$ rpki-client -vvf rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft File: 6eDCCGLs2ANoFFu3z2LO3YARYzo.mft (raw, json) Hash identifier: TjWCREXiyc2paA+sfT8VqZrrlBEozwryeAXNHPM9lRs= Subject key identifier: 72:E5:69:43:84:CB:E0:B5:90:ED:85:00:7B:4A:C1:4F:1D:12:57:13 Authority key identifier: E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A Certificate issuer: /CN=A914CC1C/serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Certificate serial: 0914 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft Manifest number: 0912 Signing time: Fri 22 Aug 2025 20:25:29 +0000 Manifest this update: Fri 22 Aug 2025 20:25:29 +0000 Manifest next update: Fri 29 Aug 2025 20:25:29 +0000 Files and hashes: 1: 6eDCCGLs2ANoFFu3z2LO3YARYzo.crl (hash: deP2pERNLKHPHInJKo5JnVdSWvZcmFflWGhTEhoQC1c=) 2: 99CE159C912C11EFA67EA629C4F9AE02.roa (hash: uh+rzVJtvF4UI78w58itN+HR2kb9/ZhZdUQFw6xcuos=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2324 (0x914) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914CC1C, serialNumber=E9E0C20862ECD80368145BB7CF62CEDD8011633A Validity Not Before: Aug 22 20:25:29 2025 GMT Not After : Aug 29 20:25:29 2025 GMT Subject: CN=68a8d239-a6da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:0c:9c:51:69:44:77:74:5a:c6:62:8d:f9: 1c:67:b8:dd:aa:29:a7:15:b4:7b:dc:b1:a0:e9:b2: ae:d2:57:89:63:2c:75:35:4e:56:07:55:64:53:fc: 14:d9:98:13:d3:6b:9f:3c:ab:de:59:ed:5c:1d:dc: 41:c6:59:43:dc:40:23:01:aa:ab:a3:ff:c8:53:fd: 84:43:04:e8:56:e5:d2:10:6e:37:46:54:ba:f5:d6: 23:f2:04:96:a7:e2:ad:d9:43:29:aa:c4:49:c6:4c: d6:49:c5:3a:a5:8e:99:0c:c2:63:f8:3c:c0:76:fc: f7:ca:07:d1:7e:18:d0:36:4a:a7:0f:6c:cb:de:aa: a8:80:a2:c4:ae:ed:3e:a9:02:db:e6:f8:4c:07:c2: b7:b7:b6:ea:3b:1a:f1:a9:e9:28:ff:34:39:49:64: 6f:6f:e3:5b:20:6c:83:dd:fa:d1:6b:22:10:25:b1: a6:16:c9:31:af:d0:f7:7a:2a:22:84:cc:0b:85:3c: 09:bb:6c:d3:33:58:ce:47:c2:04:10:3b:fc:b7:49: 54:5f:95:af:3c:5c:c2:bb:11:f8:b1:f1:83:9d:43: 12:c6:84:03:fa:22:93:2e:b4:f8:d8:e5:18:d4:b0: 11:8c:34:2e:74:0b:e1:8b:4b:55:8c:70:43:30:33: 2e:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E5:69:43:84:CB:E0:B5:90:ED:85:00:7B:4A:C1:4F:1D:12:57:13 X509v3 Authority Key Identifier: keyid:E9:E0:C2:08:62:EC:D8:03:68:14:5B:B7:CF:62:CE:DD:80:11:63:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6eDCCGLs2ANoFFu3z2LO3YARYzo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CC1C/D93252FCABF811EAB1FBD828C4F9AE02/6eDCCGLs2ANoFFu3z2LO3YARYzo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:39:56:91:f0:2b:27:56:83:61:29:1a:0c:7b:b9:fb:d7:82: 67:75:58:9c:f1:07:3a:78:3c:be:33:56:9d:3f:2b:59:e4:12: 56:d2:bb:8a:ef:00:8b:b5:1c:57:e2:8c:db:27:df:7b:33:94: 5e:c3:8e:a6:a7:be:b2:13:c7:22:05:dd:56:93:68:e6:2a:a8: 04:53:fb:e2:1f:64:4f:7c:29:ef:9a:67:94:db:bb:90:de:e5: c5:e1:ae:5a:a4:93:e0:be:21:61:6a:0d:3d:bb:c6:c6:98:a6: 2b:bb:fa:f1:ab:9c:f5:2f:cf:04:44:8d:8d:37:ee:5f:ab:75: d7:da:ea:f4:52:24:cf:f7:af:d8:30:7e:ae:9f:14:c3:64:0a: a9:35:2d:e4:bf:6e:f4:e7:dd:2e:07:97:1d:e4:b0:9b:b8:50: 65:cc:fa:08:39:c6:74:da:51:a1:84:09:df:b8:1c:94:c0:9d: 9c:ff:c4:18:ed:56:09:02:28:aa:40:21:34:2d:c4:8a:7f:6e: 76:5f:c0:a3:e9:fe:08:64:3b:1d:06:84:37:54:3d:f1:34:b6: 6a:d6:cf:28:6a:3e:8d:59:95:df:96:17:05:74:43:d1:28:4c: 76:3e:c8:d6:51:bc:aa:db:c5:3d:72:aa:f6:e2:8a:24:a3:50: 1d:e5:1f:d3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCRQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NENDMUMxMTAvBgNVBAUTKEU5RTBDMjA4NjJFQ0Q4MDM2ODE0NUJCN0NGNjJDRURE ODAxMTYzM0EwHhcNMjUwODIyMjAyNTI5WhcNMjUwODI5MjAyNTI5WjAYMRYwFAYD VQQDEw02OGE4ZDIzOS1hNmRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAurkMnFFpRHd0WsZijfkcZ7jdqimnFbR73LGg6bKu0leJYyx1NU5WB1VkU/wU 2ZgT02ufPKveWe1cHdxBxllD3EAjAaqro//IU/2EQwToVuXSEG43RlS69dYj8gSW p+Kt2UMpqsRJxkzWScU6pY6ZDMJj+DzAdvz3ygfRfhjQNkqnD2zL3qqogKLEru0+ qQLb5vhMB8K3t7bqOxrxqeko/zQ5SWRvb+NbIGyD3frRayIQJbGmFskxr9D3eioi hMwLhTwJu2zTM1jOR8IEEDv8t0lUX5WvPFzCuxH4sfGDnUMSxoQD+iKTLrT42OUY 1LARjDQudAvhi0tVjHBDMDMuRQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHLlaUOE y+C1kO2FAHtKwU8dElcTMB8GA1UdIwQYMBaAFOngwghi7NgDaBRbt89izt2AEWM6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0Q0MxQy9EOTMyNTJGQ0FC RjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJBTm9GRnUzejJMTzNZQVJZ em8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZlRENDR0xzMkFOb0ZGdTN6MkxPM1lBUll6by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Q0MxQy9EOTMyNTJGQ0FCRjgxMUVBQjFGQkQ4MjhDNEY5QUUwMi82ZURDQ0dMczJB Tm9GRnUzejJMTzNZQVJZem8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0OVaR8CsnVoNhKRoMe7n714JndVic8Qc6eDy+M1adPytZ5BJW0ruK 7wCLtRxX4ozbJ997M5Rew46mp76yE8ciBd1Wk2jmKqgEU/viH2RPfCnvmmeU27uQ 3uXF4a5apJPgviFhag09u8bGmKYru/rxq5z1L88ERI2NN+5fq3XX2ur0UiTP96/Y MH6unxTDZAqpNS3kv270590uB5cd5LCbuFBlzPoIOcZ02lGhhAnfuByUwJ2c/8QY 7VYJAiiqQCE0LcSKf252X8Cj6f4IZDsdBoQ3VD3xNLZq1s8oaj6NWZXflhcFdEPR KEx2PsjWUbyq28U9cqr24ooko1Ad5R/T -----END CERTIFICATE-----Generated at Sat Aug 23 13:38:20 2025 by rpki-client