$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: GqGHG1gpAvJCuV9EfYyfKVY3iCZ0rAN544WLDGZKzio= Subject key identifier: 40:03:96:10:79:86:A6:AC:28:C7:F0:DB:75:64:F5:27:F7:CF:55:C1 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B57 Signing time: Fri 18 Jul 2025 19:17:45 +0000 Manifest this update: Fri 18 Jul 2025 19:17:45 +0000 Manifest next update: Fri 25 Jul 2025 19:17:45 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: 3yHYaE6c4vZlGcKGBHRL/Vie+I3Cza0BZSR6dIesZT4=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 19:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2911 (0xb5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Jul 18 19:17:45 2025 GMT Not After : Jul 25 19:17:45 2025 GMT Subject: CN=687a9dd9-1abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:9a:c7:18:c9:8e:ff:67:95:15:85:c8:20: 46:bb:ce:99:ab:6c:47:ba:8c:e4:01:4d:65:8c:89: 44:f7:d1:78:38:e2:bd:d8:b9:68:8c:2c:61:47:ef: 92:5f:67:09:f7:e7:9a:b0:5d:49:d2:6a:9b:93:93: 44:49:49:7e:82:e0:f5:56:5e:9b:20:a7:ee:b8:eb: 3c:13:67:da:d6:98:45:9a:7e:a5:9b:a3:e7:32:0b: 81:1d:f5:9b:69:32:bf:9d:26:15:71:b4:ed:3a:bb: 07:f3:7d:53:52:61:5d:18:7e:dc:b9:ed:a4:74:3f: 0d:d7:5d:e2:fe:ad:33:6d:ec:20:7e:1a:44:46:21: 5f:93:fb:85:ba:24:d1:08:7e:1d:41:e6:05:b9:81: d6:19:83:e1:b7:53:a0:29:5a:87:0c:7c:a4:ce:1a: ec:b9:3c:6b:4b:98:8d:f2:51:b3:71:f6:3c:ed:2c: 30:e2:f1:d1:38:8a:28:6a:97:1f:c6:93:4b:ae:7f: 4b:26:3a:aa:45:d1:7a:ae:ca:1c:c2:e8:65:da:35: b1:0a:76:d3:8f:ae:59:81:c6:f5:ed:06:a4:1a:80: 1e:61:28:36:a7:a5:e4:c0:a7:ae:1e:f3:ed:65:8f: d5:a8:48:4b:20:14:fd:79:81:80:14:38:c4:15:04: cf:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:03:96:10:79:86:A6:AC:28:C7:F0:DB:75:64:F5:27:F7:CF:55:C1 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:8e:dc:5b:b8:bb:bc:06:04:94:63:66:b5:ee:c8:dc:a2:61: b0:f6:14:57:3b:7f:bd:98:50:0c:24:d8:c6:61:93:ba:21:83: 43:85:fc:c0:a6:55:bc:55:81:fc:b6:93:02:28:cb:d5:fc:10: ef:62:3e:a7:0a:90:c3:7a:c0:16:05:03:72:af:8a:5e:a9:ec: bc:8d:fc:da:6b:e0:66:ea:b1:35:9d:41:25:4e:ca:48:b0:9d: e2:1d:a3:c9:77:17:1e:1f:ec:25:77:9f:48:f8:60:4e:ba:74: 40:06:51:21:fd:76:02:af:cd:4e:4a:b6:ae:8f:b1:f4:6d:11: 7f:f4:cd:5b:fa:d8:35:44:01:da:bd:b2:87:7a:0c:14:3e:03: 37:cb:75:9f:3c:77:19:90:bb:49:b5:5d:25:e4:27:a5:32:91: d6:90:34:38:cc:39:45:e0:bf:46:17:fe:3e:89:83:54:12:39: ab:2f:7e:bf:a8:6f:71:60:ba:6f:f0:ef:17:58:54:b3:96:61: 53:58:3e:d3:9e:d5:8f:8e:d1:5b:dc:b7:56:2c:5c:30:50:3a: b6:a4:93:6e:d1:8b:e9:15:fb:f5:6c:c3:91:a7:f7:6d:4f:d9: ce:42:26:c6:5f:c5:6f:75:77:5e:21:d0:a3:e3:10:be:88:5b: 4c:18:45:2b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC18wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwNzE4MTkxNzQ1WhcNMjUwNzI1MTkxNzQ1WjAYMRYwFAYD VQQDEw02ODdhOWRkOS0xYWJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAscCaxxjJjv9nlRWFyCBGu86Zq2xHuozkAU1ljIlE99F4OOK92LlojCxhR++S X2cJ9+easF1J0mqbk5NESUl+guD1Vl6bIKfuuOs8E2fa1phFmn6lm6PnMguBHfWb aTK/nSYVcbTtOrsH831TUmFdGH7cue2kdD8N113i/q0zbewgfhpERiFfk/uFuiTR CH4dQeYFuYHWGYPht1OgKVqHDHykzhrsuTxrS5iN8lGzcfY87Sww4vHROIooapcf xpNLrn9LJjqqRdF6rsocwuhl2jWxCnbTj65Zgcb17QakGoAeYSg2p6XkwKeuHvPt ZY/VqEhLIBT9eYGAFDjEFQTP+QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEADlhB5 hqasKMfw23Vk9Sf3z1XBMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3jtxbuLu8BgSUY2a17sjcomGw9hRXO3+9mFAMJNjGYZO6IYNDhfzA plW8VYH8tpMCKMvV/BDvYj6nCpDDesAWBQNyr4peqey8jfzaa+Bm6rE1nUElTspI sJ3iHaPJdxceH+wld59I+GBOunRABlEh/XYCr81OSrauj7H0bRF/9M1b+tg1RAHa vbKHegwUPgM3y3WfPHcZkLtJtV0l5CelMpHWkDQ4zDlF4L9GF/4+iYNUEjmrL36/ qG9xYLpv8O8XWFSzlmFTWD7TntWPjtFb3LdWLFwwUDq2pJNu0YvpFfv1bMORp/dt T9nOQibGX8VvdXdeIdCj4xC+iFtMGEUr -----END CERTIFICATE-----Generated at Sun Jul 20 07:46:14 2025 by rpki-client