$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: wXfg46S9PdhFTbhxEUdur5X1aYQMOclhvBiRStCyHfs= Subject key identifier: BE:51:18:14:37:71:F7:70:21:FD:92:FB:53:23:6A:76:54:52:81:2E Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D28 Signing time: Sat 06 Sep 2025 18:10:57 +0000 Manifest this update: Sat 06 Sep 2025 18:10:57 +0000 Manifest next update: Sat 13 Sep 2025 18:10:57 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: DjnZZENZVBzeCCkxJFR1qwczTeW5KrMnyeYTqd5/S5Q=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 18:10:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3379 (0xd33) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Sep 6 18:10:57 2025 GMT Not After : Sep 13 18:10:57 2025 GMT Subject: CN=68bc7931-000e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bf:10:5e:ae:95:12:65:ca:20:fb:6f:2d:c2: a2:a9:bd:44:bb:25:7e:a0:ec:c2:9d:41:9d:b9:85: 6a:9e:ce:a6:43:bd:fd:a0:e3:6e:9e:2e:9b:27:f5: 8f:94:86:eb:a8:5a:9d:82:9e:68:11:19:3b:2d:96: 7f:8f:bc:da:48:db:2e:1f:00:47:53:b3:db:b3:ac: 5e:6c:20:1e:75:e5:f1:0d:42:93:04:2a:f4:ef:6e: 7b:05:b6:84:6b:12:e5:14:1e:e6:89:84:1a:c8:0f: 09:3b:8b:d3:e1:c9:10:b4:18:7f:f6:71:e3:d2:02: 72:b2:4e:7a:b7:04:a0:c4:3b:94:4c:9c:39:bd:c1: 6e:ea:6f:5b:ae:c8:54:bc:cb:8e:19:91:45:6c:72: 4d:d0:b5:90:38:c6:c6:1c:1a:a6:e5:66:33:2e:01: c2:4b:6c:0a:7f:57:a0:19:57:03:b0:6c:78:e5:0d: 62:d0:1c:3e:bd:45:04:d8:86:a8:7c:be:ea:b0:2a: 94:ce:d2:6c:86:f9:43:65:b6:2c:b8:89:35:35:b2: 96:ca:fe:14:88:36:df:23:91:92:41:d7:03:23:56: 29:79:cd:d5:99:45:2d:02:1d:52:c0:1c:8e:1d:8c: eb:19:b0:2d:af:68:74:b2:09:a4:81:ae:02:ff:d3: 33:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:51:18:14:37:71:F7:70:21:FD:92:FB:53:23:6A:76:54:52:81:2E X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b7:b7:95:c3:24:fe:33:ce:9f:6f:ff:fd:b2:7d:eb:f2:ff: e6:e0:f5:48:e9:59:ab:d3:2e:a5:6f:8e:10:9d:41:5b:d8:2d: 0f:c4:89:00:ab:45:99:82:0d:e6:06:e2:7e:80:1e:e8:83:96: 21:ba:ca:a6:80:2f:f0:59:eb:54:f3:0a:12:ee:e0:ee:ac:66: e4:f0:4e:d7:42:26:87:65:05:6d:de:ab:fe:fa:92:2a:1b:6f: 33:7c:e3:5f:fc:92:a7:0e:f7:d1:af:71:c8:c0:11:00:58:40: 36:2f:31:45:20:88:87:42:7d:e9:1a:90:a8:6e:21:ba:ba:21: cb:6e:fc:c2:39:f5:44:04:53:5e:d1:01:f8:12:65:8d:be:65: 69:b0:25:03:44:34:46:b5:d5:ca:11:d2:a2:2e:ae:37:5d:e1: e5:a0:4a:ce:3f:01:f4:28:01:ce:b4:7a:84:ef:1a:4a:e9:34: 71:d2:e4:19:89:f1:35:71:cc:24:95:e1:22:59:47:c7:26:2b: 12:a3:30:c7:ef:fd:b9:e6:a9:25:25:9a:fa:59:b2:0f:3f:63: b6:db:bc:6d:b5:fa:7a:bb:32:69:b0:41:b8:e2:50:99:25:b4: a2:06:ad:c5:dc:14:51:b2:ee:c4:bd:08:af:eb:42:98:60:f5: dd:13:89:c6 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDTMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwOTA2MTgxMDU3WhcNMjUwOTEzMTgxMDU3WjAYMRYwFAYD VQQDEw02OGJjNzkzMS0wMDBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyr8QXq6VEmXKIPtvLcKiqb1EuyV+oOzCnUGduYVqns6mQ739oONuni6bJ/WP lIbrqFqdgp5oERk7LZZ/j7zaSNsuHwBHU7Pbs6xebCAedeXxDUKTBCr07257BbaE axLlFB7miYQayA8JO4vT4ckQtBh/9nHj0gJysk56twSgxDuUTJw5vcFu6m9brshU vMuOGZFFbHJN0LWQOMbGHBqm5WYzLgHCS2wKf1egGVcDsGx45Q1i0Bw+vUUE2Iao fL7qsCqUztJshvlDZbYsuIk1NbKWyv4UiDbfI5GSQdcDI1Ypec3VmUUtAh1SwByO HYzrGbAtr2h0sgmkga4C/9MztQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFL5RGBQ3 cfdwIf2S+1MjanZUUoEuMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAst7eVwyT+M86fb//9sn3r8v/m4PVI6Vmr0y6lb44QnUFb2C0PxIkA q0WZgg3mBuJ+gB7og5YhusqmgC/wWetU8woS7uDurGbk8E7XQiaHZQVt3qv++pIq G28zfONf/JKnDvfRr3HIwBEAWEA2LzFFIIiHQn3pGpCobiG6uiHLbvzCOfVEBFNe 0QH4EmWNvmVpsCUDRDRGtdXKEdKiLq43XeHloErOPwH0KAHOtHqE7xpK6TRx0uQZ ifE1ccwkleEiWUfHJisSozDH7/255qklJZr6WbIPP2O227xttfp6uzJpsEG44lCZ JbSiBq3F3BRRsu7EvQiv60KYYPXdE4nG -----END CERTIFICATE-----Generated at Sat Sep 6 21:09:07 2025 by rpki-client