$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft File: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft (raw, json) Hash identifier: grxdMhzGlkP75wc8EO5IR5g+onQ5VPuwoq0z95ZppR0= Subject key identifier: D0:F0:4B:C6:7B:DE:14:40:C1:CE:D3:62:93:6A:84:F8:8C:4C:77:B1 Authority key identifier: E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 Certificate issuer: /CN=A9137ABC/serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Certificate serial: 2A22 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft Manifest number: 2A11 Signing time: Fri 18 Jul 2025 14:20:40 +0000 Manifest this update: Fri 18 Jul 2025 14:20:40 +0000 Manifest next update: Fri 25 Jul 2025 14:20:40 +0000 Files and hashes: 1: 6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl (hash: fUfmDtkNImrsLxF8DfFcktSHVttXYFLPo01vwo9YO6Y=) 2: 79AF67622C3C11EE81B24651C4F9AE02.roa (hash: vmKqro3gn7F1Qg3wm7Klm7w2ti+vviDyxmMgM4ZcJqw=) 3: 7A90F2402C3C11EE81B24651C4F9AE02.roa (hash: IS6RP+KmoY800ilz+9/FraPb2PhtRfq61ziRhaqYPqA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 14:20:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10786 (0x2a22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=E87DC6C5C710439057D8ABED90C26D0C9C872B34 Validity Not Before: Jul 18 14:20:40 2025 GMT Not After : Jul 25 14:20:40 2025 GMT Subject: CN=687a5838-6376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:61:a7:e6:67:4e:26:aa:78:11:a6:8c:11:5c: b0:94:bc:19:d1:2d:2a:08:a6:95:61:fc:50:98:30: 00:85:e7:fd:c7:46:ca:52:bb:b2:24:33:2d:7c:0c: 64:0d:3b:f3:5a:f3:2b:d5:19:d2:6b:b7:19:62:92: 5d:d5:b0:33:1b:d6:27:72:ce:0b:9b:c1:25:c5:59: c8:cf:fc:71:6c:ce:e2:ef:35:19:9a:48:ad:4d:3c: 1f:eb:51:26:7e:dc:6f:d6:35:6a:e9:ce:54:fd:54: 47:4b:9f:e4:f1:b9:08:b2:3b:cc:71:9f:9f:50:f0: ac:a9:c1:4d:1d:a4:5b:bc:2e:9d:72:ad:49:d6:17: a7:6e:ea:5f:e6:97:5e:b6:bc:d7:b4:05:94:93:29: 92:e6:d6:90:45:cd:f7:79:de:13:c1:7c:c2:b2:0e: 64:d5:55:ed:f2:92:74:f6:28:b3:13:d2:bb:ac:bd: 45:25:48:51:4f:a0:45:7f:14:c2:43:a3:1a:b2:3f: 00:9e:c7:f5:dc:9a:78:17:c0:31:af:e9:96:72:8f: f4:fe:d9:2e:d8:66:68:dd:2c:f9:97:17:b0:19:41: 24:0d:bd:dd:37:2b:e0:40:2c:9e:28:6a:fb:f2:5a: e2:b1:fe:05:af:b3:a4:f2:93:a2:45:a2:36:4d:bf: 8d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F0:4B:C6:7B:DE:14:40:C1:CE:D3:62:93:6A:84:F8:8C:4C:77:B1 X509v3 Authority Key Identifier: keyid:E8:7D:C6:C5:C7:10:43:90:57:D8:AB:ED:90:C2:6D:0C:9C:87:2B:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/6B8B9D0E36FF11E49904AC66C4F9AE02/6H3GxccQQ5BX2KvtkMJtDJyHKzQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 73:c9:35:b5:c2:a0:e2:8c:7a:70:1a:44:47:81:58:20:a5:ee: 36:ce:c7:ca:54:f5:df:e5:d0:88:f3:87:c1:af:25:0b:99:ae: 4f:d4:05:45:a5:a3:26:58:32:97:f9:d4:24:71:1b:f1:59:21: 0e:d8:47:5d:e6:8b:db:21:ea:c7:3b:9c:fc:e5:90:08:6d:00: 7d:b1:29:9b:0a:a2:69:a9:4a:42:b7:57:0e:d8:d2:11:af:97: be:12:6d:9a:00:c5:1b:b9:08:a3:41:bb:2f:54:47:9c:2e:59: c3:c3:fa:88:94:c5:c4:e6:52:12:17:13:7b:e1:4c:a7:e3:49: f5:55:28:43:32:45:b2:fa:dc:04:02:b0:ed:95:28:9a:e5:1e: 41:67:c6:c5:9f:78:32:44:2a:05:17:dc:6a:12:72:a1:c0:00: 49:6b:e3:5e:99:83:02:7b:41:96:6f:35:e2:4c:ab:9e:19:7e: 92:1a:cd:14:4f:8b:4d:97:7b:c1:aa:56:5c:73:ed:9c:32:91: 43:34:b1:28:b2:58:a3:db:00:25:39:2a:66:9f:2d:ef:9e:59: 83:72:5d:5f:9e:06:d6:d4:11:b6:ce:60:4b:86:1f:97:32:e4: e5:fa:30:62:43:10:52:5a:2b:75:15:df:49:99:49:dd:10:7a: 3c:71:c8:8a -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICKiIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKEU4N0RDNkM1QzcxMDQzOTA1N0Q4QUJFRDkwQzI2RDBD OUM4NzJCMzQwHhcNMjUwNzE4MTQyMDQwWhcNMjUwNzI1MTQyMDQwWjAYMRYwFAYD VQQDEw02ODdhNTgzOC02Mzc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3GGn5mdOJqp4EaaMEVywlLwZ0S0qCKaVYfxQmDAAhef9x0bKUruyJDMtfAxk DTvzWvMr1RnSa7cZYpJd1bAzG9Yncs4Lm8ElxVnIz/xxbM7i7zUZmkitTTwf61Em ftxv1jVq6c5U/VRHS5/k8bkIsjvMcZ+fUPCsqcFNHaRbvC6dcq1J1henbupf5pde trzXtAWUkymS5taQRc33ed4TwXzCsg5k1VXt8pJ09iizE9K7rL1FJUhRT6BFfxTC Q6Masj8Ansf13Jp4F8Axr+mWco/0/tku2GZo3Sz5lxewGUEkDb3dNyvgQCyeKGr7 8lrisf4Fr7Ok8pOiRaI2Tb+N4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNDwS8Z7 3hRAwc7TYpNqhPiMTHexMB8GA1UdIwQYMBaAFOh9xsXHEEOQV9ir7ZDCbQychys0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy82QjhCOUQwRTM2 RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1QlgyS3Z0a01KdERKeUhL elEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZIM0d4Y2NRUTVCWDJLdnRrTUp0REp5SEt6US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz N0FCQy82QjhCOUQwRTM2RkYxMUU0OTkwNEFDNjZDNEY5QUUwMi82SDNHeGNjUVE1 QlgyS3Z0a01KdERKeUhLelEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBzyTW1wqDijHpwGkRHgVggpe42zsfKVPXf5dCI84fBryULma5P1AVF paMmWDKX+dQkcRvxWSEO2Edd5ovbIerHO5z85ZAIbQB9sSmbCqJpqUpCt1cO2NIR r5e+Em2aAMUbuQijQbsvVEecLlnDw/qIlMXE5lISFxN74Uyn40n1VShDMkWy+twE ArDtlSia5R5BZ8bFn3gyRCoFF9xqEnKhwABJa+NemYMCe0GWbzXiTKueGX6SGs0U T4tNl3vBqlZcc+2cMpFDNLEoslij2wAlOSpmny3vnlmDcl1fngbW1BG2zmBLhh+X MuTl+jBiQxBSWit1Fd9JmUndEHo8cciK -----END CERTIFICATE-----Generated at Sun Jul 20 11:32:55 2025 by rpki-client