$ rpki-client -vvf rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft File: poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft (raw, json) Hash identifier: iD8xfJH4/SKRv5s2kztP9SPpiESyu9dTaboz8JdgYUY= Subject key identifier: BB:07:1C:9A:38:9F:0E:51:0C:38:B9:08:92:DF:D3:61:02:DA:4B:BB Authority key identifier: A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C Certificate issuer: /CN=A918F1EE/serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Certificate serial: 6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft Manifest number: 6B Signing time: Fri 05 Sep 2025 07:24:43 +0000 Manifest this update: Fri 05 Sep 2025 07:24:42 +0000 Manifest next update: Fri 12 Sep 2025 07:24:42 +0000 Files and hashes: 1: poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl (hash: UIN8CisNKw0UNrBjIUK0B69jPJZxajcTljeNeCn9Br0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 107 (0x6b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918F1EE, serialNumber=A685F51A7DD3F026CF28E21F03A140699DB8FE8C Validity Not Before: Sep 5 07:24:42 2025 GMT Not After : Sep 12 07:24:42 2025 GMT Subject: CN=68ba903b-7e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:51:27:37:46:39:e6:af:9b:46:28:83:df:e7: b1:b9:da:24:bc:dc:fb:2d:c3:d9:87:a1:72:b0:ea: e3:56:2d:73:40:30:2e:2e:32:6d:6d:de:67:1a:72: 08:39:99:44:55:ce:e5:27:f6:69:36:3f:61:61:99: ba:61:45:7a:42:f3:77:f2:fc:de:00:fc:6a:8a:11: 70:ed:43:05:a8:1c:34:8d:52:ee:93:23:a0:e1:9c: 96:10:d6:4c:cd:2d:d9:7b:83:dd:bd:f3:fe:07:13: e7:e2:bb:e5:85:4d:b0:9e:9f:2a:75:c2:6f:9d:ac: ea:fc:cf:f7:7d:49:03:e5:48:fb:c8:14:20:c8:9c: 30:d6:09:78:3b:7d:8e:d0:d2:e5:e1:a3:fd:59:10: 8e:c3:6d:65:48:19:0c:f1:e3:87:6e:87:a8:0f:0b: e3:c4:75:c0:8b:6e:79:2a:1c:79:da:a5:2e:30:3b: 84:7a:22:45:c7:cc:e9:2a:4f:f7:ac:eb:d5:df:18: dd:7d:d9:46:27:3c:96:68:8d:e9:31:1a:15:f5:e6: 15:a1:1b:f4:ec:ac:1e:fc:97:9c:01:f6:e7:fc:ee: 88:63:86:00:76:90:ca:c6:6c:8f:1c:0e:69:6e:3c: e8:45:ab:ea:21:bf:17:58:f4:13:ce:ca:27:72:da: 74:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:07:1C:9A:38:9F:0E:51:0C:38:B9:08:92:DF:D3:61:02:DA:4B:BB X509v3 Authority Key Identifier: keyid:A6:85:F5:1A:7D:D3:F0:26:CF:28:E2:1F:03:A1:40:69:9D:B8:FE:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/poX1Gn3T8CbPKOIfA6FAaZ24_ow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918F1EE/EB00A8C8E75111EFBED81B0EC4F9AE02/poX1Gn3T8CbPKOIfA6FAaZ24_ow.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 62:b7:10:a3:21:e6:5b:7e:65:74:a8:2f:21:09:ef:c3:b9:7f: dc:42:e2:40:c9:85:e0:8c:23:ed:78:99:6f:9d:10:0d:e4:d4: f0:8b:e4:f5:29:60:4a:2d:9d:21:95:1f:54:60:e0:17:83:c9: b3:70:47:06:32:be:bc:4c:04:57:6b:0e:0d:40:d6:3b:70:0a: 58:b1:b3:fc:dd:4d:f7:93:26:41:04:13:40:bc:6d:0b:62:eb: 4a:dd:57:1f:76:6d:6b:2a:76:b5:63:ee:72:b1:7f:6d:c0:b9: b6:72:c2:36:8d:7a:d8:52:7d:69:bd:98:e5:35:ef:eb:0d:09: d9:76:8f:a4:78:df:16:76:be:85:d1:eb:a1:a1:d9:57:30:f3: 77:f4:5a:e2:2a:71:dc:e7:0a:52:5d:c6:5d:18:50:a5:64:e2: 5e:65:23:fb:d2:2b:cd:01:f2:c6:a8:73:e4:62:d6:89:19:72: ba:85:bd:51:9c:c7:d2:cd:3f:37:81:08:ee:ec:d5:56:8b:dc: 75:e7:2b:fe:e3:97:9f:1d:7c:2c:38:90:25:89:4d:08:cc:43: 3c:2d:43:3e:dc:cd:03:c6:70:26:0e:87:bb:d4:97:ee:49:34: 90:32:09:46:52:8f:89:77:58:9f:5d:e3:4e:b5:a4:1b:85:9b: 22:e6:58:d8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBazANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 RjFFRTExMC8GA1UEBRMoQTY4NUY1MUE3REQzRjAyNkNGMjhFMjFGMDNBMTQwNjk5 REI4RkU4QzAeFw0yNTA5MDUwNzI0NDJaFw0yNTA5MTIwNzI0NDJaMBgxFjAUBgNV BAMTDTY4YmE5MDNiLTdlM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwUSc3Rjnmr5tGKIPf57G52iS83Pstw9mHoXKw6uNWLXNAMC4uMm1t3mcacgg5 mURVzuUn9mk2P2FhmbphRXpC83fy/N4A/GqKEXDtQwWoHDSNUu6TI6DhnJYQ1kzN Ldl7g9298/4HE+fiu+WFTbCenyp1wm+drOr8z/d9SQPlSPvIFCDInDDWCXg7fY7Q 0uXho/1ZEI7DbWVIGQzx44duh6gPC+PEdcCLbnkqHHnapS4wO4R6IkXHzOkqT/es 69XfGN192UYnPJZojekxGhX15hWhG/TsrB78l5wB9uf87ohjhgB2kMrGbI8cDmlu POhFq+ohvxdY9BPOyidy2nSRAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUuwccmjif DlEMOLkIkt/TYQLaS7swHwYDVR0jBBgwFoAUpoX1Gn3T8CbPKOIfA6FAaZ24/oww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThGMUVFL0VCMDBBOEM4RTc1 MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENiUEtPSWZBNkZBYVoyNF9v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcG9YMUduM1Q4Q2JQS09JZkE2RkFhWjI0X293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThG MUVFL0VCMDBBOEM4RTc1MTExRUZCRUQ4MUIwRUM0RjlBRTAyL3BvWDFHbjNUOENi UEtPSWZBNkZBYVoyNF9vdy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAGK3EKMh5lt+ZXSoLyEJ78O5f9xC4kDJheCMI+14mW+dEA3k1PCL5PUp YEotnSGVH1Rg4BeDybNwRwYyvrxMBFdrDg1A1jtwClixs/zdTfeTJkEEE0C8bQti 60rdVx92bWsqdrVj7nKxf23AubZywjaNethSfWm9mOU17+sNCdl2j6R43xZ2voXR 66Gh2Vcw83f0WuIqcdznClJdxl0YUKVk4l5lI/vSK80B8saoc+Ri1okZcrqFvVGc x9LNPzeBCO7s1VaL3HXnK/7jl58dfCw4kCWJTQjMQzwtQz7czQPGcCYOh7vUl+5J NJAyCUZSj4l3WJ9d4061pBuFmyLmWNg= -----END CERTIFICATE-----Generated at Sat Sep 6 21:12:15 2025 by rpki-client