$ rpki-client -vvf rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft File: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft (raw, json) Hash identifier: nazV0oMYorVq8pvsJGrwAwPMonjjEIMz5/8DToJrGj8= Subject key identifier: 8A:9F:2E:0B:01:96:6B:74:F3:51:F5:48:48:51:0A:23:77:FE:80:90 Authority key identifier: E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D Certificate issuer: /CN=A911954F/serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D Certificate serial: 015F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft Manifest number: 0245 Signing time: Wed 17 Sep 2025 04:46:06 +0000 Manifest this update: Wed 17 Sep 2025 04:46:05 +0000 Manifest next update: Wed 24 Sep 2025 04:46:05 +0000 Files and hashes: 1: 6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl (hash: 3ywotpcSksmlw2weDCro0YXZjQKbmZvSt2MNNEb5X+w=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 351 (0x15f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911954F, serialNumber=E98EECB730F1A94A66A9B512FC775778C600830D Validity Not Before: Sep 17 04:46:05 2025 GMT Not After : Sep 24 04:46:05 2025 GMT Subject: CN=68ca3d0d-e95b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:fc:de:6b:25:24:70:41:d2:44:c9:78:e7:8d: 17:2f:ac:64:85:cf:b9:e0:5a:24:6c:bd:ab:90:9e: 7b:f4:29:0e:55:45:72:10:ae:9c:74:d2:4e:6e:22: 38:16:bf:c0:fd:95:05:77:74:5a:16:45:75:c0:eb: b0:ff:04:70:68:d0:a6:f9:34:cb:8e:24:60:35:11: a6:ba:84:2c:6c:c3:d8:bb:27:c7:d9:35:e6:0f:22: 15:58:a1:12:cb:b2:f8:dc:ab:4b:bd:82:6f:db:ff: 5c:2d:b9:15:5e:69:fa:b7:6a:5a:3b:41:6e:16:b7: c5:f0:0d:ca:03:fc:54:69:63:ce:39:06:89:88:89: 4c:f5:aa:18:ce:74:19:ce:4f:db:1f:e0:7e:1b:06: aa:01:90:45:63:ef:19:04:0a:6c:23:be:21:79:d6: e5:3f:66:2d:ec:4b:de:92:24:7a:81:73:1e:b5:df: cb:36:27:64:0c:a5:b4:fc:3f:02:5a:a4:f2:43:a9: df:b2:05:57:b3:a7:0f:2e:77:de:50:70:0a:8f:e1: 8a:b7:74:d5:f1:3a:85:ce:69:29:44:8e:18:29:b8: 38:e9:64:74:3b:67:af:cc:5f:8d:82:ed:0e:71:7b: 78:2e:e7:6d:22:49:d6:02:c9:56:f0:36:f9:55:28: 05:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:9F:2E:0B:01:96:6B:74:F3:51:F5:48:48:51:0A:23:77:FE:80:90 X509v3 Authority Key Identifier: keyid:E9:8E:EC:B7:30:F1:A9:4A:66:A9:B5:12:FC:77:57:78:C6:00:83:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6Y7stzDxqUpmqbUS_HdXeMYAgw0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911954F/591A3220914A11EE942CC871C4F9AE02/6Y7stzDxqUpmqbUS_HdXeMYAgw0.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:63:04:de:d4:f1:26:bb:3a:57:b3:d9:84:f2:8c:4b:c2: 15:7f:bc:4d:56:a9:9d:85:3e:d4:0d:55:b6:62:48:04:be:96: 87:b1:7f:fe:80:b0:f5:a0:29:f9:ca:87:00:09:78:8c:bd:7f: 38:a3:80:4e:f0:52:0d:47:ea:6c:a9:dd:65:84:4b:4c:3b:03: 52:95:5b:e7:8d:db:fc:c4:16:e1:8f:6b:9c:8b:24:f8:fa:6a: d5:d0:c8:b1:04:61:7e:d4:f0:93:19:6e:09:53:b6:8b:b1:32: 88:c2:9e:a0:c8:7b:89:b9:ca:c4:d9:01:4b:fc:87:b5:b6:4b: b6:ff:13:9a:c5:a6:0f:14:9f:72:52:22:ce:ea:d1:d9:36:f1: 54:23:f2:a8:a5:5e:f4:b3:f4:58:67:bd:5d:2f:8e:8c:01:4f: 48:8a:76:fe:60:cb:3a:da:b9:d8:0f:c6:96:19:d2:e9:b2:43: 29:13:01:ad:82:b5:c3:6f:55:4a:a3:ce:a3:99:70:37:d2:18: b3:2b:fa:0f:c3:71:1c:e7:9b:0c:ae:df:4f:95:b5:c1:e5:fc: 36:e7:43:86:eb:40:62:a3:c5:97:ea:6c:3a:f9:ac:46:bb:70: 67:fe:eb:98:b5:70:86:5e:05:2e:4d:40:7d:1d:18:ed:f3:be: f3:d5:e7:6c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTk1NEYxMTAvBgNVBAUTKEU5OEVFQ0I3MzBGMUE5NEE2NkE5QjUxMkZDNzc1Nzc4 QzYwMDgzMEQwHhcNMjUwOTE3MDQ0NjA1WhcNMjUwOTI0MDQ0NjA1WjAYMRYwFAYD VQQDEw02OGNhM2QwZC1lOTViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt/zeayUkcEHSRMl4540XL6xkhc+54FokbL2rkJ579CkOVUVyEK6cdNJObiI4 Fr/A/ZUFd3RaFkV1wOuw/wRwaNCm+TTLjiRgNRGmuoQsbMPYuyfH2TXmDyIVWKES y7L43KtLvYJv2/9cLbkVXmn6t2paO0FuFrfF8A3KA/xUaWPOOQaJiIlM9aoYznQZ zk/bH+B+GwaqAZBFY+8ZBApsI74hedblP2Yt7EvekiR6gXMetd/LNidkDKW0/D8C WqTyQ6nfsgVXs6cPLnfeUHAKj+GKt3TV8TqFzmkpRI4YKbg46WR0O2evzF+Ngu0O cXt4LudtIknWAslW8Db5VSgFjwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIqfLgsB lmt081H1SEhRCiN3/oCQMB8GA1UdIwQYMBaAFOmO7Lcw8alKZqm1Evx3V3jGAIMN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExOTU0Ri81OTFBMzIyMDkx NEExMUVFOTQyQ0M4NzFDNEY5QUUwMi82WTdzdHpEeHFVcG1xYlVTX0hkWGVNWUFn dzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZZN3N0ekR4cVVwbXFiVVNfSGRYZU1ZQWd3MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx OTU0Ri81OTFBMzIyMDkxNEExMUVFOTQyQ0M4NzFDNEY5QUUwMi82WTdzdHpEeHFV cG1xYlVTX0hkWGVNWUFndzAubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBTKWME3tTxJrs6V7PZhPKMS8IVf7xNVqmdhT7UDVW2YkgEvpaHsX/+ gLD1oCn5yocACXiMvX84o4BO8FINR+psqd1lhEtMOwNSlVvnjdv8xBbhj2uciyT4 +mrV0MixBGF+1PCTGW4JU7aLsTKIwp6gyHuJucrE2QFL/Ie1tku2/xOaxaYPFJ9y UiLO6tHZNvFUI/KopV70s/RYZ71dL46MAU9Iinb+YMs62rnYD8aWGdLpskMpEwGt grXDb1VKo86jmXA30hizK/oPw3Ec55sMrt9PlbXB5fw250OG60Bio8WX6mw6+axG u3Bn/uuYtXCGXgUuTUB9HRjt877z1eds -----END CERTIFICATE-----Generated at Fri Sep 19 02:49:11 2025 by rpki-client