$ rpki-client -vvf rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft File: 6EhjdESa3lWB63jDmC8d4SpKYAM.mft (raw, json) Hash identifier: 1B1Nm/xp+4kFqdTI9fczP1pr/dCxtoZeh3bcTtJ8CyM= Subject key identifier: 68:0A:79:37:B9:7C:89:6E:02:02:D0:D5:D0:17:30:33:83:20:6F:D3 Authority key identifier: E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 Certificate issuer: /CN=A919D2AF/serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Certificate serial: 1D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft Manifest number: 01F6 Signing time: Sat 23 Aug 2025 02:57:18 +0000 Manifest this update: Sat 23 Aug 2025 02:57:17 +0000 Manifest next update: Sat 30 Aug 2025 02:57:17 +0000 Files and hashes: 1: 6EhjdESa3lWB63jDmC8d4SpKYAM.crl (hash: 9hRyJ8+siPwVa5/ZaCMtObbTI0pVpZ1Y9UO5pNawZew=) 2: AA13A4AC58BA11F08C19015DC4F9AE02.roa (hash: i2dZXW4ctNp3phocZHsJWaRw5A5TAnPYhmdH2iztb0M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:57:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919D2AF, serialNumber=E8486374449ADE5581EB78C3982F1DE12A4A6003 Validity Not Before: Aug 23 02:57:17 2025 GMT Not After : Aug 30 02:57:17 2025 GMT Subject: CN=68a92e0d-e5cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:7c:07:05:7b:f4:7b:f4:b0:09:e4:48:94:d0: 9e:79:4b:87:7b:aa:03:48:12:33:11:2a:4a:c1:73: 64:12:0e:45:49:27:68:d9:99:54:f4:0c:66:96:8f: ab:4a:3b:a2:90:5f:1d:95:ad:dd:9e:0a:f9:3b:7a: 6a:41:d2:fa:ba:d4:4c:be:08:a2:8a:51:9a:6e:58: d8:d3:b1:1a:7e:28:5e:3d:40:0d:ae:b5:bb:e7:98: 6e:ce:99:d0:6e:50:58:70:66:f3:fb:e0:01:8a:14: 59:57:ef:2b:19:80:5d:71:4a:17:ed:e6:84:fc:3b: f2:b7:6f:1a:4b:1e:dc:fd:b7:5c:54:49:c4:bc:80: 8b:82:d0:79:1e:55:33:26:c2:ff:ae:aa:55:eb:f1: be:a5:1a:aa:95:96:f3:77:30:42:b3:fa:a1:e6:65: 63:26:6d:2f:36:ab:c3:80:26:cc:63:de:22:8f:6d: cf:2e:19:14:eb:2c:0f:3b:cf:58:6e:de:8a:08:38: 47:23:d1:0c:f0:e3:ca:7d:17:32:d3:32:06:63:75: 4f:99:94:ad:11:67:51:72:c7:e3:2e:e1:7b:0e:7f: c1:5f:4b:c5:1f:53:43:84:4c:9f:2f:2d:36:fe:81: 23:59:27:b5:34:b7:2f:6b:5f:8f:ad:01:bb:65:5f: 9e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:0A:79:37:B9:7C:89:6E:02:02:D0:D5:D0:17:30:33:83:20:6F:D3 X509v3 Authority Key Identifier: keyid:E8:48:63:74:44:9A:DE:55:81:EB:78:C3:98:2F:1D:E1:2A:4A:60:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6EhjdESa3lWB63jDmC8d4SpKYAM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919D2AF/F3EFB898BCBA11ED9C9AFA25C4F9AE02/6EhjdESa3lWB63jDmC8d4SpKYAM.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 12:0a:7a:10:4f:dc:e2:60:50:8a:f7:6b:e7:92:b9:b0:f5:bc: 52:49:c0:d5:22:b9:b4:5f:55:5f:87:13:88:24:6d:bf:8b:4d: ef:b0:92:70:af:82:2d:85:01:36:af:15:56:ac:a2:28:b0:8d: 14:10:3b:7e:56:52:e8:4a:48:21:c5:84:d8:aa:b4:c9:4e:1a: 1d:3f:a1:06:7b:45:a9:7d:1b:5d:37:e2:79:66:f8:8f:fc:d1: cc:be:87:64:e0:13:0b:9b:44:f9:2f:4f:b1:2d:c6:d2:7b:f9: ef:1c:d7:87:4b:42:d4:a3:14:d2:81:de:c0:70:6a:29:f8:a1: 6f:ac:9b:72:4b:91:be:18:78:98:c4:06:67:69:b6:54:9c:8f: 52:3e:11:84:a2:c5:08:2f:2f:12:76:f4:98:2c:4b:8d:8d:87: 0c:41:7e:5c:a7:ea:27:23:25:5a:a3:2e:1d:94:48:b4:a1:c1: 31:45:52:01:a4:4f:d9:4d:05:f5:d8:92:3b:8f:e9:8c:fd:99: d5:ae:d5:7a:86:08:f2:07:10:0e:77:aa:f4:22:79:47:aa:48: b2:eb:b5:c6:e1:87:36:32:78:58:e4:5e:69:8b:e3:24:a5:f2: 65:55:55:34:f7:5c:48:9c:93:b7:a4:0c:a5:e4:b3:a9:f6:10: 66:3f:f5:4e -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RDJBRjExMC8GA1UEBRMoRTg0ODYzNzQ0NDlBREU1NTgxRUI3OEMzOTgyRjFERTEy QTRBNjAwMzAeFw0yNTA4MjMwMjU3MTdaFw0yNTA4MzAwMjU3MTdaMBgxFjAUBgNV BAMTDTY4YTkyZTBkLWU1Y2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQfAcFe/R79LAJ5EiU0J55S4d7qgNIEjMRKkrBc2QSDkVJJ2jZmVT0DGaWj6tK O6KQXx2Vrd2eCvk7empB0vq61Ey+CKKKUZpuWNjTsRp+KF49QA2utbvnmG7OmdBu UFhwZvP74AGKFFlX7ysZgF1xShft5oT8O/K3bxpLHtz9t1xUScS8gIuC0HkeVTMm wv+uqlXr8b6lGqqVlvN3MEKz+qHmZWMmbS82q8OAJsxj3iKPbc8uGRTrLA87z1hu 3ooIOEcj0Qzw48p9FzLTMgZjdU+ZlK0RZ1Fyx+Mu4XsOf8FfS8UfU0OETJ8vLTb+ gSNZJ7U0ty9rX4+tAbtlX56DAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUaAp5N7l8 iW4CAtDV0BcwM4Mgb9MwHwYDVR0jBBgwFoAU6EhjdESa3lWB63jDmC8d4SpKYAMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEMkFGL0YzRUZCODk4QkNC QTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xXQjYzakRtQzhkNFNwS1lB TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNkVoamRFU2EzbFdCNjNqRG1DOGQ0U3BLWUFNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlE MkFGL0YzRUZCODk4QkNCQTExRUQ5QzlBRkEyNUM0RjlBRTAyLzZFaGpkRVNhM2xX QjYzakRtQzhkNFNwS1lBTS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABIKehBP3OJgUIr3a+eSubD1vFJJwNUiubRfVV+HE4gkbb+LTe+wknCv gi2FATavFVasoiiwjRQQO35WUuhKSCHFhNiqtMlOGh0/oQZ7Ral9G1034nlm+I/8 0cy+h2TgEwubRPkvT7EtxtJ7+e8c14dLQtSjFNKB3sBwain4oW+sm3JLkb4YeJjE BmdptlScj1I+EYSixQgvLxJ29JgsS42NhwxBflyn6icjJVqjLh2USLShwTFFUgGk T9lNBfXYkjuP6Yz9mdWu1XqGCPIHEA53qvQieUeqSLLrtcbhhzYyeFjkXmmL4ySl 8mVVVTT3XEick7ekDKXks6n2EGY/9U4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:51:48 2025 by rpki-client