$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: 9gzBJ8Bai/hprRzBGMbTTU5ghKL97wengKUwirugcIU= Subject key identifier: 31:E2:9C:76:A2:DA:90:6F:C9:99:DA:80:3C:26:B7:D5:C0:EC:83:66 Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C36 Signing time: Fri 18 Jul 2025 18:50:51 +0000 Manifest this update: Fri 18 Jul 2025 18:50:51 +0000 Manifest next update: Fri 25 Jul 2025 18:50:51 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: n50yoBZrejLU9soJ2TsrN38DNJwqeWtnTKn+8oFb/kU=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 18:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3156 (0xc54) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Jul 18 18:50:51 2025 GMT Not After : Jul 25 18:50:51 2025 GMT Subject: CN=687a978b-0a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:53:2a:2b:dc:85:c2:4b:3c:d5:72:13:ab:a4: d8:10:51:2d:34:e4:d0:c9:4d:a5:0c:66:3f:72:f8: 25:c7:d7:d2:8d:7f:b8:4c:46:c2:8a:34:88:8f:15: 80:f4:ae:82:78:2a:1f:f6:03:67:e3:de:b4:ab:ec: 55:1a:69:66:a6:54:b6:7f:55:35:32:d4:48:6f:08: f9:84:d6:f0:88:d9:24:35:2a:58:7c:2f:31:5d:52: c7:66:c3:9f:5c:94:20:14:20:e3:15:57:21:d5:96: 76:30:a4:1b:f5:93:a9:7b:93:ae:fd:1b:14:1f:75: 42:96:92:92:f3:c9:27:5f:f8:0b:c0:a8:eb:12:a9: 95:ca:72:30:74:5f:58:56:f3:c1:d6:1c:05:7f:7e: 0f:9b:ca:f2:b5:27:88:df:d9:28:70:32:7e:65:8d: f7:55:ef:be:20:be:65:11:37:e8:3d:83:b0:d4:66: 79:6c:7b:6f:a3:1d:3b:6c:44:53:a2:95:24:25:ca: 7e:c0:e3:c5:64:37:27:cf:d3:a2:74:bf:e3:45:7c: 5f:71:3d:e4:42:5e:b1:2e:c4:6d:3c:af:9b:f7:92: 3a:43:7b:d6:82:8c:cf:00:45:21:bc:36:ef:50:56: d8:f4:a3:96:2c:cd:b9:a8:bb:46:08:2b:9b:31:f5: 8d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E2:9C:76:A2:DA:90:6F:C9:99:DA:80:3C:26:B7:D5:C0:EC:83:66 X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption aa:46:9f:96:d7:0a:dc:a6:cc:d2:4e:af:e0:64:41:86:e5:85: df:b9:f8:e9:bc:37:65:d6:9f:ab:b9:d5:57:05:40:c2:6b:07: 6c:2b:7d:14:00:66:a0:b5:50:6d:cb:98:e8:f2:03:f4:e4:28: 9a:5d:d0:95:78:75:f4:33:e8:44:a9:da:bd:09:25:7a:f0:83: 24:f6:94:af:f7:b2:c7:8d:bd:b7:90:5e:f8:da:00:1c:45:86: c6:71:60:cf:06:e4:83:26:78:1b:4a:ea:a8:8d:4e:9e:77:63: 41:86:c8:c6:98:29:19:36:a6:7c:0f:2a:dc:30:aa:98:56:38: 44:6e:b6:be:94:b0:d8:ca:0e:24:d6:1d:02:97:a7:88:9c:76: f4:9a:7e:8b:fc:25:95:b5:fb:4a:d3:c3:e0:a1:23:e4:34:b0: 89:fb:97:3c:30:47:f3:b9:e7:d0:cf:b1:2d:0b:18:ef:f9:0b: be:cf:ea:38:78:d0:ad:9a:ee:6f:de:94:28:7f:84:81:37:1d: 69:d0:92:65:ec:f8:9f:5f:a6:08:4a:6e:b2:00:db:87:85:99: 6f:92:92:34:37:1f:f6:d7:20:97:85:51:6f:9d:60:65:cd:ac: 43:9c:1d:2f:3f:d5:3c:d1:fb:47:50:c6:57:7e:0a:75:b9:84: 60:fe:85:e8 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDFQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwNzE4MTg1MDUxWhcNMjUwNzI1MTg1MDUxWjAYMRYwFAYD VQQDEw02ODdhOTc4Yi0wYTE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArlMqK9yFwks81XITq6TYEFEtNOTQyU2lDGY/cvglx9fSjX+4TEbCijSIjxWA 9K6CeCof9gNn4960q+xVGmlmplS2f1U1MtRIbwj5hNbwiNkkNSpYfC8xXVLHZsOf XJQgFCDjFVch1ZZ2MKQb9ZOpe5Ou/RsUH3VClpKS88knX/gLwKjrEqmVynIwdF9Y VvPB1hwFf34Pm8rytSeI39kocDJ+ZY33Ve++IL5lETfoPYOw1GZ5bHtvox07bERT opUkJcp+wOPFZDcnz9OidL/jRXxfcT3kQl6xLsRtPK+b95I6Q3vWgozPAEUhvDbv UFbY9KOWLM25qLtGCCubMfWN2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDHinHai 2pBvyZnagDwmt9XA7INmMB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCqRp+W1wrcpszSTq/gZEGG5YXfufjpvDdl1p+rudVXBUDCawdsK30U AGagtVBty5jo8gP05CiaXdCVeHX0M+hEqdq9CSV68IMk9pSv97LHjb23kF742gAc RYbGcWDPBuSDJngbSuqojU6ed2NBhsjGmCkZNqZ8DyrcMKqYVjhEbra+lLDYyg4k 1h0Cl6eInHb0mn6L/CWVtftK08PgoSPkNLCJ+5c8MEfzuefQz7EtCxjv+Qu+z+o4 eNCtmu5v3pQof4SBNx1p0JJl7PifX6YISm6yANuHhZlvkpI0Nx/21yCXhVFvnWBl zaxDnB0vP9U80ftHUMZXfgp1uYRg/oXo -----END CERTIFICATE-----Generated at Sun Jul 20 11:45:35 2025 by rpki-client