$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: cPIdfeqJN8LpfxDAEzxY9VR+Oa2JtD6W5sheKA8Ci8Y= Subject key identifier: 1A:58:A0:1D:EE:2B:DA:27:D0:14:3E:9F:E9:A0:69:B9:F3:DB:25:C2 Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 02B2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 02AD Signing time: Fri 05 Sep 2025 01:51:49 +0000 Manifest this update: Fri 05 Sep 2025 01:51:48 +0000 Manifest next update: Fri 12 Sep 2025 01:51:48 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: UpfsfkjOPYemn5RFQuKFCq8K94hsIX+H+FszSNG68fM=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 01:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 690 (0x2b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Sep 5 01:51:48 2025 GMT Not After : Sep 12 01:51:48 2025 GMT Subject: CN=68ba4234-7803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:99:86:60:d9:68:03:d9:81:74:cc:a1:2b:f8: 00:8d:e1:0a:67:fd:6d:f0:e6:32:a6:40:0c:ab:1e: 22:30:6f:b8:d8:d3:af:64:65:03:e8:92:cd:1c:49: 7a:92:40:4d:8d:bd:e7:5c:5e:56:86:41:c0:d4:bc: ca:5c:97:cb:9b:2e:ec:ab:ea:15:75:8b:3a:22:27: eb:c7:9f:72:33:77:7e:77:0a:ac:ff:d1:38:8d:b8: 00:ff:52:18:7b:4d:e5:c4:3e:73:64:5a:72:df:af: c4:f0:e7:63:6a:87:38:4c:1b:e9:50:5b:e3:76:18: 25:82:37:2a:6d:a7:a6:cd:ed:7d:23:a7:08:6c:a5: 08:1d:22:82:45:e5:ac:02:30:50:bc:3e:84:7a:08: 30:64:a5:c7:e4:7d:80:28:e2:99:ac:d5:ac:b2:fd: d9:84:91:52:04:8a:5c:27:46:24:2b:18:a9:8d:44: 32:0f:74:51:38:9d:86:5b:98:b8:ac:52:0e:6c:8c: b1:d0:96:9d:31:7b:34:26:f2:fc:32:f6:91:a4:3e: 02:1e:c1:16:a0:db:9a:ce:09:11:70:be:83:82:0a: d1:60:87:a3:95:b0:f1:07:93:79:73:4a:fa:3b:27: 1d:2c:de:c2:3c:2e:15:96:c1:7a:1c:b3:05:d2:73: f1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:58:A0:1D:EE:2B:DA:27:D0:14:3E:9F:E9:A0:69:B9:F3:DB:25:C2 X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1a:cf:3f:35:4b:38:ac:98:ec:99:5e:10:49:c4:bf:e9:05:72: fc:a1:0a:0e:07:fe:b0:70:f1:76:9b:9c:ec:ea:42:3c:21:8a: fa:1e:e1:ee:e6:83:09:ad:c4:ba:2c:e0:ea:28:4c:66:1e:98: 88:ff:08:11:1d:56:e3:7f:b8:99:39:b8:31:fd:27:68:58:81: 02:97:01:e2:e0:4d:c4:05:a6:86:01:e4:bf:f4:72:5b:3e:63: 50:44:78:eb:3f:d4:46:3c:4a:d7:5a:e8:ee:98:bf:73:9d:02: 24:40:6b:ee:28:26:d6:c8:03:45:71:2f:f0:f6:fb:d2:bf:6c: 51:b6:9c:84:11:f9:7c:c4:3c:8a:de:3e:92:25:4a:1b:f8:87: eb:2f:f4:56:6d:0a:10:e6:84:ca:81:85:78:dc:1e:7e:51:02: 35:45:9f:cc:c0:9d:38:87:19:69:17:0d:2a:67:58:64:2c:25: 80:75:15:1b:03:7f:f8:46:85:31:8d:d0:b2:c6:e5:e8:4d:85: 00:48:40:94:20:95:ca:07:f0:8d:a2:93:52:49:e2:20:c5:8f: f9:1f:d1:89:f6:35:ee:85:e6:41:ff:85:a3:5f:1c:ae:99:42: e6:c5:2c:ba:4b:65:ea:3f:16:2d:ee:ae:7b:52:81:df:eb:8b: 1a:16:ec:6f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICArIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUwOTA1MDE1MTQ4WhcNMjUwOTEyMDE1MTQ4WjAYMRYwFAYD VQQDEw02OGJhNDIzNC03ODAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqJmGYNloA9mBdMyhK/gAjeEKZ/1t8OYypkAMqx4iMG+42NOvZGUD6JLNHEl6 kkBNjb3nXF5WhkHA1LzKXJfLmy7sq+oVdYs6Iifrx59yM3d+dwqs/9E4jbgA/1IY e03lxD5zZFpy36/E8Odjaoc4TBvpUFvjdhglgjcqbaemze19I6cIbKUIHSKCReWs AjBQvD6EeggwZKXH5H2AKOKZrNWssv3ZhJFSBIpcJ0YkKxipjUQyD3RROJ2GW5i4 rFIObIyx0JadMXs0JvL8MvaRpD4CHsEWoNuazgkRcL6DggrRYIejlbDxB5N5c0r6 OycdLN7CPC4VlsF6HLMF0nPx2QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBpYoB3u K9on0BQ+n+mgabnz2yXCMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAazz81SzismOyZXhBJxL/pBXL8oQoOB/6wcPF2m5zs6kI8IYr6HuHu 5oMJrcS6LODqKExmHpiI/wgRHVbjf7iZObgx/SdoWIEClwHi4E3EBaaGAeS/9HJb PmNQRHjrP9RGPErXWujumL9znQIkQGvuKCbWyANFcS/w9vvSv2xRtpyEEfl8xDyK 3j6SJUob+IfrL/RWbQoQ5oTKgYV43B5+UQI1RZ/MwJ04hxlpFw0qZ1hkLCWAdRUb A3/4RoUxjdCyxuXoTYUASECUIJXKB/CNopNSSeIgxY/5H9GJ9jXuheZB/4WjXxyu mULmxSy6S2XqPxYt7q57UoHf64saFuxv -----END CERTIFICATE-----Generated at Sat Sep 6 16:31:09 2025 by rpki-client