$ rpki-client -vvf rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft File: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft (raw, json) Hash identifier: Cdv3hj/iGt3LaPZzJNVZFPZhaI82C/qIQIhRxJitY38= Subject key identifier: 2F:CF:63:FE:C5:41:BD:24:D9:F1:27:F2:BA:FA:12:B4:37:A8:1C:05 Authority key identifier: EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 Certificate issuer: /CN=A918BFA2/serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Certificate serial: 34AF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft Manifest number: 34AF Signing time: Fri 22 Aug 2025 14:51:08 +0000 Manifest this update: Fri 22 Aug 2025 14:51:07 +0000 Manifest next update: Fri 29 Aug 2025 14:51:07 +0000 Files and hashes: 1: 6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl (hash: o5G7QjyKxHla4WtFVbVGBUB+PIDvlnTj72ckNKTXF2U=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13487 (0x34af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918BFA2, serialNumber=EB04A5EAAAD51D5BF2B3ED7E675FD4D4A6B64059 Validity Not Before: Aug 22 14:51:07 2025 GMT Not After : Aug 29 14:51:07 2025 GMT Subject: CN=68a883dc-c09f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f8:39:7d:75:b8:7c:ba:45:9c:5b:34:57:87: 4d:63:97:38:64:b9:53:11:c0:90:f3:31:90:09:2e: 6a:cd:bd:67:e2:f7:59:28:ba:ec:22:57:24:89:f6: e9:a9:39:c5:34:32:e3:b7:f6:99:5b:e3:f9:db:7b: 69:07:76:04:f4:e3:d9:13:16:24:b2:85:d9:d7:41: 81:a4:8c:c7:18:b8:48:dd:96:0f:72:c8:8e:d8:25: e2:49:39:fc:eb:9b:db:c0:86:36:08:33:fe:91:38: 63:5b:18:53:7f:cc:2b:51:45:bc:05:aa:e3:3b:b4: 77:05:47:52:fa:af:0a:68:9b:29:d7:c9:f9:f5:21: 90:1f:1c:88:2e:7d:ce:44:f8:5a:ed:cb:fd:1a:eb: 15:ce:37:7c:1f:7c:f4:a3:2d:c5:89:e6:9f:88:46: 15:53:e2:d1:16:59:03:90:80:c9:b8:30:07:94:06: c6:9b:1b:2c:f4:bc:09:40:5c:6b:22:3f:b1:f1:8a: 5d:02:3b:f4:22:05:b1:79:b6:83:e6:d2:0f:4a:03: 69:20:52:0b:ae:15:ac:d0:86:e7:9e:14:b0:0e:3d: 62:ca:a3:d0:9b:5c:ae:06:ab:2b:b0:4e:e1:ed:a6: 10:3b:43:53:42:5d:f7:32:9b:dc:b7:65:5b:b5:59: 52:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CF:63:FE:C5:41:BD:24:D9:F1:27:F2:BA:FA:12:B4:37:A8:1C:05 X509v3 Authority Key Identifier: keyid:EB:04:A5:EA:AA:D5:1D:5B:F2:B3:ED:7E:67:5F:D4:D4:A6:B6:40:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918BFA2/137678201D9611E2B3FB577E08B02CD2/6wSl6qrVHVvys-1-Z1_U1Ka2QFk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9c:94:b7:ef:9c:c1:72:fe:c6:d5:39:43:38:c1:2d:67:a7:ca: c8:d9:4e:e2:c3:b2:ce:28:c8:35:50:a9:36:b4:98:a2:ef:ee: d2:55:11:95:34:65:6e:5c:c6:fb:a4:fa:31:0f:5d:1d:40:07: 37:a3:76:ac:14:36:8f:76:7a:65:27:96:e9:24:12:9f:08:f1: b0:8a:65:47:54:06:6d:30:90:c6:54:46:17:9a:7c:0d:62:30: da:99:20:74:70:dc:06:c8:bf:f0:26:99:48:01:18:88:14:8f: 7c:68:50:8e:7c:40:16:df:8c:d7:42:01:0b:5a:d8:05:a0:eb: 8b:d5:5e:02:fb:9b:7d:76:c2:a4:c9:32:2e:5f:dc:42:a8:ef: ae:23:80:01:8a:ce:4f:bb:bb:d9:8e:4f:fa:0d:49:b1:8c:1a: 74:af:7b:56:2d:10:a5:fd:2d:f9:0f:91:19:8b:cf:44:61:ac: d1:b5:ef:1d:dd:5d:6a:53:d9:25:f1:e6:35:a3:31:e5:92:96: d5:33:92:0d:3a:2c:51:d4:07:44:04:69:0f:cb:d3:9d:60:87: d7:ae:3a:09:09:b3:32:8c:16:71:13:9a:c2:8d:1c:75:a2:cd: 9b:54:7c:81:3f:3c:73:68:06:c0:aa:66:31:af:cf:85:27:7b: 92:a2:2f:0e -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNK8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEJGQTIxMTAvBgNVBAUTKEVCMDRBNUVBQUFENTFENUJGMkIzRUQ3RTY3NUZENEQ0 QTZCNjQwNTkwHhcNMjUwODIyMTQ1MTA3WhcNMjUwODI5MTQ1MTA3WjAYMRYwFAYD VQQDEw02OGE4ODNkYy1jMDlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz/g5fXW4fLpFnFs0V4dNY5c4ZLlTEcCQ8zGQCS5qzb1n4vdZKLrsIlckifbp qTnFNDLjt/aZW+P523tpB3YE9OPZExYksoXZ10GBpIzHGLhI3ZYPcsiO2CXiSTn8 65vbwIY2CDP+kThjWxhTf8wrUUW8BarjO7R3BUdS+q8KaJsp18n59SGQHxyILn3O RPha7cv9GusVzjd8H3z0oy3FieafiEYVU+LRFlkDkIDJuDAHlAbGmxss9LwJQFxr Ij+x8YpdAjv0IgWxebaD5tIPSgNpIFILrhWs0IbnnhSwDj1iyqPQm1yuBqsrsE7h 7aYQO0NTQl33Mpvct2VbtVlSUQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFC/PY/7F Qb0k2fEn8rr6ErQ3qBwFMB8GA1UdIwQYMBaAFOsEpeqq1R1b8rPtfmdf1NSmtkBZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QkZBMi8xMzc2NzgyMDFE OTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhWdnlzLTEtWjFfVTFLYTJR RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ3U2w2cXJWSFZ2eXMtMS1aMV9VMUthMlFGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QkZBMi8xMzc2NzgyMDFEOTYxMUUyQjNGQjU3N0UwOEIwMkNEMi82d1NsNnFyVkhW dnlzLTEtWjFfVTFLYTJRRmsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCclLfvnMFy/sbVOUM4wS1np8rI2U7iw7LOKMg1UKk2tJii7+7SVRGV NGVuXMb7pPoxD10dQAc3o3asFDaPdnplJ5bpJBKfCPGwimVHVAZtMJDGVEYXmnwN YjDamSB0cNwGyL/wJplIARiIFI98aFCOfEAW34zXQgELWtgFoOuL1V4C+5t9dsKk yTIuX9xCqO+uI4ABis5Pu7vZjk/6DUmxjBp0r3tWLRCl/S35D5EZi89EYazRte8d 3V1qU9kl8eY1ozHlkpbVM5INOixR1AdEBGkPy9OdYIfXrjoJCbMyjBZxE5rCjRx1 os2bVHyBPzxzaAbAqmYxr8+FJ3uSoi8O -----END CERTIFICATE-----Generated at Sun Aug 24 06:35:02 2025 by rpki-client