$ rpki-client -vvf rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft File: 6Ihh_0pFOAJnqBtY-pnkia0AG70.mft (raw, json) Hash identifier: 17DZfwZ05aZ/JKsI3wkVF8uJnEYoTXvdy6KHrNoAP5w= Subject key identifier: 6F:7C:2B:E4:8C:1E:78:7A:45:61:5E:5A:8C:E8:07:4E:E6:F7:48:2C Authority key identifier: E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD Certificate issuer: /CN=A918ACB2/serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Certificate serial: 0137 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft Manifest number: 0130 Signing time: Sat 23 Aug 2025 04:46:38 +0000 Manifest this update: Sat 23 Aug 2025 04:46:38 +0000 Manifest next update: Sat 30 Aug 2025 04:46:38 +0000 Files and hashes: 1: 6Ihh_0pFOAJnqBtY-pnkia0AG70.crl (hash: jsxu7E0R/eMkdo8nPS5QTqTmPULXslKsOpjXYXuqh8k=) 2: B66B434EBCE011EE98AEB646C4F9AE02.roa (hash: 4+NB3j+Ku9z9DW7nQRzRq87llzJ2sOudlesGDx2vWI8=) 3: BD1A38D4984B11EFB342C220C4F9AE02.roa (hash: EIknsqOvV+3/e4OowMHbRVdsbkd9a/wu1lD+d08gIWM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 04:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918ACB2, serialNumber=E88861FF4A45380267A81B58FA99E489AD001BBD Validity Not Before: Aug 23 04:46:38 2025 GMT Not After : Aug 30 04:46:38 2025 GMT Subject: CN=68a947ae-6102 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a4:1c:d3:52:18:e8:3f:c4:fe:ed:34:bc:6d: d9:dd:6f:cc:2a:52:55:7a:b0:10:fb:df:32:6b:e3: c5:e4:02:4f:d3:db:f5:25:96:f3:cf:af:9d:69:8e: 1e:11:27:b3:3e:66:69:5f:98:25:0c:36:fc:b0:69: aa:8f:8e:ed:fd:a5:57:6b:22:66:42:ea:c6:23:b1: 18:2e:8d:7f:4d:ef:e9:f0:1d:f8:20:e9:b3:ae:f1: 76:b1:a9:6b:b1:e7:05:ca:31:93:c6:9c:3c:87:cb: d4:5d:28:ab:e8:d3:35:8d:7f:48:db:4f:b3:ba:0c: 39:72:f7:be:4b:30:b5:4a:09:3f:b0:31:d6:74:2f: fc:a8:62:cc:47:bf:5d:be:0b:13:1d:29:db:b0:3d: fc:12:88:5e:f5:e0:30:93:e8:62:f4:a1:f5:ee:a3: 98:ac:8f:2f:ba:69:44:2a:6b:eb:69:f7:4c:41:8a: 4f:3b:89:5b:55:92:9b:ca:7e:92:95:3f:36:3e:ca: 20:6a:f0:83:62:f8:9b:38:11:12:5c:12:85:75:96: 3d:d6:25:81:6c:87:0d:57:aa:8e:3e:32:e3:ee:bf: 9e:48:45:da:9b:ec:66:4e:87:fe:d8:86:c8:36:62: c4:92:9d:57:aa:37:f7:5c:e9:d9:67:d5:91:ac:72: 19:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:7C:2B:E4:8C:1E:78:7A:45:61:5E:5A:8C:E8:07:4E:E6:F7:48:2C X509v3 Authority Key Identifier: keyid:E8:88:61:FF:4A:45:38:02:67:A8:1B:58:FA:99:E4:89:AD:00:1B:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Ihh_0pFOAJnqBtY-pnkia0AG70.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918ACB2/9FE760A6B83C11EE8741902EC4F9AE02/6Ihh_0pFOAJnqBtY-pnkia0AG70.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6d:aa:34:81:28:c7:06:47:be:08:58:c4:75:f0:91:8a:33:05: 3a:31:8f:11:32:cd:83:0e:22:50:95:7d:e5:b9:ea:30:11:db: 8a:94:c1:ff:ff:79:12:90:7e:97:9c:a9:3f:77:8c:76:1b:b8: f9:80:85:33:cb:0c:24:c3:b9:ed:5a:27:07:11:b5:31:d6:34: 22:6f:a6:7f:be:e4:52:1b:aa:de:71:e0:9e:15:3d:4c:be:40: 8a:58:a1:99:54:2e:f4:5f:02:b3:76:ee:e1:9b:98:32:a3:c9: 3a:b6:dd:9c:ef:ff:23:fd:f7:57:e3:d5:4a:aa:bc:8f:c9:d5: 4b:4f:89:53:0c:f8:43:40:8a:0f:29:ff:88:2e:27:02:f8:72: 86:86:43:54:96:85:1a:85:4a:72:de:1a:98:9d:c6:9e:a2:64: 5a:8f:34:f7:f8:0a:08:18:57:99:09:55:27:77:6a:0d:52:2e: d4:a8:8a:8c:27:bc:75:5d:bb:33:b7:3c:97:c2:7f:40:33:0e: a6:6c:c6:b4:0a:5a:13:47:c0:e0:ae:43:3d:bd:57:08:d0:0f: 29:c7:af:96:7a:af:66:0d:a1:48:4c:13:d9:8d:ad:fe:ed:12: b0:77:d3:55:ed:b2:1d:1d:ab:8a:5d:19:d0:e8:1f:f5:ff:53: 22:6b:2e:1b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEFDQjIxMTAvBgNVBAUTKEU4ODg2MUZGNEE0NTM4MDI2N0E4MUI1OEZBOTlFNDg5 QUQwMDFCQkQwHhcNMjUwODIzMDQ0NjM4WhcNMjUwODMwMDQ0NjM4WjAYMRYwFAYD VQQDEw02OGE5NDdhZS02MTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6KQc01IY6D/E/u00vG3Z3W/MKlJVerAQ+98ya+PF5AJP09v1JZbzz6+daY4e ESezPmZpX5glDDb8sGmqj47t/aVXayJmQurGI7EYLo1/Te/p8B34IOmzrvF2salr secFyjGTxpw8h8vUXSir6NM1jX9I20+zugw5cve+SzC1Sgk/sDHWdC/8qGLMR79d vgsTHSnbsD38Eohe9eAwk+hi9KH17qOYrI8vumlEKmvrafdMQYpPO4lbVZKbyn6S lT82PsogavCDYvibOBESXBKFdZY91iWBbIcNV6qOPjLj7r+eSEXam+xmTof+2IbI NmLEkp1Xqjf3XOnZZ9WRrHIZTQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG98K+SM Hnh6RWFeWozoB07m90gsMB8GA1UdIwQYMBaAFOiIYf9KRTgCZ6gbWPqZ5ImtABu9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUNCMi85RkU3NjBBNkI4 M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9BSm5xQnRZLXBua2lhMEFH NzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZJaGhfMHBGT0FKbnFCdFktcG5raWEwQUc3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QUNCMi85RkU3NjBBNkI4M0MxMUVFODc0MTkwMkVDNEY5QUUwMi82SWhoXzBwRk9B Sm5xQnRZLXBua2lhMEFHNzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBtqjSBKMcGR74IWMR18JGKMwU6MY8RMs2DDiJQlX3lueowEduKlMH/ /3kSkH6XnKk/d4x2G7j5gIUzywwkw7ntWicHEbUx1jQib6Z/vuRSG6receCeFT1M vkCKWKGZVC70XwKzdu7hm5gyo8k6tt2c7/8j/fdX49VKqryPydVLT4lTDPhDQIoP Kf+ILicC+HKGhkNUloUahUpy3hqYncaeomRajzT3+AoIGFeZCVUnd2oNUi7UqIqM J7x1XbsztzyXwn9AMw6mbMa0CloTR8DgrkM9vVcI0A8px6+Weq9mDaFITBPZja3+ 7RKwd9NV7bIdHauKXRnQ6B/1/1Miay4b -----END CERTIFICATE-----Generated at Sat Aug 23 20:34:23 2025 by rpki-client