$ rpki-client -vvf rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft File: 6osEPoaPdVc7zEVArUlUEC3JIrg.mft (raw, json) Hash identifier: v4dH4pwttwe1wEu22SaAHY7m7E7cW8gL56OVLF+ps1I= Subject key identifier: A4:A0:BA:6B:5B:BA:BE:EC:50:B8:42:77:AA:8A:F4:62:DA:FA:BE:CD Authority key identifier: EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 Certificate issuer: /CN=A9165772/serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Certificate serial: 0102 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft Manifest number: FE Signing time: Sun 07 Sep 2025 05:34:05 +0000 Manifest this update: Sun 07 Sep 2025 05:34:05 +0000 Manifest next update: Sun 14 Sep 2025 05:34:05 +0000 Files and hashes: 1: 6osEPoaPdVc7zEVArUlUEC3JIrg.crl (hash: 71bt3Sq2ZdzWJgCLuI0mIfNvBRFcJIRYkBtrbSXSP8M=) 2: 6EF22D0A07C411EF8A38A486C4F9AE02.roa (hash: Z/bRh5gfICRhTgZIBmGvmKVx5q7fvhoDOyqb8F4Xn3w=) 3: 4F038F1007C511EFB3AD2E14C4F9AE02.roa (hash: YLqUw8RXSjFSw9i6iZFHkMU1fvDuVln4F0j/za3GPYo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 05:34:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 258 (0x102) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165772, serialNumber=EA8B043E868F75573BCC4540AD4954102DC922B8 Validity Not Before: Sep 7 05:34:05 2025 GMT Not After : Sep 14 05:34:05 2025 GMT Subject: CN=68bd194d-2faa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:a1:c0:25:5d:3f:68:da:f1:ff:37:5d:41: 38:db:f5:d5:4f:9d:64:c0:cd:53:c7:7f:3c:ee:1e: 85:2f:11:40:95:cd:84:ea:84:7d:88:a4:d0:ee:0c: f0:16:ac:9c:03:de:b3:31:6c:4c:25:40:cb:ea:4d: 34:c5:c2:de:63:72:04:d6:66:7c:f0:2a:6a:6b:0a: 3c:60:1d:71:a1:27:a7:c9:14:e2:74:31:e6:d9:d2: d9:b7:cb:12:78:61:27:10:65:3e:29:48:40:9a:b4: 04:2d:fd:25:56:fd:d0:16:2e:13:24:44:ec:46:fc: 61:a0:94:56:bb:fd:17:47:73:40:e3:91:b0:b6:f1: 8e:b7:ff:d4:a5:cc:18:df:fd:31:9e:f4:1b:1c:1b: bd:80:b7:51:05:78:1f:a6:af:f9:83:17:f4:b3:92: db:bd:76:f9:40:15:ea:9e:4a:1a:d7:5a:82:3b:3b: 21:c4:b8:cc:dc:10:c2:b0:c3:a4:28:9c:74:54:82: f1:31:7e:c8:7f:ea:ad:af:75:bc:53:88:50:02:72: 3f:c4:9b:bc:bd:2f:c5:2c:9e:26:ba:ca:93:f0:83: ba:13:f8:bd:5b:87:20:eb:a6:8b:79:3c:e7:41:45: 87:0c:61:16:e1:bd:02:17:e5:e9:60:fa:cd:62:82: 71:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A0:BA:6B:5B:BA:BE:EC:50:B8:42:77:AA:8A:F4:62:DA:FA:BE:CD X509v3 Authority Key Identifier: keyid:EA:8B:04:3E:86:8F:75:57:3B:CC:45:40:AD:49:54:10:2D:C9:22:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6osEPoaPdVc7zEVArUlUEC3JIrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165772/04BD1A6C07C411EF852DCC7DC4F9AE02/6osEPoaPdVc7zEVArUlUEC3JIrg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6e:cf:e0:18:24:a2:90:02:f7:6c:4b:d7:53:a8:6a:71:28:67: f6:46:2d:6b:74:bb:9c:dd:15:24:f4:7b:6b:45:08:37:da:fd: 60:76:26:4d:28:2d:aa:49:e8:86:72:89:37:86:fb:2a:71:f7: d9:af:b7:38:44:1f:b0:09:b4:03:ed:ca:1e:ef:75:02:eb:bb: 07:8e:1b:08:d5:87:45:e6:db:46:c6:e7:e1:55:0e:2c:f0:17: fb:f6:fa:0e:f1:60:ed:77:54:aa:b9:5e:2e:a4:d6:7f:51:8c: d3:3c:b5:a3:6d:a7:63:22:52:7b:ff:d7:d2:34:64:3b:f6:89: c6:5e:e0:ca:d2:63:f4:80:f6:51:84:5f:92:2b:8d:ea:67:9e: dc:11:29:ce:29:10:19:15:3a:db:a1:fd:58:5c:68:b6:ad:d1: 9c:76:fd:b3:2c:cb:61:9b:8d:50:cd:c4:29:c5:7f:e6:98:b2: 90:ba:44:f5:a9:da:e7:19:76:c2:fa:8f:1b:51:3e:27:e4:f8: 82:cf:b2:6c:73:95:00:4d:b0:3e:42:3e:70:37:89:85:61:ba: eb:ec:16:e5:27:f6:27:fa:f0:53:71:b2:12:7b:40:b5:b4:93: 5b:19:d5:78:f7:86:75:a2:94:5c:a5:a5:a3:97:98:c5:90:9e: c0:54:f7:09 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjU3NzIxMTAvBgNVBAUTKEVBOEIwNDNFODY4Rjc1NTczQkNDNDU0MEFENDk1NDEw MkRDOTIyQjgwHhcNMjUwOTA3MDUzNDA1WhcNMjUwOTE0MDUzNDA1WjAYMRYwFAYD VQQDEw02OGJkMTk0ZC0yZmFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsymhwCVdP2ja8f83XUE42/XVT51kwM1Tx3887h6FLxFAlc2E6oR9iKTQ7gzw FqycA96zMWxMJUDL6k00xcLeY3IE1mZ88Cpqawo8YB1xoSenyRTidDHm2dLZt8sS eGEnEGU+KUhAmrQELf0lVv3QFi4TJETsRvxhoJRWu/0XR3NA45GwtvGOt//UpcwY 3/0xnvQbHBu9gLdRBXgfpq/5gxf0s5LbvXb5QBXqnkoa11qCOzshxLjM3BDCsMOk KJx0VILxMX7If+qtr3W8U4hQAnI/xJu8vS/FLJ4musqT8IO6E/i9W4cg66aLeTzn QUWHDGEW4b0CF+XpYPrNYoJxuwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKSgumtb ur7sULhCd6qK9GLa+r7NMB8GA1UdIwQYMBaAFOqLBD6Gj3VXO8xFQK1JVBAtySK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NTc3Mi8wNEJEMUE2QzA3 QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRWYzd6RVZBclVsVUVDM0pJ cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZvc0VQb2FQZFZjN3pFVkFyVWxVRUMzSklyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 NTc3Mi8wNEJEMUE2QzA3QzQxMUVGODUyRENDN0RDNEY5QUUwMi82b3NFUG9hUGRW Yzd6RVZBclVsVUVDM0pJcmcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBuz+AYJKKQAvdsS9dTqGpxKGf2Ri1rdLuc3RUk9HtrRQg32v1gdiZN KC2qSeiGcok3hvsqcffZr7c4RB+wCbQD7coe73UC67sHjhsI1YdF5ttGxufhVQ4s 8Bf79voO8WDtd1SquV4upNZ/UYzTPLWjbadjIlJ7/9fSNGQ79onGXuDK0mP0gPZR hF+SK43qZ57cESnOKRAZFTrbof1YXGi2rdGcdv2zLMthm41QzcQpxX/mmLKQukT1 qdrnGXbC+o8bUT4n5PiCz7Jsc5UATbA+Qj5wN4mFYbrr7BblJ/Yn+vBTcbISe0C1 tJNbGdV494Z1opRcpaWjl5jFkJ7AVPcJ -----END CERTIFICATE-----Generated at Mon Sep 8 14:07:13 2025 by rpki-client