$ rpki-client -vvf rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft File: 6PktayopMPClvq9TBEyF2OreHro.mft (raw, json) Hash identifier: W8+xEyGBnpQ6z1YlXGK+b173uis37vv1y28NBlu2xBY= Subject key identifier: F4:10:CE:D9:39:58:2D:4F:56:D3:8D:6C:95:32:2B:33:AF:1B:F2:CF Authority key identifier: E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA Certificate issuer: /CN=A9129C87/serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Certificate serial: 0461 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft Manifest number: 045D Signing time: Thu 21 Aug 2025 00:19:55 +0000 Manifest this update: Thu 21 Aug 2025 00:19:55 +0000 Manifest next update: Thu 28 Aug 2025 00:19:55 +0000 Files and hashes: 1: 6PktayopMPClvq9TBEyF2OreHro.crl (hash: 6SFlL/+4NalKkYsb4zymczLuPdEbNdz6xmKc6c8fsms=) 2: 80A9DE56614C11EC9175DE54C4F9AE02.roa (hash: ygV29+CdpRjO1HlIMJ6Gkg3eEGxPeEnonRI3YwMUHgM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 28 Aug 2025 00:19:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1121 (0x461) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129C87, serialNumber=E8F92D6B2A2930F0A5BEAF53044C85D8EADE1EBA Validity Not Before: Aug 21 00:19:55 2025 GMT Not After : Aug 28 00:19:55 2025 GMT Subject: CN=68a6662b-608a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b3:27:ed:03:56:36:de:9b:ae:47:cc:a8:8e: 10:99:39:aa:06:23:be:7f:5f:6d:55:ae:0d:89:dd: e6:e2:dc:91:fd:b0:32:11:d8:15:49:14:49:1a:e5: 4d:8f:4e:c2:2b:79:a7:37:8c:e8:aa:3b:52:52:82: 6d:60:a7:ad:ef:7c:73:db:aa:57:ab:0a:1c:0a:cf: 6d:95:84:ab:80:e2:15:98:f3:ee:77:f1:8d:6e:eb: a3:d8:78:1f:42:df:2e:1e:63:0d:83:6a:bf:93:13: af:00:26:6f:37:7a:a8:5a:74:bc:76:c6:ca:a5:aa: b3:fb:f5:fe:1c:4e:25:c9:09:3d:28:d6:7f:b4:e2: 37:b2:8d:52:51:06:e5:9c:0e:a0:c3:b5:bd:03:b8: d6:ad:cf:cf:73:53:60:70:93:b3:68:94:2b:0f:d9: 1b:46:e6:75:d6:d4:ab:f1:71:eb:77:72:ff:7a:38: 21:56:2b:78:3c:b4:eb:9e:3d:1e:8a:2d:71:d0:b0: 79:04:81:36:c1:e7:95:de:d1:a4:44:a7:4a:42:8a: 28:41:46:cd:f4:ba:f7:85:71:3f:63:74:c3:57:e1: 1c:e9:53:ab:fb:93:df:45:6c:4c:af:3e:1a:60:92: ae:56:94:59:a0:c7:72:1b:11:d2:80:cf:a6:d5:8c: 7d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:10:CE:D9:39:58:2D:4F:56:D3:8D:6C:95:32:2B:33:AF:1B:F2:CF X509v3 Authority Key Identifier: keyid:E8:F9:2D:6B:2A:29:30:F0:A5:BE:AF:53:04:4C:85:D8:EA:DE:1E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6PktayopMPClvq9TBEyF2OreHro.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129C87/FD083F585EED11EC9A496D59C4F9AE02/6PktayopMPClvq9TBEyF2OreHro.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:8d:c7:fe:47:ad:e3:e0:10:95:4a:0b:f3:16:dd:41:65:bb: 7a:8f:33:ca:c7:1b:72:63:ca:ca:ad:c1:1a:82:15:fe:52:9e: 63:bd:5e:a2:0f:76:90:3a:a3:d6:7f:ee:c0:8d:7a:84:42:64: 54:1e:f9:3c:52:32:99:04:40:7a:0c:2b:2a:4a:fd:b3:9c:7d: 5a:5c:78:94:1b:87:9f:f8:a1:c8:f6:71:a5:2f:fe:1a:22:86: 10:f1:75:6b:5d:c9:3c:5a:1a:18:73:c4:5c:14:1a:f8:b7:a5: 4c:9d:22:4b:37:65:05:69:85:e0:f8:a8:07:4e:bc:0f:2d:a8: e4:c9:f4:6d:75:77:28:bc:80:40:e1:a5:c0:20:7b:e9:47:41: dd:1a:af:8d:67:78:12:99:98:73:4a:47:53:d1:b0:6d:d6:d8: d0:b0:b4:ae:52:b5:44:4a:75:ff:9d:86:87:61:c4:a2:07:e5: d8:67:4c:dd:8b:fd:a7:82:cc:e9:10:2b:c4:83:fa:8f:58:4a: 16:94:f6:d5:31:36:5d:d6:48:af:0e:ed:f6:6f:c9:c4:73:43: 55:d5:79:77:0f:55:5a:a9:cc:b3:01:32:ed:0a:66:dd:3c:14: 9d:2e:7a:a3:d1:39:17:79:82:d0:19:d1:b9:ab:a6:0e:70:1f: 8e:7c:4b:83 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBGEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlDODcxMTAvBgNVBAUTKEU4RjkyRDZCMkEyOTMwRjBBNUJFQUY1MzA0NEM4NUQ4 RUFERTFFQkEwHhcNMjUwODIxMDAxOTU1WhcNMjUwODI4MDAxOTU1WjAYMRYwFAYD VQQDEw02OGE2NjYyYi02MDhhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4LMn7QNWNt6brkfMqI4QmTmqBiO+f19tVa4Nid3m4tyR/bAyEdgVSRRJGuVN j07CK3mnN4zoqjtSUoJtYKet73xz26pXqwocCs9tlYSrgOIVmPPud/GNbuuj2Hgf Qt8uHmMNg2q/kxOvACZvN3qoWnS8dsbKpaqz+/X+HE4lyQk9KNZ/tOI3so1SUQbl nA6gw7W9A7jWrc/Pc1NgcJOzaJQrD9kbRuZ11tSr8XHrd3L/ejghVit4PLTrnj0e ii1x0LB5BIE2weeV3tGkRKdKQoooQUbN9Lr3hXE/Y3TDV+Ec6VOr+5PfRWxMrz4a YJKuVpRZoMdyGxHSgM+m1Yx9WwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFPQQztk5 WC1PVtONbJUyKzOvG/LPMB8GA1UdIwQYMBaAFOj5LWsqKTDwpb6vUwRMhdjq3h66 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUM4Ny9GRDA4M0Y1ODVF RUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1QQ2x2cTlUQkV5RjJPcmVI cm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZQa3RheW9wTVBDbHZxOVRCRXlGMk9yZUhyby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUM4Ny9GRDA4M0Y1ODVFRUQxMUVDOUE0OTZENTlDNEY5QUUwMi82UGt0YXlvcE1Q Q2x2cTlUQkV5RjJPcmVIcm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAbjcf+R63j4BCVSgvzFt1BZbt6jzPKxxtyY8rKrcEaghX+Up5jvV6i D3aQOqPWf+7AjXqEQmRUHvk8UjKZBEB6DCsqSv2znH1aXHiUG4ef+KHI9nGlL/4a IoYQ8XVrXck8WhoYc8RcFBr4t6VMnSJLN2UFaYXg+KgHTrwPLajkyfRtdXcovIBA 4aXAIHvpR0HdGq+NZ3gSmZhzSkdT0bBt1tjQsLSuUrVESnX/nYaHYcSiB+XYZ0zd i/2ngszpECvEg/qPWEoWlPbVMTZd1kivDu32b8nEc0NV1Xl3D1VaqcyzATLtCmbd PBSdLnqj0TkXeYLQGdG5q6YOcB+OfEuD -----END CERTIFICATE-----Generated at Fri Aug 22 16:27:45 2025 by rpki-client