$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: IZpGjRiw+cNcfqifurQa8yd8ZnPFpzcwlBirkGdt0HI= Subject key identifier: D9:C9:30:5C:7E:59:61:71:7D:E6:CF:85:4B:E4:9C:62:8A:F1:BE:91 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0838 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 0830 Signing time: Fri 22 Aug 2025 20:55:08 +0000 Manifest this update: Fri 22 Aug 2025 20:55:08 +0000 Manifest next update: Fri 29 Aug 2025 20:55:08 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: NiKQbWi3Ew7oD+EMLcmD/9iN1dPC3YgmPyiz8uFlmo0=) 2: 82001182986511EFBFE02134C4F9AE02.roa (hash: zFMhUdKAsUErPaBJNxHFhs6kNz0L2uuSFEiFAntBllQ=) 3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: LWV1KeEebkqoxDRj/MN5Z6I+5780TArhWaO+yA4BHQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 20:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2104 (0x838) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Aug 22 20:55:08 2025 GMT Not After : Aug 29 20:55:08 2025 GMT Subject: CN=68a8d92c-9277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:2b:b5:24:ff:86:6b:5f:cb:13:76:69:7b:be: c7:69:a5:81:87:62:d9:25:33:51:87:f5:b9:7d:bb: 7d:1b:b9:93:dc:05:2d:50:04:10:98:ce:9d:15:d4: 21:34:f1:09:ce:e5:e5:c9:fb:e6:de:1c:88:3b:d5: 1f:ba:a0:11:0d:39:78:05:4e:ee:a0:23:7e:fd:c5: f6:3c:b6:1b:62:df:86:89:82:36:6f:ae:ef:12:6a: b9:d4:49:29:3f:6e:59:de:99:66:01:2a:34:2b:54: bd:b3:09:ff:40:29:f1:5b:bb:4b:a5:f8:d6:79:21: 2c:8c:3d:3d:7b:9c:f9:f7:64:a0:69:dd:0f:24:13: b5:3e:23:e1:ba:40:32:26:c8:46:ab:50:8d:cb:11: b8:81:9a:68:1f:38:51:80:59:a6:82:64:7f:d4:28: 0f:5e:d5:88:6a:96:ea:db:28:c3:bd:e3:bd:51:f7: b7:5d:e1:60:3b:1f:7b:85:7a:1e:13:9d:55:81:2d: 82:65:95:02:a5:c5:3c:f9:e1:7c:0d:e6:8e:4e:51: 11:0f:ff:fc:b3:16:5b:f6:90:ab:77:3f:20:9f:b7: 9b:75:f8:51:3d:c5:79:08:9d:bd:28:0e:23:ae:8b: 24:66:71:fb:da:f6:c5:f2:31:c4:2c:6c:cb:22:30: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C9:30:5C:7E:59:61:71:7D:E6:CF:85:4B:E4:9C:62:8A:F1:BE:91 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:0a:9d:98:78:68:d6:00:dd:b1:cc:0e:d9:fd:a7:d5:8d:f1: 8f:96:94:06:04:0e:fb:c6:1d:af:3d:e8:4e:38:f3:e2:91:7d: f8:b4:e3:f8:e4:6c:52:18:59:7b:79:08:b2:ea:bc:ba:66:00: 00:6d:04:29:ad:eb:40:ec:fa:24:7a:9f:91:a0:31:e4:0f:dd: 41:b7:12:44:43:44:49:2a:1d:fd:81:3e:9f:29:1d:5b:2b:e0: f5:da:a7:54:b2:72:92:37:fb:4f:08:b9:82:6b:a1:5b:fc:b2: ac:70:6e:cc:a1:16:e2:4a:86:85:c5:94:66:03:57:0c:29:ad: 48:7f:96:1e:aa:20:c8:17:a3:4d:22:a3:d7:0b:48:9a:dc:2a: 0f:1b:a3:4d:45:3c:8e:c4:8f:d2:14:48:a9:9c:4d:f8:06:e5: 10:bd:55:ab:75:be:95:1d:8d:87:3e:20:55:16:5e:62:5f:a5: 7e:d7:22:8f:3c:6c:fc:dc:0c:23:ba:91:a5:55:86:1a:56:8a: 91:95:19:25:ee:96:f8:c6:4a:b7:9e:db:dc:1e:3e:80:90:07: 4b:40:f3:be:bb:3a:50:af:e3:f8:05:a9:5b:5a:db:45:dd:e3: d1:e4:6d:34:47:13:9a:c6:c0:95:de:22:b0:8d:fc:1a:52:20: fd:92:77:2a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCDgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUwODIyMjA1NTA4WhcNMjUwODI5MjA1NTA4WjAYMRYwFAYD VQQDEw02OGE4ZDkyYy05Mjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuyu1JP+Ga1/LE3Zpe77HaaWBh2LZJTNRh/W5fbt9G7mT3AUtUAQQmM6dFdQh NPEJzuXlyfvm3hyIO9UfuqARDTl4BU7uoCN+/cX2PLYbYt+GiYI2b67vEmq51Ekp P25Z3plmASo0K1S9swn/QCnxW7tLpfjWeSEsjD09e5z592Sgad0PJBO1PiPhukAy JshGq1CNyxG4gZpoHzhRgFmmgmR/1CgPXtWIapbq2yjDveO9Ufe3XeFgOx97hXoe E51VgS2CZZUCpcU8+eF8DeaOTlERD//8sxZb9pCrdz8gn7ebdfhRPcV5CJ29KA4j roskZnH72vbF8jHELGzLIjARywIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNnJMFx+ WWFxfebPhUvknGKK8b6RMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhCp2YeGjWAN2xzA7Z/afVjfGPlpQGBA77xh2vPehOOPPikX34tOP4 5GxSGFl7eQiy6ry6ZgAAbQQpretA7Pokep+RoDHkD91BtxJEQ0RJKh39gT6fKR1b K+D12qdUsnKSN/tPCLmCa6Fb/LKscG7MoRbiSoaFxZRmA1cMKa1If5YeqiDIF6NN IqPXC0ia3CoPG6NNRTyOxI/SFEipnE34BuUQvVWrdb6VHY2HPiBVFl5iX6V+1yKP PGz83AwjupGlVYYaVoqRlRkl7pb4xkq3ntvcHj6AkAdLQPO+uzpQr+P4BalbWttF 3ePR5G00RxOaxsCV3iKwjfwaUiD9kncq -----END CERTIFICATE-----Generated at Sat Aug 23 17:09:10 2025 by rpki-client