$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: D2TSar9w6W74RQ2SGBM6EiZ62tS1KR+4BVrG1pNLG/I= Subject key identifier: 4A:A1:7C:B9:E6:94:C8:2C:1C:7E:AC:20:EE:C2:46:D3:EA:54:0E:0F Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C66 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C48 Signing time: Fri 22 Aug 2025 18:46:16 +0000 Manifest this update: Fri 22 Aug 2025 18:46:15 +0000 Manifest next update: Fri 29 Aug 2025 18:46:15 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: mk4CogHor1Cg8f439bQN8aaBnNVSjLyl9nkmwbbjcdI=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 18:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3174 (0xc66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Aug 22 18:46:15 2025 GMT Not After : Aug 29 18:46:15 2025 GMT Subject: CN=68a8baf7-5d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:58:ef:43:3f:e0:43:2d:59:81:c9:a8:25: f7:ef:2a:44:44:6d:0b:22:35:95:93:d8:e3:cf:78: 45:05:22:5f:37:d4:67:6c:3e:a5:24:d0:9b:10:a3: f3:f0:4e:76:48:dd:91:8c:df:f9:69:06:22:f3:7e: ec:9f:6b:b4:9d:a1:83:8b:0c:88:cb:44:75:64:d4: 22:d7:e6:0e:fa:39:cd:e9:4e:d6:54:51:86:0c:25: a2:b9:2b:3a:2e:27:5b:0c:f4:e3:0a:30:c4:10:a3: 91:a9:5d:a1:b2:c8:5f:55:bc:bb:d7:8e:e9:95:45: e3:b8:2b:95:de:01:5b:3f:be:32:60:4a:f1:c1:b9: 1e:1c:e8:5f:af:6e:30:6e:30:b4:bc:2e:14:d5:3b: e5:d4:a9:cd:be:14:58:e2:ae:9e:87:2c:e4:97:91: e5:86:96:57:9a:c1:36:15:3a:2d:b6:ca:f4:ef:e5: df:7e:c0:fc:cd:55:66:e6:81:e6:13:01:4d:31:e8: 6a:fa:0d:43:7a:d3:6e:5c:51:d9:1d:88:b6:26:6f: 2b:a9:aa:b6:d4:8d:26:72:63:d4:52:b4:37:58:a3: ac:f1:8d:5b:80:6c:90:19:e7:56:b7:dd:eb:55:28: b8:0d:e5:04:d9:fb:ee:4f:4d:7a:8a:30:a1:d8:f6: 4a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A1:7C:B9:E6:94:C8:2C:1C:7E:AC:20:EE:C2:46:D3:EA:54:0E:0F X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption bb:fd:c2:1c:e9:ff:6d:64:45:9c:a3:2c:41:00:26:f1:54:4b: ed:12:d1:fe:4c:3c:99:14:a7:9a:43:ca:31:83:d7:81:01:fd: 94:c5:79:f0:0b:26:1c:04:78:45:5e:eb:a2:62:6b:be:b0:b8: 85:bf:b5:da:ec:dc:ee:49:97:97:eb:8e:36:dc:11:c9:c8:a3: 2b:2a:88:fc:26:94:9e:71:1e:aa:b9:fa:93:4d:e3:ca:8e:cc: f8:7e:7b:2e:2d:25:6c:39:f2:bb:0f:58:40:23:a6:0f:01:dd: 83:76:a2:35:31:eb:7f:70:39:4b:4e:45:ba:64:13:a2:9f:2e: 3b:e7:e0:42:e2:44:ed:71:29:ce:d2:42:e7:62:a6:61:a7:f9: 1a:1c:e5:ca:5d:46:91:b5:2f:24:81:4b:1a:2a:42:b2:79:ba: 9b:cf:bb:f7:25:4d:a4:c9:68:1a:bc:3c:bf:df:79:e8:1b:f1: 66:4c:1b:df:35:d6:e8:fb:1e:1d:b5:6f:ed:09:e6:f7:4c:4f: f0:2d:cd:b3:94:23:2d:23:eb:a9:a2:91:91:81:80:c7:a4:14: ae:77:f5:86:14:ab:b6:da:53:f4:9b:8c:38:f8:8f:78:3f:54: e2:7c:3e:f5:b5:3a:d9:c0:19:36:15:93:6d:5a:cd:29:84:32: fd:ec:c6:f3 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDGYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwODIyMTg0NjE1WhcNMjUwODI5MTg0NjE1WjAYMRYwFAYD VQQDEw02OGE4YmFmNy01ZDg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqKBY70M/4EMtWYHJqCX37ypERG0LIjWVk9jjz3hFBSJfN9RnbD6lJNCbEKPz 8E52SN2RjN/5aQYi837sn2u0naGDiwyIy0R1ZNQi1+YO+jnN6U7WVFGGDCWiuSs6 LidbDPTjCjDEEKORqV2hsshfVby7147plUXjuCuV3gFbP74yYErxwbkeHOhfr24w bjC0vC4U1Tvl1KnNvhRY4q6ehyzkl5HlhpZXmsE2FTottsr07+XffsD8zVVm5oHm EwFNMehq+g1DetNuXFHZHYi2Jm8rqaq21I0mcmPUUrQ3WKOs8Y1bgGyQGedWt93r VSi4DeUE2fvuT016ijCh2PZKHwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEqhfLnm lMgsHH6sIO7CRtPqVA4PMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC7/cIc6f9tZEWcoyxBACbxVEvtEtH+TDyZFKeaQ8oxg9eBAf2UxXnw CyYcBHhFXuuiYmu+sLiFv7Xa7NzuSZeX64423BHJyKMrKoj8JpSecR6qufqTTePK jsz4fnsuLSVsOfK7D1hAI6YPAd2DdqI1Met/cDlLTkW6ZBOiny475+BC4kTtcSnO 0kLnYqZhp/kaHOXKXUaRtS8kgUsaKkKyebqbz7v3JU2kyWgavDy/33noG/FmTBvf Ndbo+x4dtW/tCeb3TE/wLc2zlCMtI+upopGRgYDHpBSud/WGFKu22lP0m4w4+I94 P1TifD71tTrZwBk2FZNtWs0phDL97Mbz -----END CERTIFICATE-----Generated at Sat Aug 23 16:41:40 2025 by rpki-client