$ rpki-client -vvf rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft File: C6HFLWJbsbnkQzglDaPWTYBoego.mft (raw, json) Hash identifier: krqSE0C2TuHTr/xSeuZSVEydIxm/3qucUnnPtilXNBg= Subject key identifier: AA:61:79:6D:D4:40:2F:D8:EC:A3:90:46:02:BE:91:64:A4:3E:3F:65 Authority key identifier: 0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A Certificate issuer: /CN=A9140E48/serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Certificate serial: 0567 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft Manifest number: 0561 Signing time: Fri 22 Aug 2025 23:33:18 +0000 Manifest this update: Fri 22 Aug 2025 23:33:17 +0000 Manifest next update: Fri 29 Aug 2025 23:33:17 +0000 Files and hashes: 1: C6HFLWJbsbnkQzglDaPWTYBoego.crl (hash: VxMVNtkE9uNfJ/li5L6ucCODYnHZGMsjc0+X4cL/0Rw=) 2: D5FFCB96F9D611EB8A9FCE34C4F9AE02.roa (hash: EHUc5Goa9nVY7SlTfmeqrv5ucf88hUBAHLp60F7iD50=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1383 (0x567) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9140E48, serialNumber=0BA1C52D625BB1B9E44338250DA3D64D80687A0A Validity Not Before: Aug 22 23:33:17 2025 GMT Not After : Aug 29 23:33:17 2025 GMT Subject: CN=68a8fe3e-3f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:d9:94:05:02:76:88:f0:8c:3b:d1:3d:37: 1b:14:cf:39:65:07:92:14:b1:5d:4e:f9:20:b7:83: bd:74:b1:8e:61:00:a9:aa:1a:2b:1f:91:06:4e:10: 6a:36:e2:7b:c3:03:9d:f9:a2:95:6d:ac:b5:79:2e: 37:a0:32:fd:07:2a:b1:6d:f0:0f:da:99:b4:65:e0: 0f:72:1e:9e:20:fc:43:5d:20:a5:04:a7:db:7b:3b: 16:ec:0f:e7:d9:11:d3:74:71:a4:7b:7b:58:82:ac: 6a:2b:6b:44:f2:9a:93:78:ac:6a:53:58:49:49:a2: 26:99:1f:a0:00:54:09:6a:b1:c1:8b:ff:c7:17:9a: 57:d4:b2:7b:0d:23:e0:35:5a:68:32:4f:0f:fe:49: d3:5d:c3:c5:0d:43:c0:b7:80:d8:62:1c:8c:4b:49: c9:db:2d:71:52:68:9b:2c:9e:51:02:83:8c:e8:fc: c1:6e:15:af:57:1a:e1:29:3b:81:02:fc:4f:79:29: dd:2a:d6:ba:28:40:5c:cd:a0:72:54:1f:57:0e:ea: 97:0e:74:24:1c:32:c3:9f:ce:e1:81:07:b2:40:d2: e2:01:85:ad:83:79:2f:af:5e:a7:03:5d:fa:73:de: 61:40:38:bb:e4:cd:52:69:9f:8f:8b:07:2f:0e:50: d4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:61:79:6D:D4:40:2F:D8:EC:A3:90:46:02:BE:91:64:A4:3E:3F:65 X509v3 Authority Key Identifier: keyid:0B:A1:C5:2D:62:5B:B1:B9:E4:43:38:25:0D:A3:D6:4D:80:68:7A:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6HFLWJbsbnkQzglDaPWTYBoego.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140E48/50EFD876F9D411EB97948311C4F9AE02/C6HFLWJbsbnkQzglDaPWTYBoego.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption e5:4f:0c:02:16:2a:2a:7b:9e:03:f2:93:ab:72:8e:80:4a:90: 44:67:55:42:53:c7:5e:b3:28:09:23:f0:fb:f4:5c:87:2b:e9: d2:8d:96:ac:c5:5c:71:35:1e:34:5f:fd:e2:74:71:df:28:3b: ef:4b:ed:3e:6e:b9:41:2a:ab:7d:0b:f3:ba:d4:14:51:bf:7e: a1:b8:0b:68:3a:d8:42:69:ce:36:83:ff:35:41:ce:1f:ee:ea: 93:3a:da:da:78:e0:2e:83:db:f4:62:2c:26:9e:5d:16:38:19: af:98:c7:01:8a:4e:77:5a:a6:78:8e:ef:da:ce:39:80:46:ee: 20:1b:48:57:49:eb:8a:cb:9b:90:56:a9:d2:dc:b9:48:09:da: 78:0c:4c:f4:e8:67:08:8f:da:b3:50:5b:b7:33:73:b5:b5:e8: fe:da:ab:ca:b4:2e:37:80:a7:6a:29:6c:b1:33:04:a4:55:98: cf:81:15:39:17:22:3f:68:3a:6e:38:03:d1:fa:00:de:b0:ae: 24:83:d6:34:31:69:05:84:a0:74:4a:ea:37:b2:f9:0d:ba:af: 54:ff:2e:1a:11:b8:f1:0e:14:da:28:be:a3:29:e6:61:7e:67: 92:f3:49:56:4e:1f:3c:38:cd:5e:a1:2c:ae:58:b1:61:bd:24: 90:c2:a3:75 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBWcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDBFNDgxMTAvBgNVBAUTKDBCQTFDNTJENjI1QkIxQjlFNDQzMzgyNTBEQTNENjRE ODA2ODdBMEEwHhcNMjUwODIyMjMzMzE3WhcNMjUwODI5MjMzMzE3WjAYMRYwFAYD VQQDEw02OGE4ZmUzZS0zZjUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvTzZlAUCdojwjDvRPTcbFM85ZQeSFLFdTvkgt4O9dLGOYQCpqhorH5EGThBq NuJ7wwOd+aKVbay1eS43oDL9ByqxbfAP2pm0ZeAPch6eIPxDXSClBKfbezsW7A/n 2RHTdHGke3tYgqxqK2tE8pqTeKxqU1hJSaImmR+gAFQJarHBi//HF5pX1LJ7DSPg NVpoMk8P/knTXcPFDUPAt4DYYhyMS0nJ2y1xUmibLJ5RAoOM6PzBbhWvVxrhKTuB AvxPeSndKta6KEBczaByVB9XDuqXDnQkHDLDn87hgQeyQNLiAYWtg3kvr16nA136 c95hQDi75M1SaZ+PiwcvDlDUrQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKpheW3U QC/Y7KOQRgK+kWSkPj9lMB8GA1UdIwQYMBaAFAuhxS1iW7G55EM4JQ2j1k2AaHoK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MEU0OC81MEVGRDg3NkY5 RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNibmtRemdsRGFQV1RZQm9l Z28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2SEZMV0pic2Jua1F6Z2xEYVBXVFlCb2Vnby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MEU0OC81MEVGRDg3NkY5RDQxMUVCOTc5NDgzMTFDNEY5QUUwMi9DNkhGTFdKYnNi bmtRemdsRGFQV1RZQm9lZ28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQDlTwwCFioqe54D8pOrco6ASpBEZ1VCU8desygJI/D79FyHK+nSjZas xVxxNR40X/3idHHfKDvvS+0+brlBKqt9C/O61BRRv36huAtoOthCac42g/81Qc4f 7uqTOtraeOAug9v0Yiwmnl0WOBmvmMcBik53WqZ4ju/azjmARu4gG0hXSeuKy5uQ VqnS3LlICdp4DEz06GcIj9qzUFu3M3O1tej+2qvKtC43gKdqKWyxMwSkVZjPgRU5 FyI/aDpuOAPR+gDesK4kg9Y0MWkFhKB0Suo3svkNuq9U/y4aEbjxDhTaKL6jKeZh fmeS80lWTh88OM1eoSyuWLFhvSSQwqN1 -----END CERTIFICATE-----Generated at Sun Aug 24 04:59:06 2025 by rpki-client