$ rpki-client -vvf rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft File: 6N3s7Bb-NIXVthplph7s11qYG0M.mft (raw, json) Hash identifier: hv4MIbHztubwbtRUeAttQ7FBczRnPpLP8uDGYRFivtU= Subject key identifier: 01:00:5F:30:38:F6:48:96:33:65:C0:1C:D6:10:B2:E5:6D:57:27:54 Authority key identifier: E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 Certificate issuer: /CN=A9172EF8/serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Certificate serial: 0841 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft Manifest number: 0839 Signing time: Mon 08 Sep 2025 20:46:21 +0000 Manifest this update: Mon 08 Sep 2025 20:46:21 +0000 Manifest next update: Mon 15 Sep 2025 20:46:21 +0000 Files and hashes: 1: 6N3s7Bb-NIXVthplph7s11qYG0M.crl (hash: YwNTx6QoX+lHeT+goIHCqRZEzAGia6ILipQE6O6cZvk=) 2: 82001182986511EFBFE02134C4F9AE02.roa (hash: zFMhUdKAsUErPaBJNxHFhs6kNz0L2uuSFEiFAntBllQ=) 3: 879AF91C9A8C11EF98A18D7FC4F9AE02.roa (hash: LWV1KeEebkqoxDRj/MN5Z6I+5780TArhWaO+yA4BHQg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:46:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2113 (0x841) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9172EF8, serialNumber=E8DDECEC16FE3485D5B61A65A61EECD75A981B43 Validity Not Before: Sep 8 20:46:21 2025 GMT Not After : Sep 15 20:46:21 2025 GMT Subject: CN=68bf409d-b4fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e9:48:a4:8e:c8:da:be:f0:cf:46:b2:3d:3c: a5:49:eb:35:50:07:7f:ed:4e:17:4b:01:91:0c:a6: e1:8c:54:07:fd:25:c9:aa:47:b7:fe:0e:93:86:ce: de:64:cb:ca:ba:10:9b:39:41:7a:22:19:ec:44:0c: 74:49:ba:98:b8:2b:90:6b:a1:9b:7d:37:36:00:73: e6:2d:2e:b5:4d:bf:51:39:8c:e9:3f:39:0f:1c:1c: ef:b2:22:62:d3:3d:63:87:55:86:44:67:a4:a3:88: 3f:00:03:84:a3:38:69:20:63:d1:79:75:4c:d9:fe: 89:8d:7a:36:cc:4a:5d:4d:40:f9:66:d3:4e:0c:d5: 6c:4d:a5:e0:c4:03:ad:8b:a5:3b:6e:14:82:7f:ad: a9:79:de:32:75:d6:1a:91:75:f5:26:30:59:91:01: 40:4f:a4:04:37:4f:b9:8f:f2:f0:3a:dc:8b:fb:c8: 58:87:fa:f9:d3:e0:c9:c9:3c:0b:0c:9d:90:70:3d: 31:9c:28:fc:2f:21:0c:ee:a1:3e:3a:89:ff:df:20: ce:bf:d2:c8:a3:7d:3c:5d:3f:95:58:bc:c3:14:1e: 6e:b6:5e:9a:40:f7:ac:46:0d:76:06:9b:f4:52:35: bb:ba:0e:a7:be:71:33:db:53:73:7a:07:e0:c3:ef: e4:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:00:5F:30:38:F6:48:96:33:65:C0:1C:D6:10:B2:E5:6D:57:27:54 X509v3 Authority Key Identifier: keyid:E8:DD:EC:EC:16:FE:34:85:D5:B6:1A:65:A6:1E:EC:D7:5A:98:1B:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6N3s7Bb-NIXVthplph7s11qYG0M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172EF8/77F98C38DD8C11EABDF0E682C4F9AE02/6N3s7Bb-NIXVthplph7s11qYG0M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ac:6a:db:dc:d4:0f:47:d4:22:51:b9:30:59:7d:9c:e1:7b: 12:a5:7b:dc:52:23:0b:27:27:64:20:88:9b:74:f4:33:98:11: 6f:76:e8:15:46:b1:73:c9:69:3f:77:04:9a:07:ee:9c:a1:2e: d7:77:17:12:6b:36:62:d5:85:d7:3e:64:65:d8:89:a6:60:5f: 1e:d4:88:9c:50:3f:04:14:01:e1:8c:68:8a:61:05:4d:b0:82: 91:de:34:c9:c2:72:a2:30:e0:88:c5:f7:9f:ae:7c:26:ae:c9: d2:cd:7e:9b:01:b0:64:38:9f:73:f7:03:da:9f:ac:3b:bc:97: c9:88:25:96:a0:d4:f7:64:ef:ff:3c:9a:25:eb:f8:a7:a8:8a: df:cc:27:c3:05:07:d1:4c:65:34:81:19:34:13:08:f2:3d:0a: 75:ef:6a:f2:d4:6d:e9:61:c8:b0:00:fa:e9:cb:01:30:d2:89: 07:48:2a:cc:f7:78:78:5a:c4:8e:2d:4f:df:1c:00:55:61:48: 00:5e:ed:72:08:10:20:d8:83:b4:b9:3c:a3:c2:1b:5f:bc:cb: 21:8f:6c:41:13:a0:72:01:5c:57:f0:57:42:77:30:67:66:07: b7:87:20:de:93:db:a0:70:a9:06:35:8f:ff:3a:c4:66:6e:79: c3:07:ba:35 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCEEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzJFRjgxMTAvBgNVBAUTKEU4RERFQ0VDMTZGRTM0ODVENUI2MUE2NUE2MUVFQ0Q3 NUE5ODFCNDMwHhcNMjUwOTA4MjA0NjIxWhcNMjUwOTE1MjA0NjIxWjAYMRYwFAYD VQQDEw02OGJmNDA5ZC1iNGZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx+lIpI7I2r7wz0ayPTylSes1UAd/7U4XSwGRDKbhjFQH/SXJqke3/g6Ths7e ZMvKuhCbOUF6IhnsRAx0SbqYuCuQa6GbfTc2AHPmLS61Tb9ROYzpPzkPHBzvsiJi 0z1jh1WGRGeko4g/AAOEozhpIGPReXVM2f6JjXo2zEpdTUD5ZtNODNVsTaXgxAOt i6U7bhSCf62ped4yddYakXX1JjBZkQFAT6QEN0+5j/LwOtyL+8hYh/r50+DJyTwL DJ2QcD0xnCj8LyEM7qE+Oon/3yDOv9LIo308XT+VWLzDFB5utl6aQPesRg12Bpv0 UjW7ug6nvnEz21Nzegfgw+/k6QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAEAXzA4 9kiWM2XAHNYQsuVtVydUMB8GA1UdIwQYMBaAFOjd7OwW/jSF1bYaZaYe7NdamBtD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkVGOC83N0Y5OEMzOERE OEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5JWFZ0aHBscGg3czExcVlH ME0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZOM3M3QmItTklYVnRocGxwaDdzMTFxWUcwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MkVGOC83N0Y5OEMzOEREOEMxMUVBQkRGMEU2ODJDNEY5QUUwMi82TjNzN0JiLU5J WFZ0aHBscGg3czExcVlHME0ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANrGrb3NQPR9QiUbkwWX2c4XsSpXvcUiMLJydkIIibdPQzmBFvdugV RrFzyWk/dwSaB+6coS7XdxcSazZi1YXXPmRl2ImmYF8e1IicUD8EFAHhjGiKYQVN sIKR3jTJwnKiMOCIxfefrnwmrsnSzX6bAbBkOJ9z9wPan6w7vJfJiCWWoNT3ZO// PJol6/inqIrfzCfDBQfRTGU0gRk0EwjyPQp172ry1G3pYciwAPrpywEw0okHSCrM 93h4WsSOLU/fHABVYUgAXu1yCBAg2IO0uTyjwhtfvMshj2xBE6ByAVxX8FdCdzBn Zge3hyDek9ugcKkGNY//OsRmbnnDB7o1 -----END CERTIFICATE-----Generated at Tue Sep 9 13:19:49 2025 by rpki-client