$ rpki-client -vvf rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft File: n6yKuWoNopKfw9GHG-1vdD6MlXc.mft (raw, json) Hash identifier: AqMKY1SKzC3Rj/yz9mY+W7RI+FAfHiZwMEBnHMNKyyU= Subject key identifier: 2A:78:32:5A:44:D7:0B:FA:09:C9:77:6F:F0:A5:E7:21:9F:53:89:DB Authority key identifier: 9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 Certificate issuer: /CN=A916E2DC/serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Certificate serial: 0227 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft Manifest number: 021E Signing time: Wed 17 Sep 2025 02:39:39 +0000 Manifest this update: Wed 17 Sep 2025 02:39:39 +0000 Manifest next update: Wed 24 Sep 2025 02:39:38 +0000 Files and hashes: 1: n6yKuWoNopKfw9GHG-1vdD6MlXc.crl (hash: +1N5TEu2Z42ZSG3xCX/pfBxa6LExtnMM7aDmw2dbQxM=) 2: 6993B4CCD43B11EDA821F80DC4F9AE02.roa (hash: ZSI/iXYWNqdEgciLkCgrj+0eyDroB8ECUVdL5jcas7g=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 24 Sep 2025 02:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 551 (0x227) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916E2DC, serialNumber=9FAC8AB96A0DA2929FC3D1871BED6F743E8C9577 Validity Not Before: Sep 17 02:39:39 2025 GMT Not After : Sep 24 02:39:38 2025 GMT Subject: CN=68ca1f6b-7d94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ee:9e:f9:4d:30:13:db:21:30:79:86:93:ef: f1:88:13:34:87:ba:2c:f7:db:e0:d7:ec:7f:19:d5: 14:7e:88:6e:7c:fd:d8:c3:79:2d:74:35:9d:04:44: b1:01:96:c2:0c:c9:f2:8a:e2:2a:a2:6b:5f:93:06: 33:c9:49:5b:b4:31:9c:c1:74:98:1d:20:3f:de:45: 0d:4a:e6:93:d0:a6:d6:7b:80:87:e3:4c:49:8f:8a: b7:29:a4:88:75:87:f8:d0:ae:46:39:98:7b:52:48: 22:79:4c:7e:1b:6e:d8:2f:4a:14:aa:b6:3e:bd:73: 63:89:3f:b5:6d:ac:62:e2:04:db:4f:de:66:80:21: 6a:10:0b:81:5e:e5:0a:69:f7:d4:f3:6e:58:87:69: fd:5b:d3:46:4c:a8:c5:c4:ff:09:e3:c3:5a:13:bb: 55:65:3d:90:97:1d:2d:05:fa:71:d5:95:f6:b5:e4: 5e:31:56:ee:66:9f:13:fb:22:05:77:9b:f9:2d:76: 6c:dd:ce:1d:94:ff:3b:6d:d2:00:13:f9:aa:77:bf: e7:a7:39:c6:48:bd:85:e3:2d:0d:10:c1:ec:9d:22: 32:03:4a:a7:98:3e:73:0d:79:94:a2:ee:a2:f9:d0: d1:53:03:15:1c:2d:ba:f3:d5:9c:93:93:3f:23:3b: 35:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:32:5A:44:D7:0B:FA:09:C9:77:6F:F0:A5:E7:21:9F:53:89:DB X509v3 Authority Key Identifier: keyid:9F:AC:8A:B9:6A:0D:A2:92:9F:C3:D1:87:1B:ED:6F:74:3E:8C:95:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n6yKuWoNopKfw9GHG-1vdD6MlXc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916E2DC/6D89644A6AE711ED94B44C87C4F9AE02/n6yKuWoNopKfw9GHG-1vdD6MlXc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 65:e9:74:b0:2c:80:b9:2a:dc:78:b7:84:92:26:60:41:79:e1: 52:51:ef:fa:0a:b4:ae:f0:da:fb:02:7f:ad:f4:a1:3c:0d:36: 2f:db:40:43:66:61:8a:16:3d:d3:7c:1c:43:e2:bb:04:0c:12: a0:a0:3a:a6:24:f7:24:6f:9e:98:54:54:5c:94:97:69:8c:c9: a0:5c:9e:13:1b:4c:98:e1:ad:71:7e:3e:71:89:83:18:cc:4c: cf:37:c0:ea:59:23:d4:dc:ab:9d:06:28:b9:6c:cc:ed:34:7a: 93:e2:84:01:f7:ed:43:59:65:30:f2:67:da:60:43:85:27:bb: 73:16:23:ac:87:75:1a:7e:8b:15:85:d8:d3:26:d7:57:17:66: 6e:d8:97:e3:78:94:38:f4:a7:04:16:a2:66:1f:a3:31:fe:79: 64:ef:3c:d0:61:11:39:16:a9:3d:f7:a0:cc:42:7e:19:4b:11: 05:70:fd:1a:c1:39:70:ea:6b:a6:90:25:b4:35:a5:f2:84:f4: 0b:b5:1e:12:76:6d:a2:19:77:b1:33:a9:2a:e2:56:47:c5:68: ab:2e:88:0c:56:42:34:53:60:de:05:bd:80:6d:62:83:fe:5e: bd:a3:42:21:dd:1a:4f:78:72:4e:4f:a7:8f:94:fd:e3:13:d4: 22:f6:30:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkUyREMxMTAvBgNVBAUTKDlGQUM4QUI5NkEwREEyOTI5RkMzRDE4NzFCRUQ2Rjc0 M0U4Qzk1NzcwHhcNMjUwOTE3MDIzOTM5WhcNMjUwOTI0MDIzOTM4WjAYMRYwFAYD VQQDEw02OGNhMWY2Yi03ZDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArO6e+U0wE9shMHmGk+/xiBM0h7os99vg1+x/GdUUfohufP3Yw3ktdDWdBESx AZbCDMnyiuIqomtfkwYzyUlbtDGcwXSYHSA/3kUNSuaT0KbWe4CH40xJj4q3KaSI dYf40K5GOZh7UkgieUx+G27YL0oUqrY+vXNjiT+1baxi4gTbT95mgCFqEAuBXuUK affU825Yh2n9W9NGTKjFxP8J48NaE7tVZT2Qlx0tBfpx1ZX2teReMVbuZp8T+yIF d5v5LXZs3c4dlP87bdIAE/mqd7/npznGSL2F4y0NEMHsnSIyA0qnmD5zDXmUou6i +dDRUwMVHC2689Wck5M/Izs1GwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCp4MlpE 1wv6Ccl3b/Cl5yGfU4nbMB8GA1UdIwQYMBaAFJ+sirlqDaKSn8PRhxvtb3Q+jJV3 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RTJEQy82RDg5NjQ0QTZB RTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9wS2Z3OUdIRy0xdmRENk1s WGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL242eUt1V29Ob3BLZnc5R0hHLTF2ZEQ2TWxYYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 RTJEQy82RDg5NjQ0QTZBRTcxMUVEOTRCNDRDODdDNEY5QUUwMi9uNnlLdVdvTm9w S2Z3OUdIRy0xdmRENk1sWGMubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBl6XSwLIC5Ktx4t4SSJmBBeeFSUe/6CrSu8Nr7An+t9KE8DTYv20BD ZmGKFj3TfBxD4rsEDBKgoDqmJPckb56YVFRclJdpjMmgXJ4TG0yY4a1xfj5xiYMY zEzPN8DqWSPU3KudBii5bMztNHqT4oQB9+1DWWUw8mfaYEOFJ7tzFiOsh3UafosV hdjTJtdXF2Zu2JfjeJQ49KcEFqJmH6Mx/nlk7zzQYRE5Fqk996DMQn4ZSxEFcP0a wTlw6mumkCW0NaXyhPQLtR4Sdm2iGXexM6kq4lZHxWirLogMVkI0U2DeBb2AbWKD /l69o0Ih3RpPeHJOT6ePlP3jE9Qi9jCP -----END CERTIFICATE-----Generated at Fri Sep 19 00:41:01 2025 by rpki-client