$ rpki-client -vvf rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft File: h6R_J-defCg5wTM1HaJRFILG-bQ.mft (raw, json) Hash identifier: QaA7qjCyx2XHk9ex7xeVa1+9j7sy/SvVQYTsrVMyI4g= Subject key identifier: A9:B7:E3:A2:6F:8C:BC:67:71:6D:F5:DC:EC:D0:2E:35:11:D0:36:0C Authority key identifier: 87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 Certificate issuer: /CN=A911C621/serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Certificate serial: 0235 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft Manifest number: 0215 Signing time: Fri 05 Sep 2025 02:38:23 +0000 Manifest this update: Fri 05 Sep 2025 02:38:23 +0000 Manifest next update: Fri 12 Sep 2025 02:38:23 +0000 Files and hashes: 1: h6R_J-defCg5wTM1HaJRFILG-bQ.crl (hash: 1ZUSYHcz1A9C556xk2yGD1vOMsJYiR6MakU/SUoIUSQ=) 2: 0863E3F642DA11F0AAB03C37C4F9AE02.roa (hash: Tf/IGi1ICXtoXaqQ78IcykbXi91E4+JpuO9PMd4skSo=) 3: 7E7B632E8D6611EDB7F20B1FC4F9AE02.roa (hash: kCFs9nmPiAnIcv8oJpJvtJLqB5yozfBXxDX1yoHDz3Q=) 4: 7D7547C48D6611EDB7F20B1FC4F9AE02.roa (hash: 15pVERijhw/wdJE16SjLjUvjRTutNcev/TWYcbcb+WY=) 5: 5D21607ADDF211EDA14C0C56C4F9AE02.roa (hash: qXl8VijXeUBq5YZGQbPFuyGm9qVJaEd0Hn4beaPuvSE=) 6: 1D956B9E858811ED9CDCC91BC4F9AE02.roa (hash: SS3DT3rVQ2RIIspyHG3PNw/Nkcbg7KmAnjQNkHYA/tU=) 7: E4DFE77CD77E11ED8E33F181C4F9AE02.roa (hash: 5xN+Wv93iJltArr43SjcRaq1i5ZKH/wlPD32n7ycLFk=) 8: 07A28E0E42DA11F0AAB03C37C4F9AE02.roa (hash: 6Dj2SuYopnU3KhVpEQsxoPjoZpbXyzCQPJ+pNdncb7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:38:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 565 (0x235) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C621, serialNumber=87A47F27E75E7C2839C133351DA2511482C6F9B4 Validity Not Before: Sep 5 02:38:23 2025 GMT Not After : Sep 12 02:38:23 2025 GMT Subject: CN=68ba4d1f-2d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:37:a6:77:66:12:57:c0:a0:e4:89:9c:ec: ef:ff:f7:75:e3:7c:b2:bb:1d:7d:f3:95:f1:76:43: f4:ff:e7:50:fb:1b:e1:ab:e7:fb:98:ff:cd:f7:bb: 1b:db:ad:c4:83:fe:fa:5a:49:af:d3:bd:74:b8:c6: c8:d4:fb:f9:2b:46:70:73:f9:f6:ee:81:96:58:07: 98:0e:08:b0:41:c9:88:91:dd:ff:1a:64:96:c8:bc: bf:f4:e2:bc:ac:59:19:56:93:dc:2a:43:93:9b:6e: ae:fd:ab:43:98:7a:1a:6f:87:04:4e:7c:90:c7:33: fa:31:86:97:05:4d:09:64:d2:1f:2d:3b:2d:28:5b: cd:f3:44:e7:f2:0f:f6:14:2b:ae:3d:b2:63:2a:fc: b2:06:8b:a7:e8:7e:b5:47:18:b1:94:e3:b5:61:79: 64:fa:a2:aa:51:e8:45:e9:d6:1d:95:5f:3f:e8:c0: 64:dc:81:7a:b1:78:f6:d3:9e:ad:26:8d:7b:17:ca: 74:ce:6d:84:d6:98:ab:cf:2e:27:ae:66:ab:b1:e4: 9f:34:d4:65:1d:07:43:48:de:c4:eb:38:fe:26:43: 36:fd:f6:5c:ed:8b:eb:49:51:ea:e0:5a:1b:b0:ab: 5c:71:cd:6b:96:29:9f:69:1c:c6:b5:c2:28:9b:fa: 4a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B7:E3:A2:6F:8C:BC:67:71:6D:F5:DC:EC:D0:2E:35:11:D0:36:0C X509v3 Authority Key Identifier: keyid:87:A4:7F:27:E7:5E:7C:28:39:C1:33:35:1D:A2:51:14:82:C6:F9:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h6R_J-defCg5wTM1HaJRFILG-bQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C621/F7D00BEE743911ED986D7385C4F9AE02/h6R_J-defCg5wTM1HaJRFILG-bQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 06:c3:2d:de:24:0c:0f:2b:48:6e:8f:a8:90:8e:6a:70:3c:93: c2:62:1b:0f:44:69:48:55:9e:b5:ec:91:b5:24:12:cd:75:f3: 1a:47:15:0b:f2:3c:40:dd:20:b1:f7:84:cd:52:ec:93:55:3a: a7:74:37:f6:45:51:52:17:25:f5:5a:9d:48:bb:f6:d4:5d:23: 21:9b:44:af:b2:c5:52:7c:73:96:37:94:57:f7:3d:ba:13:9e: 71:bc:15:81:b3:05:1f:8b:3e:0a:e5:f6:8d:69:b1:4b:ed:ac: 79:86:3f:f1:a0:d9:bf:16:ab:4d:14:85:1f:f1:14:66:aa:9f: bf:2c:e0:d7:d1:da:08:8b:f0:d8:88:c6:ca:b3:d6:a8:b2:44: 05:00:08:55:9c:d8:22:b0:28:e9:48:ad:20:75:fe:a1:c7:b4: f7:d4:38:ab:9f:4a:13:bf:91:ef:91:a6:45:b5:29:a2:63:d3: ab:e4:e1:d9:02:e6:5f:34:c8:ab:7d:a9:60:bd:28:7e:89:4f: 37:67:6f:43:45:4c:62:a5:97:f0:1e:e5:bd:94:40:ec:66:29: ea:1e:51:fb:b9:4f:bb:6d:3c:cd:4a:61:15:ee:8e:3b:d6:9d: 14:7f:a5:37:8e:de:ca:c1:91:b3:44:95:63:bc:20:31:85:97: fb:83:e3:2c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM2MjExMTAvBgNVBAUTKDg3QTQ3RjI3RTc1RTdDMjgzOUMxMzMzNTFEQTI1MTE0 ODJDNkY5QjQwHhcNMjUwOTA1MDIzODIzWhcNMjUwOTEyMDIzODIzWjAYMRYwFAYD VQQDEw02OGJhNGQxZi0yZDI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr03pndmElfAoOSJnOzv//d143yyux1985XxdkP0/+dQ+xvhq+f7mP/N97sb 263Eg/76Wkmv0710uMbI1Pv5K0Zwc/n27oGWWAeYDgiwQcmIkd3/GmSWyLy/9OK8 rFkZVpPcKkOTm26u/atDmHoab4cETnyQxzP6MYaXBU0JZNIfLTstKFvN80Tn8g/2 FCuuPbJjKvyyBoun6H61RxixlOO1YXlk+qKqUehF6dYdlV8/6MBk3IF6sXj2056t Jo17F8p0zm2E1pirzy4nrmarseSfNNRlHQdDSN7E6zj+JkM2/fZc7YvrSVHq4Fob sKtccc1rlimfaRzGtcIom/pKcwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKm346Jv jLxncW313OzQLjUR0DYMMB8GA1UdIwQYMBaAFIekfyfnXnwoOcEzNR2iURSCxvm0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzYyMS9GN0QwMEJFRTc0 MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZDZzV3VE0xSGFKUkZJTEct YlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g2Ul9KLWRlZkNnNXdUTTFIYUpSRklMRy1iUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QzYyMS9GN0QwMEJFRTc0MzkxMUVEOTg2RDczODVDNEY5QUUwMi9oNlJfSi1kZWZD ZzV3VE0xSGFKUkZJTEctYlEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAGwy3eJAwPK0huj6iQjmpwPJPCYhsPRGlIVZ617JG1JBLNdfMaRxUL 8jxA3SCx94TNUuyTVTqndDf2RVFSFyX1Wp1Iu/bUXSMhm0SvssVSfHOWN5RX9z26 E55xvBWBswUfiz4K5faNabFL7ax5hj/xoNm/FqtNFIUf8RRmqp+/LODX0doIi/DY iMbKs9aoskQFAAhVnNgisCjpSK0gdf6hx7T31Dirn0oTv5HvkaZFtSmiY9Or5OHZ AuZfNMirfalgvSh+iU83Z29DRUxipZfwHuW9lEDsZinqHlH7uU+7bTzNSmEV7o47 1p0Uf6U3jt7KwZGzRJVjvCAxhZf7g+Ms -----END CERTIFICATE-----Generated at Fri Sep 5 10:56:26 2025 by rpki-client