$ rpki-client -vvf rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft File: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft (raw, json) Hash identifier: 77pxb3j9uhm67YQK9j/O3EHunLplPXvv1MB9UAcJAtU= Subject key identifier: 4A:23:19:A6:5A:E6:B4:99:EC:74:B4:5C:72:F8:BA:A3:FA:66:4D:7E Authority key identifier: E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 Certificate issuer: /CN=A917CBD7/serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Certificate serial: 0AB7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft Manifest number: 0A98 Signing time: Fri 22 Aug 2025 19:42:52 +0000 Manifest this update: Fri 22 Aug 2025 19:42:51 +0000 Manifest next update: Fri 29 Aug 2025 19:42:51 +0000 Files and hashes: 1: 6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl (hash: jb2ZPqiZMxq4d42E7qj2pCe/tlWyI5PZRn8zz355/oM=) 2: BE633CD283A611EE804BB319C4F9AE02.roa (hash: NPIjvL++urku6C6DzlbI7Tjblbx8i4fhbfChdZsNErw=) 3: ACFA076483A611EE9C62DE0CC4F9AE02.roa (hash: ynLMF5PjpFkvP/pk/9zlgeaTF7AgzyDNzOj/EUi7rZI=) 4: 8AD0E57C8FE311EB89767C78C4F9AE02.roa (hash: iGUFOWK6oRwPeEo+C87zciurGuoBwNOi2mVgrnihqBQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2743 (0xab7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917CBD7, serialNumber=E9923BAC0F5C58CABEB93286CA20266F1F6EFB14 Validity Not Before: Aug 22 19:42:51 2025 GMT Not After : Aug 29 19:42:51 2025 GMT Subject: CN=68a8c83b-007a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:67:6a:07:e0:de:c3:74:20:71:22:c1:5d: 55:cd:35:cd:a8:35:6c:99:33:69:43:c0:b7:c3:02: 1e:79:3c:4c:21:1e:12:52:a5:d7:b3:fa:7f:16:88: a1:e7:e8:6e:0b:28:f2:07:8f:70:b5:f6:72:7d:dd: 88:6f:a0:1f:88:d0:7a:00:7a:e9:dd:fe:7a:59:96: cc:e3:b9:87:31:8d:82:80:d0:18:c0:d6:89:a1:69: 4a:f2:18:f3:01:0f:12:be:28:83:e4:26:2d:d9:e9: e5:55:44:95:02:32:a1:c7:01:00:72:71:c0:67:34: a0:e9:6a:0e:c7:61:ae:85:67:3b:d4:63:4d:be:95: b6:ec:02:72:8d:9b:a9:56:39:c5:c3:6d:6b:1b:27: 6e:56:ad:12:49:ae:a9:c2:34:63:5a:82:8d:5e:6b: 0b:40:ad:70:33:0f:1f:24:2d:a4:56:de:0e:12:0a: 7f:c7:3d:36:fe:2c:dd:26:7b:a0:fb:fe:91:e2:eb: 8c:7c:a3:06:47:da:ff:d6:2a:7a:12:c2:af:cb:be: 75:f8:c9:8d:08:db:97:ce:3b:2c:9f:a0:b0:55:dd: de:5d:ae:10:e8:87:d1:4e:08:2d:d6:77:20:0f:df: 00:83:7f:fe:d1:ee:c8:d1:e1:e0:90:75:d2:68:b0: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:23:19:A6:5A:E6:B4:99:EC:74:B4:5C:72:F8:BA:A3:FA:66:4D:7E X509v3 Authority Key Identifier: keyid:E9:92:3B:AC:0F:5C:58:CA:BE:B9:32:86:CA:20:26:6F:1F:6E:FB:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917CBD7/1923BF68642811EAA7041D48C4F9AE02/6ZI7rA9cWMq-uTKGyiAmbx9u-xQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 26:72:14:fc:f8:49:91:2b:33:25:6c:11:c7:ce:98:d2:e6:12: 6e:9b:2f:6d:bf:fc:37:1d:b6:68:a7:2c:b8:2b:f2:57:4e:36: 07:e9:d2:d5:08:3b:ea:e4:9d:6f:4a:9c:a4:a6:8f:9d:d6:8c: 80:79:5d:1c:ce:55:05:f3:4f:25:3a:68:a0:75:7b:3e:52:49: 82:a7:e3:bf:8a:0f:6a:9e:40:cd:86:36:0b:24:11:71:cd:22: 03:b3:8a:bf:92:b1:c0:21:cd:35:65:7d:cc:b4:00:de:48:ae: 8c:ac:d2:0c:9e:52:79:62:c1:ea:c5:b7:1f:85:58:cf:db:a8: ae:16:1f:fc:07:c3:14:1a:95:65:7d:52:6f:c1:05:65:a3:03: 2c:1e:f0:f2:e4:5d:35:13:35:fd:b5:1a:46:6e:5b:f4:96:88: 2d:4b:de:15:41:5f:0a:96:d1:0c:61:df:46:78:33:47:51:fc: 79:a6:e7:31:ce:cd:53:16:2f:d9:77:fa:3c:2b:3a:59:73:72: 7e:e3:92:3f:49:c6:de:bb:6c:64:e8:5a:0d:8e:c4:54:3c:0b: 89:a6:a7:8d:ca:e3:1b:0e:30:cf:7b:35:df:31:56:79:1a:03: af:3a:f3:d5:47:0b:f3:1c:ae:ea:1b:c3:80:98:fa:47:be:21: c8:fc:b8:f7 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCrcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0NCRDcxMTAvBgNVBAUTKEU5OTIzQkFDMEY1QzU4Q0FCRUI5MzI4NkNBMjAyNjZG MUY2RUZCMTQwHhcNMjUwODIyMTk0MjUxWhcNMjUwODI5MTk0MjUxWjAYMRYwFAYD VQQDEw02OGE4YzgzYi0wMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqupnagfg3sN0IHEiwV1VzTXNqDVsmTNpQ8C3wwIeeTxMIR4SUqXXs/p/Foih 5+huCyjyB49wtfZyfd2Ib6AfiNB6AHrp3f56WZbM47mHMY2CgNAYwNaJoWlK8hjz AQ8SviiD5CYt2enlVUSVAjKhxwEAcnHAZzSg6WoOx2GuhWc71GNNvpW27AJyjZup VjnFw21rGyduVq0SSa6pwjRjWoKNXmsLQK1wMw8fJC2kVt4OEgp/xz02/izdJnug +/6R4uuMfKMGR9r/1ip6EsKvy751+MmNCNuXzjssn6CwVd3eXa4Q6IfRTggt1ncg D98Ag3/+0e7I0eHgkHXSaLDgTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEojGaZa 5rSZ7HS0XHL4uqP6Zk1+MB8GA1UdIwQYMBaAFOmSO6wPXFjKvrkyhsogJm8fbvsU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3Q0JENy8xOTIzQkY2ODY0 MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dNcS11VEtHeWlBbWJ4OXUt eFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZaSTdyQTljV01xLXVUS0d5aUFtYng5dS14US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 Q0JENy8xOTIzQkY2ODY0MjgxMUVBQTcwNDFENDhDNEY5QUUwMi82Wkk3ckE5Y1dN cS11VEtHeWlBbWJ4OXUteFEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAmchT8+EmRKzMlbBHHzpjS5hJumy9tv/w3HbZopyy4K/JXTjYH6dLV CDvq5J1vSpykpo+d1oyAeV0czlUF808lOmigdXs+UkmCp+O/ig9qnkDNhjYLJBFx zSIDs4q/krHAIc01ZX3MtADeSK6MrNIMnlJ5YsHqxbcfhVjP26iuFh/8B8MUGpVl fVJvwQVlowMsHvDy5F01EzX9tRpGblv0logtS94VQV8KltEMYd9GeDNHUfx5pucx zs1TFi/Zd/o8KzpZc3J+45I/Scbeu2xk6FoNjsRUPAuJpqeNyuMbDjDPezXfMVZ5 GgOvOvPVRwvzHK7qG8OAmPpHviHI/Lj3 -----END CERTIFICATE-----Generated at Sat Aug 23 22:41:24 2025 by rpki-client