$ rpki-client -vvf rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft File: 6mA98ryp7Vu3vSDB9LxR15fApj8.mft (raw, json) Hash identifier: JWMGwu2pVsTGD8IL1sU1lS9D4Mulv27zHzukvRAfWSU= Subject key identifier: 64:8C:7B:82:6E:FC:78:D1:1D:7D:22:37:54:72:F1:17:2A:E5:9A:45 Authority key identifier: EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F Certificate issuer: /CN=A9169E54/serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Certificate serial: 10 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft Manifest number: 0F Signing time: Sat 19 Jul 2025 08:20:11 +0000 Manifest this update: Sat 19 Jul 2025 08:20:11 +0000 Manifest next update: Sat 26 Jul 2025 08:20:11 +0000 Files and hashes: 1: 6mA98ryp7Vu3vSDB9LxR15fApj8.crl (hash: hChoxSwldy32eptZ0NcKISPJQyxx+mQjYaMUJDwR8+M=) 2: C2A46ED64FFD11F085A32C7CC4F9AE02.roa (hash: kAJy+kbDfHSxGirPMu77eyrxHf+CDgBjh/BH4GL9KVs=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:20:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9169E54, serialNumber=EA603DF2BCA9ED5BB7BD20C1F4BC51D797C0A63F Validity Not Before: Jul 19 08:20:11 2025 GMT Not After : Jul 26 08:20:11 2025 GMT Subject: CN=687b553b-991b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:2e:4a:ce:dc:d2:65:81:5e:3e:3a:79:8b: c7:fd:2b:7c:a9:d2:9c:94:5d:f7:d1:9d:6c:20:9d: bc:10:74:22:62:05:12:cc:03:c1:b8:0a:3e:b6:6b: b7:5b:77:59:6b:62:5d:f3:a9:f5:da:e7:74:26:18: 3b:3a:df:ed:ca:7f:99:c0:b5:87:31:64:c8:43:07: c5:98:33:b1:ae:de:7b:28:e3:08:e1:68:42:d0:f5: 22:3d:86:7c:aa:bd:67:ef:2f:6d:7e:ca:b0:e9:46: c8:fa:13:91:16:f8:2e:c3:04:22:af:6c:51:90:15: 44:f3:dd:8c:ba:ce:87:a4:94:46:a7:ff:b6:38:18: 5c:67:d4:79:70:cb:9e:15:59:21:29:8f:ea:38:f8: 2c:7c:54:06:83:9e:20:35:e1:8d:5a:69:44:9c:5f: 55:d5:4f:57:a8:f0:19:55:8a:a7:d1:5d:4d:b7:8e: a6:b6:13:01:3c:0b:25:10:4c:5c:e2:a1:0a:94:1b: 60:93:02:6f:65:14:1f:56:87:6b:16:95:14:a7:a1: fe:ac:84:d6:8d:60:5a:ce:38:f6:90:a5:7c:86:8f: b3:a3:f3:1a:5a:bf:01:25:c1:d4:c9:25:af:6b:75: 65:d9:79:95:83:38:5b:7c:36:5a:69:74:5f:13:b9: 26:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:8C:7B:82:6E:FC:78:D1:1D:7D:22:37:54:72:F1:17:2A:E5:9A:45 X509v3 Authority Key Identifier: keyid:EA:60:3D:F2:BC:A9:ED:5B:B7:BD:20:C1:F4:BC:51:D7:97:C0:A6:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6mA98ryp7Vu3vSDB9LxR15fApj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169E54/D9EED1004FFB11F0AAEB3877C4F9AE02/6mA98ryp7Vu3vSDB9LxR15fApj8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2d:81:ed:9e:fe:a8:cd:54:15:27:81:f2:9d:b7:ba:d4:8a:64: 15:7c:a5:97:eb:cd:8d:a9:ce:0c:58:5f:80:f8:a3:8e:34:54: 9f:a0:aa:cb:be:09:b2:ad:f5:52:2b:e6:3b:58:2b:0c:08:9e: 27:57:90:57:50:42:9c:06:09:5c:e9:4b:62:1a:58:ac:55:a7: a1:b8:d8:96:1e:b4:1b:19:e2:5e:2d:15:44:39:ea:41:70:d0: bb:43:ea:d7:e3:8c:24:2a:55:59:a7:50:25:8f:d1:c9:0a:11: 07:b7:ae:1c:48:a6:1b:ad:11:4b:8f:4a:28:15:2d:9a:24:ae: cc:79:75:ba:a0:34:4a:75:39:5b:af:12:f6:8d:61:c2:a2:f1: 77:bc:d0:aa:b8:a8:8b:b8:e7:ca:aa:3e:ed:5d:b9:79:f5:fe: c4:3a:63:f6:60:8d:34:b6:b9:87:6c:2c:3e:c0:d7:2f:e1:95: 12:44:d8:d0:1b:66:12:cf:88:86:55:65:b8:2b:2b:4e:ab:16: 5c:fd:16:ad:98:2a:80:48:58:f0:0b:36:e2:7d:19:74:99:76: fc:d7:a7:95:21:c7:41:1a:7e:b6:c0:a2:85:bd:81:b1:17:ec: 6e:c8:c0:86:6b:c7:21:ab:f8:c2:9f:29:ff:84:f6:c2:62:03: 34:e1:6d:4b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 OUU1NDExMC8GA1UEBRMoRUE2MDNERjJCQ0E5RUQ1QkI3QkQyMEMxRjRCQzUxRDc5 N0MwQTYzRjAeFw0yNTA3MTkwODIwMTFaFw0yNTA3MjYwODIwMTFaMBgxFjAUBgNV BAMTDTY4N2I1NTNiLTk5MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDGNS5KztzSZYFePjp5i8f9K3yp0pyUXffRnWwgnbwQdCJiBRLMA8G4Cj62a7db d1lrYl3zqfXa53QmGDs63+3Kf5nAtYcxZMhDB8WYM7Gu3nso4wjhaELQ9SI9hnyq vWfvL21+yrDpRsj6E5EW+C7DBCKvbFGQFUTz3Yy6zoeklEan/7Y4GFxn1Hlwy54V WSEpj+o4+Cx8VAaDniA14Y1aaUScX1XVT1eo8BlViqfRXU23jqa2EwE8CyUQTFzi oQqUG2CTAm9lFB9Wh2sWlRSnof6shNaNYFrOOPaQpXyGj7Oj8xpavwElwdTJJa9r dWXZeZWDOFt8NlppdF8TuSaLAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUZIx7gm78 eNEdfSI3VHLxFyrlmkUwHwYDVR0jBBgwFoAU6mA98ryp7Vu3vSDB9LxR15fApj8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5RTU0L0Q5RUVEMTAwNEZG QjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1M3ZTREI5THhSMTVmQXBq OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNm1BOThyeXA3VnUzdlNEQjlMeFIxNWZBcGo4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY5 RTU0L0Q5RUVEMTAwNEZGQjExRjBBQUVCMzg3N0M0RjlBRTAyLzZtQTk4cnlwN1Z1 M3ZTREI5THhSMTVmQXBqOC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAC2B7Z7+qM1UFSeB8p23utSKZBV8pZfrzY2pzgxYX4D4o440VJ+gqsu+ CbKt9VIr5jtYKwwInidXkFdQQpwGCVzpS2IaWKxVp6G42JYetBsZ4l4tFUQ56kFw 0LtD6tfjjCQqVVmnUCWP0ckKEQe3rhxIphutEUuPSigVLZokrsx5dbqgNEp1OVuv EvaNYcKi8Xe80Kq4qIu458qqPu1duXn1/sQ6Y/ZgjTS2uYdsLD7A1y/hlRJE2NAb ZhLPiIZVZbgrK06rFlz9Fq2YKoBIWPALNuJ9GXSZdvzXp5Uhx0EafrbAooW9gbEX 7G7IwIZrxyGr+MKfKf+E9sJiAzThbUs= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:44 2025 by rpki-client