$ rpki-client -vvf rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft File: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft (raw, json) Hash identifier: GghLhqXY+seFIIk0ztHZrSlQjkRiufIMD2AtoNyaCJI= Subject key identifier: 20:68:7A:BE:BB:01:28:DB:66:CB:6D:99:14:62:D3:48:68:BA:AA:30 Authority key identifier: 68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E Certificate issuer: /CN=A916A0AF/serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Certificate serial: 07 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft Manifest number: 05A6 Signing time: Mon 08 Sep 2025 23:15:34 +0000 Manifest this update: Mon 08 Sep 2025 23:15:33 +0000 Manifest next update: Mon 15 Sep 2025 23:15:33 +0000 Files and hashes: 1: aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl (hash: rS+j7DOwA5oBd/JbGWLE9/u/utDSFJDbbka3WJPi+dE=) 2: 774D2C8A895911F082979238C4F9AE02.roa (hash: MNGV40v8PxwIzKP/YcpeveDanhXceoP8ufn50nFL4nk=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 22:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916A0AF, serialNumber=68EE85F4C27D4BA93E0D6B6A3E92659E10D6895E Validity Not Before: Sep 8 23:15:33 2025 GMT Not After : Sep 15 23:15:33 2025 GMT Subject: CN=68bf6395-f484 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:21:b0:ea:bb:a0:de:9f:a9:04:52:47:f0: a8:52:82:c3:4d:f2:30:c8:91:25:5e:48:1e:ce:31: ef:77:b1:9a:39:08:af:98:eb:dc:fc:3a:58:8d:fd: 60:29:0a:e1:52:d5:08:3b:6d:ac:0d:bb:8a:1e:d1: 44:42:a3:4e:0d:31:8c:38:ee:00:7c:fb:2b:f6:f4: 96:a5:ee:b8:bd:70:14:98:10:67:c1:07:ed:ea:99: 7a:e0:78:90:d2:78:87:3d:ef:78:05:93:63:e9:d1: 86:ce:d9:a6:64:60:b1:5f:73:dd:6f:2b:74:c4:7f: a4:fe:d7:ea:cd:28:de:50:da:9c:19:b0:bb:44:ae: a7:5c:9e:c0:56:d6:97:56:62:c8:98:ba:a5:73:1d: 4c:1e:4d:44:69:92:1a:5f:00:59:b8:de:4d:d7:f4: d3:b1:d8:a4:c6:6e:08:b5:60:9d:a6:0f:ce:18:0a: e1:a7:00:d2:95:ee:37:66:66:a8:0b:e3:4e:af:9d: 56:a3:0b:a7:e9:b4:4d:d8:91:25:46:1f:92:e0:3a: 99:2a:1e:dd:43:81:b6:cd:4f:d4:ef:cc:87:73:9d: 38:d4:42:cd:83:e9:3f:2a:ec:93:e9:41:be:79:d6: a3:b8:13:bb:46:e7:b1:b3:aa:c0:3f:bc:64:10:dd: e0:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:68:7A:BE:BB:01:28:DB:66:CB:6D:99:14:62:D3:48:68:BA:AA:30 X509v3 Authority Key Identifier: keyid:68:EE:85:F4:C2:7D:4B:A9:3E:0D:6B:6A:3E:92:65:9E:10:D6:89:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A0AF/FD65B4D8E4A611EBB94AA54CC4F9AE02/aO6F9MJ9S6k-DWtqPpJlnhDWiV4.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 53:cd:b6:00:e5:cc:13:26:6f:41:4f:d4:ab:46:53:17:48:60: 84:cd:cc:c0:50:61:d5:10:12:39:bd:16:76:9d:d0:c1:2a:cc: e7:3e:db:85:33:b4:b1:6c:e6:95:cd:75:e2:d8:c5:93:95:ed: 60:59:72:19:2f:b8:30:f5:38:39:73:aa:74:a0:33:a2:d2:a9: 4b:c7:85:d2:55:48:2d:dc:11:bc:97:78:d9:c7:92:e7:00:6f: 8c:6b:00:f5:a2:ff:84:d1:f4:f6:a1:09:e3:66:ff:c4:ef:fe: 88:d4:e8:4b:fe:f9:52:85:e1:b6:1b:8a:87:62:28:92:f5:cd: ae:53:8a:e7:f2:2a:90:eb:cf:6e:a1:83:2f:d8:8a:70:04:d8: bb:1d:92:01:b3:3e:6f:cf:b5:95:86:6b:36:ef:ca:7b:3b:3f: 57:eb:63:2d:5e:2d:7a:8c:bf:cc:be:5d:9d:2b:dd:b1:9e:60: 22:aa:3f:82:96:a6:3d:7d:84:3d:07:c8:b6:a4:f7:39:a2:4c: 62:0f:7a:5f:a3:fc:73:3e:0b:df:88:f2:95:ff:c1:79:00:be: 71:bc:a5:84:6d:56:b8:f8:bb:d0:24:e4:b0:6f:d7:45:46:97: df:2b:77:dc:b8:9d:fe:b3:53:ba:ed:e8:e5:07:ae:2e:b1:e4: e7:b6:c5:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 QTBBRjExMC8GA1UEBRMoNjhFRTg1RjRDMjdENEJBOTNFMEQ2QjZBM0U5MjY1OUUx MEQ2ODk1RTAeFw0yNTA5MDgyMzE1MzNaFw0yNTA5MTUyMzE1MzNaMBgxFjAUBgNV BAMTDTY4YmY2Mzk1LWY0ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDYCyGw6rug3p+pBFJH8KhSgsNN8jDIkSVeSB7OMe93sZo5CK+Y69z8OliN/WAp CuFS1Qg7bawNu4oe0URCo04NMYw47gB8+yv29Jal7ri9cBSYEGfBB+3qmXrgeJDS eIc973gFk2Pp0YbO2aZkYLFfc91vK3TEf6T+1+rNKN5Q2pwZsLtErqdcnsBW1pdW YsiYuqVzHUweTURpkhpfAFm43k3X9NOx2KTGbgi1YJ2mD84YCuGnANKV7jdmZqgL 406vnVajC6fptE3YkSVGH5LgOpkqHt1DgbbNT9TvzIdznTjUQs2D6T8q7JPpQb55 1qO4E7tG57GzqsA/vGQQ3eCdAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUIGh6vrsB KNtmy22ZFGLTSGi6qjAwHwYDVR0jBBgwFoAUaO6F9MJ9S6k+DWtqPpJlnhDWiV4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZBMEFGL0ZENjVCNEQ4RTRB NjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZrLURXdHFQcEpsbmhEV2lW NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvYU82RjlNSjlTNmstRFd0cVBwSmxuaERXaVY0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTZB MEFGL0ZENjVCNEQ4RTRBNjExRUJCOTRBQTU0Q0M0RjlBRTAyL2FPNkY5TUo5UzZr LURXdHFQcEpsbmhEV2lWNC5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFPNtgDlzBMmb0FP1KtGUxdIYITNzMBQYdUQEjm9Fnad0MEqzOc+24Uz tLFs5pXNdeLYxZOV7WBZchkvuDD1ODlzqnSgM6LSqUvHhdJVSC3cEbyXeNnHkucA b4xrAPWi/4TR9PahCeNm/8Tv/ojU6Ev++VKF4bYbiodiKJL1za5TiufyKpDrz26h gy/YinAE2LsdkgGzPm/PtZWGazbvyns7P1frYy1eLXqMv8y+XZ0r3bGeYCKqP4KW pj19hD0HyLak9zmiTGIPel+j/HM+C9+I8pX/wXkAvnG8pYRtVrj4u9Ak5LBv10VG l98rd9y4nf6zU7rt6OUHri6x5Oe2xag= -----END CERTIFICATE-----Generated at Tue Sep 9 01:16:43 2025 by rpki-client