$ rpki-client -vvf rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft File: g--P6e5IafC5SpX3RvWJS6H7MPA.mft (raw, json) Hash identifier: /60TfxHJwvdacbycM4rkpfbjpBCIuU0//VM/uwNb2qE= Subject key identifier: B9:6C:D9:0B:D7:8A:03:D9:C9:64:6B:BA:68:CD:16:56:B7:7C:52:89 Authority key identifier: 83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 Certificate issuer: /CN=A914EB9A/serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Certificate serial: D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft Manifest number: D2 Signing time: Sat 19 Jul 2025 05:49:51 +0000 Manifest this update: Sat 19 Jul 2025 05:49:51 +0000 Manifest next update: Sat 26 Jul 2025 05:49:51 +0000 Files and hashes: 1: g--P6e5IafC5SpX3RvWJS6H7MPA.crl (hash: fGb/Mm5h94UTTn2EYPvV+0iw3bx9dSvmAS7c9tt1oj8=) 2: A368B23623C411EFB7164123C4F9AE02.roa (hash: xksJk5Cwcy8+0Thge3EVjB2r6Pp+L19aLaysM6rp0MI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 05:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 212 (0xd4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EB9A, serialNumber=83EF8FE9EE4869F0B94A95F746F5894BA1FB30F0 Validity Not Before: Jul 19 05:49:51 2025 GMT Not After : Jul 26 05:49:51 2025 GMT Subject: CN=687b31ff-b576 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:4a:6c:ef:57:64:8d:19:e4:b9:97:4d:23:e0: c9:e1:aa:4f:55:bc:2c:90:a2:d0:ee:c7:69:88:87: 74:c9:ac:bf:e0:c5:33:3f:f8:be:0e:ab:1c:8d:ae: bc:b6:ce:bd:93:1c:2a:1a:d8:0c:eb:1f:aa:7f:38: be:bd:88:55:39:ad:98:9f:fb:e6:e0:6f:fa:0d:27: ea:c9:01:42:00:50:1b:b5:b5:69:7c:47:90:a4:bf: 55:a1:e8:53:81:36:48:f8:a8:1a:af:3f:04:4c:71: 50:28:c0:25:18:5a:42:eb:cf:57:48:0e:a1:64:9f: b6:4b:ed:02:bd:6c:b3:8b:a0:c3:1b:a6:bd:78:0e: 63:48:dc:37:e3:f7:a6:08:00:c8:4e:fc:4a:ca:63: 39:bc:ce:b5:11:69:1d:6b:31:e6:24:09:1a:55:a6: 5d:00:a7:ed:78:33:43:97:1e:72:14:08:1e:cc:7d: 1b:0d:32:0c:36:ab:5c:b5:6f:f5:04:0b:38:01:48: 1b:2e:fc:36:17:6b:f8:17:c4:13:5b:d2:af:91:f1: d3:08:b9:7e:c9:89:b8:60:38:06:68:32:89:f1:8f: 6e:ef:2e:0d:66:59:39:3f:31:62:39:e2:3f:8d:92: d8:eb:57:47:5e:2f:86:d2:4a:58:90:18:6f:ff:9b: ba:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:6C:D9:0B:D7:8A:03:D9:C9:64:6B:BA:68:CD:16:56:B7:7C:52:89 X509v3 Authority Key Identifier: keyid:83:EF:8F:E9:EE:48:69:F0:B9:4A:95:F7:46:F5:89:4B:A1:FB:30:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g--P6e5IafC5SpX3RvWJS6H7MPA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EB9A/E4A65EDE23C311EF892DEB21C4F9AE02/g--P6e5IafC5SpX3RvWJS6H7MPA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 8b:09:29:f7:ea:e1:e3:c4:27:ee:77:01:65:2e:ad:04:10:8d: 32:75:56:10:30:f2:3b:28:bf:a9:f9:0f:b7:27:d1:64:82:ad: f0:9e:53:f4:26:55:e1:d5:a4:5b:4d:49:9a:8e:66:14:8c:5d: 9c:d6:8d:52:33:18:92:1f:d6:48:b4:c8:48:da:c8:23:ed:06: ab:45:15:a8:d2:b5:ef:dc:64:47:29:3f:d7:a9:9a:6f:0b:7f: f6:4b:f3:4c:21:34:5f:28:8b:e9:06:6e:73:78:d3:96:a5:4c: 2d:29:f4:e6:13:23:cf:ab:49:75:bb:c9:c2:5b:9a:37:eb:fe: e7:1f:aa:c7:7c:c1:bc:7b:f6:39:98:94:5b:89:0f:14:84:4d: 77:af:fc:dc:62:97:bc:dd:95:b2:ca:ee:bf:a9:e2:29:76:d8: 7c:09:cd:aa:5f:aa:30:db:fb:13:01:83:da:b8:41:2b:41:f5: 0f:6b:88:2a:c5:9e:1a:d6:93:e5:72:ba:d2:40:23:af:b3:1a: 2c:12:02:e6:35:02:9c:af:2e:07:1c:21:f0:30:41:30:cc:17: aa:d2:19:ca:12:3f:06:7c:2c:6c:0c:70:92:57:3f:e8:03:4b: 88:50:1a:a7:8f:62:94:66:f4:7d:17:77:3b:ca:14:be:d3:3f: 5e:ef:4d:b0 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVCOUExMTAvBgNVBAUTKDgzRUY4RkU5RUU0ODY5RjBCOTRBOTVGNzQ2RjU4OTRC QTFGQjMwRjAwHhcNMjUwNzE5MDU0OTUxWhcNMjUwNzI2MDU0OTUxWjAYMRYwFAYD VQQDEw02ODdiMzFmZi1iNTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUps71dkjRnkuZdNI+DJ4apPVbwskKLQ7sdpiId0yay/4MUzP/i+Dqscja68 ts69kxwqGtgM6x+qfzi+vYhVOa2Yn/vm4G/6DSfqyQFCAFAbtbVpfEeQpL9VoehT gTZI+Kgarz8ETHFQKMAlGFpC689XSA6hZJ+2S+0CvWyzi6DDG6a9eA5jSNw34/em CADITvxKymM5vM61EWkdazHmJAkaVaZdAKfteDNDlx5yFAgezH0bDTIMNqtctW/1 BAs4AUgbLvw2F2v4F8QTW9KvkfHTCLl+yYm4YDgGaDKJ8Y9u7y4NZlk5PzFiOeI/ jZLY61dHXi+G0kpYkBhv/5u6zwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLls2QvX igPZyWRrumjNFla3fFKJMB8GA1UdIwQYMBaAFIPvj+nuSGnwuUqV90b1iUuh+zDw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUI5QS9FNEE2NUVERTIz QzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFmQzVTcFgzUnZXSlM2SDdN UEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctLVA2ZTVJYWZDNVNwWDNSdldKUzZIN01QQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUI5QS9FNEE2NUVERTIzQzMxMUVGODkyREVCMjFDNEY5QUUwMi9nLS1QNmU1SWFm QzVTcFgzUnZXSlM2SDdNUEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCLCSn36uHjxCfudwFlLq0EEI0ydVYQMPI7KL+p+Q+3J9Fkgq3wnlP0 JlXh1aRbTUmajmYUjF2c1o1SMxiSH9ZItMhI2sgj7QarRRWo0rXv3GRHKT/XqZpv C3/2S/NMITRfKIvpBm5zeNOWpUwtKfTmEyPPq0l1u8nCW5o36/7nH6rHfMG8e/Y5 mJRbiQ8UhE13r/zcYpe83ZWyyu6/qeIpdth8Cc2qX6ow2/sTAYPauEErQfUPa4gq xZ4a1pPlcrrSQCOvsxosEgLmNQKcry4HHCHwMEEwzBeq0hnKEj8GfCxsDHCSVz/o A0uIUBqnj2KUZvR9F3c7yhS+0z9e702w -----END CERTIFICATE-----Generated at Sun Jul 20 03:14:14 2025 by rpki-client