$ rpki-client -vvf rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft File: x6CGcqgQDaMwwSIxURVYe-YRDfE.mft (raw, json) Hash identifier: HEj1CBAwXl5r4IUlcbyb1EpwMQkPBTRTAat2hZyevyg= Subject key identifier: 90:CE:1C:43:29:30:86:60:FB:BA:7D:0B:CF:09:D4:7C:E8:EE:1D:50 Authority key identifier: C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 Certificate issuer: /CN=A9149CA9/serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Certificate serial: 0711 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft Manifest number: 070B Signing time: Wed 20 Aug 2025 21:55:19 +0000 Manifest this update: Wed 20 Aug 2025 21:55:18 +0000 Manifest next update: Wed 27 Aug 2025 21:55:18 +0000 Files and hashes: 1: x6CGcqgQDaMwwSIxURVYe-YRDfE.crl (hash: dqXEQxGLgofjcmEjExA0MYLntVcWIwhZfCgeAGO4rJQ=) 2: 3F6A3A284F1C11EB9953172CC4F9AE02.roa (hash: fLIn/n29gS9WQea5NQ408mptvqiyp1OsclxpM5zgbkA=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 21:55:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9149CA9, serialNumber=C7A08672A8100DA330C122315115587BE6110DF1 Validity Not Before: Aug 20 21:55:18 2025 GMT Not After : Aug 27 21:55:18 2025 GMT Subject: CN=68a64447-4b05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:29:30:6c:ab:36:01:d9:9d:ef:2c:ed:70: 04:eb:00:8a:d7:ab:fd:3f:35:4a:96:e2:e1:c9:5b: c0:1a:74:5d:06:d3:85:3a:54:c9:1f:17:b2:91:a7: 32:2c:9f:b0:63:34:37:b3:03:28:15:39:a7:df:0d: 2c:c7:49:00:f3:ca:15:f4:8e:87:e6:2f:96:bf:11: ab:95:d9:1a:e7:d8:3b:bf:02:af:23:51:d4:aa:c9: cd:2d:bb:31:22:29:63:c5:79:fa:35:62:2b:b9:4c: a7:ee:66:95:b0:b7:db:85:8a:65:7f:09:f7:53:3d: 90:32:f1:29:a8:4c:9f:68:8f:14:32:4a:d7:61:4d: 04:f3:e5:fb:4b:57:dc:9e:58:e1:2a:95:82:40:3e: 6b:a7:0e:a2:88:dd:bc:52:39:8a:c8:cd:44:39:33: 86:0b:7d:e7:8f:62:d9:cc:73:c8:45:21:70:c0:aa: 1e:91:1c:e3:bb:d7:c3:c8:17:76:f0:8a:6f:e5:4e: 02:15:f1:81:6f:b8:d8:bb:88:35:41:6e:2b:15:31: b0:68:e3:32:ea:82:e1:61:a8:97:f7:8f:ae:9f:a3: d7:86:e6:b5:08:9f:11:e4:dd:a0:0d:86:99:0c:0f: d9:76:49:96:d2:1c:77:b8:db:60:94:53:6b:be:87: 75:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:CE:1C:43:29:30:86:60:FB:BA:7D:0B:CF:09:D4:7C:E8:EE:1D:50 X509v3 Authority Key Identifier: keyid:C7:A0:86:72:A8:10:0D:A3:30:C1:22:31:51:15:58:7B:E6:11:0D:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x6CGcqgQDaMwwSIxURVYe-YRDfE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149CA9/EED748D64F1511EB8C7EAB1AC4F9AE02/x6CGcqgQDaMwwSIxURVYe-YRDfE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9b:52:d7:61:12:e4:28:2e:e4:60:f0:1c:3c:71:49:8e:9f:ac: 81:d8:10:80:8e:a3:74:c9:be:6f:85:91:f3:c1:42:b5:ea:e4: 4a:3f:ef:18:31:11:05:26:b7:5e:5f:32:76:f4:a9:d0:30:7c: 56:55:83:70:68:52:60:6f:99:e7:b9:2f:7b:48:56:4a:f8:c7: 0e:1e:29:d1:93:52:3f:63:65:01:94:4a:f8:a7:73:70:0c:a1: a1:93:a3:b2:9a:f2:8c:6a:bb:2f:29:e5:ee:21:99:fa:3e:51: d2:f7:27:49:8d:9f:3f:0f:b9:75:bd:2b:de:3e:55:05:41:45: 12:ad:cc:b7:49:04:49:c9:52:ed:88:4d:4f:f2:97:1b:48:5a: 38:9e:bc:e3:ce:79:c8:50:32:ab:16:b1:0c:3a:ba:01:18:f0: b2:64:50:1d:5a:74:fe:f6:8a:4b:c1:5a:f1:f8:6e:41:f3:a9: 23:c2:62:ae:60:71:b7:14:23:f0:0e:ca:f5:b0:c6:4a:31:d7: 42:f7:1a:3f:bc:d2:8a:d9:ba:6b:d1:ab:e4:66:3d:75:6c:1f: 97:87:8f:d2:7e:69:fc:0a:a0:b9:c2:65:f2:a0:7c:fb:b4:88: 0e:fd:84:fb:1c:e1:8c:b3:88:a3:f2:b3:76:30:e0:34:8b:71: 67:33:11:0b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDlDQTkxMTAvBgNVBAUTKEM3QTA4NjcyQTgxMDBEQTMzMEMxMjIzMTUxMTU1ODdC RTYxMTBERjEwHhcNMjUwODIwMjE1NTE4WhcNMjUwODI3MjE1NTE4WjAYMRYwFAYD VQQDEw02OGE2NDQ0Ny00YjA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp6MpMGyrNgHZne8s7XAE6wCK16v9PzVKluLhyVvAGnRdBtOFOlTJHxeykacy LJ+wYzQ3swMoFTmn3w0sx0kA88oV9I6H5i+WvxGrldka59g7vwKvI1HUqsnNLbsx IiljxXn6NWIruUyn7maVsLfbhYplfwn3Uz2QMvEpqEyfaI8UMkrXYU0E8+X7S1fc nljhKpWCQD5rpw6iiN28UjmKyM1EOTOGC33nj2LZzHPIRSFwwKoekRzju9fDyBd2 8Ipv5U4CFfGBb7jYu4g1QW4rFTGwaOMy6oLhYaiX94+un6PXhua1CJ8R5N2gDYaZ DA/ZdkmW0hx3uNtglFNrvod1iQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJDOHEMp MIZg+7p9C88J1Hzo7h1QMB8GA1UdIwQYMBaAFMeghnKoEA2jMMEiMVEVWHvmEQ3x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0OUNBOS9FRUQ3NDhENjRG MTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURhTXd3U0l4VVJWWWUtWVJE ZkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g2Q0djcWdRRGFNd3dTSXhVUlZZZS1ZUkRmRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 OUNBOS9FRUQ3NDhENjRGMTUxMUVCOEM3RUFCMUFDNEY5QUUwMi94NkNHY3FnUURh TXd3U0l4VVJWWWUtWVJEZkUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCbUtdhEuQoLuRg8Bw8cUmOn6yB2BCAjqN0yb5vhZHzwUK16uRKP+8Y MREFJrdeXzJ29KnQMHxWVYNwaFJgb5nnuS97SFZK+McOHinRk1I/Y2UBlEr4p3Nw DKGhk6OymvKMarsvKeXuIZn6PlHS9ydJjZ8/D7l1vSvePlUFQUUSrcy3SQRJyVLt iE1P8pcbSFo4nrzjznnIUDKrFrEMOroBGPCyZFAdWnT+9opLwVrx+G5B86kjwmKu YHG3FCPwDsr1sMZKMddC9xo/vNKK2bpr0avkZj11bB+Xh4/Sfmn8CqC5wmXyoHz7 tIgO/YT7HOGMs4ij8rN2MOA0i3FnMxEL -----END CERTIFICATE-----Generated at Fri Aug 22 16:34:39 2025 by rpki-client