$ rpki-client -vvf rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft File: 6FKljehxn4vGvWSUmFS0dEe4nN4.mft (raw, json) Hash identifier: 3BiD4wqh7VEHqoqBdlFo/1/YaB2gwX7QGn5d3temR2U= Subject key identifier: 41:B9:F5:85:3C:92:9A:65:AC:01:98:65:CD:9B:7C:E9:F7:F7:5A:94 Authority key identifier: E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE Certificate issuer: /CN=A918F862/serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Certificate serial: 1161 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft Manifest number: 1154 Signing time: Fri 22 Aug 2025 17:22:34 +0000 Manifest this update: Fri 22 Aug 2025 17:22:34 +0000 Manifest next update: Fri 29 Aug 2025 17:22:34 +0000 Files and hashes: 1: 6FKljehxn4vGvWSUmFS0dEe4nN4.crl (hash: 7koT0+a58WQbXmtNWkz5pYd/WLcumcOyx8jb3BlEYjY=) 2: D1D7F9AE0FF911E9B45E3B10C4F9AE02.roa (hash: 3Wqu6xOv+Yqgn98imVoKo0C/3S3sn8xVZaKt7qUGL5g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 17:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4449 (0x1161) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F862, serialNumber=E852A58DE8719F8BC6BD64949854B47447B89CDE Validity Not Before: Aug 22 17:22:34 2025 GMT Not After : Aug 29 17:22:34 2025 GMT Subject: CN=68a8a75a-f090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bf:ba:e0:0d:1a:cb:37:aa:fb:2e:fc:b0:47: 48:3f:eb:66:e0:41:70:6b:07:e3:be:d4:3e:8a:bb: db:ac:fb:d4:3e:32:69:2f:eb:4c:17:4e:03:27:24: 29:07:cd:e0:85:87:d3:0c:20:52:a5:f6:b1:90:da: ef:3f:99:d5:49:dc:94:31:00:68:db:27:58:22:68: 0e:9a:44:30:60:d2:f4:b8:16:b5:2b:2b:6c:fe:87: 37:b6:6c:78:18:6f:2e:a7:30:ec:fb:0f:aa:b9:32: c9:5a:40:9a:27:2d:9d:1f:5b:74:24:5b:ca:0d:ab: bc:dd:db:0a:99:53:14:f5:c1:2e:95:70:35:ce:d0: 68:29:80:06:12:ed:6d:8c:57:90:2f:3a:e0:29:b8: 87:ef:95:2c:94:66:6c:44:ae:4f:1b:b9:0f:21:04: 54:5d:53:5b:48:6d:29:73:38:c3:5b:1a:45:8d:1e: c0:50:b7:60:2e:61:46:d6:95:f4:e4:7d:d3:71:fc: a5:f4:ab:fb:3f:d0:d5:0f:36:e5:7d:99:ca:af:75: ba:df:86:88:13:a4:6e:ae:f5:d5:5a:6e:90:54:f1: 98:de:cc:42:49:a7:78:3c:81:07:d3:63:c8:61:be: 4f:d2:8d:b4:f9:b8:bf:63:bd:b6:82:66:9b:34:29: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:B9:F5:85:3C:92:9A:65:AC:01:98:65:CD:9B:7C:E9:F7:F7:5A:94 X509v3 Authority Key Identifier: keyid:E8:52:A5:8D:E8:71:9F:8B:C6:BD:64:94:98:54:B4:74:47:B8:9C:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6FKljehxn4vGvWSUmFS0dEe4nN4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F862/1E6F6C120FF911E9A0D92B0FC4F9AE02/6FKljehxn4vGvWSUmFS0dEe4nN4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0b:91:ec:21:5d:f4:06:c2:5b:2d:5e:36:e5:39:51:c5:70:d7: 99:ed:72:05:7d:83:54:c8:84:a1:b5:f6:bf:9b:e2:8d:b5:dd: 9d:f6:b1:60:1e:da:b7:46:cb:97:47:a6:9b:39:fd:1a:e6:5b: 06:ca:1a:7a:57:47:92:59:d3:99:33:97:4d:78:7c:80:2a:b2: fe:84:20:8f:f4:15:3b:df:22:bc:ae:fd:68:5c:80:d9:91:49: c2:99:c9:5e:d7:1d:70:32:cf:80:46:d7:b1:7c:54:b6:cd:43: 4e:c8:41:4f:a1:db:97:55:b2:61:59:78:e9:b4:c1:79:fa:54: 4f:ad:af:0b:1d:2b:05:6f:46:98:fb:a7:97:b5:d3:43:d1:c8: b7:84:71:10:93:14:de:4b:9b:4e:1a:39:b7:9d:be:40:2d:6a: 73:f7:95:b8:42:d9:ae:11:c5:35:7a:b3:85:49:ed:bd:89:a9: 15:64:e1:66:a0:60:60:0b:bb:ac:fc:d8:85:a1:ab:2c:6e:1c: 40:04:40:0d:f1:72:c1:cd:15:96:00:0f:5f:d7:b3:52:d3:85: 3d:5e:96:e6:78:e6:a4:63:f7:a7:db:48:04:6d:02:c4:f3:02: 25:4b:40:2c:fc:52:5d:7c:a5:4c:ba:60:b5:0b:38:49:03:37: 39:bf:e8:79 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICEWEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEY4NjIxMTAvBgNVBAUTKEU4NTJBNThERTg3MTlGOEJDNkJENjQ5NDk4NTRCNDc0 NDdCODlDREUwHhcNMjUwODIyMTcyMjM0WhcNMjUwODI5MTcyMjM0WjAYMRYwFAYD VQQDEw02OGE4YTc1YS1mMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo7+64A0ayzeq+y78sEdIP+tm4EFwawfjvtQ+irvbrPvUPjJpL+tMF04DJyQp B83ghYfTDCBSpfaxkNrvP5nVSdyUMQBo2ydYImgOmkQwYNL0uBa1Kyts/oc3tmx4 GG8upzDs+w+quTLJWkCaJy2dH1t0JFvKDau83dsKmVMU9cEulXA1ztBoKYAGEu1t jFeQLzrgKbiH75UslGZsRK5PG7kPIQRUXVNbSG0pczjDWxpFjR7AULdgLmFG1pX0 5H3Tcfyl9Kv7P9DVDzblfZnKr3W634aIE6RurvXVWm6QVPGY3sxCSad4PIEH02PI Yb5P0o20+bi/Y722gmabNCn9/QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEG59YU8 kpplrAGYZc2bfOn391qUMB8GA1UdIwQYMBaAFOhSpY3ocZ+Lxr1klJhUtHRHuJze MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Rjg2Mi8xRTZGNkMxMjBG RjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40dkd2V1NVbUZTMGRFZTRu TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZGS2xqZWh4bjR2R3ZXU1VtRlMwZEVlNG5ONC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Rjg2Mi8xRTZGNkMxMjBGRjkxMUU5QTBEOTJCMEZDNEY5QUUwMi82RktsamVoeG40 dkd2V1NVbUZTMGRFZTRuTjQubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQALkewhXfQGwlstXjblOVHFcNeZ7XIFfYNUyIShtfa/m+KNtd2d9rFg Htq3RsuXR6abOf0a5lsGyhp6V0eSWdOZM5dNeHyAKrL+hCCP9BU73yK8rv1oXIDZ kUnCmcle1x1wMs+ARtexfFS2zUNOyEFPoduXVbJhWXjptMF5+lRPra8LHSsFb0aY +6eXtdND0ci3hHEQkxTeS5tOGjm3nb5ALWpz95W4QtmuEcU1erOFSe29iakVZOFm oGBgC7us/NiFoassbhxABEAN8XLBzRWWAA9f17NS04U9XpbmeOakY/en20gEbQLE 8wIlS0As/FJdfKVMumC1CzhJAzc5v+h5 -----END CERTIFICATE-----Generated at Sat Aug 23 18:54:47 2025 by rpki-client