$ rpki-client -vvf rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft File: nA6EGePLBsHaXiDY90VQWCUP1-0.mft (raw, json) Hash identifier: XSY/fOwrrqs11PFY+Eq8snILAQeaWWgGbh86w3VYzRw= Subject key identifier: 3F:B4:2A:B2:FF:6D:35:D5:21:51:A3:81:C1:C1:B8:9B:E3:2D:33:EF Authority key identifier: 9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED Certificate issuer: /CN=A915B3AE/serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Certificate serial: 011C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft Manifest number: 011C Signing time: Sat 23 Aug 2025 04:55:50 +0000 Manifest this update: Sat 23 Aug 2025 04:55:50 +0000 Manifest next update: Sat 30 Aug 2025 04:55:50 +0000 Files and hashes: 1: nA6EGePLBsHaXiDY90VQWCUP1-0.crl (hash: 2Zhj8wBwNo7PG17ZFS8MkyWp8r8LvNhKwCrEBJCzo/I=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:55:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 284 (0x11c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915B3AE, serialNumber=9C0E8419E3CB06C1DA5E20D8F7455058250FD7ED Validity Not Before: Aug 23 04:55:50 2025 GMT Not After : Aug 30 04:55:50 2025 GMT Subject: CN=68a949d6-54bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c3:8b:e1:0f:33:b6:61:ed:6a:a6:9e:8c:17: a3:d3:a9:f2:1a:5d:5e:85:7d:27:52:2a:77:db:08: 3f:cc:d3:cd:67:88:46:96:19:0a:84:f7:9d:90:51: d3:28:34:9a:35:70:99:ae:33:7e:30:7c:b9:b6:4a: 07:e7:d1:61:f3:a7:ec:7d:aa:e5:06:64:50:28:4e: 81:74:54:d3:bd:23:73:52:d5:b4:25:cb:6a:64:5f: 97:07:a6:c0:76:ba:03:86:49:c7:e4:86:0d:f0:0f: 4a:70:ce:40:33:7b:24:39:55:e4:90:cf:a8:ce:cf: d9:10:50:a6:51:65:5c:ae:25:bf:64:ff:81:8b:bf: 72:f7:51:61:fa:70:8a:67:d1:34:e9:4a:3f:02:e2: 90:c0:3c:12:f4:5f:fc:13:e4:63:85:c6:f3:f2:86: 66:76:75:0c:32:04:47:58:5a:ec:f4:21:5a:d5:94: e9:86:64:c1:75:66:d0:57:73:9e:56:1a:f0:39:4c: 5c:50:e9:3c:a3:7c:ac:06:2f:b4:33:7f:f2:63:ea: 8d:27:17:f2:f9:71:ab:4c:82:d6:c5:b2:4a:c9:47: 79:00:31:ad:a0:50:53:98:47:87:39:de:b2:61:40: c9:21:15:95:73:99:37:65:89:02:fa:49:54:94:04: 8c:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:B4:2A:B2:FF:6D:35:D5:21:51:A3:81:C1:C1:B8:9B:E3:2D:33:EF X509v3 Authority Key Identifier: keyid:9C:0E:84:19:E3:CB:06:C1:DA:5E:20:D8:F7:45:50:58:25:0F:D7:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nA6EGePLBsHaXiDY90VQWCUP1-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915B3AE/CC02A754CA9311EEA726CC09C4F9AE02/nA6EGePLBsHaXiDY90VQWCUP1-0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:23:0b:30:3d:e4:8b:66:cf:be:4a:78:1e:47:4e:9d:29:bc: a5:d0:52:28:36:cd:4b:a4:24:1e:85:14:d7:82:f6:08:77:5e: f6:02:bc:c5:84:a8:28:27:1f:83:44:d6:06:8a:3d:07:2c:83: 8b:c2:a2:53:26:0a:5b:52:da:7a:f4:53:c8:d5:25:d2:b7:1c: d9:84:c1:80:3e:a9:40:92:5c:ae:7b:cd:53:ea:35:8a:22:b4: ae:fd:71:11:19:6e:c3:eb:94:7a:4e:e9:8b:d3:7f:35:b3:9e: 43:b2:4f:e3:b6:12:64:fa:f0:d1:71:5b:4d:e2:0a:d3:28:f5: 11:98:98:7a:6b:b0:52:83:40:df:72:87:36:9f:06:41:35:8d: 0e:8b:3c:e1:ff:d8:22:23:23:6c:10:2c:77:0a:e9:9d:dd:fe: d5:29:74:f1:81:bd:47:0f:80:44:c1:43:b4:7e:e5:2c:87:63: 17:cf:bc:ac:49:94:6a:e2:2e:0f:7f:b9:c1:fa:be:dd:8e:25: 4b:cf:95:ca:b0:ec:6f:80:5e:8b:d6:1c:bf:e6:f2:a8:d3:f3: 85:d9:b3:08:03:dd:11:db:b4:42:7d:71:c9:6c:af:cb:fb:01: 27:09:7c:9e:82:2d:3e:cb:33:ea:fe:50:9b:b6:b5:4f:67:71: 41:9d:48:15 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICARwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUIzQUUxMTAvBgNVBAUTKDlDMEU4NDE5RTNDQjA2QzFEQTVFMjBEOEY3NDU1MDU4 MjUwRkQ3RUQwHhcNMjUwODIzMDQ1NTUwWhcNMjUwODMwMDQ1NTUwWjAYMRYwFAYD VQQDEw02OGE5NDlkNi01NGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA38OL4Q8ztmHtaqaejBej06nyGl1ehX0nUip32wg/zNPNZ4hGlhkKhPedkFHT KDSaNXCZrjN+MHy5tkoH59Fh86fsfarlBmRQKE6BdFTTvSNzUtW0JctqZF+XB6bA droDhknH5IYN8A9KcM5AM3skOVXkkM+ozs/ZEFCmUWVcriW/ZP+Bi79y91Fh+nCK Z9E06Uo/AuKQwDwS9F/8E+Rjhcbz8oZmdnUMMgRHWFrs9CFa1ZTphmTBdWbQV3Oe VhrwOUxcUOk8o3ysBi+0M3/yY+qNJxfy+XGrTILWxbJKyUd5ADGtoFBTmEeHOd6y YUDJIRWVc5k3ZYkC+klUlASMPQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFD+0KrL/ bTXVIVGjgcHBuJvjLTPvMB8GA1UdIwQYMBaAFJwOhBnjywbB2l4g2PdFUFglD9ft MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QjNBRS9DQzAyQTc1NENB OTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJzSGFYaURZOTBWUVdDVVAx LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL25BNkVHZVBMQnNIYVhpRFk5MFZRV0NVUDEtMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QjNBRS9DQzAyQTc1NENBOTMxMUVFQTcyNkNDMDlDNEY5QUUwMi9uQTZFR2VQTEJz SGFYaURZOTBWUVdDVVAxLTAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB6IwswPeSLZs++SngeR06dKbyl0FIoNs1LpCQehRTXgvYId172ArzF hKgoJx+DRNYGij0HLIOLwqJTJgpbUtp69FPI1SXStxzZhMGAPqlAklyue81T6jWK IrSu/XERGW7D65R6TumL0381s55Dsk/jthJk+vDRcVtN4grTKPURmJh6a7BSg0Df coc2nwZBNY0Oizzh/9giIyNsECx3Cumd3f7VKXTxgb1HD4BEwUO0fuUsh2MXz7ys SZRq4i4Pf7nB+r7djiVLz5XKsOxvgF6L1hy/5vKo0/OF2bMIA90R27RCfXHJbK/L +wEnCXyegi0+yzPq/lCbtrVPZ3FBnUgV -----END CERTIFICATE-----Generated at Sat Aug 23 16:35:05 2025 by rpki-client