$ rpki-client -vvf rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft File: 6YYS7upK5w0ftbZSS5adR0Lc6BA.mft (raw, json) Hash identifier: /kGI7STTPi3rccVEbVdkSxTFNNfvroNldwQC7jSszes= Subject key identifier: DF:23:A0:E4:FE:2B:87:BC:02:3C:47:1F:70:8B:FE:93:C3:9B:21:BF Authority key identifier: E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 Certificate issuer: /CN=A912DB99/serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Certificate serial: 018E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft Manifest number: 0187 Signing time: Sat 23 Aug 2025 03:44:33 +0000 Manifest this update: Sat 23 Aug 2025 03:44:32 +0000 Manifest next update: Sat 30 Aug 2025 03:44:32 +0000 Files and hashes: 1: 6YYS7upK5w0ftbZSS5adR0Lc6BA.crl (hash: xzhgi3aYY1HJYnAfF38KkKkP49tx6/KDRZi4m8+y6Bk=) 2: E58351049F2011EE8D92FF5EC4F9AE02.roa (hash: iAgZl5cjC5GY9UT1VAX4lVlQAoyGZHmwHR+AO/vqBI0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 398 (0x18e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912DB99, serialNumber=E98612EEEA4AE70D1FB5B6524B969D4742DCE810 Validity Not Before: Aug 23 03:44:32 2025 GMT Not After : Aug 30 03:44:32 2025 GMT Subject: CN=68a93920-1f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2d:72:82:02:62:c8:9d:9d:60:24:4e:51:c5: 05:94:5d:65:7b:4f:32:fe:ff:43:6b:d7:43:cd:7e: 51:e0:24:83:92:d4:65:e8:a7:9c:7d:b7:9a:94:66: 97:d0:2c:78:2c:d8:6e:bb:08:7d:a1:ac:67:db:50: 08:62:dc:46:f4:b5:e4:79:8f:72:dc:e8:76:10:b6: 04:e6:d4:91:38:6f:c8:a6:c9:63:18:87:ca:a7:59: 48:5a:aa:26:26:21:16:47:46:44:5c:e8:96:16:36: 64:a5:5e:c3:86:68:c5:0e:14:ab:da:12:3e:7f:14: 57:f5:1d:00:9e:78:ea:46:ff:51:55:9f:e0:3a:e3: 29:24:ba:86:4e:b2:fa:87:60:1c:f6:35:de:66:c6: 42:90:c6:d4:a2:c1:f3:fa:29:b3:b9:f7:93:c8:c8: 65:13:4d:d7:66:fa:23:3f:a2:ce:a4:78:e2:ca:93: f5:dc:c8:dc:2c:0a:07:80:1d:3f:83:61:0e:05:9a: 02:8d:94:f4:e5:ec:60:f1:eb:e2:59:34:75:b6:96: 7d:b0:b9:f8:1d:82:10:b0:7d:c9:5a:ad:7b:96:ee: 01:c7:09:83:b4:70:14:22:6f:33:3a:10:69:e2:9f: c3:6e:3d:9f:b8:b6:d5:56:e1:7a:14:55:42:1f:5b: e0:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:23:A0:E4:FE:2B:87:BC:02:3C:47:1F:70:8B:FE:93:C3:9B:21:BF X509v3 Authority Key Identifier: keyid:E9:86:12:EE:EA:4A:E7:0D:1F:B5:B6:52:4B:96:9D:47:42:DC:E8:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6YYS7upK5w0ftbZSS5adR0Lc6BA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912DB99/BC659BC631B411EEB551F211C4F9AE02/6YYS7upK5w0ftbZSS5adR0Lc6BA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8f:dc:52:38:f1:c8:49:86:81:50:62:42:8f:44:03:b8:b9: 85:ee:89:6b:2b:5b:1a:ff:aa:c4:98:89:19:e5:d1:e9:34:58: 49:c6:35:75:88:48:94:00:b0:8b:5b:32:73:85:1e:63:c7:4a: 36:8c:87:21:cc:4b:a0:63:db:fe:aa:bf:7a:08:d4:d4:c2:de: aa:e8:58:1c:09:f0:41:6a:1a:2b:be:d0:be:d9:59:8f:20:99: 68:21:64:17:f3:8a:53:e8:26:ad:c6:9c:c4:0d:f2:cf:5b:cd: 3c:69:5e:36:07:97:a3:c6:a6:b9:fc:26:2e:5d:f4:b3:01:35: 0c:29:3e:19:f3:f3:40:f1:49:d2:d3:11:53:28:dc:59:dc:fd: 40:86:55:f2:fd:d3:27:16:96:0f:e9:90:0d:68:e9:0b:9d:81: 54:07:b0:7b:86:ec:e4:bf:39:c2:3e:b8:8b:c6:18:c8:ad:fa: d0:39:ef:f0:38:c8:80:ac:7a:64:f7:e8:cd:11:f4:24:7b:c6: 5f:ba:49:50:a5:2f:58:b8:c3:01:9a:c4:ca:e9:13:ee:88:70: 51:8d:9a:af:ef:53:c1:43:37:90:79:9f:20:3c:a6:d3:c3:64: 1e:01:d2:ae:5f:97:ed:07:86:09:6c:c3:f7:57:27:be:82:7d: 34:e2:9c:0c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAY4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkRCOTkxMTAvBgNVBAUTKEU5ODYxMkVFRUE0QUU3MEQxRkI1QjY1MjRCOTY5RDQ3 NDJEQ0U4MTAwHhcNMjUwODIzMDM0NDMyWhcNMjUwODMwMDM0NDMyWjAYMRYwFAYD VQQDEw02OGE5MzkyMC0xZjg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwy1yggJiyJ2dYCROUcUFlF1le08y/v9Da9dDzX5R4CSDktRl6KecfbealGaX 0Cx4LNhuuwh9oaxn21AIYtxG9LXkeY9y3Oh2ELYE5tSROG/IpsljGIfKp1lIWqom JiEWR0ZEXOiWFjZkpV7DhmjFDhSr2hI+fxRX9R0AnnjqRv9RVZ/gOuMpJLqGTrL6 h2Ac9jXeZsZCkMbUosHz+imzufeTyMhlE03XZvojP6LOpHjiypP13MjcLAoHgB0/ g2EOBZoCjZT05exg8eviWTR1tpZ9sLn4HYIQsH3JWq17lu4BxwmDtHAUIm8zOhBp 4p/Dbj2fuLbVVuF6FFVCH1vgFwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFN8joOT+ K4e8AjxHH3CL/pPDmyG/MB8GA1UdIwQYMBaAFOmGEu7qSucNH7W2UkuWnUdC3OgQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyREI5OS9CQzY1OUJDNjMx QjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3MGZ0YlpTUzVhZFIwTGM2 QkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZWVM3dXBLNXcwZnRiWlNTNWFkUjBMYzZCQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy REI5OS9CQzY1OUJDNjMxQjQxMUVFQjU1MUYyMTFDNEY5QUUwMi82WVlTN3VwSzV3 MGZ0YlpTUzVhZFIwTGM2QkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCdj9xSOPHISYaBUGJCj0QDuLmF7olrK1sa/6rEmIkZ5dHpNFhJxjV1 iEiUALCLWzJzhR5jx0o2jIchzEugY9v+qr96CNTUwt6q6FgcCfBBahorvtC+2VmP IJloIWQX84pT6CatxpzEDfLPW808aV42B5ejxqa5/CYuXfSzATUMKT4Z8/NA8UnS 0xFTKNxZ3P1AhlXy/dMnFpYP6ZANaOkLnYFUB7B7huzkvznCPriLxhjIrfrQOe/w OMiArHpk9+jNEfQke8ZfuklQpS9YuMMBmsTK6RPuiHBRjZqv71PBQzeQeZ8gPKbT w2QeAdKuX5ftB4YJbMP3Vye+gn004pwM -----END CERTIFICATE-----Generated at Sat Aug 23 15:19:13 2025 by rpki-client