$ rpki-client -vvf rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft File: ET6g_81su3s89UWrzSyWLYbh7LA.mft (raw, json) Hash identifier: OW0aGBtkmM26iPmWnZGoHM9cKZgnj9DTau5GVw2N7WI= Subject key identifier: 2A:88:86:2D:C7:20:16:AF:33:0F:C4:32:29:55:8F:67:9A:E7:43:B8 Authority key identifier: 11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 Certificate issuer: /CN=A915C6B7/serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Certificate serial: 0BF1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft Manifest number: 0BE9 Signing time: Sun 24 Aug 2025 18:49:28 +0000 Manifest this update: Sun 24 Aug 2025 18:49:27 +0000 Manifest next update: Sun 31 Aug 2025 18:49:27 +0000 Files and hashes: 1: ET6g_81su3s89UWrzSyWLYbh7LA.crl (hash: oQxEQHk6rZNZbkn4FQ34NhoMoZk3GCiltvmMA3tZmok=) 2: 69683D8CC64D11EABD8FD32DC4F9AE02.roa (hash: ndk7WBwAom+jNCFlVWgXYFCEOWN+x873QVE3wv4MHH8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 18:49:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3057 (0xbf1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915C6B7, serialNumber=113EA0FFCD6CBB7B3CF545ABCD2C962D86E1ECB0 Validity Not Before: Aug 24 18:49:27 2025 GMT Not After : Aug 31 18:49:27 2025 GMT Subject: CN=68ab5eb8-d2db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:8e:e7:31:0f:6b:03:e2:c5:50:bf:ad:14:06: 40:e5:dc:ae:cc:6f:03:c0:24:1c:81:d6:cf:2a:ed: f8:fe:87:ad:fe:3d:af:b9:78:ff:9b:bd:78:78:bb: e4:48:b6:73:e1:61:98:2b:e5:61:24:8b:03:00:6c: dc:ff:6a:57:0e:33:3d:31:f8:70:5b:d0:56:20:8b: 86:c5:d1:55:f7:66:25:b2:08:55:e3:09:6d:8b:25: 38:42:f3:bc:cb:99:d9:0a:df:07:f2:5f:0e:8b:68: 55:90:ca:d4:f5:db:f7:f3:2d:2e:fd:36:2e:e1:4e: bb:bd:1a:62:ab:2d:ab:e9:15:93:50:58:63:99:f8: 5b:27:88:9a:e2:14:ef:6b:8f:0e:ae:ca:bf:11:99: 79:77:cc:65:51:c8:73:13:ca:dd:12:db:f0:a3:b3: c2:5b:45:a0:42:39:13:bc:95:29:2d:f2:e6:36:1f: 5e:bb:1a:ed:61:0a:7d:0b:ba:53:5d:c8:1b:49:5d: 96:60:9d:e6:f2:45:15:04:2d:5d:d9:8a:ce:fd:0b: e0:83:6e:61:49:f8:26:de:18:36:31:fc:f6:3e:ec: e4:c3:09:ae:5e:06:6f:bf:95:8c:2f:4c:21:06:d4: 7c:41:1c:4a:b8:ce:e4:ff:b8:fd:bc:e0:10:59:c1: 85:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:88:86:2D:C7:20:16:AF:33:0F:C4:32:29:55:8F:67:9A:E7:43:B8 X509v3 Authority Key Identifier: keyid:11:3E:A0:FF:CD:6C:BB:7B:3C:F5:45:AB:CD:2C:96:2D:86:E1:EC:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ET6g_81su3s89UWrzSyWLYbh7LA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915C6B7/8025DD7A1EF711EAAD44495BC4F9AE02/ET6g_81su3s89UWrzSyWLYbh7LA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 37:90:0f:90:6b:1f:06:5d:6a:b0:6c:5d:1c:01:75:33:62:a1: 9a:54:db:a0:1c:f3:ed:06:54:18:52:a5:45:d6:52:6a:99:03: 80:61:1d:92:98:29:56:6e:79:e4:df:b8:18:0b:2f:3a:94:4a: 0b:a2:76:d1:9d:d2:6c:b1:75:91:54:fe:e8:9e:ad:7c:3e:d2: b1:0e:0e:1f:85:38:30:49:2d:0b:9c:20:c7:e6:08:61:f3:6c: 4e:b7:c3:d5:4d:91:e9:2b:f0:5f:16:0f:df:44:04:ec:0f:ce: 5a:d6:31:74:e4:39:91:00:ff:8b:66:86:4c:5c:06:46:fc:be: d4:cb:df:92:d4:bf:80:63:83:e8:4c:d3:52:be:2c:8e:fb:85: 83:48:c2:a5:31:31:05:6d:e2:1e:77:32:eb:62:73:4b:28:39: 07:69:b3:eb:7a:fd:d2:4a:da:a1:87:8e:eb:d3:85:9c:1b:54: 37:75:ae:10:fd:e3:64:aa:ed:4b:23:a2:2e:17:37:aa:fa:d3: 84:6c:f6:fe:a6:de:ea:8b:8c:da:a4:5f:1a:13:30:ce:b1:56: d2:a7:8a:a5:76:06:e1:7d:11:b2:a5:31:5f:50:ac:cf:9a:16: a8:59:b7:4c:2c:de:cd:55:c4:0e:df:99:a5:ec:4e:31:c8:68: 19:8a:26:9b -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUM2QjcxMTAvBgNVBAUTKDExM0VBMEZGQ0Q2Q0JCN0IzQ0Y1NDVBQkNEMkM5NjJE ODZFMUVDQjAwHhcNMjUwODI0MTg0OTI3WhcNMjUwODMxMTg0OTI3WjAYMRYwFAYD VQQDEw02OGFiNWViOC1kMmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoo7nMQ9rA+LFUL+tFAZA5dyuzG8DwCQcgdbPKu34/oet/j2vuXj/m714eLvk SLZz4WGYK+VhJIsDAGzc/2pXDjM9MfhwW9BWIIuGxdFV92YlsghV4wltiyU4QvO8 y5nZCt8H8l8Oi2hVkMrU9dv38y0u/TYu4U67vRpiqy2r6RWTUFhjmfhbJ4ia4hTv a48Orsq/EZl5d8xlUchzE8rdEtvwo7PCW0WgQjkTvJUpLfLmNh9euxrtYQp9C7pT XcgbSV2WYJ3m8kUVBC1d2YrO/Qvgg25hSfgm3hg2Mfz2PuzkwwmuXgZvv5WML0wh BtR8QRxKuM7k/7j9vOAQWcGFSQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCqIhi3H IBavMw/EMilVj2ea50O4MB8GA1UdIwQYMBaAFBE+oP/NbLt7PPVFq80sli2G4eyw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1QzZCNy84MDI1REQ3QTFF RjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uzczg5VVdyelN5V0xZYmg3 TEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VUNmdfODFzdTNzODlVV3J6U3lXTFliaDdMQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 QzZCNy84MDI1REQ3QTFFRjcxMUVBQUQ0NDQ5NUJDNEY5QUUwMi9FVDZnXzgxc3Uz czg5VVdyelN5V0xZYmg3TEEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA3kA+Qax8GXWqwbF0cAXUzYqGaVNugHPPtBlQYUqVF1lJqmQOAYR2S mClWbnnk37gYCy86lEoLonbRndJssXWRVP7onq18PtKxDg4fhTgwSS0LnCDH5ghh 82xOt8PVTZHpK/BfFg/fRATsD85a1jF05DmRAP+LZoZMXAZG/L7Uy9+S1L+AY4Po TNNSviyO+4WDSMKlMTEFbeIedzLrYnNLKDkHabPrev3SStqhh47r04WcG1Q3da4Q /eNkqu1LI6IuFzeq+tOEbPb+pt7qi4zapF8aEzDOsVbSp4qldgbhfRGypTFfUKzP mhaoWbdMLN7NVcQO35ml7E4xyGgZiiab -----END CERTIFICATE-----Generated at Sun Aug 24 22:14:37 2025 by rpki-client