$ rpki-client -vvf rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft File: 61aZQ1LrAeQOYMeKQ7lXrikO90U.mft (raw, json) Hash identifier: gekqVl8Hpj+cgDloqIQWUtkneXz7A5U/TnFnIp0Q/h8= Subject key identifier: E7:45:7E:CD:C1:1B:5D:30:FD:83:5E:69:AC:50:13:4A:DF:4D:F4:DC Authority key identifier: EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 Certificate issuer: /CN=A918CDEC/serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Certificate serial: 0614 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft Manifest number: 060B Signing time: Sat 06 Sep 2025 23:10:44 +0000 Manifest this update: Sat 06 Sep 2025 23:10:43 +0000 Manifest next update: Sat 13 Sep 2025 23:10:43 +0000 Files and hashes: 1: 61aZQ1LrAeQOYMeKQ7lXrikO90U.crl (hash: Is5ledFhy5Ikd2T1/cF08Trt3RVIQmuxN9+utkf2fa4=) 2: 7EC2F352BAB711EB8648EE28C4F9AE02.roa (hash: PHugSXTi2dZxLQln/zegbseeVs2jPcn21YYpHl84zeo=) 3: 70253888478111EEAF9EB62EC4F9AE02.roa (hash: PqPcM9AknODy/bx8TAswPdKxA7piJbRMKnDsw8NBbDI=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 23:10:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1556 (0x614) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918CDEC, serialNumber=EB56994352EB01E40E60C78A43B957AE290EF745 Validity Not Before: Sep 6 23:10:43 2025 GMT Not After : Sep 13 23:10:43 2025 GMT Subject: CN=68bcbf74-2820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3d:1a:1a:0d:18:f2:9f:38:36:85:1a:4c:de: 3a:6c:0d:84:10:60:22:5e:d8:fe:55:22:b4:2d:24: ae:ce:e9:72:cf:e7:05:62:a5:fb:08:3d:6b:5a:94: 82:f4:c9:d0:76:31:70:85:c5:a6:df:37:20:0a:89: b0:73:ab:eb:a1:6d:96:de:1c:fa:72:e0:9e:40:23: 83:8c:77:9b:c2:c1:d0:14:3d:77:2b:89:bc:18:74: d0:de:3e:f4:02:b7:96:e3:b9:0f:50:a9:c5:7d:d7: 57:cb:d9:c2:df:b0:5e:e9:c1:dd:3b:86:20:70:67: 36:5e:01:32:ca:ed:d6:bb:86:30:74:66:f8:a4:19: 41:14:11:8c:f6:3f:38:78:e2:9f:4a:36:dd:ff:56: a3:88:34:91:ff:d6:8a:24:df:aa:75:ea:e5:5b:c4: 08:84:12:25:0e:99:f3:8f:a5:f5:9f:ea:c3:03:63: 44:fd:ef:6f:91:dc:d8:63:ee:cd:d6:00:15:ac:3c: 17:ce:15:75:fd:4a:c3:4e:a0:37:45:03:d1:c2:0c: 02:b5:3a:e0:ec:84:3c:50:e4:31:23:8e:e0:5f:2e: 10:40:65:b0:98:ca:ab:8a:94:69:fe:7a:52:97:a4: 7c:9b:89:c8:cd:d3:3b:ee:69:63:7e:68:ce:6b:ae: 86:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:45:7E:CD:C1:1B:5D:30:FD:83:5E:69:AC:50:13:4A:DF:4D:F4:DC X509v3 Authority Key Identifier: keyid:EB:56:99:43:52:EB:01:E4:0E:60:C7:8A:43:B9:57:AE:29:0E:F7:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/61aZQ1LrAeQOYMeKQ7lXrikO90U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918CDEC/7F9D9842BAB511EB8E7A3726C4F9AE02/61aZQ1LrAeQOYMeKQ7lXrikO90U.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 99:1d:e0:13:1a:55:15:cd:a3:fe:df:25:0f:b2:7c:e2:4f:74: 6c:6a:fe:ef:ee:aa:82:98:09:3a:38:bf:51:c8:a1:8b:fa:1b: 32:1d:56:9e:28:7a:9b:00:9f:2d:66:0c:c1:dd:36:92:df:2a: ff:8a:e0:22:a7:9d:f3:f7:ca:c7:91:70:bc:1c:dd:95:69:f0: c0:2e:5f:cb:fe:14:ec:8e:f6:ae:d3:99:31:ba:cb:41:95:04: 9a:03:b0:21:fc:15:5c:02:5b:9a:5b:78:32:ce:84:86:7b:27: 26:d7:82:28:0d:c0:11:94:2b:c6:b8:c6:43:8a:b9:44:ee:31: f3:10:80:4b:67:78:6d:83:6b:df:97:98:21:ab:15:b6:c1:b1: c9:a8:70:cb:b2:9d:34:b3:fb:82:13:8e:05:48:df:79:79:04: 5a:67:97:b2:95:44:89:ea:36:d3:e1:22:ef:57:89:88:dc:f8: b6:95:ff:5d:a0:39:90:53:63:07:4b:0a:f5:76:84:d6:58:64: c0:17:d8:c4:15:52:81:3a:b9:f6:be:01:9c:d1:ab:4e:72:f3: 86:9c:b4:5f:8f:96:b7:21:f0:48:f6:2f:ee:b4:8d:c4:58:23: b9:43:39:a7:66:ad:17:4f:9e:2c:00:59:74:b2:2e:40:4a:e0: 70:07:ce:19 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBhQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OENERUMxMTAvBgNVBAUTKEVCNTY5OTQzNTJFQjAxRTQwRTYwQzc4QTQzQjk1N0FF MjkwRUY3NDUwHhcNMjUwOTA2MjMxMDQzWhcNMjUwOTEzMjMxMDQzWjAYMRYwFAYD VQQDEw02OGJjYmY3NC0yODIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3T0aGg0Y8p84NoUaTN46bA2EEGAiXtj+VSK0LSSuzulyz+cFYqX7CD1rWpSC 9MnQdjFwhcWm3zcgComwc6vroW2W3hz6cuCeQCODjHebwsHQFD13K4m8GHTQ3j70 AreW47kPUKnFfddXy9nC37Be6cHdO4YgcGc2XgEyyu3Wu4YwdGb4pBlBFBGM9j84 eOKfSjbd/1ajiDSR/9aKJN+qderlW8QIhBIlDpnzj6X1n+rDA2NE/e9vkdzYY+7N 1gAVrDwXzhV1/UrDTqA3RQPRwgwCtTrg7IQ8UOQxI47gXy4QQGWwmMqripRp/npS l6R8m4nIzdM77mljfmjOa66GTwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOdFfs3B G10w/YNeaaxQE0rfTfTcMB8GA1UdIwQYMBaAFOtWmUNS6wHkDmDHikO5V64pDvdF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4Q0RFQy83RjlEOTg0MkJB QjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFlUU9ZTWVLUTdsWHJpa085 MFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzYxYVpRMUxyQWVRT1lNZUtRN2xYcmlrTzkwVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 Q0RFQy83RjlEOTg0MkJBQjUxMUVCOEU3QTM3MjZDNEY5QUUwMi82MWFaUTFMckFl UU9ZTWVLUTdsWHJpa085MFUubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCZHeATGlUVzaP+3yUPsnziT3Rsav7v7qqCmAk6OL9RyKGL+hsyHVae KHqbAJ8tZgzB3TaS3yr/iuAip53z98rHkXC8HN2VafDALl/L/hTsjvau05kxustB lQSaA7Ah/BVcAluaW3gyzoSGeycm14IoDcARlCvGuMZDirlE7jHzEIBLZ3htg2vf l5ghqxW2wbHJqHDLsp00s/uCE44FSN95eQRaZ5eylUSJ6jbT4SLvV4mI3Pi2lf9d oDmQU2MHSwr1doTWWGTAF9jEFVKBOrn2vgGc0atOcvOGnLRfj5a3IfBI9i/utI3E WCO5QzmnZq0XT54sAFl0si5ASuBwB84Z -----END CERTIFICATE-----Generated at Mon Sep 8 02:02:16 2025 by rpki-client