$ rpki-client -vvf rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft File: 6XH_tEATQSECHGJem3DrGuWij2A.mft (raw, json) Hash identifier: hrYFCwi9fuPtBubUPsntq7N4zjAxHF03Mk28LevVLPw= Subject key identifier: 62:26:5C:AE:BD:D4:57:0A:46:06:D8:76:09:F2:60:56:33:96:6D:B5 Authority key identifier: E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 Certificate issuer: /CN=A911EDE5/serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Certificate serial: 0D76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft Manifest number: 0D6D Signing time: Mon 08 Sep 2025 18:00:21 +0000 Manifest this update: Mon 08 Sep 2025 18:00:21 +0000 Manifest next update: Mon 15 Sep 2025 18:00:21 +0000 Files and hashes: 1: 6XH_tEATQSECHGJem3DrGuWij2A.crl (hash: 8nj30CPS2TOIlhUSCP7FigcSpTwyQm57QyXK6EwaQCM=) 2: 89D124B6D51311E98A41293BC4F9AE02.roa (hash: mbBxOC4AR4Py/kqSr6p/HUSw4E4voxLVh0FwxIMWx+Y=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3446 (0xd76) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911EDE5, serialNumber=E971FFB440134121021C625E9B70EB1AE5A28F60 Validity Not Before: Sep 8 18:00:21 2025 GMT Not After : Sep 15 18:00:21 2025 GMT Subject: CN=68bf19b5-3aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e2:b8:c9:f0:0e:06:8a:a3:5c:f1:cd:8d:cd: 05:11:b8:94:c9:1b:62:f6:2b:c7:f8:7b:2c:63:ba: 6e:d9:51:36:62:71:75:4d:02:54:a0:7f:ad:f1:88: 39:af:7f:78:f6:f3:7a:c3:8a:2b:03:fc:ba:d3:24: 58:fd:6e:3c:63:de:3d:05:e1:6f:69:f4:ec:70:29: 06:5d:b0:a2:a1:cb:7a:ff:a1:13:b4:a5:de:c8:6c: 17:a5:d0:ec:c3:37:bb:ac:37:f3:ee:5e:ec:6c:23: 74:e3:d3:fd:14:00:c0:36:5a:40:15:3d:aa:14:d7: 8a:b2:55:0a:ce:a6:2e:72:0c:cf:9a:71:9a:f0:e0: 76:8e:1d:59:4a:38:83:13:bb:d4:e7:0c:39:94:4e: 27:3e:df:83:27:88:f5:d3:f5:ff:2e:cf:8f:e2:f3: d4:eb:04:2f:12:c8:0d:f4:44:60:6d:00:1d:60:55: 94:45:6b:9b:db:07:01:d1:c9:6a:d1:bc:08:b9:cb: 6c:bb:13:74:68:a7:01:94:61:7f:34:1f:d1:7a:46: 3f:42:3a:66:99:5a:43:e1:fe:c7:b8:1f:0d:9a:39: 1f:8c:54:f4:ac:48:85:d1:52:b8:3d:fa:6f:a2:46: 19:40:d8:54:76:8c:b1:77:6c:37:c5:27:8a:f4:b6: 83:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:26:5C:AE:BD:D4:57:0A:46:06:D8:76:09:F2:60:56:33:96:6D:B5 X509v3 Authority Key Identifier: keyid:E9:71:FF:B4:40:13:41:21:02:1C:62:5E:9B:70:EB:1A:E5:A2:8F:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6XH_tEATQSECHGJem3DrGuWij2A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911EDE5/B3BF758AD51211E9B643ED39C4F9AE02/6XH_tEATQSECHGJem3DrGuWij2A.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 77:bf:98:08:7a:9b:40:2e:07:a3:f6:f7:f5:2b:f5:72:42:39: 04:1e:a1:74:1d:8f:1b:a0:4e:d6:8a:31:79:2a:ac:26:0d:8f: 53:00:cf:93:d6:2f:68:3e:c0:3d:57:dc:54:d8:a8:5f:84:c6: 3a:f7:1d:2a:53:3e:56:ff:c6:15:49:58:f6:f5:77:bf:cd:ac: 1d:60:08:b2:80:d6:d8:97:18:0a:8f:93:5b:13:36:cd:bc:cf: 2e:fa:c7:4b:32:68:69:6d:82:ef:9d:05:27:dc:b7:a9:e3:d3: 8e:b5:20:9e:77:d2:e4:7f:ee:70:57:8e:9b:c5:72:d0:cb:f7: 9e:c0:6d:ab:96:f1:4f:dd:00:99:3b:44:e2:d6:08:3c:97:3f: d0:9f:25:9d:5b:79:f7:32:46:84:38:30:6c:a6:1e:27:68:f5: 38:aa:ec:5d:74:57:f3:01:69:de:98:a0:b8:c8:30:dc:ca:3a: 81:9a:dc:1e:f2:ed:99:46:b9:58:5f:9b:56:67:61:f3:07:c0: 1c:2a:dc:d8:ba:59:85:44:82:01:26:96:0f:b7:44:dc:18:db: f1:25:f0:a5:17:50:95:55:d7:91:df:b3:0a:52:c6:a8:c5:86: 86:c7:4e:fe:a6:88:86:75:85:0c:26:dc:23:b7:56:f5:d4:00: eb:24:ef:fd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDXYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUVERTUxMTAvBgNVBAUTKEU5NzFGRkI0NDAxMzQxMjEwMjFDNjI1RTlCNzBFQjFB RTVBMjhGNjAwHhcNMjUwOTA4MTgwMDIxWhcNMjUwOTE1MTgwMDIxWjAYMRYwFAYD VQQDEw02OGJmMTliNS0zYWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAveK4yfAOBoqjXPHNjc0FEbiUyRti9ivH+HssY7pu2VE2YnF1TQJUoH+t8Yg5 r3949vN6w4orA/y60yRY/W48Y949BeFvafTscCkGXbCioct6/6ETtKXeyGwXpdDs wze7rDfz7l7sbCN049P9FADANlpAFT2qFNeKslUKzqYucgzPmnGa8OB2jh1ZSjiD E7vU5ww5lE4nPt+DJ4j10/X/Ls+P4vPU6wQvEsgN9ERgbQAdYFWURWub2wcB0clq 0bwIuctsuxN0aKcBlGF/NB/RekY/QjpmmVpD4f7HuB8NmjkfjFT0rEiF0VK4Pfpv okYZQNhUdoyxd2w3xSeK9LaDYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFGImXK69 1FcKRgbYdgnyYFYzlm21MB8GA1UdIwQYMBaAFOlx/7RAE0EhAhxiXptw6xrloo9g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRURFNS9CM0JGNzU4QUQ1 MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFTRUNIR0plbTNEckd1V2lq MkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZYSF90RUFUUVNFQ0hHSmVtM0RyR3VXaWoyQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RURFNS9CM0JGNzU4QUQ1MTIxMUU5QjY0M0VEMzlDNEY5QUUwMi82WEhfdEVBVFFT RUNIR0plbTNEckd1V2lqMkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB3v5gIeptALgej9vf1K/VyQjkEHqF0HY8boE7WijF5KqwmDY9TAM+T 1i9oPsA9V9xU2KhfhMY69x0qUz5W/8YVSVj29Xe/zawdYAiygNbYlxgKj5NbEzbN vM8u+sdLMmhpbYLvnQUn3Lep49OOtSCed9Lkf+5wV46bxXLQy/eewG2rlvFP3QCZ O0Ti1gg8lz/QnyWdW3n3MkaEODBsph4naPU4quxddFfzAWnemKC4yDDcyjqBmtwe 8u2ZRrlYX5tWZ2HzB8AcKtzYulmFRIIBJpYPt0TcGNvxJfClF1CVVdeR37MKUsao xYaGx07+poiGdYUMJtwjt1b11ADrJO/9 -----END CERTIFICATE-----Generated at Tue Sep 9 03:02:53 2025 by rpki-client