$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: Rk2iuCW6TK0IfMIggBRb3MaqaEv32K1Mdv1ohHWWf4A= Subject key identifier: A9:84:9E:39:59:6D:6F:BC:C7:76:B1:73:F0:65:2B:BC:B9:1F:51:65 Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0208 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 01FF Signing time: Sat 19 Jul 2025 02:40:54 +0000 Manifest this update: Sat 19 Jul 2025 02:40:53 +0000 Manifest next update: Sat 26 Jul 2025 02:40:53 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: 8KtVDaJvrUrl2nb50hoBaoEEa6tSn2gh9uYHHRRYGHY=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 520 (0x208) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Jul 19 02:40:53 2025 GMT Not After : Jul 26 02:40:53 2025 GMT Subject: CN=687b05b5-6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:24:3b:92:38:29:b1:1e:03:8e:43:03:48:e7: 32:d7:8a:b7:e3:72:26:70:e0:29:f9:ab:80:47:39: 12:e7:b5:75:aa:a6:65:97:a1:7b:87:94:7d:f5:e9: 83:62:21:e8:cc:7d:29:d0:a8:7c:8b:30:08:a0:af: 81:56:6d:c1:a4:85:6b:c9:c2:35:18:79:9a:31:e1: aa:f9:4e:67:64:4c:bf:c7:45:fe:38:95:52:23:b5: 4c:46:0d:26:75:a0:f7:9e:f8:3e:93:37:bf:70:1c: b7:68:3e:71:87:2e:63:38:18:8a:ee:c2:95:ed:49: 8f:04:02:37:48:0e:3a:f3:4e:a3:4e:8b:cf:2e:ce: 34:df:ba:ea:24:3e:93:24:20:34:44:ab:76:b0:b7: 2f:01:26:98:a6:24:62:22:34:07:a2:ce:0e:6a:3f: 2e:55:13:e4:f9:ed:47:15:d4:40:11:83:de:73:97: 3a:cc:26:a6:94:56:60:8b:16:d8:01:19:2d:45:f2: 9a:84:f8:32:85:e3:24:51:40:15:e9:d7:ab:ff:88: 2a:c9:57:29:80:1f:db:08:cd:87:5c:7a:cf:9c:f1: ac:cb:6f:18:0b:40:7c:39:91:0f:fc:0b:3c:6b:11: b1:2e:5c:f3:90:67:c9:8b:4a:9a:db:c4:25:67:fc: d0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:84:9E:39:59:6D:6F:BC:C7:76:B1:73:F0:65:2B:BC:B9:1F:51:65 X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:a4:98:dc:98:0f:1e:31:24:85:9c:c5:78:31:65:a3:34:5a: 27:5a:28:b4:a0:43:d0:61:c0:8e:37:e9:2f:07:50:44:37:87: bc:b7:e2:1e:a3:c0:d8:ba:4b:e9:d7:29:f0:e0:c5:2a:ae:c4: 3f:cc:15:c5:6c:5d:2d:a0:b6:31:57:db:a6:f3:6f:11:fe:48: d2:83:e9:31:9a:03:02:9a:f1:d9:16:6c:30:b4:eb:2d:5d:12: 3d:da:94:db:42:26:b9:93:65:da:9a:ef:43:eb:c2:5d:9f:a3: 81:28:0f:df:30:63:e8:4e:37:57:e6:2a:75:cc:44:de:76:58: eb:5f:02:33:4e:82:82:51:79:ea:c6:2e:ac:71:9e:cf:e0:81: 06:10:b5:b5:1e:f1:d1:4e:79:35:df:10:94:21:1e:b8:48:0b: d1:ad:d7:14:50:e3:f8:14:3a:09:c1:28:5b:24:a3:24:58:d0: b4:e2:1d:98:6e:f6:d2:93:a2:3d:d1:f8:90:cb:29:57:75:14: 8c:66:c4:66:26:55:7e:fb:3e:16:8a:81:fb:c9:cc:1d:fd:6e: c4:06:17:c3:b7:e0:df:d3:d4:5e:6d:09:05:36:79:18:b3:f2: 0c:e7:ed:53:e5:2b:6e:f8:d6:5b:3a:b3:39:34:65:0d:d3:58: 30:73:99:e6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAggwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwNzE5MDI0MDUzWhcNMjUwNzI2MDI0MDUzWjAYMRYwFAYD VQQDEw02ODdiMDViNS02ZDQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAryQ7kjgpsR4DjkMDSOcy14q343ImcOAp+auARzkS57V1qqZll6F7h5R99emD YiHozH0p0Kh8izAIoK+BVm3BpIVrycI1GHmaMeGq+U5nZEy/x0X+OJVSI7VMRg0m daD3nvg+kze/cBy3aD5xhy5jOBiK7sKV7UmPBAI3SA46806jTovPLs4037rqJD6T JCA0RKt2sLcvASaYpiRiIjQHos4Oaj8uVRPk+e1HFdRAEYPec5c6zCamlFZgixbY ARktRfKahPgyheMkUUAV6der/4gqyVcpgB/bCM2HXHrPnPGsy28YC0B8OZEP/As8 axGxLlzzkGfJi0qa28QlZ/zQ3QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKmEnjlZ bW+8x3axc/BlK7y5H1FlMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJpJjcmA8eMSSFnMV4MWWjNFonWii0oEPQYcCON+kvB1BEN4e8t+Ie o8DYukvp1ynw4MUqrsQ/zBXFbF0toLYxV9um828R/kjSg+kxmgMCmvHZFmwwtOst XRI92pTbQia5k2Xamu9D68Jdn6OBKA/fMGPoTjdX5ip1zETedljrXwIzToKCUXnq xi6scZ7P4IEGELW1HvHRTnk13xCUIR64SAvRrdcUUOP4FDoJwShbJKMkWNC04h2Y bvbSk6I90fiQyylXdRSMZsRmJlV++z4WioH7ycwd/W7EBhfDt+Df09RebQkFNnkY s/IM5+1T5Stu+NZbOrM5NGUN01gwc5nm -----END CERTIFICATE-----Generated at Sat Jul 19 18:40:19 2025 by rpki-client