$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: R4/pxS027Qa6xa4SxVICgylglIuNrfYyKBVw8PXs7oA= Subject key identifier: 47:AA:31:C7:CE:04:F2:9B:79:35:DA:F6:54:95:52:78:E1:2A:51:16 Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 34D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 34C3 Signing time: Fri 22 Aug 2025 14:38:48 +0000 Manifest this update: Fri 22 Aug 2025 14:38:47 +0000 Manifest next update: Fri 29 Aug 2025 14:38:47 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: R/UzdQeBBh/E9bBA7oUkf2HTplHnQJ2MZi3Uhs789N8=) 2: A2A2D1B6573411F09F6B9016C4F9AE02.roa (hash: e1fS+JUr5OLbZbCvOqxxDH4+vhnq0CCS/TLIlGYLHhA=) 3: 6F58AA34687C11F08C69EA64C4F9AE02.roa (hash: lvbDAxOQ41m3fnpVcOJWBX3CzhcnEIm/Ym/qa3pTN/Q=) 4: 036356DC573611F08FD0E718C4F9AE02.roa (hash: Syo3LqLjCagDfFO18+x8c9EzZx70h+uIwWgtm0Ij480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13523 (0x34d3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: Aug 22 14:38:47 2025 GMT Not After : Aug 29 14:38:47 2025 GMT Subject: CN=68a880f8-13f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:fe:83:6d:47:d8:f8:35:92:a2:ad:8d:4a:35: 3d:f9:fc:b8:90:77:0a:5f:ba:dd:1b:3e:aa:41:79: f9:3e:3e:61:dc:b0:e9:58:4e:2e:30:a0:db:1a:9e: 4c:c9:c4:d7:c8:84:86:8d:b3:6f:98:e2:b0:57:81: 10:aa:08:cd:0c:50:30:6b:85:47:1b:dd:28:1c:d2: f3:91:21:32:f1:c0:23:a6:22:f8:02:b4:06:fb:c3: 9f:d5:3f:27:87:86:0e:f9:d9:bb:fd:8c:36:1c:b2: 01:07:d8:fd:2a:ea:44:08:98:16:68:e4:e3:e3:32: 5f:d9:ab:e7:7b:1e:62:00:b4:3d:f1:17:7a:5c:38: 0b:8b:87:00:50:18:12:fb:0f:3d:b4:e5:fe:7a:6e: 7f:d6:0f:e2:19:a6:d9:9d:8e:a1:2a:de:57:ae:a5: 13:27:51:42:21:e6:10:72:49:64:22:10:a0:b9:8e: be:29:0d:6e:e7:47:3c:22:fa:0d:01:8c:dc:31:8a: 89:04:ba:79:2c:46:ce:e7:82:bf:90:b7:82:98:81: 40:3f:b5:6e:59:b6:5c:92:68:f2:46:a3:d2:8e:aa: 0f:f4:42:f1:de:d7:ea:bd:2b:cd:42:4d:9a:db:c4: 48:2a:86:c2:da:b1:3f:5c:e5:d7:c4:30:12:9e:54: dc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:AA:31:C7:CE:04:F2:9B:79:35:DA:F6:54:95:52:78:E1:2A:51:16 X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:02:7a:ab:f8:fe:08:fb:01:3f:29:61:49:cb:2b:b2:8f:97: 75:c6:3c:f7:4a:99:91:7f:b0:a0:e3:52:23:d7:8a:84:81:3d: 78:f7:31:a3:77:7b:c5:13:21:22:ba:50:95:a5:42:a8:3e:8c: e3:63:b3:54:86:a5:46:b5:0b:5f:b9:e0:d8:46:f2:89:a6:6e: a8:bb:f5:a0:57:f7:99:22:74:d0:1d:fc:89:f6:3a:a6:c6:be: 03:76:ea:be:97:e6:4c:c4:07:3e:9e:71:93:d8:09:da:7a:0c: 2b:14:56:8c:e8:c9:2e:fc:c0:0f:20:79:86:0e:9e:2d:c5:bb: bc:91:99:9b:bd:96:21:06:9e:d1:7f:cc:da:12:b9:6a:8d:7a: da:73:15:7c:15:93:8f:3f:e7:d2:78:e3:8e:a5:3b:30:b2:01: 5d:39:bf:ce:56:e7:1d:8c:c1:89:d1:98:9b:1d:93:eb:44:50: 45:43:58:6d:bf:be:55:d1:7d:41:31:cf:7f:07:30:f0:25:cb: 6a:96:62:9f:fc:f8:93:14:3c:6d:ff:a7:18:42:48:e8:ea:82: 36:ee:06:93:01:6a:76:a8:00:be:0f:47:40:ae:70:4c:c6:a5: bf:6f:cb:a8:99:44:20:44:f2:7f:63:ba:10:91:4e:ab:f0:65: 73:6b:f6:00 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwODIyMTQzODQ3WhcNMjUwODI5MTQzODQ3WjAYMRYwFAYD VQQDEw02OGE4ODBmOC0xM2YwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmP6DbUfY+DWSoq2NSjU9+fy4kHcKX7rdGz6qQXn5Pj5h3LDpWE4uMKDbGp5M ycTXyISGjbNvmOKwV4EQqgjNDFAwa4VHG90oHNLzkSEy8cAjpiL4ArQG+8Of1T8n h4YO+dm7/Yw2HLIBB9j9KupECJgWaOTj4zJf2avnex5iALQ98Rd6XDgLi4cAUBgS +w89tOX+em5/1g/iGabZnY6hKt5XrqUTJ1FCIeYQcklkIhCguY6+KQ1u50c8IvoN AYzcMYqJBLp5LEbO54K/kLeCmIFAP7VuWbZckmjyRqPSjqoP9ELx3tfqvSvNQk2a 28RIKobC2rE/XOXXxDASnlTcTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEeqMcfO BPKbeTXa9lSVUnjhKlEWMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA0Anqr+P4I+wE/KWFJyyuyj5d1xjz3SpmRf7Cg41Ij14qEgT149zGj d3vFEyEiulCVpUKoPozjY7NUhqVGtQtfueDYRvKJpm6ou/WgV/eZInTQHfyJ9jqm xr4Dduq+l+ZMxAc+nnGT2AnaegwrFFaM6Mku/MAPIHmGDp4txbu8kZmbvZYhBp7R f8zaErlqjXracxV8FZOPP+fSeOOOpTswsgFdOb/OVucdjMGJ0ZibHZPrRFBFQ1ht v75V0X1BMc9/BzDwJctqlmKf/PiTFDxt/6cYQkjo6oI27gaTAWp2qAC+D0dArnBM xqW/b8uomUQgRPJ/Y7oQkU6r8GVza/YA -----END CERTIFICATE-----Generated at Sun Aug 24 00:07:16 2025 by rpki-client