$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft File: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft (raw, json) Hash identifier: bWAgAK4vRbZgnfLsonzd9iI0ypy/A3BPOVBGtoifloU= Subject key identifier: EB:B3:A8:D4:67:E8:7F:42:A2:07:73:E2:AB:AB:DD:4B:94:06:20:8F Authority key identifier: 0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE Certificate issuer: /CN=A9153944/serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Certificate serial: A8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft Manifest number: A2 Signing time: Sat 23 Aug 2025 06:34:01 +0000 Manifest this update: Sat 23 Aug 2025 06:34:01 +0000 Manifest next update: Sat 30 Aug 2025 06:34:01 +0000 Files and hashes: 1: C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl (hash: Se+vNrem1RL7qEImm26LFtRlQfxloycpYZBCrAPgK8c=) 2: FDC6BEA491FA11EFA4F0932CC4F9AE02.roa (hash: YBvvTG8CEcUFzimDCpf2NnR5CR5UGFVI9gkQ+sgXEds=) 3: 10C5553891FB11EFB901C22CC4F9AE02.roa (hash: ArlGMl3wEFoKu6XnIzHTkLugUTq0moKGL5QIiW5qRPw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=0BA07A8BD53C2E1FFFF4A24505C43404549509FE Validity Not Before: Aug 23 06:34:01 2025 GMT Not After : Aug 30 06:34:01 2025 GMT Subject: CN=68a960d9-477e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f9:31:d9:97:8a:6c:9f:a5:6c:e0:da:19:79: 53:15:04:38:be:03:5b:aa:0b:3b:1e:ee:4b:b8:80: 4f:61:48:8a:90:98:1c:61:9a:31:6e:68:ac:be:18: 9c:69:9d:30:45:d2:e3:4c:d3:0d:0d:4a:ec:2f:e1: 17:89:1d:2c:b4:46:c6:b4:8b:d2:1d:06:e4:0b:3a: 87:51:f9:c4:ae:e8:0f:27:f9:ba:bb:93:76:96:53: d5:26:91:00:b3:03:5f:c0:89:56:a2:bb:08:2c:62: de:37:0e:09:c9:a6:35:af:c0:fc:46:55:77:6a:9d: eb:d1:04:f3:0b:6f:00:5a:4d:6e:8e:87:7a:c6:a0: 7f:d5:52:c4:ac:bd:cb:cf:a2:ad:f6:5c:52:fe:93: c6:be:a3:5a:a9:c5:74:6c:63:d0:db:91:83:da:e0: 83:9f:98:95:7f:b5:0f:af:c0:13:59:78:41:e1:c2: 1c:e2:b2:76:5b:ce:6f:1b:13:d4:2e:32:4d:6d:ff: 92:d6:66:43:54:66:c4:d4:01:72:a3:f6:32:a5:d4: 29:57:0e:b9:54:c1:fb:c3:95:5d:52:22:73:45:05: 1a:5f:2d:a0:49:f2:b1:62:0f:52:0b:e3:72:d3:1c: 54:a9:6f:26:34:5d:2d:c3:07:00:a5:90:ee:b6:5c: 98:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:B3:A8:D4:67:E8:7F:42:A2:07:73:E2:AB:AB:DD:4B:94:06:20:8F X509v3 Authority Key Identifier: keyid:0B:A0:7A:8B:D5:3C:2E:1F:FF:F4:A2:45:05:C4:34:04:54:95:09:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/950C3EBC91F911EF8E6EEE27C4F9AE02/C6B6i9U8Lh__9KJFBcQ0BFSVCf4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8e:64:98:8c:6f:f9:54:8b:a4:4a:08:7f:e3:42:47:96:de:46: 54:92:f9:c7:9b:66:81:1e:77:4a:f0:da:db:7f:d4:c9:47:5d: c0:46:45:aa:48:24:90:19:f4:b0:f4:ca:05:f0:94:c1:80:14: 9f:8b:eb:24:bc:2f:60:ee:de:cf:d7:75:75:f3:90:64:b9:e7: 05:da:41:a7:36:d2:57:12:07:c1:3b:4b:1c:83:8f:bc:30:24: b9:9f:30:6f:85:bb:c6:18:da:2d:91:f5:fa:04:35:a8:0e:8e: a7:53:9a:55:6d:38:84:d7:01:19:5b:dc:6c:34:7e:c9:ce:e9: e8:8b:2a:c3:da:b9:61:9f:72:c4:43:d6:f6:e4:d4:71:91:35: af:76:3e:b2:59:5b:23:e1:4b:e5:41:dc:4e:9a:98:a2:38:63: 34:32:5f:81:69:5a:26:eb:a0:7c:39:37:48:a3:59:61:c5:91: df:e8:10:88:91:28:f7:b6:ca:1c:1a:34:06:83:d8:54:c9:ca: b5:5a:97:b9:3d:c1:94:e3:b8:47:ba:b5:f2:1c:f5:d4:eb:d0: c3:51:10:c5:e5:98:e6:31:4f:e8:f4:0e:6a:3b:3a:04:93:76: 96:1b:ba:49:2d:80:cd:1f:18:dd:49:0b:a4:b9:7d:52:32:a8: df:c3:d8:a0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTM5NDQxMTAvBgNVBAUTKDBCQTA3QThCRDUzQzJFMUZGRkY0QTI0NTA1QzQzNDA0 NTQ5NTA5RkUwHhcNMjUwODIzMDYzNDAxWhcNMjUwODMwMDYzNDAxWjAYMRYwFAYD VQQDEw02OGE5NjBkOS00NzdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs/kx2ZeKbJ+lbODaGXlTFQQ4vgNbqgs7Hu5LuIBPYUiKkJgcYZoxbmisvhic aZ0wRdLjTNMNDUrsL+EXiR0stEbGtIvSHQbkCzqHUfnErugPJ/m6u5N2llPVJpEA swNfwIlWorsILGLeNw4JyaY1r8D8RlV3ap3r0QTzC28AWk1ujod6xqB/1VLErL3L z6Kt9lxS/pPGvqNaqcV0bGPQ25GD2uCDn5iVf7UPr8ATWXhB4cIc4rJ2W85vGxPU LjJNbf+S1mZDVGbE1AFyo/YypdQpVw65VMH7w5VdUiJzRQUaXy2gSfKxYg9SC+Ny 0xxUqW8mNF0twwcApZDutlyYRwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOuzqNRn 6H9Cogdz4qur3UuUBiCPMB8GA1UdIwQYMBaAFAugeovVPC4f//SiRQXENARUlQn+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Mzk0NC85NTBDM0VCQzkx RjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExoX185S0pGQmNRMEJGU1ZD ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2QjZpOVU4TGhfXzlLSkZCY1EwQkZTVkNmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzk0NC85NTBDM0VCQzkxRjkxMUVGOEU2RUVFMjdDNEY5QUUwMi9DNkI2aTlVOExo X185S0pGQmNRMEJGU1ZDZjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCOZJiMb/lUi6RKCH/jQkeW3kZUkvnHm2aBHndK8Nrbf9TJR13ARkWq SCSQGfSw9MoF8JTBgBSfi+skvC9g7t7P13V185BkuecF2kGnNtJXEgfBO0scg4+8 MCS5nzBvhbvGGNotkfX6BDWoDo6nU5pVbTiE1wEZW9xsNH7JzunoiyrD2rlhn3LE Q9b25NRxkTWvdj6yWVsj4UvlQdxOmpiiOGM0Ml+BaVom66B8OTdIo1lhxZHf6BCI kSj3tsocGjQGg9hUycq1Wpe5PcGU47hHurXyHPXU69DDURDF5ZjmMU/o9A5qOzoE k3aWG7pJLYDNHxjdSQukuX1SMqjfw9ig -----END CERTIFICATE-----Generated at Sat Aug 23 21:25:40 2025 by rpki-client