$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: uxlceyFT+8YlBtROAIi7vBWRJdKf1/raTO9XUw49g2I= Subject key identifier: 07:63:A5:C1:55:99:20:3A:54:5A:5B:D1:47:5B:1A:0A:B6:81:8A:2E Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 01A0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 019C Signing time: Sat 19 Jul 2025 03:34:11 +0000 Manifest this update: Sat 19 Jul 2025 03:34:11 +0000 Manifest next update: Sat 26 Jul 2025 03:34:11 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: fiOFR9nn9EtKRGn4nEV9aMNj7eW+sCO7n3C+HX+I2S0=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 03:34:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Jul 19 03:34:11 2025 GMT Not After : Jul 26 03:34:11 2025 GMT Subject: CN=687b1233-d1d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:06:81:d5:e5:ef:12:70:48:dc:38:73:4a:d5: 90:19:be:2a:ef:5c:96:fe:77:5a:9e:c0:d1:65:11: d5:3d:51:75:6e:a3:a4:b2:db:b1:2d:07:a9:6c:10: b5:6f:cf:91:f8:9a:65:30:c2:1f:c8:65:cb:bc:00: 80:9f:c4:af:e8:a5:f8:df:7a:26:f1:de:4b:6f:48: 8b:41:0b:7c:86:27:05:24:a9:ea:e6:47:96:9e:fa: 97:5e:16:56:88:b7:b5:46:b4:b7:da:32:d5:19:3d: 0b:36:25:86:8d:f2:32:df:d2:6a:4e:86:ef:2f:96: 65:c4:97:93:9a:c0:91:87:f7:b8:52:ae:af:fd:1e: cd:d2:f2:0e:c5:b0:aa:77:78:d3:93:4e:75:d9:63: 6d:fe:29:e7:34:c1:da:b6:e1:dd:ab:3c:b2:4f:99: b0:29:c6:27:9f:d4:43:19:b1:f9:f3:1f:43:81:96: 03:6a:e9:5b:5b:d9:bb:e9:ce:27:53:60:8d:ad:2f: 87:ff:00:c9:51:a8:89:1a:8a:2a:b7:aa:f6:11:da: 1a:75:db:35:21:d6:c4:86:af:04:89:c4:3b:96:24: f4:22:27:47:ef:57:89:5a:03:c3:ee:25:0c:19:93: 68:1e:2a:64:7f:bc:c7:46:d4:2b:d1:0e:64:e0:d6: 40:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:63:A5:C1:55:99:20:3A:54:5A:5B:D1:47:5B:1A:0A:B6:81:8A:2E X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:b2:8d:b3:76:86:e1:b7:af:43:0e:13:0f:57:b1:54:89:d7: b2:08:82:27:e7:ea:80:2c:af:9d:a0:2c:54:05:8f:a0:c0:59: 78:0d:9b:83:6a:4c:38:1d:99:d1:5a:54:8d:23:7c:df:8b:17: b6:8a:4b:ff:b4:83:01:03:76:12:3c:5b:55:8b:b5:05:19:e3: 41:ee:00:7d:23:35:fa:f0:e6:c3:48:2c:14:1d:1c:df:57:af: b0:5b:fd:de:57:5e:84:c2:dc:a8:d4:d2:0c:26:c0:0c:72:3a: 5d:cf:30:34:be:09:5a:f3:67:a3:e5:88:7b:55:09:5c:f7:65: c6:ba:a7:04:ac:1d:27:b4:af:3d:a7:85:53:63:f0:c6:00:f2: bc:e5:c4:13:81:54:ac:c2:41:e4:4b:db:d7:a9:96:66:c2:a9: f0:a1:69:b7:98:79:12:a1:a8:8d:2d:6d:70:82:6e:00:fc:0a: 2d:73:08:7e:df:88:32:5c:d6:0d:a8:7b:65:82:11:1e:ce:c7: 6d:af:5b:25:29:fa:1f:55:0e:7e:26:fe:4d:51:d8:a4:ef:a6: 36:92:25:0d:cf:c1:7e:b3:fa:85:1e:12:3f:0d:df:a7:da:c2: 5a:57:e9:85:01:d7:c3:30:e6:11:42:2c:62:ee:7f:f2:05:f1: af:1f:fd:de -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjUwNzE5MDMzNDExWhcNMjUwNzI2MDMzNDExWjAYMRYwFAYD VQQDEw02ODdiMTIzMy1kMWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzAaB1eXvEnBI3DhzStWQGb4q71yW/ndansDRZRHVPVF1bqOkstuxLQepbBC1 b8+R+JplMMIfyGXLvACAn8Sv6KX433om8d5Lb0iLQQt8hicFJKnq5keWnvqXXhZW iLe1RrS32jLVGT0LNiWGjfIy39JqTobvL5ZlxJeTmsCRh/e4Uq6v/R7N0vIOxbCq d3jTk0512WNt/innNMHatuHdqzyyT5mwKcYnn9RDGbH58x9DgZYDaulbW9m76c4n U2CNrS+H/wDJUaiJGooqt6r2Edoadds1IdbEhq8EicQ7liT0IidH71eJWgPD7iUM GZNoHipkf7zHRtQr0Q5k4NZATQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAdjpcFV mSA6VFpb0UdbGgq2gYouMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANso2zdobht69DDhMPV7FUideyCIIn5+qALK+doCxUBY+gwFl4DZuD akw4HZnRWlSNI3zfixe2ikv/tIMBA3YSPFtVi7UFGeNB7gB9IzX68ObDSCwUHRzf V6+wW/3eV16Ewtyo1NIMJsAMcjpdzzA0vgla82ej5Yh7VQlc92XGuqcErB0ntK89 p4VTY/DGAPK85cQTgVSswkHkS9vXqZZmwqnwoWm3mHkSoaiNLW1wgm4A/Aotcwh+ 34gyXNYNqHtlghEezsdtr1slKfofVQ5+Jv5NUdik76Y2kiUNz8F+s/qFHhI/Dd+n 2sJaV+mFAdfDMOYRQixi7n/yBfGvH/3e -----END CERTIFICATE-----Generated at Sun Jul 20 11:06:43 2025 by rpki-client