$ rpki-client -vvf rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft File: FH6XVkOdnbcVYTSsePkcIzuTkqc.mft (raw, json) Hash identifier: VDOdcDWlBK7pDs0gtWXGyTwIBuKq40JPzERxGA1BBVc= Subject key identifier: 7C:FD:8C:47:74:B1:85:1A:C0:03:CB:DF:95:F6:C9:08:3A:F9:B1:58 Authority key identifier: 14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 Certificate issuer: /CN=A912CB2A/serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Certificate serial: 06BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft Manifest number: 069A Signing time: Sat 06 Sep 2025 23:03:25 +0000 Manifest this update: Sat 06 Sep 2025 23:03:25 +0000 Manifest next update: Sat 13 Sep 2025 23:03:25 +0000 Files and hashes: 1: FH6XVkOdnbcVYTSsePkcIzuTkqc.crl (hash: K/meEspBMSCgpPK/KDbL2wh8joR13pUyPLQdQJs507k=) 2: D4FD4D5237DE11EEA2885B71C4F9AE02.roa (hash: jm6qF0iG7lzG09wOX/EbjjAF73STR64Y7EPlh/2TSZY=) 3: 8A0E66D647FC11EE838F6160C4F9AE02.roa (hash: QybDkxZsIA9LhScKa+XNkLDfh3ltBF5Yhpro/oGoLB8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1725 (0x6bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912CB2A, serialNumber=147E9756439D9DB7156134AC78F91C233B9392A7 Validity Not Before: Sep 6 23:03:25 2025 GMT Not After : Sep 13 23:03:25 2025 GMT Subject: CN=68bcbdbd-dddf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:1e:43:19:b1:56:69:c0:e4:85:ab:10:2c:d0: 32:b4:07:ff:0d:f5:09:bb:5b:79:f5:7d:f8:e6:5d: 35:0e:73:b6:ba:8e:41:9c:47:24:1e:82:2a:25:cf: 62:29:62:ab:74:08:1a:7f:d7:d6:c5:38:11:9f:ca: b0:f4:24:ab:fa:a2:33:31:57:72:f2:68:78:a9:11: a7:b3:b6:e7:13:69:17:41:bb:3d:e9:a7:dd:f3:8f: 66:99:d3:e8:ec:39:88:34:72:d9:56:79:f8:85:f6: 7e:dc:53:8b:46:e8:e3:39:c3:a2:05:59:76:ff:e6: 63:81:a6:a6:f5:73:c3:36:57:27:30:e4:35:28:00: 5d:3d:ba:4e:62:1d:57:b5:82:13:c8:49:3e:73:32: 6a:93:0d:5d:d9:2f:fa:7e:bd:c8:90:3e:66:97:df: ce:77:a0:90:ec:cd:13:54:6e:9c:10:7c:36:a8:0f: 3b:a7:02:28:f8:e9:6d:23:07:4a:b4:5c:e7:2e:34: 64:ad:f9:9b:d9:29:de:88:a6:13:8c:21:d7:fd:9b: 40:73:85:02:01:3b:1a:cf:84:96:18:23:83:85:69: 30:76:7f:ea:9c:d4:a4:97:a9:42:f9:bf:af:a9:69: f1:70:01:4f:a9:a2:4c:4d:13:7c:b6:e7:03:fd:71: a4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:FD:8C:47:74:B1:85:1A:C0:03:CB:DF:95:F6:C9:08:3A:F9:B1:58 X509v3 Authority Key Identifier: keyid:14:7E:97:56:43:9D:9D:B7:15:61:34:AC:78:F9:1C:23:3B:93:92:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FH6XVkOdnbcVYTSsePkcIzuTkqc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912CB2A/E01C7A8490E011EBA105871FC4F9AE02/FH6XVkOdnbcVYTSsePkcIzuTkqc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2b:40:0b:00:f2:2c:ca:df:6f:3c:d9:15:60:9a:22:df:36:fb: b5:4c:a6:47:c0:10:10:4c:78:95:a6:c5:02:88:73:3b:ef:99: ac:bf:bb:f4:d2:7c:a4:3e:c8:34:1b:93:11:75:d7:35:20:82: e1:d5:09:a9:a5:a3:50:4c:91:e0:43:0f:ca:49:7e:a9:0a:1b: 1f:9d:9c:47:3e:57:53:58:27:fd:cd:e2:7c:bc:a7:3a:0f:7d: 7f:54:a1:68:ff:0d:37:e9:69:54:70:3b:b8:bd:d1:fa:10:8b: ef:2a:2a:65:a6:33:8a:75:eb:e1:1a:e8:75:12:c1:68:15:08: ee:c2:a9:3f:3e:5b:83:31:b6:b9:67:0f:03:2f:2f:59:1b:53: 3b:50:e2:d0:cb:31:8b:94:e6:0f:19:1f:47:a7:b1:57:80:e4: a8:96:a7:3e:a7:fd:b7:e2:ea:c5:95:94:70:ae:13:3a:3c:31: c3:69:7d:ac:fd:f2:82:8f:b4:f3:6c:2e:fb:ef:53:b6:37:de: 01:67:72:c0:f6:ee:77:d1:37:8a:b3:ee:ee:26:6d:1f:0d:d4: 7f:78:7f:3b:d6:a0:6b:a5:74:77:6c:ba:c6:3c:a4:4e:46:f5: 8c:2f:bf:fd:de:5e:78:06:8a:13:13:08:01:02:4c:38:99:2e: 38:cf:b7:5d -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBr0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkNCMkExMTAvBgNVBAUTKDE0N0U5NzU2NDM5RDlEQjcxNTYxMzRBQzc4RjkxQzIz M0I5MzkyQTcwHhcNMjUwOTA2MjMwMzI1WhcNMjUwOTEzMjMwMzI1WjAYMRYwFAYD VQQDEw02OGJjYmRiZC1kZGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAth5DGbFWacDkhasQLNAytAf/DfUJu1t59X345l01DnO2uo5BnEckHoIqJc9i KWKrdAgaf9fWxTgRn8qw9CSr+qIzMVdy8mh4qRGns7bnE2kXQbs96afd849mmdPo 7DmINHLZVnn4hfZ+3FOLRujjOcOiBVl2/+Zjgaam9XPDNlcnMOQ1KABdPbpOYh1X tYITyEk+czJqkw1d2S/6fr3IkD5ml9/Od6CQ7M0TVG6cEHw2qA87pwIo+OltIwdK tFznLjRkrfmb2SneiKYTjCHX/ZtAc4UCATsaz4SWGCODhWkwdn/qnNSkl6lC+b+v qWnxcAFPqaJMTRN8tucD/XGklwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHz9jEd0 sYUawAPL35X2yQg6+bFYMB8GA1UdIwQYMBaAFBR+l1ZDnZ23FWE0rHj5HCM7k5Kn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyQ0IyQS9FMDFDN0E4NDkw RTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5iY1ZZVFNzZVBrY0l6dVRr cWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZINlhWa09kbmJjVllUU3NlUGtjSXp1VGtxYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy Q0IyQS9FMDFDN0E4NDkwRTAxMUVCQTEwNTg3MUZDNEY5QUUwMi9GSDZYVmtPZG5i Y1ZZVFNzZVBrY0l6dVRrcWMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQArQAsA8izK32882RVgmiLfNvu1TKZHwBAQTHiVpsUCiHM775msv7v0 0nykPsg0G5MRddc1IILh1QmppaNQTJHgQw/KSX6pChsfnZxHPldTWCf9zeJ8vKc6 D31/VKFo/w036WlUcDu4vdH6EIvvKiplpjOKdevhGuh1EsFoFQjuwqk/PluDMba5 Zw8DLy9ZG1M7UOLQyzGLlOYPGR9Hp7FXgOSolqc+p/234urFlZRwrhM6PDHDaX2s /fKCj7TzbC7771O2N94BZ3LA9u530TeKs+7uJm0fDdR/eH871qBrpXR3bLrGPKRO RvWML7/93l54BooTEwgBAkw4mS44z7dd -----END CERTIFICATE-----Generated at Mon Sep 8 04:16:53 2025 by rpki-client