$ rpki-client -vvf rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft File: paap6sGs925VLHi914unT-3dP_k.mft (raw, json) Hash identifier: K/NCLSYKC8jutKcOZkrQOt1foGPepbTNrvCDo36wa/k= Subject key identifier: E7:32:71:57:37:AB:4B:BC:FF:61:85:1D:FA:C0:1C:A6:61:D9:E4:89 Authority key identifier: A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 Certificate issuer: /CN=A9129AD6/serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Certificate serial: 2BDB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft Manifest number: 2BCA Signing time: Fri 08 Aug 2025 15:35:59 +0000 Manifest this update: Fri 08 Aug 2025 15:35:58 +0000 Manifest next update: Fri 15 Aug 2025 15:35:58 +0000 Files and hashes: 1: paap6sGs925VLHi914unT-3dP_k.crl (hash: rvWsNoHqAIvFXQsaA56+HNDkRtpaY391Y7cfL4CbQW0=) 2: 9AD04EAAD58A11EE9992494AC4F9AE02.roa (hash: R++b1RX/a7NEbUz016JCFWbEE+Lh/qyAEqbc/YB/qKw=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11227 (0x2bdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129AD6, serialNumber=A5A6A9EAC1ACF76E552C78BDD78BA74FEDDD3FF9 Validity Not Before: Aug 8 15:35:58 2025 GMT Not After : Aug 15 15:35:58 2025 GMT Subject: CN=6896195e-1438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f8:11:69:d3:b0:3d:d6:7b:65:c6:61:bd:23: 01:e1:45:65:a9:a7:32:c1:ef:c2:56:9d:e4:3e:27: b9:56:b8:63:cf:a6:1b:10:b1:66:ef:a7:a3:0e:15: 92:b9:43:87:30:15:d5:b4:41:15:dd:b5:ed:ad:0a: 38:42:5e:23:da:8e:41:f3:f6:69:a8:19:63:bd:90: 20:9a:97:44:11:80:d8:7f:e3:4f:0b:ed:c4:42:e6: 80:80:eb:db:58:ab:5a:e4:00:7d:ec:fe:5b:83:a1: b9:01:3b:c8:16:75:20:b8:6f:97:85:2b:6c:88:86: 98:98:bf:8b:40:1c:fc:8f:32:92:d8:bf:d3:d0:11: 7c:f8:1c:fb:4c:62:27:08:2d:33:82:61:c3:27:9e: 27:9f:93:52:e4:f0:62:04:f1:13:f2:24:4f:1b:1d: e7:fd:c9:7b:4d:6d:ad:e9:3d:b8:5a:f0:b0:bc:47: 5d:e2:d1:c1:c4:9a:c2:5a:79:d3:de:8a:98:24:2c: 8d:b3:ff:29:be:88:d5:a4:3c:f2:f6:1f:31:db:73: b1:27:05:72:12:78:33:52:fe:b8:39:1e:aa:70:84: 02:31:4a:c4:1e:e4:26:43:0c:27:0f:09:b4:35:1d: e9:e0:53:b2:9e:3d:0f:68:02:bf:d3:12:c6:79:b2: df:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:32:71:57:37:AB:4B:BC:FF:61:85:1D:FA:C0:1C:A6:61:D9:E4:89 X509v3 Authority Key Identifier: keyid:A5:A6:A9:EA:C1:AC:F7:6E:55:2C:78:BD:D7:8B:A7:4F:ED:DD:3F:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/paap6sGs925VLHi914unT-3dP_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129AD6/D677DC94DFD011E393DB795F5911EA32/paap6sGs925VLHi914unT-3dP_k.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 14:6b:7e:30:3b:64:21:5c:75:d6:ee:f3:d0:3d:89:0b:f1:84: bd:2c:77:cb:2d:80:3b:a2:55:7e:1d:46:a9:ee:22:4d:18:6c: 03:ea:67:41:cd:70:37:73:eb:ab:f0:40:a0:40:00:ce:3f:5d: 7c:f1:a6:1b:0d:e6:73:bc:2d:ed:7f:8f:84:74:83:79:65:f7: 71:95:37:1a:54:41:d2:14:9f:6e:d5:ec:a0:84:f6:db:7e:e0: 04:60:9a:b8:af:9a:f1:b1:e2:a6:9c:a1:70:f8:cf:69:29:d7: f8:c6:05:33:cf:2e:45:27:62:87:9f:d4:a4:b4:ec:c1:d4:2e: 47:f9:5e:08:5c:ea:9b:f1:80:80:9a:38:fe:fb:db:88:02:29: 52:93:48:07:5f:f9:26:a7:ab:5d:26:04:0c:1c:38:b4:a0:14: f9:e8:5d:3d:ac:2a:44:cd:66:45:dc:98:33:97:34:b4:93:b1: 9f:93:dd:e9:f6:96:b8:1d:4e:15:e3:6e:ec:04:14:3d:c0:60: 49:2e:d7:64:ba:07:2a:4d:ce:58:ee:e8:da:dc:fa:3f:c7:ca: a5:d8:ee:6d:1c:dd:67:54:11:0f:9b:d9:46:d0:4a:90:b1:be: 66:70:48:25:dd:01:f1:37:39:60:56:12:cf:df:77:d0:94:b5: dc:06:f1:16 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICK9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlBRDYxMTAvBgNVBAUTKEE1QTZBOUVBQzFBQ0Y3NkU1NTJDNzhCREQ3OEJBNzRG RURERDNGRjkwHhcNMjUwODA4MTUzNTU4WhcNMjUwODE1MTUzNTU4WjAYMRYwFAYD VQQDEw02ODk2MTk1ZS0xNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzfgRadOwPdZ7ZcZhvSMB4UVlqacywe/CVp3kPie5Vrhjz6YbELFm76ejDhWS uUOHMBXVtEEV3bXtrQo4Ql4j2o5B8/ZpqBljvZAgmpdEEYDYf+NPC+3EQuaAgOvb WKta5AB97P5bg6G5ATvIFnUguG+XhStsiIaYmL+LQBz8jzKS2L/T0BF8+Bz7TGIn CC0zgmHDJ54nn5NS5PBiBPET8iRPGx3n/cl7TW2t6T24WvCwvEdd4tHBxJrCWnnT 3oqYJCyNs/8pvojVpDzy9h8x23OxJwVyEngzUv64OR6qcIQCMUrEHuQmQwwnDwm0 NR3p4FOynj0PaAK/0xLGebLfzwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFOcycVc3 q0u8/2GFHfrAHKZh2eSJMB8GA1UdIwQYMBaAFKWmqerBrPduVSx4vdeLp0/t3T/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOUFENi9ENjc3REM5NERG RDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczkyNVZMSGk5MTR1blQtM2RQ X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BhYXA2c0dzOTI1VkxIaTkxNHVuVC0zZFBfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OUFENi9ENjc3REM5NERGRDAxMUUzOTNEQjc5NUY1OTExRUEzMi9wYWFwNnNHczky NVZMSGk5MTR1blQtM2RQX2subWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQAUa34wO2QhXHXW7vPQPYkL8YS9LHfLLYA7olV+HUap7iJNGGwD6mdB zXA3c+ur8ECgQADOP1188aYbDeZzvC3tf4+EdIN5ZfdxlTcaVEHSFJ9u1eyghPbb fuAEYJq4r5rxseKmnKFw+M9pKdf4xgUzzy5FJ2KHn9SktOzB1C5H+V4IXOqb8YCA mjj++9uIAilSk0gHX/kmp6tdJgQMHDi0oBT56F09rCpEzWZF3JgzlzS0k7Gfk93p 9pa4HU4V427sBBQ9wGBJLtdkugcqTc5Y7uja3Po/x8ql2O5tHN1nVBEPm9lG0EqQ sb5mcEgl3QHxNzlgVhLP33fQlLXcBvEW -----END CERTIFICATE-----Generated at Sat Aug 9 22:44:37 2025 by rpki-client