$ rpki-client -vvf rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft File: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft (raw, json) Hash identifier: W1X1Ckjc8OLa6z/69wFbNvnuDFVIF1U+G3G8UpIsutM= Subject key identifier: 86:9F:C5:F1:02:95:86:B6:B8:A9:AB:6A:B7:FD:10:4D:A2:5E:1F:63 Authority key identifier: E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 Certificate issuer: /CN=A912D5C1/serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Certificate serial: 0CBE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft Manifest number: 0CA8 Signing time: Thu 18 Sep 2025 18:25:07 +0000 Manifest this update: Thu 18 Sep 2025 18:25:07 +0000 Manifest next update: Thu 25 Sep 2025 18:25:07 +0000 Files and hashes: 1: 6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl (hash: bKAg3Yo03KQLrCeJgsnciMgtKc1fHsbw6my5GqWPb4c=) 2: D7F98876520B11EE8B85DB63C4F9AE02.roa (hash: PKoIMzmjFW6opIpuPpXxT7JTsKk8w7rWTXfvOheNJEQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 25 Sep 2025 18:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3262 (0xcbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912D5C1, serialNumber=E82D10D2DA1C98BF68CA4C6491B90FFD0FAB3394 Validity Not Before: Sep 18 18:25:07 2025 GMT Not After : Sep 25 18:25:07 2025 GMT Subject: CN=68cc4e83-5228 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a4:d7:d7:9c:a3:4f:45:65:df:84:b6:df:97: f0:ea:c0:41:9c:5d:7d:89:b6:d3:88:33:bd:74:6d: a9:94:4d:80:07:7c:bb:60:c6:ab:11:30:f6:be:e4: b5:76:59:79:5d:df:35:91:fd:05:f6:e4:53:e4:cd: 48:15:c8:d1:e2:89:fa:40:6c:af:50:41:46:06:c8: bf:71:31:2a:c6:af:4a:cb:95:b9:a9:bd:94:f3:01: e8:6f:a6:e1:78:11:c9:35:af:b9:d5:9b:95:92:c4: f5:b4:ff:77:37:39:ec:22:ab:df:15:c7:61:12:96: ca:07:07:d8:2c:1a:6c:b4:07:66:bc:a5:db:60:53: c8:5f:cb:0d:a4:4d:64:7a:d3:6c:dd:95:c8:b9:ae: 56:e8:dc:67:8f:3e:fe:92:b9:d0:50:a6:28:11:05: 43:f4:06:66:67:e1:88:05:fd:91:e3:cc:c7:2e:3c: ca:73:84:74:66:a2:85:0b:1c:1d:31:fc:ba:78:d0: cf:bf:9b:b0:16:61:d1:ee:ad:0f:3d:b0:e1:56:a6: 35:4e:47:66:f0:47:fb:b7:8a:da:f7:a8:a3:9d:6e: 0d:04:d1:cd:b9:6f:8b:20:28:26:19:c3:86:8e:c7: 73:ca:81:91:b9:e4:71:91:bf:85:c1:e5:b4:98:63: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:9F:C5:F1:02:95:86:B6:B8:A9:AB:6A:B7:FD:10:4D:A2:5E:1F:63 X509v3 Authority Key Identifier: keyid:E8:2D:10:D2:DA:1C:98:BF:68:CA:4C:64:91:B9:0F:FD:0F:AB:33:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D5C1/B07DCB44FFCC11E9A5E79784C4F9AE02/6C0Q0tocmL9oykxkkbkP_Q-rM5Q.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:3a:3e:63:96:06:f9:43:61:35:15:23:bc:2d:41:63:e5:60: 0a:7b:f1:5d:b4:c9:1e:a9:4c:80:79:84:f2:10:ec:78:9f:b4: 7b:87:c6:12:c1:47:6c:91:62:db:ec:7b:03:c3:f3:38:65:58: b8:c2:86:b6:52:55:e4:3f:d3:f8:c0:f7:d2:98:00:35:1a:96: ed:11:4d:bb:12:24:74:c5:f8:d6:cb:50:89:2a:6e:57:fd:9b: 47:74:e2:f9:49:d3:25:45:f9:f5:f0:5b:e7:ed:03:8f:f4:b9: 0a:86:21:68:ed:fb:ad:97:08:1d:81:37:7f:02:60:d1:15:e1: e3:48:bd:3f:5c:8d:99:e3:b5:fc:7e:5b:fb:41:cd:54:ba:0f: 01:39:28:db:52:51:ac:46:bf:e5:97:4a:73:3c:35:0a:eb:2b: a6:72:92:32:3e:ab:27:04:ed:2b:c7:4d:ec:94:3c:1a:a9:c4: 5e:ec:ba:9d:dd:02:37:d0:62:f2:16:20:e6:85:af:b1:b7:40: 1e:1b:4d:8c:05:70:56:a4:67:18:79:88:1d:30:e2:56:f4:a4: b7:52:cc:e8:d3:f4:16:d7:de:7d:d1:60:ea:ef:95:d6:f2:9e: f0:03:eb:08:28:31:66:42:00:0c:31:4b:01:96:82:7f:3a:0a: 4a:29:5e:49 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkQ1QzExMTAvBgNVBAUTKEU4MkQxMEQyREExQzk4QkY2OENBNEM2NDkxQjkwRkZE MEZBQjMzOTQwHhcNMjUwOTE4MTgyNTA3WhcNMjUwOTI1MTgyNTA3WjAYMRYwFAYD VQQDEw02OGNjNGU4My01MjI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5aTX15yjT0Vl34S235fw6sBBnF19ibbTiDO9dG2plE2AB3y7YMarETD2vuS1 dll5Xd81kf0F9uRT5M1IFcjR4on6QGyvUEFGBsi/cTEqxq9Ky5W5qb2U8wHob6bh eBHJNa+51ZuVksT1tP93NznsIqvfFcdhEpbKBwfYLBpstAdmvKXbYFPIX8sNpE1k etNs3ZXIua5W6Nxnjz7+krnQUKYoEQVD9AZmZ+GIBf2R48zHLjzKc4R0ZqKFCxwd Mfy6eNDPv5uwFmHR7q0PPbDhVqY1Tkdm8Ef7t4ra96ijnW4NBNHNuW+LICgmGcOG jsdzyoGRueRxkb+FweW0mGPEXQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFIafxfEC lYa2uKmrarf9EE2iXh9jMB8GA1UdIwQYMBaAFOgtENLaHJi/aMpMZJG5D/0PqzOU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRDVDMS9CMDdEQ0I0NEZG Q0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21MOW95a3hra2JrUF9RLXJN NVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZDMFEwdG9jbUw5b3lreGtrYmtQX1Etck01US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RDVDMS9CMDdEQ0I0NEZGQ0MxMUU5QTVFNzk3ODRDNEY5QUUwMi82QzBRMHRvY21M OW95a3hra2JrUF9RLXJNNVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAzOj5jlgb5Q2E1FSO8LUFj5WAKe/FdtMkeqUyAeYTyEOx4n7R7h8YS wUdskWLb7HsDw/M4ZVi4woa2UlXkP9P4wPfSmAA1GpbtEU27EiR0xfjWy1CJKm5X /ZtHdOL5SdMlRfn18Fvn7QOP9LkKhiFo7futlwgdgTd/AmDRFeHjSL0/XI2Z47X8 flv7Qc1Uug8BOSjbUlGsRr/ll0pzPDUK6yumcpIyPqsnBO0rx03slDwaqcRe7Lqd 3QI30GLyFiDmha+xt0AeG02MBXBWpGcYeYgdMOJW9KS3Uszo0/QW19590WDq75XW 8p7wA+sIKDFmQgAMMUsBloJ/OgpKKV5J -----END CERTIFICATE-----Generated at Fri Sep 19 08:51:47 2025 by rpki-client