$ rpki-client -vvf rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft File: C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft (raw, json) Hash identifier: Es2Y4/pWE08RVWFP5gofAw9s/WvRPZSyfGC76CeRJNM= Subject key identifier: B8:E8:6B:96:4E:08:BE:D9:6C:85:9F:A5:31:C5:2B:19:C6:43:E0:68 Authority key identifier: 0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 Certificate issuer: /CN=A9197E5D/serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Certificate serial: 01BB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft Manifest number: 01B7 Signing time: Tue 09 Sep 2025 03:08:59 +0000 Manifest this update: Tue 09 Sep 2025 03:08:59 +0000 Manifest next update: Tue 16 Sep 2025 03:08:59 +0000 Files and hashes: 1: C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl (hash: 59WWdR11j1zCijtc+XuwB41CXvc28yowkTMFt2d2cts=) 2: 582836EAF0BF11ED9EC0094AC4F9AE02.roa (hash: hIzR8zQHF9iXKmM1Y26mLPHbXqodEuNcMXt0RS8n034=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Sep 2025 03:08:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 443 (0x1bb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9197E5D, serialNumber=0BA682E8038D771A3707EAFA82FDD04C429A4F86 Validity Not Before: Sep 9 03:08:59 2025 GMT Not After : Sep 16 03:08:59 2025 GMT Subject: CN=68bf9a4b-6b11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:35:57:05:8b:a8:cd:ab:e3:4d:01:b2:58:85: d6:80:90:07:05:3d:1d:69:f9:03:0e:9f:4d:ef:fa: c6:cd:38:2a:36:5a:4e:39:1d:d4:62:89:c5:c3:4c: cb:f7:80:8f:56:d9:0a:2b:4b:ab:e7:09:6b:87:e8: e4:8d:0a:64:89:ff:59:9e:0d:24:e1:d4:c3:a2:9d: b2:93:e9:d5:5b:25:5f:85:65:42:ec:fb:1f:19:9d: e2:5d:8e:25:73:81:8b:82:4c:df:21:0e:24:21:23: 75:15:d0:0e:ea:85:05:0d:b4:7c:9e:a1:54:a2:92: e7:8b:b8:4c:e2:76:71:05:df:c9:8b:78:2c:16:49: ae:35:8e:a3:ec:e5:33:b9:fb:9f:46:1c:4e:8a:45: 5c:12:24:9c:7f:73:19:3f:ab:19:a3:b8:4c:d7:ba: 70:19:8f:22:a9:1d:c4:92:59:bf:52:63:c9:18:80: 4d:e6:88:a3:81:c1:7a:ea:d6:34:8d:40:62:a4:e6: 85:6d:6d:f9:e4:41:53:6c:20:19:d1:5c:26:8e:41: 12:43:55:1b:d7:f2:ad:45:a1:9b:20:36:89:16:db: 0b:a6:5f:47:44:6f:4f:b2:23:8a:d8:29:83:12:85: e7:9a:83:e3:15:93:d9:e7:b6:11:db:6d:61:fb:f8: 5f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E8:6B:96:4E:08:BE:D9:6C:85:9F:A5:31:C5:2B:19:C6:43:E0:68 X509v3 Authority Key Identifier: keyid:0B:A6:82:E8:03:8D:77:1A:37:07:EA:FA:82:FD:D0:4C:42:9A:4F:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C6aC6AONdxo3B-r6gv3QTEKaT4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197E5D/4122CD9CF0B611ED8F44FB27C4F9AE02/C6aC6AONdxo3B-r6gv3QTEKaT4Y.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d9:6f:82:0b:4b:27:f3:60:b3:cf:c2:f8:41:b5:16:d5:cc: 20:d3:0b:83:d6:91:0b:fa:19:43:17:69:09:47:6b:e2:a2:0f: 24:35:7b:21:ff:5d:7e:d0:71:70:a5:52:17:3d:13:be:f8:7e: 4d:36:c9:0e:ee:52:b7:ab:63:07:3f:1b:30:c6:25:96:74:fe: a1:d2:04:ab:47:c0:ec:d3:50:11:81:e9:2c:54:85:c9:a0:bd: 49:8a:75:dc:31:79:1f:49:e7:20:ea:29:72:23:6e:e2:5a:e3: 7d:c5:3f:9f:4a:4b:de:ab:6e:30:53:66:25:2f:61:b8:41:11: 7a:47:7e:b7:a2:ff:82:2e:f4:d5:ed:cb:ad:12:2d:68:ee:37: 1f:a4:b0:42:42:9f:a4:52:ee:06:3b:a5:55:29:76:ce:4a:b8: 20:7f:01:db:f1:e6:b6:d8:42:03:5b:60:0c:19:0b:b3:6e:a8: 64:c2:5b:70:a7:f6:e9:0a:29:81:b4:c7:c3:b4:7f:89:6c:59: 34:0c:e4:24:b9:e8:8a:c9:18:e6:f6:a7:cc:8d:43:9e:21:22: 61:5c:b2:48:d2:43:ed:2f:ac:7d:03:8c:de:94:ca:74:66:86: 12:59:e7:db:dd:0d:13:54:56:47:ec:ca:6c:32:80:4a:6e:a1: 43:d9:8d:e1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAbswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTdFNUQxMTAvBgNVBAUTKDBCQTY4MkU4MDM4RDc3MUEzNzA3RUFGQTgyRkREMDRD NDI5QTRGODYwHhcNMjUwOTA5MDMwODU5WhcNMjUwOTE2MDMwODU5WjAYMRYwFAYD VQQDEw02OGJmOWE0Yi02YjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxzVXBYuozavjTQGyWIXWgJAHBT0dafkDDp9N7/rGzTgqNlpOOR3UYonFw0zL 94CPVtkKK0ur5wlrh+jkjQpkif9Zng0k4dTDop2yk+nVWyVfhWVC7PsfGZ3iXY4l c4GLgkzfIQ4kISN1FdAO6oUFDbR8nqFUopLni7hM4nZxBd/Ji3gsFkmuNY6j7OUz ufufRhxOikVcEiScf3MZP6sZo7hM17pwGY8iqR3Eklm/UmPJGIBN5oijgcF66tY0 jUBipOaFbW355EFTbCAZ0VwmjkESQ1Ub1/KtRaGbIDaJFtsLpl9HRG9PsiOK2CmD EoXnmoPjFZPZ57YR221h+/hf/wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFLjoa5ZO CL7ZbIWfpTHFKxnGQ+BoMB8GA1UdIwQYMBaAFAumgugDjXcaNwfq+oL90ExCmk+G MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5N0U1RC80MTIyQ0Q5Q0Yw QjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4bzNCLXI2Z3YzUVRFS2FU NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M2YUM2QU9OZHhvM0ItcjZndjNRVEVLYVQ0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 N0U1RC80MTIyQ0Q5Q0YwQjYxMUVEOEY0NEZCMjdDNEY5QUUwMi9DNmFDNkFPTmR4 bzNCLXI2Z3YzUVRFS2FUNFkubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQB62W+CC0sn82Czz8L4QbUW1cwg0wuD1pEL+hlDF2kJR2viog8kNXsh /11+0HFwpVIXPRO++H5NNskO7lK3q2MHPxswxiWWdP6h0gSrR8Ds01ARgeksVIXJ oL1JinXcMXkfSecg6ilyI27iWuN9xT+fSkveq24wU2YlL2G4QRF6R363ov+CLvTV 7cutEi1o7jcfpLBCQp+kUu4GO6VVKXbOSrggfwHb8ea22EIDW2AMGQuzbqhkwltw p/bpCimBtMfDtH+JbFk0DOQkueiKyRjm9qfMjUOeISJhXLJI0kPtL6x9A4zelMp0 ZoYSWefb3Q0TVFZH7MpsMoBKbqFD2Y3h -----END CERTIFICATE-----Generated at Tue Sep 9 09:51:20 2025 by rpki-client