$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: PTDgz+12U/o/5ex6SQ8IRlVD/5fDnnz27QtNBWTSZVc= Subject key identifier: 50:8B:23:13:0F:1D:FF:7D:E3:CB:B3:09:2C:7C:C7:10:BF:87:EF:E3 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BE3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2BD2 Signing time: Sun 24 Aug 2025 15:30:40 +0000 Manifest this update: Sun 24 Aug 2025 15:30:40 +0000 Manifest next update: Sun 31 Aug 2025 15:30:40 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: SQxwKAr0Uf3igUu6KIfb5+WJtrAkdOhdkU08Yz9Omgc=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 15:30:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11235 (0x2be3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Aug 24 15:30:40 2025 GMT Not After : Aug 31 15:30:40 2025 GMT Subject: CN=68ab3020-3414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:68:59:fd:58:09:5c:30:06:6d:78:58:29:d7: 8a:a7:27:e4:83:1d:81:3e:ad:5a:de:07:35:29:bf: f6:0e:c3:a2:a2:2e:13:7e:d2:c6:35:84:d7:9d:01: 5c:46:db:65:30:70:2f:c9:9c:36:d8:35:76:16:ad: ce:31:e1:a1:2d:5e:0e:a4:ed:d6:94:99:e5:dd:f1: c0:76:4e:c7:a4:51:f3:ce:93:e5:2f:de:60:d8:c2: 21:3f:c2:e5:6e:01:38:65:c8:51:a2:a1:0b:00:16: 59:ba:0f:b8:9f:ee:9f:e4:1e:8c:38:17:3e:cf:d3: b9:ec:49:e3:fc:50:df:f9:31:e0:e8:85:85:a6:5f: 47:b6:e0:ca:62:92:20:71:4a:35:ec:e5:9f:16:67: 5a:c5:88:e8:fe:45:d3:e0:14:c9:8a:bd:5d:bf:1e: 8e:38:aa:93:1c:04:80:1f:3b:a4:53:79:65:31:58: b8:95:a7:b9:3a:32:fe:8a:e7:d4:aa:05:d3:bb:b8: 99:9a:9d:83:cd:24:f7:31:01:b4:cc:9d:41:e8:d2: 63:3c:b7:b9:cb:8b:41:d4:f8:f9:bd:05:5c:dd:3d: 1e:e9:dd:ee:f0:55:8c:69:d5:a4:07:e4:65:83:92: 05:64:48:4b:1a:c8:8f:19:77:a7:66:e9:2b:93:77: 5f:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:8B:23:13:0F:1D:FF:7D:E3:CB:B3:09:2C:7C:C7:10:BF:87:EF:E3 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 64:8d:b1:fb:db:da:0b:c8:1a:dd:f6:4a:a2:78:77:b3:7f:2a: da:95:c8:fe:6a:33:08:60:41:8a:25:ef:ba:ab:5d:99:d5:d8: 8a:c9:cc:37:87:6c:8f:5d:52:fe:0b:ac:ce:28:07:fd:ce:d7: 93:b6:d0:0b:da:02:e7:1e:c2:c8:11:68:3b:87:02:81:de:71: 92:ed:ae:50:44:a4:56:0e:7f:c8:a4:66:86:7a:ca:69:4b:54: 5a:d3:32:de:66:3a:33:2a:7e:05:d3:ee:c3:25:dd:65:e4:7a: 57:85:b2:cc:4d:ce:63:4d:ec:6f:af:76:2f:ed:62:ae:f0:6f: 90:67:b4:11:e1:92:23:a3:08:b2:15:f4:33:8d:19:ac:d2:73: c1:ab:2b:50:79:b8:0c:7a:50:fc:67:e8:d3:76:a8:21:c3:b2: 44:c3:5e:40:94:f0:5a:15:0e:ef:d8:85:12:0d:de:a7:4e:d4: f8:a1:2d:f3:29:98:ef:ec:77:fe:b0:31:a7:4a:64:c2:a3:6b: 36:f2:37:6f:64:c6:47:e9:93:06:bb:af:26:7f:4f:20:71:a5: 61:27:d9:d7:dd:59:da:11:04:ff:92:c9:e6:21:2e:0c:a5:30: 3b:d2:04:a7:14:25:17:e4:77:ae:5a:99:e6:d7:b4:29:88:93: b9:4e:8c:06 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK+MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwODI0MTUzMDQwWhcNMjUwODMxMTUzMDQwWjAYMRYwFAYD VQQDEw02OGFiMzAyMC0zNDE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5GhZ/VgJXDAGbXhYKdeKpyfkgx2BPq1a3gc1Kb/2DsOioi4TftLGNYTXnQFc RttlMHAvyZw22DV2Fq3OMeGhLV4OpO3WlJnl3fHAdk7HpFHzzpPlL95g2MIhP8Ll bgE4ZchRoqELABZZug+4n+6f5B6MOBc+z9O57Enj/FDf+THg6IWFpl9HtuDKYpIg cUo17OWfFmdaxYjo/kXT4BTJir1dvx6OOKqTHASAHzukU3llMVi4lae5OjL+iufU qgXTu7iZmp2DzST3MQG0zJ1B6NJjPLe5y4tB1Pj5vQVc3T0e6d3u8FWMadWkB+Rl g5IFZEhLGsiPGXenZukrk3dfUwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFFCLIxMP Hf9948uzCSx8xxC/h+/jMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBkjbH729oLyBrd9kqieHezfyralcj+ajMIYEGKJe+6q12Z1diKycw3 h2yPXVL+C6zOKAf9zteTttAL2gLnHsLIEWg7hwKB3nGS7a5QRKRWDn/IpGaGespp S1Ra0zLeZjozKn4F0+7DJd1l5HpXhbLMTc5jTexvr3Yv7WKu8G+QZ7QR4ZIjowiy FfQzjRms0nPBqytQebgMelD8Z+jTdqghw7JEw15AlPBaFQ7v2IUSDd6nTtT4oS3z KZjv7Hf+sDGnSmTCo2s28jdvZMZH6ZMGu68mf08gcaVhJ9nX3VnaEQT/ksnmIS4M pTA70gSnFCUX5HeuWpnm17QpiJO5TowG -----END CERTIFICATE-----Generated at Sun Aug 24 21:46:23 2025 by rpki-client