$ rpki-client -vvf rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft File: 6uK86DXkKxFfGLP-Do8n-EpHSZY.mft (raw, json) Hash identifier: MpXXKEYzUOMRM0lAhVFuhFAMVL2PDczrhlE1wdCqHc4= Subject key identifier: C5:4D:9F:F6:6B:65:AA:93:73:BA:7E:53:41:72:D2:87:7C:11:56:9D Authority key identifier: EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 Certificate issuer: /CN=A912C0DE/serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Certificate serial: 015E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft Manifest number: 0158 Signing time: Wed 17 Sep 2025 04:45:08 +0000 Manifest this update: Wed 17 Sep 2025 04:45:07 +0000 Manifest next update: Wed 24 Sep 2025 04:45:07 +0000 Files and hashes: 1: 6uK86DXkKxFfGLP-Do8n-EpHSZY.crl (hash: 3fq5dV2VRtcpay4J1ADt8YaaBmdK+9oIcIuGvZJcChk=) 2: 5F57D01A5EA511EFB0E1B468C4F9AE02.roa (hash: gUWx0NFdXc+5m0GyQOzPhC8d8WUCa2XrObn3BWMcy0w=) 3: A2348A2E8EBD11F0848C250FC4F9AE02.roa (hash: P4t1JoBwMAtSUSse6Vs6XIMlYjrk416jR4wspRulBCw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 04:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 350 (0x15e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912C0DE, serialNumber=EAE2BCE835E42B115F18B3FE0E8F27F84A474996 Validity Not Before: Sep 17 04:45:07 2025 GMT Not After : Sep 24 04:45:07 2025 GMT Subject: CN=68ca3cd4-1cac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c3:47:4d:41:63:70:75:ff:46:ee:38:78:ca: dd:fe:88:ce:e1:74:d0:92:3e:49:91:4f:dc:28:cb: 2a:fe:cb:81:83:d6:64:a6:5c:fb:5d:e5:8f:a0:aa: 57:44:b0:41:0f:46:9c:5c:aa:72:d8:17:d8:a9:d0: e2:26:19:c7:93:0e:b4:c0:8d:e5:3f:97:f7:0b:33: c2:14:0e:77:00:5a:d2:d3:99:2d:9f:1c:09:1a:5b: 4c:96:c2:a2:54:b5:49:8f:ab:ba:e7:df:ce:ec:27: 09:be:ea:96:86:3f:fe:35:1d:56:7a:51:66:12:c3: 92:7e:ce:72:47:6e:61:f0:1a:59:19:04:b9:86:11: e1:55:30:24:ba:8a:50:86:e2:c4:3d:4a:c2:a8:7f: d5:2e:e4:e5:53:8a:26:c6:d7:09:ff:16:cb:f2:d5: 3b:40:af:af:1b:a9:9d:ec:47:81:ec:62:d8:29:c7: ca:8e:68:4c:6f:a3:32:3e:8b:ef:1b:7f:3a:45:2a: bd:59:4e:0d:69:14:18:14:c4:3e:a2:50:3f:d8:ac: 8d:b5:69:ae:50:82:4d:8d:04:27:b0:f9:36:55:cc: 45:02:c5:d0:81:c6:b9:a7:f1:21:31:15:61:94:ac: df:bf:6a:1f:74:83:ce:bf:83:14:04:08:2f:4d:b1: 4c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:4D:9F:F6:6B:65:AA:93:73:BA:7E:53:41:72:D2:87:7C:11:56:9D X509v3 Authority Key Identifier: keyid:EA:E2:BC:E8:35:E4:2B:11:5F:18:B3:FE:0E:8F:27:F8:4A:47:49:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6uK86DXkKxFfGLP-Do8n-EpHSZY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912C0DE/E47443D68FEE11EE90389E1CC4F9AE02/6uK86DXkKxFfGLP-Do8n-EpHSZY.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 34:de:c8:e5:16:52:dc:5a:d6:08:9c:64:ae:f7:d2:bb:f5:a7: e1:d9:2f:9c:b1:d0:66:eb:8f:d2:59:92:29:af:90:bf:78:9b: 81:e0:2b:8c:82:a1:ae:81:5e:6a:d4:07:9e:e4:05:60:de:5d: 6d:50:0a:de:f3:03:16:f5:c0:f9:03:e1:e4:e1:9f:98:7d:2f: f4:40:6a:43:b4:49:21:e0:80:52:e2:34:a3:bd:ca:af:a1:25: 15:fb:fd:74:f4:a9:4d:01:5f:f8:21:fe:75:8c:cd:74:53:ce: f4:98:be:b0:88:c6:68:5d:81:c1:e1:b0:05:51:c8:0d:1f:73: 89:20:2e:9c:99:76:96:25:87:dd:de:4c:45:cc:e7:00:ac:b0: a1:f7:1f:cb:1e:fe:7d:d0:2f:36:29:9e:8d:59:26:80:63:86: df:c5:c9:f5:4f:60:59:26:6a:c2:ee:65:42:d3:53:e8:d3:69: 5f:fc:5d:f6:f5:1f:fc:96:5e:04:b9:5d:88:47:88:64:4c:45: fc:fc:a8:23:e3:06:e1:c7:6e:16:a5:36:8d:c5:40:10:fb:59: 85:53:5f:90:e0:8e:a9:83:ee:0e:84:a7:68:09:dc:ea:73:49: 73:bd:d3:a2:53:11:79:bc:98:9a:4a:f3:89:9f:24:13:51:9c: f7:82:84:4d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAV4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkMwREUxMTAvBgNVBAUTKEVBRTJCQ0U4MzVFNDJCMTE1RjE4QjNGRTBFOEYyN0Y4 NEE0NzQ5OTYwHhcNMjUwOTE3MDQ0NTA3WhcNMjUwOTI0MDQ0NTA3WjAYMRYwFAYD VQQDEw02OGNhM2NkNC0xY2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMNHTUFjcHX/Ru44eMrd/ojO4XTQkj5JkU/cKMsq/suBg9Zkplz7XeWPoKpX RLBBD0acXKpy2BfYqdDiJhnHkw60wI3lP5f3CzPCFA53AFrS05ktnxwJGltMlsKi VLVJj6u659/O7CcJvuqWhj/+NR1WelFmEsOSfs5yR25h8BpZGQS5hhHhVTAkuopQ huLEPUrCqH/VLuTlU4omxtcJ/xbL8tU7QK+vG6md7EeB7GLYKcfKjmhMb6MyPovv G386RSq9WU4NaRQYFMQ+olA/2KyNtWmuUIJNjQQnsPk2VcxFAsXQgca5p/EhMRVh lKzfv2ofdIPOv4MUBAgvTbFMLwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMVNn/Zr ZaqTc7p+U0Fy0od8EVadMB8GA1UdIwQYMBaAFOrivOg15CsRXxiz/g6PJ/hKR0mW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQzBERS9FNDc0NDNENjhG RUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4RmZHTFAtRG84bi1FcEhT WlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZ1Szg2RFhrS3hGZkdMUC1EbzhuLUVwSFNaWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy QzBERS9FNDc0NDNENjhGRUUxMUVFOTAzODlFMUNDNEY5QUUwMi82dUs4NkRYa0t4 RmZHTFAtRG84bi1FcEhTWlkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA03sjlFlLcWtYInGSu99K79afh2S+csdBm64/SWZIpr5C/eJuB4CuM gqGugV5q1Aee5AVg3l1tUAre8wMW9cD5A+Hk4Z+YfS/0QGpDtEkh4IBS4jSjvcqv oSUV+/109KlNAV/4If51jM10U870mL6wiMZoXYHB4bAFUcgNH3OJIC6cmXaWJYfd 3kxFzOcArLCh9x/LHv590C82KZ6NWSaAY4bfxcn1T2BZJmrC7mVC01Po02lf/F32 9R/8ll4EuV2IR4hkTEX8/Kgj4wbhx24WpTaNxUAQ+1mFU1+Q4I6pg+4OhKdoCdzq c0lzvdOiUxF5vJiaSvOJnyQTUZz3goRN -----END CERTIFICATE-----Generated at Fri Sep 19 04:04:31 2025 by rpki-client