$ rpki-client -vvf rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft File: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft (raw, json) Hash identifier: I9zW8NHpnp0er1tsawGiBKFbZ03SIN/yMyiUQblzwwc= Subject key identifier: FD:DB:20:D6:A3:8C:DF:83:D1:7E:2F:4F:9E:7D:C1:ED:43:2F:AC:FA Authority key identifier: E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 Certificate issuer: /CN=A9157E9C/serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Certificate serial: 0422 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft Manifest number: 0417 Signing time: Sat 23 Aug 2025 00:36:22 +0000 Manifest this update: Sat 23 Aug 2025 00:36:22 +0000 Manifest next update: Sat 30 Aug 2025 00:36:22 +0000 Files and hashes: 1: 6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl (hash: X+vf1vYiqYl7WUUncfbBmIfv6lmhez8A2SLYeaHXAb0=) 2: E3CD40BE7D6611ECBA65C232C4F9AE02.roa (hash: NYWD2JqusfrB1Pm/fEvYX0+WP2e5BK0diIi0VyFEvIM=) 3: 438C7C387D6F11ECBCDC721DC4F9AE02.roa (hash: RYTGTaJo9tgeLfdLTz9lnkOel+5ud5H41Dw2zm5x3dM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:36:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1058 (0x422) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9157E9C, serialNumber=E99FF0448B0BDA3771CDC4A96C59F7C9F9C87944 Validity Not Before: Aug 23 00:36:22 2025 GMT Not After : Aug 30 00:36:22 2025 GMT Subject: CN=68a90d06-cbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:fb:68:2a:5a:32:77:8e:3a:e4:a8:98:e5: 54:a4:eb:e2:d0:ad:4e:85:b6:f3:01:42:ee:be:66: c2:ad:df:29:19:4b:33:f4:b3:77:5c:f5:c2:a1:9a: 75:74:44:d4:68:31:25:1f:03:9a:06:7e:5f:4a:81: 96:5f:b9:ba:24:cb:17:ac:2a:5b:bc:05:17:d0:de: 8e:12:78:b6:17:ef:59:fd:63:79:03:11:ed:58:9a: 17:ad:a8:92:2b:65:5d:75:db:7b:b6:52:ba:7f:29: 64:25:08:1d:8a:6c:43:48:5f:18:a2:d6:02:f1:ed: e8:48:a9:de:e9:84:a6:10:40:c9:dc:8e:9b:da:71: 1f:da:ba:2b:f0:59:d9:a3:94:33:dd:ea:73:01:18: 15:b7:4e:a7:13:c8:a1:84:9e:90:25:ab:89:02:9a: fa:e6:24:e4:c5:b4:24:0b:d2:d7:a3:ab:61:1e:9a: c8:52:d4:22:d3:9e:73:fb:dd:2f:e7:f7:f5:29:3b: 08:44:d4:91:95:a0:ac:d1:c8:4f:bd:55:5d:11:54: 18:26:4c:c2:6e:b8:f7:b6:10:bf:f8:03:87:dc:09: 6c:a3:dd:9d:43:a3:3e:56:35:64:d9:7c:aa:42:a8: 80:56:a7:08:3c:20:c9:9a:81:36:ec:57:16:4c:8d: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DB:20:D6:A3:8C:DF:83:D1:7E:2F:4F:9E:7D:C1:ED:43:2F:AC:FA X509v3 Authority Key Identifier: keyid:E9:9F:F0:44:8B:0B:DA:37:71:CD:C4:A9:6C:59:F7:C9:F9:C8:79:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157E9C/50C993CE7D6311ECAC5C7F1EC4F9AE02/6Z_wRIsL2jdxzcSpbFn3yfnIeUQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 74:82:77:19:73:38:0a:66:66:bb:cf:1f:b3:ee:58:01:74:2b: f9:98:47:7a:31:68:ac:4e:d0:0c:37:38:67:61:3c:20:58:e9: c0:7a:94:b0:7c:c3:75:5c:1e:fa:db:ee:a7:e4:4e:f1:51:9e: 8f:21:e5:e6:f1:79:1f:36:e8:b9:85:15:37:fb:6c:0f:60:25: 97:09:af:f6:d8:c5:d5:0a:b0:a2:82:1c:6f:de:28:28:9c:24: 7e:89:f7:e6:f6:0c:8c:69:75:33:52:96:9f:26:ca:1c:27:63: 20:52:57:ee:48:35:79:73:ad:d5:87:4e:ff:c9:58:1c:04:ab: 5a:d2:3c:27:55:eb:95:31:11:98:13:a8:37:6f:82:76:5d:3e: 4f:be:f3:63:d2:e8:21:aa:32:3b:5b:dc:eb:c0:27:6e:fa:37: 77:6c:46:52:d9:69:ec:e5:f4:89:55:18:01:60:7c:7a:84:f6: 61:bc:c4:5a:b9:12:a4:f1:ab:f2:71:01:18:c3:91:11:fd:f2: 00:8e:1a:40:40:42:6c:fb:08:cf:3c:9b:df:a6:6d:7e:f9:98: c7:b6:9c:9f:88:cb:06:68:3c:55:b0:44:e2:50:fb:db:40:4f: fd:b1:23:bd:01:61:ee:c9:97:79:7a:65:b9:c9:87:b1:21:ec: 26:a3:79:50 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBCIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTdFOUMxMTAvBgNVBAUTKEU5OUZGMDQ0OEIwQkRBMzc3MUNEQzRBOTZDNTlGN0M5 RjlDODc5NDQwHhcNMjUwODIzMDAzNjIyWhcNMjUwODMwMDAzNjIyWjAYMRYwFAYD VQQDEw02OGE5MGQwNi1jYmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt3f7aCpaMneOOuSomOVUpOvi0K1OhbbzAULuvmbCrd8pGUsz9LN3XPXCoZp1 dETUaDElHwOaBn5fSoGWX7m6JMsXrCpbvAUX0N6OEni2F+9Z/WN5AxHtWJoXraiS K2Vdddt7tlK6fylkJQgdimxDSF8YotYC8e3oSKne6YSmEEDJ3I6b2nEf2ror8FnZ o5Qz3epzARgVt06nE8ihhJ6QJauJApr65iTkxbQkC9LXo6thHprIUtQi055z+90v 5/f1KTsIRNSRlaCs0chPvVVdEVQYJkzCbrj3thC/+AOH3Also92dQ6M+VjVk2Xyq QqiAVqcIPCDJmoE27FcWTI0+vQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP3bINaj jN+D0X4vT559we1DL6z6MB8GA1UdIwQYMBaAFOmf8ESLC9o3cc3EqWxZ98n5yHlE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0U5Qy81MEM5OTNDRTdE NjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJqZHh6Y1NwYkZuM3lmbkll VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaX3dSSXNMMmpkeHpjU3BiRm4zeWZuSWVVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 N0U5Qy81MEM5OTNDRTdENjMxMUVDQUM1QzdGMUVDNEY5QUUwMi82Wl93UklzTDJq ZHh6Y1NwYkZuM3lmbkllVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB0gncZczgKZma7zx+z7lgBdCv5mEd6MWisTtAMNzhnYTwgWOnAepSw fMN1XB762+6n5E7xUZ6PIeXm8XkfNui5hRU3+2wPYCWXCa/22MXVCrCighxv3igo nCR+iffm9gyMaXUzUpafJsocJ2MgUlfuSDV5c63Vh07/yVgcBKta0jwnVeuVMRGY E6g3b4J2XT5PvvNj0ughqjI7W9zrwCdu+jd3bEZS2Wns5fSJVRgBYHx6hPZhvMRa uRKk8avycQEYw5ER/fIAjhpAQEJs+wjPPJvfpm1++ZjHtpyfiMsGaDxVsETiUPvb QE/9sSO9AWHuyZd5emW5yYexIewmo3lQ -----END CERTIFICATE-----Generated at Sat Aug 23 16:27:20 2025 by rpki-client