$ rpki-client -vvf rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft File: B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft (raw, json) Hash identifier: 63yQu8TclS6xClhQOIIC+KOeBc8LWqRc4KAo3Rl2Abo= Subject key identifier: D6:8A:5B:F9:28:28:CA:68:AB:85:30:B8:6E:F7:1E:F8:B4:48:12:16 Authority key identifier: 07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE Certificate issuer: /CN=A918B443/serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Certificate serial: 04E7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft Manifest number: 04CA Signing time: Sat 23 Aug 2025 00:09:22 +0000 Manifest this update: Sat 23 Aug 2025 00:09:22 +0000 Manifest next update: Sat 30 Aug 2025 00:09:22 +0000 Files and hashes: 1: B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl (hash: qp3Y6upsKRk3nUcpNmrbpflNuQaYL44vJorKccubkxw=) 2: 6F155A6E144F11EE86CD7A23C4F9AE02.roa (hash: aI/sq9frDUa4oxfrwH2vEYRuVBCHaeAM/ywxuno+wUs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 00:09:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1255 (0x4e7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918B443, serialNumber=07AA73A7ED67411891BD8F727261951C41C716DE Validity Not Before: Aug 23 00:09:22 2025 GMT Not After : Aug 30 00:09:22 2025 GMT Subject: CN=68a906b2-1059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0a:6f:12:e2:c2:f8:17:af:05:fa:81:74:b8: ce:fa:4e:63:67:55:f5:fc:e8:51:f7:72:48:75:0b: 62:57:71:a7:e8:09:21:28:65:70:a0:c8:f9:a3:a2: 6c:71:d9:07:5c:48:55:3a:26:a1:da:12:a4:98:35: ad:78:d9:6c:48:5a:bf:75:4c:a4:2f:79:c9:52:8f: 13:d8:7e:31:49:f4:8b:79:0b:f8:e4:ed:6a:a1:8d: 89:f0:81:dc:e1:95:91:86:88:13:d4:b2:d4:11:e2: 7a:3f:01:c2:92:72:40:4c:3e:77:84:57:75:34:f7: 30:6e:25:40:ed:da:d8:ee:94:09:0b:95:35:ce:f6: 7f:91:85:b1:ff:60:c3:73:ad:71:84:38:86:cc:89: e8:53:d6:4e:c7:d5:cf:e0:9e:d5:4b:33:cb:16:1c: ae:51:5f:c3:53:fb:c7:b1:44:3a:da:98:55:98:64: c1:d5:3f:4c:af:97:9e:31:26:b2:9d:da:13:42:11: a7:7e:86:c5:da:b9:1a:63:fb:7c:98:5b:50:5e:60: df:86:a4:0e:5f:f9:9f:e1:99:69:2d:1b:6e:1e:2a: 67:f1:50:0e:70:71:d1:5e:ec:cc:af:ff:c7:c1:71: 05:d4:24:d4:c0:22:2a:c4:d1:11:c3:1f:f4:f9:ec: 7f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:8A:5B:F9:28:28:CA:68:AB:85:30:B8:6E:F7:1E:F8:B4:48:12:16 X509v3 Authority Key Identifier: keyid:07:AA:73:A7:ED:67:41:18:91:BD:8F:72:72:61:95:1C:41:C7:16:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6pzp-1nQRiRvY9ycmGVHEHHFt4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B443/92426F86420A11EC94C4F15AC4F9AE02/B6pzp-1nQRiRvY9ycmGVHEHHFt4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9e:bb:c3:9c:ca:f6:4c:6e:61:99:4f:c4:12:aa:a8:67:6f:c5: 25:c5:8d:23:91:01:63:22:51:c3:ef:c2:01:e0:35:35:58:38: 4d:77:f2:9a:b7:b6:53:6f:86:5f:14:07:38:22:65:c7:7d:2e: 6e:61:c6:59:12:f5:aa:3b:13:bc:7a:32:ae:75:e0:db:9c:76: a9:2e:c6:9e:f7:30:71:3d:28:23:49:8a:4e:c4:75:e5:2b:d4: c1:57:72:39:62:fd:ce:b6:13:1e:13:86:ab:63:61:c2:1a:43: bc:88:4e:b2:09:0f:3a:30:81:2d:ba:17:6e:e6:f7:21:e6:cd: 97:cd:8f:a7:bb:90:18:e5:e7:47:0e:e1:4b:be:90:7a:2c:48: ee:15:d8:76:65:d2:9f:94:8e:65:d0:12:16:e1:77:20:7a:1a: de:b5:97:d4:8f:a2:c9:df:d7:01:f9:4f:ed:ea:96:0d:b8:8e: ff:81:e1:12:69:e8:16:fb:b0:1d:bd:bf:0b:31:1e:a4:82:f1: 33:65:02:93:b1:4d:51:a8:f7:93:87:c9:d5:1f:94:c7:6d:02: a7:13:fa:97:34:4d:64:64:9f:3c:6a:ed:2d:8b:b8:66:f8:c2: 0e:d3:67:7e:22:1a:89:9e:70:b9:fb:d3:75:a5:b5:0d:3e:bd: 0d:ba:c9:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEI0NDMxMTAvBgNVBAUTKDA3QUE3M0E3RUQ2NzQxMTg5MUJEOEY3MjcyNjE5NTFD NDFDNzE2REUwHhcNMjUwODIzMDAwOTIyWhcNMjUwODMwMDAwOTIyWjAYMRYwFAYD VQQDEw02OGE5MDZiMi0xMDU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArwpvEuLC+BevBfqBdLjO+k5jZ1X1/OhR93JIdQtiV3Gn6AkhKGVwoMj5o6Js cdkHXEhVOiah2hKkmDWteNlsSFq/dUykL3nJUo8T2H4xSfSLeQv45O1qoY2J8IHc 4ZWRhogT1LLUEeJ6PwHCknJATD53hFd1NPcwbiVA7drY7pQJC5U1zvZ/kYWx/2DD c61xhDiGzInoU9ZOx9XP4J7VSzPLFhyuUV/DU/vHsUQ62phVmGTB1T9Mr5eeMSay ndoTQhGnfobF2rkaY/t8mFtQXmDfhqQOX/mf4ZlpLRtuHipn8VAOcHHRXuzMr//H wXEF1CTUwCIqxNERwx/0+ex/DQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNaKW/ko KMpoq4UwuG73Hvi0SBIWMB8GA1UdIwQYMBaAFAeqc6ftZ0EYkb2PcnJhlRxBxxbe MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QjQ0My85MjQyNkY4NjQy MEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFSaVJ2WTl5Y21HVkhFSEhG dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2cHpwLTFuUVJpUnZZOXljbUdWSEVISEZ0NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QjQ0My85MjQyNkY4NjQyMEExMUVDOTRDNEYxNUFDNEY5QUUwMi9CNnB6cC0xblFS aVJ2WTl5Y21HVkhFSEhGdDQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCeu8OcyvZMbmGZT8QSqqhnb8UlxY0jkQFjIlHD78IB4DU1WDhNd/Ka t7ZTb4ZfFAc4ImXHfS5uYcZZEvWqOxO8ejKudeDbnHapLsae9zBxPSgjSYpOxHXl K9TBV3I5Yv3OthMeE4arY2HCGkO8iE6yCQ86MIEtuhdu5vch5s2XzY+nu5AY5edH DuFLvpB6LEjuFdh2ZdKflI5l0BIW4XcgehretZfUj6LJ39cB+U/t6pYNuI7/geES aegW+7Advb8LMR6kgvEzZQKTsU1RqPeTh8nVH5THbQKnE/qXNE1kZJ88au0ti7hm +MIO02d+IhqJnnC5+9N1pbUNPr0NuslE -----END CERTIFICATE-----Generated at Sat Aug 23 21:33:23 2025 by rpki-client