$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json) Hash identifier: BtX1dXaepSRuwA/SB4MCFTpKqDnGdZlt+pHIGR09JoE= Subject key identifier: B0:7A:DF:6E:EA:8D:B0:9A:9B:8F:83:93:2C:5E:64:02:A6:3F:25:52 Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Certificate serial: 22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft Manifest number: 21 Signing time: Sat 23 Aug 2025 08:04:38 +0000 Manifest this update: Sat 23 Aug 2025 08:04:37 +0000 Manifest next update: Sat 30 Aug 2025 08:04:37 +0000 Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: 5CwA4+GQ6d+9MOQkE37EHOcPDfz/wqF+nwGij0LmDV0=) 2: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 08:04:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Validity Not Before: Aug 23 08:04:37 2025 GMT Not After : Aug 30 08:04:37 2025 GMT Subject: CN=68a97616-6315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:5a:49:c6:b4:ec:da:a9:9a:9f:ef:f3:69:b6: 47:fd:5b:92:fe:25:2c:1d:17:56:f5:af:d8:ee:3b: b4:c0:3f:84:2a:35:30:f3:63:12:03:2d:b1:d2:32: 05:40:64:85:2f:f2:bd:1c:3d:e2:cf:e3:f6:e6:dd: ac:27:3a:97:78:36:4f:80:f0:c4:f3:d9:da:d8:57: 48:67:ab:2b:a8:32:a9:d5:b7:eb:82:75:73:54:87: 18:ab:45:69:cc:7c:2d:49:8b:91:71:54:b3:40:a4: 81:96:bc:9b:e3:dd:da:6c:78:29:a1:60:cb:e1:71: 96:9e:d6:89:08:3b:b3:5b:8e:7b:7b:cb:2d:e2:f7: a7:82:b7:d8:6f:98:97:44:ef:ea:42:f7:10:23:30: cc:91:95:09:85:2f:ef:ba:09:b7:3e:bb:5a:2f:c5: c4:90:12:96:67:6a:19:da:9f:ff:60:c7:cd:83:6d: a5:0a:a6:20:94:9a:30:40:fe:0b:8d:3e:c1:94:14: 0d:55:62:98:bc:b1:44:37:a1:e8:3f:49:ad:e4:d9: 44:36:0d:86:20:7a:65:02:38:e3:af:6f:fb:0b:8d: 7a:45:87:5a:c2:2c:77:24:2e:b5:4c:38:a3:c7:eb: b9:d7:48:f5:02:bb:a7:b6:c4:04:31:74:01:95:ec: f0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:DF:6E:EA:8D:B0:9A:9B:8F:83:93:2C:5E:64:02:A6:3F:25:52 X509v3 Authority Key Identifier: keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:09:21:f1:5c:88:c7:3f:35:9a:90:b5:15:69:35:58:f2:d5: 4d:f1:87:ee:fb:af:68:14:5a:64:53:fc:f9:be:f8:5c:55:b6: 22:e0:1c:43:04:e0:a8:b7:76:7c:39:a5:65:29:ea:de:ea:e2: 6d:be:ce:83:1c:e0:8f:78:e1:c5:de:25:d6:44:e4:f5:a0:52: 62:58:eb:ae:eb:2d:fa:7c:ad:8c:50:82:15:a4:82:4e:73:e9: 0b:d2:71:14:90:b2:e1:0f:d6:dc:88:99:c9:a4:13:19:62:5f: fc:c0:54:c0:c7:85:a0:a2:96:9a:5e:7a:e5:e9:41:ba:f5:59: a5:44:b2:f1:e8:b2:b6:8f:74:0b:ac:b8:62:ea:f9:7c:d1:b7: 71:ed:b9:a2:5a:b8:e2:06:c0:85:e2:71:d1:31:5c:3b:09:e7: 56:85:a5:46:c2:02:cd:ea:0a:3a:a3:e9:9a:a3:49:bb:e8:57: b0:dc:5f:35:02:83:03:1d:90:db:ee:2f:f7:57:ba:24:90:f1: 6d:71:84:db:0f:26:88:c6:9b:48:a7:60:a8:0e:f7:77:7f:93: f6:39:53:72:8c:c3:31:79:a0:1d:87:e4:ed:8c:19:06:a6:79: 3e:8c:74:cb:89:6a:bc:5b:4a:09:dd:37:8f:0c:7d:83:41:02: 9d:56:12:02 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5 N0MwQTYzRjAeFw0yNTA4MjMwODA0MzdaFw0yNTA4MzAwODA0MzdaMBgxFjAUBgNV BAMTDTY4YTk3NjE2LTYzMTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdWknGtOzaqZqf7/Nptkf9W5L+JSwdF1b1r9juO7TAP4QqNTDzYxIDLbHSMgVA ZIUv8r0cPeLP4/bm3awnOpd4Nk+A8MTz2drYV0hnqyuoMqnVt+uCdXNUhxirRWnM fC1Ji5FxVLNApIGWvJvj3dpseCmhYMvhcZae1okIO7Nbjnt7yy3i96eCt9hvmJdE 7+pC9xAjMMyRlQmFL++6Cbc+u1ovxcSQEpZnahnan/9gx82DbaUKpiCUmjBA/guN PsGUFA1VYpi8sUQ3oeg/Sa3k2UQ2DYYgemUCOOOvb/sLjXpFh1rCLHckLrVMOKPH 67nXSPUCu6e2xAQxdAGV7PC1AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUsHrfbuqN sJqbj4OTLF5kAqY/JVIwHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1 M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAEkJIfFciMc/NZqQtRVpNVjy1U3xh+77r2gUWmRT/Pm++FxVtiLgHEME 4Ki3dnw5pWUp6t7q4m2+zoMc4I944cXeJdZE5PWgUmJY667rLfp8rYxQghWkgk5z 6QvScRSQsuEP1tyImcmkExliX/zAVMDHhaCilppeeuXpQbr1WaVEsvHosraPdAus uGLq+XzRt3HtuaJauOIGwIXicdExXDsJ51aFpUbCAs3qCjqj6ZqjSbvoV7DcXzUC gwMdkNvuL/dXuiSQ8W1xhNsPJojGm0inYKgO93d/k/Y5U3KMwzF5oB2H5O2MGQam eT6MdMuJarxbSgndN48MfYNBAp1WEgI= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:24 2025 by rpki-client