509v3 Authority Key Identifier: keyid:E8:11:F6:37:D6:DD:86:3E:5C:74:F3:2E:29:BC:E2:78:FA:B2:58:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6BH2N9bdhj5cdPMuKbziePqyWPc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B751/72D7D8B4FDD711EC90CAEF4CC4F9AE02/6BH2N9bdhj5cdPMuKbziePqyWPc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:b2:75:99:a1:a8:21:ba:05:09:3b:53:ec:9f:f5:24:27:31: 76:50:f0:7f:74:49:6f:72:a7:ba:03:42:50:ec:09:a6:52:12: 86:ad:dd:05:b3:c7:21:60:7f:06:8e:ee:44:d6:1d:63:fb:c2: cc:3e:4d:9b:08:5d:e0:38:ca:75:09:d5:41:f1:30:b4:80:33: 90:bc:e1:99:8f:24:de:3f:f4:d3:78:61:77:13:8e:9b:ba:39: 60:c8:b6:cb:99:d6:4c:6f:db:ed:8e:7f:45:11:33:97:bf:ac: a5:f5:b0:b6:13:95:3e:42:6a:33:23:6a:17:0c:3b:b7:46:95: 0b:ed:be:eb:20:24:e0:94:76:33:cf:d0:a9:7d:f9:28:91:3a: 3f:d7:ef:51:90:86:4b:5c:d5:e0:09:5b:4d:61:8f:78:5f:65: c7:2e:2c:cd:af:45:b9:1e:76:69:c4:74:d8:ff:d0:e5:33:c0: d5:fb:58:57:70:3f:e2:f2:f6:dd:72:e8:57:ac:3f:51:cc:e1: 89:ed:35:02:4c:0d:ad:84:fe:f8:23:81:4f:0e:fc:11:ad:90: b6:10:ae:e0:17:e2:20:2b:7c:4c:72:b0:77:7f:9e:c7:90:c3: 05:0f:90:cd:62:41:88:61:23:3f:49:31:9b:00:c9:ac:a2:41: 37:f5:26:c7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAtgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkI3NTExMTAvBgNVBAUTKEU4MTFGNjM3RDZERDg2M0U1Qzc0RjMyRTI5QkNFMjc4 RkFCMjU4RjcwHhcNMjUwODIzMDEzNzQ3WhcNMjUwODMwMDEzNzQ3WjAYMRYwFAYD VQQDEw02OGE5MWI2Yi0xZDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu764FKRHMMu3eaH7ViMo8aZYOX5B6XwMu/J5v8TSqXnh7U7fe2Fx9grED8hG wRA7Hwk3jeBTbsWHgMgT9FzZJn2vCFNU5Z4S88gchxzsRf/gCYcHcj7wZlosAlty HtX9v94AJk+/DPq5px7EQLAvsWNB59DGsXEgtkeuGF0jJjwre2ngm+CeOV1aUb8i +C6/g/SmpDiY6QXznh7LQNXy5pesbLgqexaNUdZf4EmM+hOmxTM4XuKLL2Lki3lO hxmZe8FXb6D3GDXpnVcaf0+AEgsqPBEV2tHS1RHqUKEZjJFPkDVv/S+bnvNSDZSA 6k5UWHrK1nJsgJy/yFPxle9cDwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCbXjq0h je5cb9AYZM+MVnYK3QPlMB8GA1UdIwQYMBaAFOgR9jfW3YY+XHTzLim84nj6slj3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQjc1MS83MkQ3RDhCNEZE RDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhqNWNkUE11S2J6aWVQcXlX UGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZCSDJOOWJkaGo1Y2RQTXVLYnppZVBxeVdQYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Qjc1MS83MkQ3RDhCNEZERDcxMUVDOTBDQUVGNENDNEY5QUUwMi82QkgyTjliZGhq NWNkUE11S2J6aWVQcXlXUGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6snWZoaghugUJO1Psn/UkJzF2UPB/dElvcqe6A0JQ7AmmUhKGrd0F s8chYH8Gju5E1h1j+8LMPk2bCF3gOMp1CdVB8TC0gDOQvOGZjyTeP/TTeGF3E46b ujlgyLbLmdZMb9vtjn9FETOXv6yl9bC2E5U+QmozI2oXDDu3RpUL7b7rICTglHYz z9CpffkokTo/1+9RkIZLXNXgCVtNYY94X2XHLizNr0W5HnZpxHTY/9DlM8DV+1hX cD/i8vbdcuhXrD9RzOGJ7TUCTA2thP74I4FPDvwRrZC2EK7gF+IgK3xMcrB3f57H kMMFD5DNYkGIYSM/STGbAMmsokE39SbH -----END CERTIFICATE-----Generated at Sat Aug 23 19:11:49 2025 by rpki-client