$ rpki-client -vvf rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft File: if6Hw1yRomVecR6xVLheb47OI1M.mft (raw, json) Hash identifier: 5fxmebqPxvImNnjZ/5Q9nDjHO+RFF7e2RBQMLT6VQmY= Subject key identifier: 41:DE:F8:34:A4:44:DE:CF:8D:ED:40:1F:F9:73:11:4D:1B:73:28:82 Authority key identifier: 89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53 Certificate issuer: /CN=A912E5AE/serialNumber=89FE87C35C91A2655E711EB154B85E6F8ECE2353 Certificate serial: D6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft Manifest number: D2 Signing time: Tue 19 Aug 2025 06:01:07 +0000 Manifest this update: Tue 19 Aug 2025 06:01:07 +0000 Manifest next update: Tue 26 Aug 2025 06:01:07 +0000 Files and hashes: 1: if6Hw1yRomVecR6xVLheb47OI1M.crl (hash: x6Up7bWkFbKH2IU92pJdzhHN5zpvrDqRpLDPVSz2x2A=) 2: C9486F603DCC11EFAD649F74C4F9AE02.roa (hash: QyyZXWoFyyd/zgjkEiwCU3kViI7zVVd7w0F9bGaDuyw=) 3: 4654B41C3DCF11EF9418A322C4F9AE02.roa (hash: FvOQCogvi9xGBh11M1aTYlZCd0AJ8WKZK2+tYPFYqs0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.crl rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E5AE, serialNumber=89FE87C35C91A2655E711EB154B85E6F8ECE2353 Validity Not Before: Aug 19 06:01:07 2025 GMT Not After : Aug 26 06:01:07 2025 GMT Subject: CN=68a41323-7526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:aa:94:c7:95:6c:4e:9e:7d:92:e4:7a:fb:1e: 25:64:6d:66:dd:01:93:36:98:3a:a0:cb:60:98:90: d0:df:9a:ef:0a:aa:8b:f8:31:fb:b0:df:92:2a:71: 65:25:45:c0:2e:45:c8:45:36:64:5e:fd:6b:18:c5: 06:ca:e3:12:bc:98:c3:0f:75:c7:1f:e1:a3:e9:c9: ad:a7:1f:ad:9c:8c:0e:f6:c4:f7:57:0d:26:69:cd: 14:89:8e:ef:d1:04:93:2c:24:18:0b:8f:d3:5f:a5: 29:36:9c:8d:b6:9f:47:f3:70:5a:b1:3a:57:c4:b1: 15:d1:d9:9e:8b:fe:51:62:a8:14:9c:1e:1e:49:ef: 49:eb:90:ff:77:17:bb:ca:cc:d7:c8:88:e3:27:f2: 78:1a:08:be:af:55:97:0d:c1:85:64:c1:99:33:2a: 2a:e5:e3:b5:4c:b8:ef:c3:4e:31:13:4e:dd:e9:ec: c6:28:f9:94:27:53:07:6b:02:25:c0:21:22:c8:b3: 92:8a:bb:41:15:9e:ef:27:52:b0:08:4f:1f:2c:e1: c5:78:81:b5:71:f5:82:fa:f1:6e:6f:7b:47:55:83: 1a:5b:34:47:fb:9f:f9:27:70:53:f6:22:fa:b3:85: 95:a8:a2:cb:76:d4:fa:23:59:bf:53:3c:89:b4:c2: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:DE:F8:34:A4:44:DE:CF:8D:ED:40:1F:F9:73:11:4D:1B:73:28:82 X509v3 Authority Key Identifier: keyid:89:FE:87:C3:5C:91:A2:65:5E:71:1E:B1:54:B8:5E:6F:8E:CE:23:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/if6Hw1yRomVecR6xVLheb47OI1M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E5AE/33F74DDC3DCC11EF89B5B073C4F9AE02/if6Hw1yRomVecR6xVLheb47OI1M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3d:af:5d:1b:37:ec:3b:d5:0f:61:8f:00:18:b5:fa:25:9e:8b: 61:f3:3f:9e:a8:33:63:40:12:f8:ee:73:cf:c4:50:cd:11:b8: 91:1e:5d:9c:85:ce:54:2b:a6:94:a7:a4:92:3a:c6:60:bb:15: 57:f3:50:5d:fd:d7:14:63:58:3e:c3:30:23:d9:0d:4a:67:55: e9:00:64:8b:dd:8f:d8:2c:bf:fe:9c:fb:0e:1e:90:2e:d8:60: 73:54:23:d9:da:8c:7f:36:a3:e6:05:20:c2:e0:85:ce:a2:c1: 4d:ec:89:67:f0:ff:7a:5b:e5:62:92:12:af:6d:c8:37:f1:c0: 66:91:fd:86:a2:5e:29:da:73:c1:8c:4d:19:8e:55:48:e8:dc: 2c:83:a7:00:09:dc:48:d5:f7:51:e0:23:77:be:88:db:82:17: 4d:98:ce:fe:f1:01:e3:fe:a6:34:59:9f:ca:46:32:b8:10:5b: 81:3f:2a:2e:46:ad:2a:d2:a6:ed:cc:44:d7:2f:60:15:c0:50: c3:cc:ec:a1:e8:73:eb:18:b6:e3:b9:47:06:90:30:ba:a7:ee: 00:77:c1:dc:eb:88:65:2b:a8:53:e7:8b:26:ef:6a:ff:9b:ef: f2:ee:68:13:c3:0e:8f:54:e2:f5:2d:c6:a4:2d:21:ae:0c:22: b0:ed:8d:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU1QUUxMTAvBgNVBAUTKDg5RkU4N0MzNUM5MUEyNjU1RTcxMUVCMTU0Qjg1RTZG OEVDRTIzNTMwHhcNMjUwODE5MDYwMTA3WhcNMjUwODI2MDYwMTA3WjAYMRYwFAYD VQQDEw02OGE0MTMyMy03NTI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qqUx5VsTp59kuR6+x4lZG1m3QGTNpg6oMtgmJDQ35rvCqqL+DH7sN+SKnFl JUXALkXIRTZkXv1rGMUGyuMSvJjDD3XHH+Gj6cmtpx+tnIwO9sT3Vw0mac0UiY7v 0QSTLCQYC4/TX6UpNpyNtp9H83BasTpXxLEV0dmei/5RYqgUnB4eSe9J65D/dxe7 yszXyIjjJ/J4Ggi+r1WXDcGFZMGZMyoq5eO1TLjvw04xE07d6ezGKPmUJ1MHawIl wCEiyLOSirtBFZ7vJ1KwCE8fLOHFeIG1cfWC+vFub3tHVYMaWzRH+5/5J3BT9iL6 s4WVqKLLdtT6I1m/UzyJtMKH5QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEHe+DSk RN7Pje1AH/lzEU0bcyiCMB8GA1UdIwQYMBaAFIn+h8NckaJlXnEesVS4Xm+OziNT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTVBRS8zM0Y3NEREQzNE Q0MxMUVGODlCNUIwNzNDNEY5QUUwMi9pZjZIdzF5Um9tVmVjUjZ4VkxoZWI0N09J MU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lmNkh3MXlSb21WZWNSNnhWTGhlYjQ3T0kxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy RTVBRS8zM0Y3NEREQzNEQ0MxMUVGODlCNUIwNzNDNEY5QUUwMi9pZjZIdzF5Um9t VmVjUjZ4VkxoZWI0N09JMU0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA9r10bN+w71Q9hjwAYtfolnoth8z+eqDNjQBL47nPPxFDNEbiRHl2c hc5UK6aUp6SSOsZguxVX81Bd/dcUY1g+wzAj2Q1KZ1XpAGSL3Y/YLL/+nPsOHpAu 2GBzVCPZ2ox/NqPmBSDC4IXOosFN7Iln8P96W+VikhKvbcg38cBmkf2Gol4p2nPB jE0ZjlVI6Nwsg6cACdxI1fdR4CN3vojbghdNmM7+8QHj/qY0WZ/KRjK4EFuBPyou Rq0q0qbtzETXL2AVwFDDzOyh6HPrGLbjuUcGkDC6p+4Ad8Hc64hlK6hT54sm72r/ m+/y7mgTww6PVOL1LcakLSGuDCKw7Y2G -----END CERTIFICATE-----Generated at Wed Aug 20 19:39:59 2025 by rpki-client