$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: KVMHYTAJ6EPEdWHRTWjEFZ87RoOTI25qjmNItvbvXQ8= Subject key identifier: C0:19:16:B7:6B:85:21:7F:28:D7:E2:F6:08:1D:1F:33:DD:AC:26:62 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2A34 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2A23 Signing time: Fri 22 Aug 2025 14:20:30 +0000 Manifest this update: Fri 22 Aug 2025 14:20:29 +0000 Manifest next update: Fri 29 Aug 2025 14:20:29 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: cTygGfsQ9Y36hA4PLjql1k/lrCbGbfvgOFYsaUvrnh8=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:20:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10804 (0x2a34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Aug 22 14:20:29 2025 GMT Not After : Aug 29 14:20:29 2025 GMT Subject: CN=68a87cae-307c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:51:12:d6:fe:24:ad:59:d0:fc:07:de:a5:34: 32:6d:12:e5:3e:1c:40:0e:ac:62:6e:c7:d3:e8:28: 3b:92:ff:25:6f:a7:41:28:47:98:00:b8:94:ec:d5: 8c:6a:de:c0:12:97:9a:20:ed:bc:d5:06:4b:9a:b4: 88:f8:41:48:33:ac:bc:e3:84:bf:3c:cf:be:cc:7d: 8c:85:88:25:22:c3:6e:ef:aa:c4:c3:d5:7d:cc:66: d6:4b:2b:e7:18:39:85:6d:08:0e:0c:01:ab:f2:c9: 2e:24:79:29:cb:0c:42:17:66:d3:a7:80:cf:4d:54: 87:0a:cf:a6:42:18:6d:f5:7a:db:6a:66:11:d9:9b: cd:22:dc:3b:92:a3:ec:67:a1:f4:06:15:b3:da:31: c8:c8:bd:d3:0a:e4:d3:d5:57:64:5e:19:97:2d:64: 8b:16:df:df:26:61:50:fe:c4:58:e2:2a:db:93:10: fc:d9:0f:be:9e:69:ae:53:da:78:68:33:46:38:3a: 87:d3:93:f2:4e:43:19:db:a1:bd:5c:b2:b5:1a:be: 74:6b:b6:a5:d5:5d:54:3f:3c:24:7b:21:a6:dd:cc: d9:66:7d:12:5c:e5:a6:54:96:94:77:2e:6f:e6:e6: 87:bf:1c:2a:2a:93:33:aa:d0:e9:09:fd:e4:d3:33: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:19:16:B7:6B:85:21:7F:28:D7:E2:F6:08:1D:1F:33:DD:AC:26:62 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:f8:82:49:99:eb:f7:2c:f2:77:70:82:14:39:1c:32:78: b4:f2:50:bc:e6:c4:ff:31:0c:62:5a:07:01:89:d7:43:a7:85: f7:22:de:6b:8d:c2:f4:ac:bd:c7:64:a5:32:c8:ff:ff:a8:39: f7:ae:fb:2f:01:c4:5f:0b:3b:c0:08:ad:f2:a1:1d:73:37:9b: 88:80:03:29:e6:90:62:cb:9c:6d:bc:be:00:ee:9f:d3:30:9a: ee:04:af:65:c8:bc:05:9d:43:68:44:18:ab:57:e8:01:aa:ea: d5:89:db:27:45:53:fd:b3:3f:0a:c9:65:a5:d6:78:ed:89:dd: b2:94:9a:0c:6f:b9:a9:2a:a5:c0:37:4a:d6:25:ec:66:b9:85: 6d:de:c2:9b:54:e9:48:d0:42:f3:fb:4f:cd:05:e7:53:de:6c: 69:5c:72:cb:ec:85:44:bc:f9:78:48:06:86:2e:90:c4:ee:8d: ef:66:5d:d7:d8:1d:9c:f9:95:c5:60:3a:64:a1:6b:0e:b1:d1: 08:90:3e:ea:1d:a7:59:1b:b4:6a:ef:55:0a:3f:57:a6:a8:32: b5:2a:b0:04:14:ab:14:3b:6e:d3:a4:67:a8:5e:0b:a7:cf:b1: 10:c4:30:5a:dc:c9:09:0f:45:92:03:aa:ff:67:a9:c9:41:85: 7f:8d:75:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKjQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUwODIyMTQyMDI5WhcNMjUwODI5MTQyMDI5WjAYMRYwFAYD VQQDEw02OGE4N2NhZS0zMDdjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1FES1v4krVnQ/AfepTQybRLlPhxADqxibsfT6Cg7kv8lb6dBKEeYALiU7NWM at7AEpeaIO281QZLmrSI+EFIM6y844S/PM++zH2MhYglIsNu76rEw9V9zGbWSyvn GDmFbQgODAGr8skuJHkpywxCF2bTp4DPTVSHCs+mQhht9XrbamYR2ZvNItw7kqPs Z6H0BhWz2jHIyL3TCuTT1VdkXhmXLWSLFt/fJmFQ/sRY4irbkxD82Q++nmmuU9p4 aDNGODqH05PyTkMZ26G9XLK1Gr50a7al1V1UPzwkeyGm3czZZn0SXOWmVJaUdy5v 5uaHvxwqKpMzqtDpCf3k0zM5UwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMAZFrdr hSF/KNfi9ggdHzPdrCZiMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBysfiCSZnr9yzyd3CCFDkcMni08lC85sT/MQxiWgcBiddDp4X3It5r jcL0rL3HZKUyyP//qDn3rvsvAcRfCzvACK3yoR1zN5uIgAMp5pBiy5xtvL4A7p/T MJruBK9lyLwFnUNoRBirV+gBqurVidsnRVP9sz8KyWWl1njtid2ylJoMb7mpKqXA N0rWJexmuYVt3sKbVOlI0ELz+0/NBedT3mxpXHLL7IVEvPl4SAaGLpDE7o3vZl3X 2B2c+ZXFYDpkoWsOsdEIkD7qHadZG7Rq71UKP1emqDK1KrAEFKsUO27TpGeoXgun z7EQxDBa3MkJD0WSA6r/Z6nJQYV/jXUZ -----END CERTIFICATE-----Generated at Sat Aug 23 12:44:20 2025 by rpki-client