$ rpki-client -vvf rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft File: B6YH3KkzMh_3j-xozXpMFJVDel8.mft (raw, json) Hash identifier: T5/BW2s3qgwiz1MQd+XFBylzIE3mYAOoFu2e4in8rjw= Subject key identifier: 9D:D4:C8:F4:B4:60:49:2A:4E:FD:5C:37:BE:1E:D2:1D:7A:83:A7:3E Authority key identifier: 07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F Certificate issuer: /CN=A9129DCB/serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Certificate serial: 09CF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft Manifest number: 09C1 Signing time: Sun 10 Aug 2025 20:01:43 +0000 Manifest this update: Sun 10 Aug 2025 20:01:42 +0000 Manifest next update: Sun 17 Aug 2025 20:01:42 +0000 Files and hashes: 1: B6YH3KkzMh_3j-xozXpMFJVDel8.crl (hash: kUeF/WKUonDigKRDyFWO9mF0Xx/h9YCsFU17PjC5xME=) 2: BAA6E77E852D11ED9A1A8D47C4F9AE02.roa (hash: LpYZeCMqtoq3Zi6VrSOzNbUcfWQzSLEFLO1bEbqVHyo=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2511 (0x9cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129DCB, serialNumber=07A607DCA933321FF78FEC68CD7A4C1495437A5F Validity Not Before: Aug 10 20:01:42 2025 GMT Not After : Aug 17 20:01:42 2025 GMT Subject: CN=6898faa6-e9a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:78:85:89:01:02:b4:f9:e5:c4:e4:34:a1:5e: ab:eb:0d:3d:21:de:ef:81:5d:f7:b5:d6:c4:87:ec: 6a:a9:85:22:74:8e:af:54:ae:ca:5a:7d:4f:36:fb: 89:81:53:6a:41:75:c9:a8:73:33:92:b0:7a:ae:73: 54:f7:3b:a0:bd:83:8a:63:8e:7f:86:a8:82:e0:5d: b6:df:6d:c6:9b:47:0b:3a:a0:72:97:4b:cd:01:b8: e0:49:96:65:5a:ea:62:0c:6d:c1:5b:65:08:e1:ad: a6:6a:ed:92:67:b4:17:66:3a:40:2c:87:79:91:53: 1d:34:26:95:b8:16:6a:98:70:7d:82:d4:1f:73:4d: 78:71:6c:c2:25:2e:da:d1:22:d7:0e:d2:97:bb:18: 56:71:3d:31:f6:97:9c:87:8d:c9:0a:ec:da:f4:34: 65:cf:bf:e2:bc:d2:61:f7:e6:8b:b5:d3:25:fb:1e: d1:f1:7e:48:21:c8:27:c8:ec:82:07:ce:11:03:98: 13:78:34:67:ae:80:12:39:c4:e2:96:a7:11:2d:cd: b3:2f:56:2a:66:6a:f0:4e:90:0f:27:15:ef:85:ca: eb:34:d1:ee:ce:d6:6b:43:7f:68:32:77:81:0f:5b: 63:c5:14:44:d3:f1:8c:e3:0e:5c:27:d1:b5:78:8a: 0d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D4:C8:F4:B4:60:49:2A:4E:FD:5C:37:BE:1E:D2:1D:7A:83:A7:3E X509v3 Authority Key Identifier: keyid:07:A6:07:DC:A9:33:32:1F:F7:8F:EC:68:CD:7A:4C:14:95:43:7A:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6YH3KkzMh_3j-xozXpMFJVDel8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129DCB/7C9EC9BA8C4C11EAA0518582C4F9AE02/B6YH3KkzMh_3j-xozXpMFJVDel8.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a6:cd:50:79:79:77:a7:58:c3:e9:0c:cf:3d:e6:c7:f8:68: fc:2e:51:3e:2d:37:2f:cd:32:d6:af:1b:6c:cc:18:04:af:67: 15:7f:f3:9b:d4:32:01:27:e3:1d:7d:9f:b6:22:a3:b0:71:1c: 63:58:67:61:d1:63:af:a2:d2:cf:4f:b7:5b:09:14:d8:62:91: 45:60:78:5d:a9:6e:ac:fb:89:8b:e8:5c:06:3a:d3:d4:43:d3: 3f:cf:64:0d:36:73:23:de:56:92:69:77:c0:83:65:be:4f:0c: 8b:1c:c1:a3:ce:ed:12:89:ea:58:f3:48:01:8d:63:43:f7:a8: af:aa:82:e2:44:2c:81:85:b6:f4:ec:70:9d:11:2d:3a:0f:81: 96:d5:50:68:f8:b3:f5:6a:b5:cb:c9:91:ca:d9:a1:55:c1:8a: 75:c7:c8:e4:be:d3:4e:83:73:d1:5c:c9:76:57:88:9a:0f:96: f2:d0:bf:11:cd:84:4c:29:d0:f1:1c:83:ea:94:6c:36:4c:25: 8f:ec:01:a6:9f:c6:85:5c:29:0a:34:37:13:97:d3:fc:18:ef: bb:cb:18:ea:3e:cc:86:3f:5d:d5:5f:0c:dc:b0:fc:f9:8c:47: 08:30:8a:0f:61:b6:f9:8e:0d:d6:af:b8:8c:77:ba:d6:38:19: 3c:ff:28:44 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCc8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjlEQ0IxMTAvBgNVBAUTKDA3QTYwN0RDQTkzMzMyMUZGNzhGRUM2OENEN0E0QzE0 OTU0MzdBNUYwHhcNMjUwODEwMjAwMTQyWhcNMjUwODE3MjAwMTQyWjAYMRYwFAYD VQQDEw02ODk4ZmFhNi1lOWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzXiFiQECtPnlxOQ0oV6r6w09Id7vgV33tdbEh+xqqYUidI6vVK7KWn1PNvuJ gVNqQXXJqHMzkrB6rnNU9zugvYOKY45/hqiC4F22323Gm0cLOqByl0vNAbjgSZZl WupiDG3BW2UI4a2mau2SZ7QXZjpALId5kVMdNCaVuBZqmHB9gtQfc014cWzCJS7a 0SLXDtKXuxhWcT0x9pech43JCuza9DRlz7/ivNJh9+aLtdMl+x7R8X5IIcgnyOyC B84RA5gTeDRnroASOcTilqcRLc2zL1YqZmrwTpAPJxXvhcrrNNHuztZrQ39oMneB D1tjxRRE0/GM4w5cJ9G1eIoNnwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJ3UyPS0 YEkqTv1cN74e0h16g6c+MB8GA1UdIwQYMBaAFAemB9ypMzIf94/saM16TBSVQ3pf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOURDQi83QzlFQzlCQThD NEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1oXzNqLXhvelhwTUZKVkRl bDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2WUgzS2t6TWhfM2oteG96WHBNRkpWRGVsOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy OURDQi83QzlFQzlCQThDNEMxMUVBQTA1MTg1ODJDNEY5QUUwMi9CNllIM0trek1o XzNqLXhvelhwTUZKVkRlbDgubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBrps1QeXl3p1jD6QzPPebH+Gj8LlE+LTcvzTLWrxtszBgEr2cVf/Ob 1DIBJ+MdfZ+2IqOwcRxjWGdh0WOvotLPT7dbCRTYYpFFYHhdqW6s+4mL6FwGOtPU Q9M/z2QNNnMj3laSaXfAg2W+TwyLHMGjzu0SiepY80gBjWND96ivqoLiRCyBhbb0 7HCdES06D4GW1VBo+LP1arXLyZHK2aFVwYp1x8jkvtNOg3PRXMl2V4iaD5by0L8R zYRMKdDxHIPqlGw2TCWP7AGmn8aFXCkKNDcTl9P8GO+7yxjqPsyGP13VXwzcsPz5 jEcIMIoPYbb5jg3Wr7iMd7rWOBk8/yhE -----END CERTIFICATE-----Generated at Mon Aug 11 07:36:56 2025 by rpki-client