$ rpki-client -vvf rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft File: 8q-Rix8UisrksDlFAoTeSQ15Dlk.mft (raw, json) Hash identifier: PqTjUSF/DWm2kTMoj4W50yaVVbC/O7gTEIVoNObV224= Subject key identifier: 29:F8:76:17:77:37:3F:52:A7:10:80:FC:8C:6D:2D:AB:CF:01:8D:0F Authority key identifier: F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 Certificate issuer: /CN=A9114EF6/serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Certificate serial: 6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft Manifest number: 6C Signing time: Sat 09 Aug 2025 07:24:40 +0000 Manifest this update: Sat 09 Aug 2025 07:24:40 +0000 Manifest next update: Sat 16 Aug 2025 07:24:40 +0000 Files and hashes: 1: 8q-Rix8UisrksDlFAoTeSQ15Dlk.crl (hash: fOccKuXOiAxn6L+nw3IxtLA7nVdgiybO8CyvLZEi0OQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9114EF6, serialNumber=F2AF918B1F148ACAE4B039450284DE490D790E59 Validity Not Before: Aug 9 07:24:40 2025 GMT Not After : Aug 16 07:24:40 2025 GMT Subject: CN=6896f7b8-0553 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:97:44:72:c8:1f:df:a0:3f:15:b4:fd:13:f6: f4:f0:1a:3b:2f:92:b7:3c:78:43:5a:53:36:71:3a: b3:21:20:d0:e3:3c:b8:84:42:e0:dc:3b:1d:e8:32: a0:98:2b:f1:97:98:9f:b5:0c:50:ea:f9:c9:e1:a4: 35:a0:44:50:6a:12:03:59:b7:c1:0e:d6:77:99:ac: 57:65:37:ee:dc:52:e8:c8:ad:54:a1:dd:99:15:4a: 48:ba:cf:9d:db:32:02:d0:a9:90:45:eb:33:85:e8: f7:ad:f3:97:a8:ce:a2:74:fb:3f:94:16:a8:f0:bd: 41:75:fa:fd:75:de:d8:a6:c1:a0:18:04:c3:e1:6e: 54:59:08:57:c4:77:b3:f8:ee:3c:7b:8b:ce:76:01: 3a:6b:86:8d:9e:ef:23:fc:1e:a7:e8:56:97:c6:3d: f2:3d:a4:eb:d8:6d:eb:b0:cb:61:20:bb:e2:87:57: ae:18:df:2b:97:0e:27:ba:92:d2:77:76:55:64:a3: 4f:81:56:88:8b:8d:d3:a5:4e:e7:b5:82:8d:68:0f: b4:80:2c:4a:2f:7e:84:53:bb:4f:e9:9c:47:04:d4: f4:97:d1:ff:ab:1f:2a:a5:96:ff:d5:4c:d9:72:b2: a0:53:54:af:e3:5f:ad:d7:fe:2c:ad:1d:55:f2:40: 3d:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:F8:76:17:77:37:3F:52:A7:10:80:FC:8C:6D:2D:AB:CF:01:8D:0F X509v3 Authority Key Identifier: keyid:F2:AF:91:8B:1F:14:8A:CA:E4:B0:39:45:02:84:DE:49:0D:79:0E:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8q-Rix8UisrksDlFAoTeSQ15Dlk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114EF6/96463458D0D411EFBCD5123EC4F9AE02/8q-Rix8UisrksDlFAoTeSQ15Dlk.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 23:a6:d8:6e:fb:ab:43:8a:41:87:f0:ca:96:9a:df:36:45:e3: 80:8d:79:4d:7f:97:56:e3:90:7a:5f:29:dc:3a:18:e2:3f:91: ee:40:0e:5c:c1:22:d1:d6:bb:ce:72:aa:5e:c3:01:9e:1c:71: 8d:6e:64:d2:01:ed:87:05:13:70:05:62:2a:0f:2a:3d:a6:7f: 19:44:bc:9d:10:cb:25:ec:7d:2d:8f:f1:1d:82:33:4f:47:62: c6:f6:dc:7f:d1:90:59:a9:16:29:6d:b5:6a:b0:3d:dd:62:ed: c2:d1:e8:0f:89:47:45:7a:45:a4:21:de:a5:04:d3:d4:85:99: 6d:56:24:71:ab:87:98:61:64:e9:ca:b1:1b:05:9d:de:6f:96: 32:01:45:5f:0a:8e:e7:24:a6:51:60:a0:92:94:1b:2d:2f:d5: 0c:7b:27:d9:09:3c:80:d9:dc:d9:f5:c9:25:7a:f0:b3:49:af: ad:f0:7f:9d:9e:c1:ed:ab:16:51:ea:78:b0:59:7d:64:23:31: 91:fb:60:e5:95:5f:66:15:8b:5b:09:0f:bb:01:a4:45:9c:30: 92:f1:13:19:94:68:44:f9:8a:f0:65:2a:6a:aa:63:4c:7c:06: 06:fb:53:2a:f8:c2:e1:1d:27:22:fd:77:a3:a0:9a:25:a2:e1: ae:e3:79:08 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NEVGNjExMC8GA1UEBRMoRjJBRjkxOEIxRjE0OEFDQUU0QjAzOTQ1MDI4NERFNDkw RDc5MEU1OTAeFw0yNTA4MDkwNzI0NDBaFw0yNTA4MTYwNzI0NDBaMBgxFjAUBgNV BAMTDTY4OTZmN2I4LTA1NTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0l0RyyB/foD8VtP0T9vTwGjsvkrc8eENaUzZxOrMhINDjPLiEQuDcOx3oMqCY K/GXmJ+1DFDq+cnhpDWgRFBqEgNZt8EO1neZrFdlN+7cUujIrVSh3ZkVSki6z53b MgLQqZBF6zOF6Pet85eozqJ0+z+UFqjwvUF1+v113timwaAYBMPhblRZCFfEd7P4 7jx7i852ATprho2e7yP8HqfoVpfGPfI9pOvYbeuwy2Egu+KHV64Y3yuXDie6ktJ3 dlVko0+BVoiLjdOlTue1go1oD7SALEovfoRTu0/pnEcE1PSX0f+rHyqllv/VTNly sqBTVK/jX63X/iytHVXyQD1nAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUKfh2F3c3 P1KnEID8jG0tq88BjQ8wHwYDVR0jBBgwFoAU8q+Rix8UisrksDlFAoTeSQ15Dlkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0RUY2Lzk2NDYzNDU4RDBE NDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNya3NEbEZBb1RlU1ExNURs ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOHEtUml4OFVpc3Jrc0RsRkFvVGVTUTE1RGxrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE0 RUY2Lzk2NDYzNDU4RDBENDExRUZCQ0Q1MTIzRUM0RjlBRTAyLzhxLVJpeDhVaXNy a3NEbEZBb1RlU1ExNURsay5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBACOm2G77q0OKQYfwypaa3zZF44CNeU1/l1bjkHpfKdw6GOI/ke5ADlzB ItHWu85yql7DAZ4ccY1uZNIB7YcFE3AFYioPKj2mfxlEvJ0QyyXsfS2P8R2CM09H Ysb23H/RkFmpFilttWqwPd1i7cLR6A+JR0V6RaQh3qUE09SFmW1WJHGrh5hhZOnK sRsFnd5vljIBRV8KjuckplFgoJKUGy0v1Qx7J9kJPIDZ3Nn1ySV68LNJr63wf52e we2rFlHqeLBZfWQjMZH7YOWVX2YVi1sJD7sBpEWcMJLxExmUaET5ivBlKmqqY0x8 Bgb7Uyr4wuEdJyL9d6OgmiWi4a7jeQg= -----END CERTIFICATE-----Generated at Sun Aug 10 04:21:09 2025 by rpki-client