$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json) Hash identifier: rQ7uUw5lwyQoMtyyBubN1X0lvq8/eBIb80fo3QwZObE= Subject key identifier: A6:D5:3F:E6:18:BA:F2:E1:9D:13:3E:B9:E8:A3:C2:DC:1B:35:C3:62 Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Certificate serial: 08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft Manifest number: 07 Signing time: Thu 03 Jul 2025 08:25:58 +0000 Manifest this update: Thu 03 Jul 2025 08:25:58 +0000 Manifest next update: Thu 10 Jul 2025 08:25:58 +0000 Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: qq0MrqIUnpI07+3GpGrxWWByOfaS/vf6eLScGbk8iZg=) 2: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Validity Not Before: Jul 3 08:25:58 2025 GMT Not After : Jul 10 08:25:58 2025 GMT Subject: CN=68663e96-43aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b9:65:00:9a:a4:bd:65:47:55:13:f9:07:a5: 00:3c:11:e9:8f:15:6f:d3:78:bc:72:61:ae:11:49: b2:bd:8c:74:81:52:01:de:4c:cf:0b:3d:b6:70:d6: 23:b4:f2:25:b1:85:ee:c5:67:2f:51:23:94:34:75: 74:79:60:8c:cb:2d:1d:c3:d6:e7:00:b1:1d:5e:b8: 06:ac:2b:fa:36:2e:95:91:1d:c5:d6:3a:28:97:60: 7f:f0:c9:65:bf:2a:66:e4:c7:ed:00:56:a1:14:4c: ac:1c:ab:c9:3f:5f:d5:92:22:3e:fa:32:6e:ee:4d: 51:fe:d9:ad:c6:16:de:de:b5:60:a2:62:1f:5b:76: 9f:cf:a9:fa:ae:7a:53:d1:6e:27:e2:e0:6a:aa:a7: 03:62:7a:a7:50:57:9d:30:58:7a:d2:97:f1:00:dc: a7:2f:fb:39:f3:47:5a:00:fd:c0:24:ab:58:87:e4: ad:0c:bf:bc:d4:c6:18:49:fb:0b:2d:3c:dc:f1:55: a1:44:c8:c5:59:6b:07:bd:99:65:79:98:d6:91:19: 4a:dd:79:1a:53:fe:ac:9d:f0:79:02:d6:79:ab:7e: 99:f4:39:84:0d:2e:40:88:93:fe:75:5e:8e:b6:a9: f8:73:84:11:83:d9:e5:cb:3b:be:c7:7a:36:49:5b: d5:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D5:3F:E6:18:BA:F2:E1:9D:13:3E:B9:E8:A3:C2:DC:1B:35:C3:62 X509v3 Authority Key Identifier: keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 95:c4:6a:2f:eb:af:a5:41:02:82:f1:68:0f:fc:d9:9d:56:61: fe:90:e2:1b:67:1c:f6:24:3e:57:b6:55:fb:3a:42:d7:36:fe: 58:56:dc:74:0d:57:9a:9e:93:97:dc:09:76:a3:c1:4b:96:ab: 7c:8c:ad:4e:2f:ca:e4:8b:b1:85:d6:2f:40:7d:9e:4d:69:c1: 3c:52:ae:98:36:35:cf:dd:9c:be:ad:25:d3:17:67:40:8f:9d: 75:48:c2:a3:a2:2f:ed:c3:d1:a5:d8:9d:68:da:37:38:bd:53: 82:48:76:0c:2d:32:96:c0:72:5e:85:95:04:49:a5:e4:64:8d: 55:99:90:fc:10:3e:b5:4f:d4:1b:e7:f7:74:9e:cf:fd:ab:6e: ac:de:31:82:63:04:72:f8:75:7a:97:a7:5a:4e:80:c8:2d:40: 12:70:93:f7:4d:fe:b0:95:3e:7c:fd:da:93:4a:24:d6:e3:4c: 61:d2:fd:fc:51:b3:7c:0b:1b:16:7d:1d:b1:44:e9:b8:9e:7f: e8:61:d3:bb:24:6a:c5:f9:2f:42:2f:2d:3a:d4:6c:f2:6d:1b: 21:d7:89:09:9a:5e:90:a3:d2:23:ad:65:0e:48:d7:14:94:05: f7:11:47:2f:6a:60:a0:0c:b7:25:67:d2:0e:14:46:20:b5:0b: 87:cf:0f:d6 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5 N0MwQTYzRjAeFw0yNTA3MDMwODI1NThaFw0yNTA3MTAwODI1NThaMBgxFjAUBgNV BAMTDTY4NjYzZTk2LTQzYWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCguWUAmqS9ZUdVE/kHpQA8EemPFW/TeLxyYa4RSbK9jHSBUgHeTM8LPbZw1iO0 8iWxhe7FZy9RI5Q0dXR5YIzLLR3D1ucAsR1euAasK/o2LpWRHcXWOiiXYH/wyWW/ Kmbkx+0AVqEUTKwcq8k/X9WSIj76Mm7uTVH+2a3GFt7etWCiYh9bdp/PqfquelPR bifi4GqqpwNieqdQV50wWHrSl/EA3Kcv+znzR1oA/cAkq1iH5K0Mv7zUxhhJ+wst PNzxVaFEyMVZawe9mWV5mNaRGUrdeRpT/qyd8HkC1nmrfpn0OYQNLkCIk/51Xo62 qfhzhBGD2eXLO77HejZJW9U5AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUptU/5hi6 8uGdEz656KPC3Bs1w2IwHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1 M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAJXEai/rr6VBAoLxaA/82Z1WYf6Q4htnHPYkPle2Vfs6Qtc2/lhW3HQN V5qek5fcCXajwUuWq3yMrU4vyuSLsYXWL0B9nk1pwTxSrpg2Nc/dnL6tJdMXZ0CP nXVIwqOiL+3D0aXYnWjaNzi9U4JIdgwtMpbAcl6FlQRJpeRkjVWZkPwQPrVP1Bvn 93Sez/2rbqzeMYJjBHL4dXqXp1pOgMgtQBJwk/dN/rCVPnz92pNKJNbjTGHS/fxR s3wLGxZ9HbFE6bief+hh07skasX5L0IvLTrUbPJtGyHXiQmaXpCj0iOtZQ5I1xSU BfcRRy9qYKAMtyVn0g4URiC1C4fPD9Y= -----END CERTIFICATE-----Generated at Fri Jul 4 06:10:18 2025 by rpki-client