$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft File: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json) Hash identifier: MN8mAClO94PtCxNyI2I+Q1BsTefuqy54Yjsp6nNO4jg= Subject key identifier: B6:A3:AA:CF:65:BA:13:46:63:F0:A2:71:FF:75:39:4F:61:93:29:C8 Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 Certificate issuer: /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Certificate serial: 0B79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft Manifest number: 0B71 Signing time: Sat 06 Sep 2025 19:14:07 +0000 Manifest this update: Sat 06 Sep 2025 19:14:06 +0000 Manifest next update: Sat 13 Sep 2025 19:14:06 +0000 Files and hashes: 1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: HdsWOA4fHOJVQaOLXvAqzd/Z/zkrxT7LM16vkDA/u78=) 2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: EJy7DgILM8z1iO6xDPQ9fjq4rQed/FbUFf1TGO0uQ3M=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 19:14:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2937 (0xb79) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890 Validity Not Before: Sep 6 19:14:06 2025 GMT Not After : Sep 13 19:14:06 2025 GMT Subject: CN=68bc87ff-3a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5d:c6:dd:59:31:21:0f:86:bb:5d:81:ed:dd: 4f:31:03:9f:d7:60:af:0b:b2:8d:39:64:5e:51:e0: 49:2d:81:a0:da:b4:3b:0a:48:18:23:42:d4:5d:f1: 33:62:ff:56:7b:44:d8:9d:e9:d3:78:db:f2:01:6e: 5d:cd:9a:81:8f:12:4d:a1:99:71:f1:63:7a:cc:19: b1:db:98:c4:db:a1:58:5d:c7:8a:81:7a:a5:b8:72: 7d:cf:5a:46:3e:7f:ff:0a:cc:95:1f:ba:ba:29:9d: d8:cb:dd:06:9f:a1:f5:f4:3c:59:1e:02:d9:02:52: b2:61:10:d1:3b:3b:23:dd:89:63:c7:77:e1:96:96: 1a:e1:b8:53:7c:dd:96:90:87:5a:f1:93:68:dd:ff: 9d:70:e3:36:e9:b3:45:2f:c2:3a:68:c7:71:ce:29: 0d:6d:2c:da:81:28:ce:28:97:96:90:27:55:1f:ba: 40:c7:d9:68:2b:b0:61:19:ac:a4:33:46:5e:45:a6: bd:57:60:21:87:ed:b2:db:51:fe:af:e9:d6:fa:e3: 08:7c:98:9b:41:ba:29:93:65:1f:12:95:43:a6:01: 92:53:64:3b:e6:a9:16:05:2d:26:78:65:62:75:db: c2:f2:5c:d5:15:6c:9a:66:df:2f:bf:9c:4b:0c:89: ac:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:A3:AA:CF:65:BA:13:46:63:F0:A2:71:FF:75:39:4F:61:93:29:C8 X509v3 Authority Key Identifier: keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 5e:60:b0:4c:12:2f:a4:1e:78:50:9e:e8:69:28:ed:74:8f:16: 89:a6:67:bd:77:3c:54:2e:52:06:ed:65:47:67:4a:b1:b1:f9: ca:1b:96:b7:b8:86:d8:c8:2f:27:82:66:4a:d9:c1:a5:c5:6d: 4e:57:1d:64:7b:a7:89:60:62:35:8d:e7:a2:59:b7:4f:21:62: 67:ac:18:26:a3:03:57:38:11:64:30:53:e6:19:83:8a:c1:05: b6:54:9e:07:62:6c:02:ec:df:45:c3:ef:ea:f3:35:32:ba:cf: ac:ed:99:f5:09:cb:01:0f:fd:19:76:ec:4f:1b:31:67:52:a0: a2:0d:10:11:b2:4f:a8:1e:6e:d1:f3:58:5d:8a:b9:4d:08:dd: 83:c9:d3:bb:1e:bd:87:27:e6:cf:61:e0:2f:e2:69:24:8f:3b: c2:44:61:e3:af:c1:99:d2:89:81:08:99:5c:88:55:0c:6e:72: 2c:01:35:bb:c8:2e:97:81:f9:a1:b1:f9:4d:9c:56:9d:39:39: bf:e9:76:22:e0:99:1b:52:1f:23:90:06:cc:5c:42:e2:18:d0: 0c:a1:9f:72:38:10:51:68:b1:cf:05:a0:d2:38:e2:0e:77:41: ad:55:19:87:04:bf:f2:e5:39:4a:e1:5e:77:de:c8:78:c2:38: ab:b3:41:39 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC3kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUZBOTkxMTAvBgNVBAUTKDAzQTg1NjZDODAzMUY1NjIxOTlERjk5RDlCOTlCOUM3 RTcxOUY4OTAwHhcNMjUwOTA2MTkxNDA2WhcNMjUwOTEzMTkxNDA2WjAYMRYwFAYD VQQDEw02OGJjODdmZi0zYTgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtl3G3VkxIQ+Gu12B7d1PMQOf12CvC7KNOWReUeBJLYGg2rQ7CkgYI0LUXfEz Yv9We0TYnenTeNvyAW5dzZqBjxJNoZlx8WN6zBmx25jE26FYXceKgXqluHJ9z1pG Pn//CsyVH7q6KZ3Yy90Gn6H19DxZHgLZAlKyYRDROzsj3Yljx3fhlpYa4bhTfN2W kIda8ZNo3f+dcOM26bNFL8I6aMdxzikNbSzagSjOKJeWkCdVH7pAx9loK7BhGayk M0ZeRaa9V2Ahh+2y21H+r+nW+uMIfJibQbopk2UfEpVDpgGSU2Q75qkWBS0meGVi ddvC8lzVFWyaZt8vv5xLDImsjQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLajqs9l uhNGY/Cicf91OU9hkynIMB8GA1UdIwQYMBaAFAOoVmyAMfViGZ35nZuZucfnGfiQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRkE5OS8wNjAyM0M3NjM4 M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlXSVpuZm1kbTVtNXgtY1ot SkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E2aFdiSUF4OVdJWm5mbWRtNW01eC1jWi1KQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RkE5OS8wNjAyM0M3NjM4M0YxMUVBQUVFODk0NDVDNEY5QUUwMi9BNmhXYklBeDlX SVpuZm1kbTVtNXgtY1otSkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBeYLBMEi+kHnhQnuhpKO10jxaJpme9dzxULlIG7WVHZ0qxsfnKG5a3 uIbYyC8ngmZK2cGlxW1OVx1ke6eJYGI1jeeiWbdPIWJnrBgmowNXOBFkMFPmGYOK wQW2VJ4HYmwC7N9Fw+/q8zUyus+s7Zn1CcsBD/0ZduxPGzFnUqCiDRARsk+oHm7R 81hdirlNCN2DydO7Hr2HJ+bPYeAv4mkkjzvCRGHjr8GZ0omBCJlciFUMbnIsATW7 yC6XgfmhsflNnFadOTm/6XYi4JkbUh8jkAbMXELiGNAMoZ9yOBBRaLHPBaDSOOIO d0GtVRmHBL/y5TlK4V533sh4wjirs0E5 -----END CERTIFICATE-----Generated at Mon Sep 8 08:48:00 2025 by rpki-client