$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft File: 6f6DqUwBuxPVNX83DHZZc-mX9NA.mft (raw, json) Hash identifier: gt6T27ygOibw6KQWgXBUuoWjklxRTQU3a0xEildDa4o= Subject key identifier: 70:46:97:F2:CB:9E:68:98:4C:AB:14:28:14:CF:6A:83:F2:0E:24:1D Authority key identifier: E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 Certificate issuer: /CN=A911BDAE/serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Certificate serial: 02A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft Manifest number: 029E Signing time: Thu 07 Aug 2025 02:10:17 +0000 Manifest this update: Thu 07 Aug 2025 02:10:17 +0000 Manifest next update: Thu 14 Aug 2025 02:10:17 +0000 Files and hashes: 1: 6f6DqUwBuxPVNX83DHZZc-mX9NA.crl (hash: oGfTF0F/tl9Hqi70kRBs26tgJrLHNrRjS8jdFh4pnNE=) 2: 23803F800C9C11ED82C8955BC4F9AE02.roa (hash: Ny3HF6QiqyIBzWklmUHinHzimYgWUBmeHFmleIQ1/IQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 02:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 675 (0x2a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDAE, serialNumber=E9FE83A94C01BB13D5357F370C765973E997F4D0 Validity Not Before: Aug 7 02:10:17 2025 GMT Not After : Aug 14 02:10:17 2025 GMT Subject: CN=68940b09-6035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:62:04:8c:e0:c8:34:e3:52:73:7e:93:2f:15: f5:fe:56:05:0d:0d:56:16:e2:0c:41:23:90:ca:26: 84:c3:86:21:77:bc:30:17:4e:28:d4:7f:60:99:9a: b0:2a:a3:8b:ce:a9:61:76:4e:ce:5e:32:2b:b7:7c: 2c:76:b5:55:89:99:7c:b3:1a:62:6b:9a:5c:a2:bb: 19:48:4c:84:9b:6e:76:0c:db:64:44:07:4e:d7:2a: 87:fd:81:b2:36:89:69:19:2b:5b:97:cd:93:03:8d: 58:9e:fd:9c:e3:38:77:70:85:20:64:11:e5:56:23: 3c:ce:39:16:01:5e:3a:fb:3f:56:35:cc:f5:ea:81: 8d:79:fb:03:bf:11:07:0e:93:52:0a:a5:b7:48:c8: f7:45:24:2b:36:74:99:c9:7f:f1:bf:85:d1:ea:e7: 7b:54:40:1a:62:15:33:a9:7f:85:41:3a:e7:17:ab: 4c:29:79:27:df:80:7b:d7:3e:85:28:55:a1:7c:b9: 82:9f:9e:a6:94:a0:dc:d5:d0:2e:26:39:21:54:76: a2:6e:01:a4:e5:58:e3:ef:27:bd:e6:2b:a4:b4:f3: 4a:7d:31:c0:fc:49:9b:8d:57:db:4d:09:b0:91:a4: a3:77:4e:5f:ec:aa:de:0d:b2:eb:91:2c:d8:87:f0: ac:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:46:97:F2:CB:9E:68:98:4C:AB:14:28:14:CF:6A:83:F2:0E:24:1D X509v3 Authority Key Identifier: keyid:E9:FE:83:A9:4C:01:BB:13:D5:35:7F:37:0C:76:59:73:E9:97:F4:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6f6DqUwBuxPVNX83DHZZc-mX9NA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDAE/E8F129980C9511ED88625634C4F9AE02/6f6DqUwBuxPVNX83DHZZc-mX9NA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 4f:b3:ac:5b:1d:f3:4d:7f:f2:5e:a6:4d:02:54:3b:77:32:3c: 88:39:ab:79:f5:b0:30:c8:a2:fe:70:59:4e:41:05:ad:89:36: f1:56:e5:d2:70:42:21:dd:f0:9e:ac:13:9c:cd:6b:48:31:36: eb:6b:0b:d9:46:0e:f0:ac:8a:49:a6:d0:b5:31:51:3c:17:ed: 09:9a:51:96:88:ab:b0:b1:dc:3b:da:c0:ac:e0:5e:c6:5a:18: 6f:03:33:d4:14:be:99:01:8b:f4:20:87:df:75:1e:67:92:df: ee:90:19:75:91:c3:8a:4d:71:32:3a:35:a6:d5:a8:b0:57:09: b1:d3:da:90:36:ab:70:fa:d6:62:90:85:29:ab:0c:83:51:cf: 53:2a:34:0f:30:8d:f4:3c:4a:43:ff:f1:1f:c1:59:0f:3f:8a: 87:b2:be:ee:e4:13:21:51:bf:df:78:7d:93:12:f4:6c:ef:5a: 9d:c0:c2:05:70:c7:f0:1c:b9:45:56:37:84:17:0d:ef:81:d2: d8:4d:76:4d:60:3e:6d:c3:f2:f0:0c:3f:45:22:98:06:67:e4: 8a:31:10:e5:1d:45:58:38:dc:dd:ec:4e:c9:28:09:55:6a:a1: 3b:77:d5:c4:68:e8:68:d8:e9:b5:52:d5:a1:e8:8f:9f:2e:0a: 09:92:3f:5c -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAqMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQUUxMTAvBgNVBAUTKEU5RkU4M0E5NEMwMUJCMTNENTM1N0YzNzBDNzY1OTcz RTk5N0Y0RDAwHhcNMjUwODA3MDIxMDE3WhcNMjUwODE0MDIxMDE3WjAYMRYwFAYD VQQDEw02ODk0MGIwOS02MDM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA12IEjODINONSc36TLxX1/lYFDQ1WFuIMQSOQyiaEw4Yhd7wwF04o1H9gmZqw KqOLzqlhdk7OXjIrt3wsdrVViZl8sxpia5pcorsZSEyEm252DNtkRAdO1yqH/YGy NolpGStbl82TA41Ynv2c4zh3cIUgZBHlViM8zjkWAV46+z9WNcz16oGNefsDvxEH DpNSCqW3SMj3RSQrNnSZyX/xv4XR6ud7VEAaYhUzqX+FQTrnF6tMKXkn34B71z6F KFWhfLmCn56mlKDc1dAuJjkhVHaibgGk5Vjj7ye95iuktPNKfTHA/EmbjVfbTQmw kaSjd05f7KreDbLrkSzYh/CsIQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFHBGl/LL nmiYTKsUKBTPaoPyDiQdMB8GA1UdIwQYMBaAFOn+g6lMAbsT1TV/Nwx2WXPpl/TQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBRS9FOEYxMjk5ODBD OTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4UFZOWDgzREhaWmMtbVg5 TkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZmNkRxVXdCdXhQVk5YODNESFpaYy1tWDlOQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx QkRBRS9FOEYxMjk5ODBDOTUxMUVEODg2MjU2MzRDNEY5QUUwMi82ZjZEcVV3QnV4 UFZOWDgzREhaWmMtbVg5TkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBPs6xbHfNNf/Jepk0CVDt3MjyIOat59bAwyKL+cFlOQQWtiTbxVuXS cEIh3fCerBOczWtIMTbrawvZRg7wrIpJptC1MVE8F+0JmlGWiKuwsdw72sCs4F7G WhhvAzPUFL6ZAYv0IIffdR5nkt/ukBl1kcOKTXEyOjWm1aiwVwmx09qQNqtw+tZi kIUpqwyDUc9TKjQPMI30PEpD//EfwVkPP4qHsr7u5BMhUb/feH2TEvRs71qdwMIF cMfwHLlFVjeEFw3vgdLYTXZNYD5tw/LwDD9FIpgGZ+SKMRDlHUVYONzd7E7JKAlV aqE7d9XEaOho2Om1UtWh6I+fLgoJkj9c -----END CERTIFICATE-----Generated at Fri Aug 8 00:10:19 2025 by rpki-client