$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: wj1SibN7Yj4jaZN7cHgfgW2TUj2vkMLww+qMhEdrvu8= Subject key identifier: CA:C6:1F:EA:32:21:21:5D:D1:5A:6E:2D:F3:9F:13:82:60:2E:CE:2D Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 021A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 0211 Signing time: Sat 23 Aug 2025 02:25:14 +0000 Manifest this update: Sat 23 Aug 2025 02:25:14 +0000 Manifest next update: Sat 30 Aug 2025 02:25:14 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: 5/63JR6pOd6RmRg+I1cz3Pk9bsssl2Co4Xvb+zAhEMM=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 538 (0x21a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Aug 23 02:25:14 2025 GMT Not After : Aug 30 02:25:14 2025 GMT Subject: CN=68a9268a-9ca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:a3:b7:49:69:05:89:44:c6:72:8a:c9:f3: 12:73:33:2d:67:93:97:bb:fb:23:fa:76:fc:bd:6a: 1e:c1:c9:e2:6d:40:3c:62:c8:7f:a8:b3:85:08:77: 8c:97:28:bd:aa:6a:e1:40:50:24:76:97:8a:43:d7: d6:a9:f9:9b:04:ae:ef:7c:68:7c:67:84:da:32:4f: a8:b7:c5:36:2c:8a:fb:6a:b4:e3:66:3a:c9:3b:b1: 9d:88:04:3b:ec:e7:73:7d:06:fe:41:a9:c3:63:98: b3:dd:d9:58:f1:83:68:a3:8f:9e:e8:a1:86:ab:49: b0:a2:39:2f:70:76:a4:9d:5b:9b:5f:d1:48:0c:cf: 22:04:fc:5d:95:d6:85:ac:28:ed:15:48:52:6e:d6: 79:ea:5e:4a:01:99:34:53:65:d0:01:10:ce:3f:a2: b3:c4:ad:2a:72:b6:a0:41:35:92:6c:89:00:30:ed: 12:fb:57:79:cf:ab:76:c6:5b:ff:19:07:a6:cc:64: 2a:8f:e5:0a:cc:fe:7b:39:4a:92:71:5d:99:82:93: 27:8f:7d:d5:8f:bd:60:7d:15:53:3f:73:b1:10:1c: de:1e:b7:f1:01:ac:6a:89:e8:f1:dc:e8:75:ba:d0: 78:9f:dd:28:86:0a:36:74:d5:6a:ca:ac:45:37:83: 7b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C6:1F:EA:32:21:21:5D:D1:5A:6E:2D:F3:9F:13:82:60:2E:CE:2D X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 78:b7:9e:be:a1:fe:eb:f2:b9:e3:14:c7:c3:e8:6b:16:24:80: 4f:3e:b3:59:2d:b7:73:be:9d:33:a9:c5:d7:30:3e:8a:a0:a1: 4b:e3:31:36:1f:4c:63:5c:a0:aa:f0:e3:56:0c:c7:70:6f:6f: ff:f4:4e:fe:a7:2c:4d:06:8a:fa:e3:67:af:fa:38:76:3b:86: f6:83:d6:e4:a3:6f:af:2c:d9:30:58:a0:71:ae:c4:20:4f:00: c8:6e:5b:c6:92:96:77:48:8d:37:e4:ba:12:a7:d7:1f:71:c3: a2:c1:e1:20:60:4f:47:7d:18:54:d5:c6:9d:6e:d2:b2:6a:42: 83:b7:19:0b:47:bd:0c:fa:e0:85:f3:42:1e:8b:26:6e:61:6e: 29:41:b8:14:00:53:d1:28:33:c1:bc:7e:d0:4f:34:97:08:c8: 0d:a0:83:5f:4b:f8:51:63:1f:84:c0:be:a6:b8:a3:bf:35:45: 58:27:2d:05:3c:44:54:45:ea:04:77:78:4d:4a:34:e9:92:e7: b6:4a:b1:35:e3:97:da:ad:fc:7f:8c:56:59:14:a7:40:23:83: 5c:5c:51:4b:90:22:e6:bd:b2:d1:76:4c:31:bf:59:f0:bd:02: d8:da:0a:ec:b5:33:9e:f4:c4:6f:16:e0:7c:4c:36:22:81:64: 37:05:25:01 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwODIzMDIyNTE0WhcNMjUwODMwMDIyNTE0WjAYMRYwFAYD VQQDEw02OGE5MjY4YS05Y2E3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqmjt0lpBYlExnKKyfMSczMtZ5OXu/sj+nb8vWoewcnibUA8Ysh/qLOFCHeM lyi9qmrhQFAkdpeKQ9fWqfmbBK7vfGh8Z4TaMk+ot8U2LIr7arTjZjrJO7GdiAQ7 7OdzfQb+QanDY5iz3dlY8YNoo4+e6KGGq0mwojkvcHaknVubX9FIDM8iBPxdldaF rCjtFUhSbtZ56l5KAZk0U2XQARDOP6KzxK0qcragQTWSbIkAMO0S+1d5z6t2xlv/ GQemzGQqj+UKzP57OUqScV2ZgpMnj33Vj71gfRVTP3OxEBzeHrfxAaxqiejx3Oh1 utB4n90ohgo2dNVqyqxFN4N77QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMrGH+oy ISFd0VpuLfOfE4JgLs4tMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB4t56+of7r8rnjFMfD6GsWJIBPPrNZLbdzvp0zqcXXMD6KoKFL4zE2 H0xjXKCq8ONWDMdwb2//9E7+pyxNBor642ev+jh2O4b2g9bko2+vLNkwWKBxrsQg TwDIblvGkpZ3SI035LoSp9cfccOiweEgYE9HfRhU1cadbtKyakKDtxkLR70M+uCF 80IeiyZuYW4pQbgUAFPRKDPBvH7QTzSXCMgNoINfS/hRYx+EwL6muKO/NUVYJy0F PERUReoEd3hNSjTpkue2SrE145farfx/jFZZFKdAI4NcXFFLkCLmvbLRdkwxv1nw vQLY2grstTOe9MRvFuB8TDYigWQ3BSUB -----END CERTIFICATE-----Generated at Sun Aug 24 02:35:32 2025 by rpki-client