$ rpki-client -vvf rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft File: M6eur6VSbc3FbPCHa71BEz49JHk.mft (raw, json) Hash identifier: hOnzJHPTnW89ThZsTdw+7uWCt9hXZBVvf0sJzMLwJ1M= Subject key identifier: 1C:29:70:6D:C5:A6:65:65:63:80:3D:CD:D3:03:E6:8E:E7:04:89:E4 Authority key identifier: 33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 Certificate issuer: /CN=A917B9CB/serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Certificate serial: 34D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft Manifest number: 34C4 Signing time: Sun 24 Aug 2025 14:38:42 +0000 Manifest this update: Sun 24 Aug 2025 14:38:41 +0000 Manifest next update: Sun 31 Aug 2025 14:38:41 +0000 Files and hashes: 1: M6eur6VSbc3FbPCHa71BEz49JHk.crl (hash: gkO3HZiR0SHT0um5KpeFxTcc92Wav/WTfot0KCE4ZQ0=) 2: A2A2D1B6573411F09F6B9016C4F9AE02.roa (hash: e1fS+JUr5OLbZbCvOqxxDH4+vhnq0CCS/TLIlGYLHhA=) 3: 6F58AA34687C11F08C69EA64C4F9AE02.roa (hash: lvbDAxOQ41m3fnpVcOJWBX3CzhcnEIm/Ym/qa3pTN/Q=) 4: 036356DC573611F08FD0E718C4F9AE02.roa (hash: Syo3LqLjCagDfFO18+x8c9EzZx70h+uIwWgtm0Ij480=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 31 Aug 2025 14:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13524 (0x34d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917B9CB, serialNumber=33A7AEAFA5526DCDC56CF0876BBD41133E3D2479 Validity Not Before: Aug 24 14:38:41 2025 GMT Not After : Aug 31 14:38:41 2025 GMT Subject: CN=68ab23f1-5b77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a7:a5:cc:a0:83:bc:9d:eb:c7:52:86:55:e4: f5:48:03:9b:d0:fb:46:3c:3f:43:50:2f:b0:b2:d3: b3:e6:95:0e:6e:03:14:b0:9e:6b:d1:a4:9d:ff:d3: fb:df:e7:52:50:ca:cd:ea:9f:ca:13:02:fc:bb:38: 65:7e:ee:11:8d:46:8c:57:bd:ec:7f:0f:40:ab:cd: c5:d2:d6:6f:43:9a:68:24:f1:f3:d8:21:29:1f:ab: 8f:8b:63:cc:9e:e6:9d:29:bd:f5:e0:70:d9:2e:bc: ac:d5:61:5e:d1:97:22:22:63:cc:8d:c8:12:96:70: 81:48:e8:1d:79:5f:cb:af:38:e7:33:1c:60:14:d0: 17:60:04:f3:99:f3:6a:5d:51:4e:f7:42:ab:22:b5: a9:fc:bd:99:5f:ac:11:74:6f:cd:9b:77:d6:f1:a6: 10:09:b1:4f:b9:bf:81:cc:7a:f1:69:f9:cb:8b:cb: 9d:0d:06:6d:9c:90:21:35:ae:cf:48:82:4a:6f:90: 82:68:b2:7e:a1:6b:a1:0c:fa:6c:45:49:4c:84:d5: 38:6e:61:76:53:90:e9:04:13:3f:35:9a:cf:36:24: 16:65:62:58:a7:21:31:ea:27:71:fa:9a:19:c0:88: d2:cb:14:b0:71:92:bf:22:8f:a8:30:fe:e5:20:7b: 9c:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:29:70:6D:C5:A6:65:65:63:80:3D:CD:D3:03:E6:8E:E7:04:89:E4 X509v3 Authority Key Identifier: keyid:33:A7:AE:AF:A5:52:6D:CD:C5:6C:F0:87:6B:BD:41:13:3E:3D:24:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M6eur6VSbc3FbPCHa71BEz49JHk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B9CB/6F6EDC601D8E11E2885CDFEC08B02CD2/M6eur6VSbc3FbPCHa71BEz49JHk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 0d:99:f9:cd:69:27:79:6f:a3:96:45:36:45:5a:0e:31:af:ec: 4c:e4:80:d4:55:71:b1:4e:18:09:af:25:93:7e:73:b0:1b:5a: d1:3b:8d:72:90:29:91:f1:a0:e0:d2:d7:04:91:ff:54:c7:15: 37:c0:b9:7d:fa:5e:6c:44:3b:ea:ca:6f:fc:de:12:54:03:5c: 3c:3a:b6:a4:95:41:78:5b:d3:04:2e:63:5c:d6:a1:d7:08:7a: 1d:20:3a:a4:86:26:82:d0:49:f7:78:58:05:df:6f:53:25:1e: 5f:91:4e:06:5e:10:16:1f:23:02:9d:b9:68:18:e8:6c:80:ea: 15:36:d6:d8:8f:d7:63:7f:5b:02:79:8f:92:56:b6:23:4c:0e: 9e:fb:33:2b:d2:8a:1b:93:a0:fc:8c:fe:23:c7:a5:01:7f:e0: be:38:ff:3d:26:b8:0a:f4:1b:7c:20:65:a4:33:74:a8:2c:12: c8:18:01:dd:9a:61:48:db:40:07:25:82:56:52:e4:60:d7:0f: 6e:4f:70:13:a7:66:b3:cf:b9:d0:f6:1b:a0:b7:f8:2e:13:9b: 4b:3e:a2:3a:b2:6d:8a:ee:24:47:59:d9:f3:bc:0c:e2:ec:cd: 45:3f:33:65:1b:cd:b5:43:6e:bd:9a:8e:45:21:65:d7:90:64: 7e:ef:ca:29 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICNNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0I5Q0IxMTAvBgNVBAUTKDMzQTdBRUFGQTU1MjZEQ0RDNTZDRjA4NzZCQkQ0MTEz M0UzRDI0NzkwHhcNMjUwODI0MTQzODQxWhcNMjUwODMxMTQzODQxWjAYMRYwFAYD VQQDEw02OGFiMjNmMS01Yjc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoqelzKCDvJ3rx1KGVeT1SAOb0PtGPD9DUC+wstOz5pUObgMUsJ5r0aSd/9P7 3+dSUMrN6p/KEwL8uzhlfu4RjUaMV73sfw9Aq83F0tZvQ5poJPHz2CEpH6uPi2PM nuadKb314HDZLrys1WFe0ZciImPMjcgSlnCBSOgdeV/LrzjnMxxgFNAXYATzmfNq XVFO90KrIrWp/L2ZX6wRdG/Nm3fW8aYQCbFPub+BzHrxafnLi8udDQZtnJAhNa7P SIJKb5CCaLJ+oWuhDPpsRUlMhNU4bmF2U5DpBBM/NZrPNiQWZWJYpyEx6idx+poZ wIjSyxSwcZK/Io+oMP7lIHucFQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFBwpcG3F pmVlY4A9zdMD5o7nBInkMB8GA1UdIwQYMBaAFDOnrq+lUm3NxWzwh2u9QRM+PSR5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QjlDQi82RjZFREM2MDFE OEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2JjM0ZiUENIYTcxQkV6NDlK SGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL002ZXVyNlZTYmMzRmJQQ0hhNzFCRXo0OUpIay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QjlDQi82RjZFREM2MDFEOEUxMUUyODg1Q0RGRUMwOEIwMkNEMi9NNmV1cjZWU2Jj M0ZiUENIYTcxQkV6NDlKSGsubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQANmfnNaSd5b6OWRTZFWg4xr+xM5IDUVXGxThgJryWTfnOwG1rRO41y kCmR8aDg0tcEkf9UxxU3wLl9+l5sRDvqym/83hJUA1w8OraklUF4W9MELmNc1qHX CHodIDqkhiaC0En3eFgF329TJR5fkU4GXhAWHyMCnbloGOhsgOoVNtbYj9djf1sC eY+SVrYjTA6e+zMr0oobk6D8jP4jx6UBf+C+OP89JrgK9Bt8IGWkM3SoLBLIGAHd mmFI20AHJYJWUuRg1w9uT3ATp2azz7nQ9hugt/guE5tLPqI6sm2K7iRHWdnzvAzi 7M1FPzNlG821Q269mo5FIWXXkGR+78op -----END CERTIFICATE-----Generated at Sun Aug 24 22:09:20 2025 by rpki-client