$ rpki-client -vvf rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft File: q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft (raw, json) Hash identifier: km5TdCTI0aXSC7XpGX5YKjZXd2FurvqHXakl8moSjac= Subject key identifier: ED:EC:66:BE:B1:C6:71:7C:BC:7F:59:A4:74:19:40:8C:E2:9E:A2:6D Authority key identifier: AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 Certificate issuer: /CN=A914845D/serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Certificate serial: 0650 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft Manifest number: 064B Signing time: Fri 18 Jul 2025 22:54:55 +0000 Manifest this update: Fri 18 Jul 2025 22:54:55 +0000 Manifest next update: Fri 25 Jul 2025 22:54:55 +0000 Files and hashes: 1: q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl (hash: OEbgvawFfqfrisVWtzSdRHi/oUqWO13qVf/tZQMk6zY=) 2: 96A61404AAA911EBA223275EC4F9AE02.roa (hash: E9czvgeh6YRFhRYFfzW1p9Rsfnmm6YmfPInujvKlVu4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 22:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1616 (0x650) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914845D, serialNumber=ABA6C0C46CE887A639D0DE07133AE1FFCC0D2D91 Validity Not Before: Jul 18 22:54:55 2025 GMT Not After : Jul 25 22:54:55 2025 GMT Subject: CN=687ad0bf-8234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:27:d3:f6:49:7d:93:83:7d:d4:53:aa:2f: 68:1d:33:22:e5:9e:a4:5a:89:10:81:16:d4:ce:1b: 8d:85:50:73:a1:3b:3c:10:1c:dd:8c:aa:8e:12:ce: a4:db:7e:83:50:a1:93:57:74:3e:19:d5:ac:34:ce: 32:11:7f:fc:a2:0d:50:ff:dc:32:5c:1d:f3:92:0a: 27:5d:6f:8c:af:cd:be:d6:a6:f4:71:14:37:b7:b5: c1:37:b5:89:f5:44:22:64:6c:5e:fd:0a:12:92:2f: 0d:d8:02:85:74:2c:7b:ba:c1:83:35:f4:d4:37:91: 4b:91:18:98:4c:4a:14:96:50:c8:2c:d0:77:48:be: f5:f7:41:0a:63:cc:a0:d1:61:1c:8f:45:9b:7c:e9: e3:4c:2f:81:59:67:10:2e:34:fb:37:42:6a:20:bf: c0:f7:82:63:96:ea:34:07:6c:5b:98:34:40:a0:f9: fa:81:65:e2:79:64:ab:9c:f5:f0:8d:87:7d:6a:4e: 1a:89:60:ce:12:7f:76:6a:d2:17:81:ed:cd:2d:d2: 88:eb:a7:a3:01:f3:8c:a2:d6:66:95:3e:8e:c7:5b: f8:4e:6f:2e:64:ed:56:48:8b:a6:f0:27:31:ed:56: 05:9d:13:be:e0:c6:8f:82:f4:4e:f4:2a:10:c1:ca: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:EC:66:BE:B1:C6:71:7C:BC:7F:59:A4:74:19:40:8C:E2:9E:A2:6D X509v3 Authority Key Identifier: keyid:AB:A6:C0:C4:6C:E8:87:A6:39:D0:DE:07:13:3A:E1:FF:CC:0D:2D:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q6bAxGzoh6Y50N4HEzrh_8wNLZE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914845D/547515C6949711EB9CF8832AC4F9AE02/q6bAxGzoh6Y50N4HEzrh_8wNLZE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ad:62:48:aa:ec:38:61:26:f4:5d:b0:2a:cb:e1:5e:7c:27:cb: b9:b9:27:3a:2c:72:fe:f1:c1:e7:e4:86:1c:a7:57:dd:36:20: 8e:0a:40:31:18:f9:0c:58:a5:da:9e:09:3e:d0:d8:2a:f0:df: af:00:ab:b1:1e:bd:01:14:84:ca:dc:cc:25:83:47:85:25:01: f2:a4:1c:94:0e:d2:8a:82:8f:a2:ce:cf:3f:2a:06:68:16:8d: 77:f3:e1:08:c3:22:17:99:46:cd:a2:7a:79:2c:eb:97:4c:17: 34:26:9b:af:07:8b:c8:8a:b9:3f:72:0a:87:08:56:3c:e6:e2: ad:60:f5:f2:30:42:36:22:51:35:41:66:62:9d:42:f7:0b:69: fc:71:68:42:9c:3d:35:4a:62:51:94:d0:67:cf:26:21:6c:d6: 2b:2e:6b:4e:b7:d1:40:21:a1:90:cb:b0:bd:ff:d8:c9:af:27: 37:f4:b8:9d:c1:4c:f4:bb:67:51:8a:87:a2:de:b2:12:a1:ac: 5f:fc:26:c0:ac:56:1a:00:cc:04:df:4e:ed:73:7d:67:ef:f8: 5b:a4:a5:f8:14:aa:75:e8:a4:83:8d:d2:05:49:e1:70:6b:30: 5d:84:4e:f5:c8:34:28:8a:cd:b8:0e:6c:fb:f8:a4:fa:c9:32: b3:98:d1:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDg0NUQxMTAvBgNVBAUTKEFCQTZDMEM0NkNFODg3QTYzOUQwREUwNzEzM0FFMUZG Q0MwRDJEOTEwHhcNMjUwNzE4MjI1NDU1WhcNMjUwNzI1MjI1NDU1WjAYMRYwFAYD VQQDEw02ODdhZDBiZi04MjM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxCIn0/ZJfZODfdRTqi9oHTMi5Z6kWokQgRbUzhuNhVBzoTs8EBzdjKqOEs6k 236DUKGTV3Q+GdWsNM4yEX/8og1Q/9wyXB3zkgonXW+Mr82+1qb0cRQ3t7XBN7WJ 9UQiZGxe/QoSki8N2AKFdCx7usGDNfTUN5FLkRiYTEoUllDILNB3SL7190EKY8yg 0WEcj0WbfOnjTC+BWWcQLjT7N0JqIL/A94Jjluo0B2xbmDRAoPn6gWXieWSrnPXw jYd9ak4aiWDOEn92atIXge3NLdKI66ejAfOMotZmlT6Ox1v4Tm8uZO1WSIum8Ccx 7VYFnRO+4MaPgvRO9CoQwcorewIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFO3sZr6x xnF8vH9ZpHQZQIzinqJtMB8GA1UdIwQYMBaAFKumwMRs6IemOdDeBxM64f/MDS2R MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0ODQ1RC81NDc1MTVDNjk0 OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2WTUwTjRIRXpyaF84d05M WkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E2YkF4R3pvaDZZNTBONEhFenJoXzh3TkxaRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 ODQ1RC81NDc1MTVDNjk0OTcxMUVCOUNGODgzMkFDNEY5QUUwMi9xNmJBeEd6b2g2 WTUwTjRIRXpyaF84d05MWkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCtYkiq7DhhJvRdsCrL4V58J8u5uSc6LHL+8cHn5IYcp1fdNiCOCkAx GPkMWKXangk+0Ngq8N+vAKuxHr0BFITK3Mwlg0eFJQHypByUDtKKgo+izs8/KgZo Fo138+EIwyIXmUbNonp5LOuXTBc0JpuvB4vIirk/cgqHCFY85uKtYPXyMEI2IlE1 QWZinUL3C2n8cWhCnD01SmJRlNBnzyYhbNYrLmtOt9FAIaGQy7C9/9jJryc39Lid wUz0u2dRioei3rISoaxf/CbArFYaAMwE307tc31n7/hbpKX4FKp16KSDjdIFSeFw azBdhE71yDQois24Dmz7+KT6yTKzmNEJ -----END CERTIFICATE-----Generated at Sat Jul 19 18:27:58 2025 by rpki-client