$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: 8ewfFP7v7DBl3aVh/AuzddnvQjlroSm3ZbRgTGHRVoI= Subject key identifier: 29:5C:4A:52:1F:4D:08:D6:8B:B5:AD:86:15:1F:93:83:16:3C:28:44 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BF0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BE8 Signing time: Fri 22 Aug 2025 18:57:59 +0000 Manifest this update: Fri 22 Aug 2025 18:57:58 +0000 Manifest next update: Fri 29 Aug 2025 18:57:58 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: ye6QDFT/kW8M5WSwkeGWntRKhKaX3ZInKSaTRqq4yq4=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:57:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3056 (0xbf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: Aug 22 18:57:58 2025 GMT Not After : Aug 29 18:57:58 2025 GMT Subject: CN=68a8bdb6-07d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e5:19:03:f1:68:e1:5f:47:fc:1c:9d:ee:43: f1:cf:f1:eb:5b:57:78:d4:53:fd:c4:61:b3:f5:76: 49:1b:8d:db:5d:e6:ac:44:35:81:26:fe:82:89:f8: 57:24:2a:54:e0:0a:ff:ea:90:42:3f:c0:38:cd:ce: 82:ac:82:3c:08:90:78:0d:5a:e9:43:1a:e7:40:6f: 51:2b:e6:aa:15:42:3d:98:c7:5a:d2:cb:bf:8b:aa: 63:ce:17:11:e9:50:f7:13:ad:1e:63:cc:b2:0c:97: 67:40:a1:49:14:01:d5:44:2d:ca:d5:11:a4:46:ec: f9:77:02:ab:c6:d5:0d:27:e0:86:5c:6b:9e:9e:16: e5:98:6f:c8:5b:85:fe:66:48:a1:4c:e8:9c:cd:9a: 8c:48:22:ad:43:16:bb:bc:3e:e6:c9:11:99:b7:70: 7d:73:a5:f0:14:69:13:fe:24:7d:dc:2c:29:b2:3e: e4:10:03:9a:22:07:fa:17:0e:f2:4d:7b:46:56:d9: cf:48:ee:fb:94:c2:c8:69:60:87:5a:b2:5b:cc:6e: 60:32:25:2b:07:7a:37:08:e7:ed:48:6b:63:a8:63: 1c:c7:d6:01:e3:f9:25:b7:73:f0:6c:36:ff:4e:b8: c4:ed:3d:7b:19:d5:aa:e5:76:00:14:fe:ac:e9:9d: b0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5C:4A:52:1F:4D:08:D6:8B:B5:AD:86:15:1F:93:83:16:3C:28:44 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 05:2f:90:27:98:5f:48:c8:74:c9:6d:5d:b8:8e:53:d2:0e:fd: e3:29:f6:0d:1f:8d:52:56:3d:9f:54:81:b0:ee:6c:35:90:5c: 74:6f:c0:8f:f3:fb:a2:fb:30:af:51:44:60:f8:45:89:b0:00: cb:a5:80:4a:54:ae:a5:dd:42:2e:ce:14:34:b3:d9:22:c4:22: a3:0c:61:82:be:eb:81:11:21:91:5a:f4:72:45:03:3c:33:40: 0c:42:29:2d:e2:24:fa:dd:2b:6e:01:9b:0f:2a:0c:1b:f3:4f: 08:a2:59:37:3d:cc:3f:00:4a:7c:ca:b3:a1:83:2b:fc:0b:e0: 16:07:6c:ff:e7:71:e7:53:34:55:64:1c:a6:94:fc:5b:20:15: de:20:e2:e4:27:56:0a:53:ae:f1:fc:b9:54:dc:04:4d:68:88: f1:f6:4f:50:2b:ad:2f:5f:df:2f:33:6d:64:cc:c0:51:cf:6b: ff:1d:89:a6:1d:5c:88:62:38:ba:e7:52:ab:91:f0:a5:50:0b: a7:f3:ca:2c:e5:70:73:2b:bb:a2:9d:8b:c3:e6:09:c2:ed:6b: 8b:cc:c1:f7:d8:8b:59:5d:a7:39:bf:28:b2:66:15:a0:47:60: 94:2a:b0:97:2c:86:6c:aa:e8:d6:54:0f:72:d3:46:ed:04:4e: e0:3a:61:1e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwODIyMTg1NzU4WhcNMjUwODI5MTg1NzU4WjAYMRYwFAYD VQQDEw02OGE4YmRiNi0wN2Q1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvuUZA/Fo4V9H/Byd7kPxz/HrW1d41FP9xGGz9XZJG43bXeasRDWBJv6CifhX JCpU4Ar/6pBCP8A4zc6CrII8CJB4DVrpQxrnQG9RK+aqFUI9mMda0su/i6pjzhcR 6VD3E60eY8yyDJdnQKFJFAHVRC3K1RGkRuz5dwKrxtUNJ+CGXGuenhblmG/IW4X+ ZkihTOiczZqMSCKtQxa7vD7myRGZt3B9c6XwFGkT/iR93Cwpsj7kEAOaIgf6Fw7y TXtGVtnPSO77lMLIaWCHWrJbzG5gMiUrB3o3COftSGtjqGMcx9YB4/klt3PwbDb/ TrjE7T17GdWq5XYAFP6s6Z2wcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFClcSlIf TQjWi7WthhUfk4MWPChEMB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAFL5AnmF9IyHTJbV24jlPSDv3jKfYNH41SVj2fVIGw7mw1kFx0b8CP 8/ui+zCvUURg+EWJsADLpYBKVK6l3UIuzhQ0s9kixCKjDGGCvuuBESGRWvRyRQM8 M0AMQikt4iT63StuAZsPKgwb808Iolk3Pcw/AEp8yrOhgyv8C+AWB2z/53HnUzRV ZBymlPxbIBXeIOLkJ1YKU67x/LlU3ARNaIjx9k9QK60vX98vM21kzMBRz2v/HYmm HVyIYji651KrkfClUAun88os5XBzK7uinYvD5gnC7WuLzMH32ItZXac5vyiyZhWg R2CUKrCXLIZsqujWVA9y00btBE7gOmEe -----END CERTIFICATE-----Generated at Sun Aug 24 02:33:58 2025 by rpki-client