$ rpki-client -vvf rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft File: 6qSDu71coOErPsD25wxbqq40VSs.mft (raw, json) Hash identifier: aVsAsrLFpcOavhuopjPtIvcSAUul+dQiQJ13S07AZGg= Subject key identifier: D5:71:7E:7E:67:CB:30:55:61:4C:4C:3B:0E:29:33:13:CB:4D:7C:92 Authority key identifier: EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B Certificate issuer: /CN=A914BAA2/serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B Certificate serial: 64 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft Manifest number: 5C Signing time: Sat 09 Aug 2025 07:49:12 +0000 Manifest this update: Sat 09 Aug 2025 07:49:12 +0000 Manifest next update: Sat 16 Aug 2025 07:49:12 +0000 Files and hashes: 1: 6qSDu71coOErPsD25wxbqq40VSs.crl (hash: hwr+4GDy91spodzmYzmoywQV6dzDsxW6n3ri69Ad//0=) 2: 535D1F52069511F090414823C4F9AE02.roa (hash: Z1otMQWN0CbTaPhw5EvbwRe+YB3GZZkedSXo8XkS78Q=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 100 (0x64) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914BAA2, serialNumber=EAA483BBBD5CA0E12B3EC0F6E70C5BAAAE34552B Validity Not Before: Aug 9 07:49:12 2025 GMT Not After : Aug 16 07:49:12 2025 GMT Subject: CN=6896fd78-eac8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7c:80:91:bd:0d:bb:5e:dc:97:74:d7:a0:a5: 55:e4:94:ad:ac:22:11:e0:67:cf:db:73:7a:db:12: 43:f2:fb:46:9f:d6:9f:8b:9d:30:ca:86:6f:e2:83: 24:4d:51:61:11:a9:67:6e:9a:90:ee:ab:c5:bb:9e: 0d:63:03:5c:38:fe:1b:52:ae:9a:14:2d:77:54:a5: 23:3f:af:ff:3d:63:a4:d5:c7:bf:c9:30:3c:29:99: c7:26:61:46:e1:1b:5e:66:51:3f:aa:a9:0b:08:61: a9:d3:23:09:ec:75:ac:56:f1:97:c0:ec:50:31:ca: 8e:49:e9:d4:b0:05:ab:9a:68:95:3a:40:46:7c:2d: 17:e0:63:93:ca:e2:b5:dd:e6:ca:3a:fa:7c:b4:4e: ba:61:90:c6:ff:e0:fe:6d:6b:26:46:6c:5f:13:e5: 99:76:fd:b5:35:21:5b:aa:ee:4c:08:37:86:94:e4: cf:03:1e:35:0d:78:a4:12:a3:73:25:53:55:30:20: 31:93:f7:c6:4e:04:3e:7b:4c:fc:2e:ed:5d:d2:ae: 5e:84:2d:e5:3d:bc:b8:6f:ff:15:a8:40:43:98:a7: a8:eb:e1:ed:3b:ce:20:7a:e6:d6:8c:dc:0c:15:4f: 96:c1:1b:5e:8d:bd:a3:12:35:98:f2:4f:50:3e:25: e2:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:71:7E:7E:67:CB:30:55:61:4C:4C:3B:0E:29:33:13:CB:4D:7C:92 X509v3 Authority Key Identifier: keyid:EA:A4:83:BB:BD:5C:A0:E1:2B:3E:C0:F6:E7:0C:5B:AA:AE:34:55:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6qSDu71coOErPsD25wxbqq40VSs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BAA2/4DECD080FE6611EF892E5214C4F9AE02/6qSDu71coOErPsD25wxbqq40VSs.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4a:cd:bd:b7:d9:82:34:4f:3d:83:6b:ac:b1:71:ad:5f:af: ad:0f:97:b5:93:b1:04:57:d4:c6:ee:a7:e7:8c:da:f9:5f:5e: 2a:01:1f:5b:65:9e:b7:7f:26:5c:8d:b8:d6:d3:0b:24:09:75: b0:a0:6d:4f:68:fe:1e:29:cc:ef:ef:6f:da:e3:11:c4:5f:88: a4:4e:1a:e8:1e:47:0a:33:fc:c9:f0:1a:f0:63:cd:94:c8:2f: a2:71:f1:7e:f6:a3:f5:a1:d1:1d:9e:3c:50:3d:cc:f3:49:66: d9:b6:14:58:88:0c:c0:6a:a3:f0:59:91:ca:61:bb:ea:5e:c4: fc:63:f6:e6:38:2c:12:bc:23:99:85:0c:b6:31:49:5b:92:bf: b1:fc:94:3d:59:1f:60:a3:f7:3a:7e:0d:8e:09:1a:5b:07:5f: f1:71:30:69:52:fc:cb:af:ab:b6:97:36:69:8f:1f:ba:11:22: 77:d2:b3:da:6b:ea:f4:f0:bb:42:cc:bd:a5:4b:7a:e7:25:66: 9b:96:5a:da:f3:0c:f0:a9:84:62:6e:49:f0:d8:b5:8e:ef:b0: 87:01:c0:34:6d:0c:4a:8b:6d:14:e3:20:67:1a:2c:91:5f:4b: f1:a5:1d:22:95:cb:0f:7b:05:c2:8b:af:c6:a9:62:37:e5:08: 04:b9:59:a8 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QkFBMjExMC8GA1UEBRMoRUFBNDgzQkJCRDVDQTBFMTJCM0VDMEY2RTcwQzVCQUFB RTM0NTUyQjAeFw0yNTA4MDkwNzQ5MTJaFw0yNTA4MTYwNzQ5MTJaMBgxFjAUBgNV BAMTDTY4OTZmZDc4LWVhYzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+fICRvQ27XtyXdNegpVXklK2sIhHgZ8/bc3rbEkPy+0af1p+LnTDKhm/igyRN UWERqWdumpDuq8W7ng1jA1w4/htSrpoULXdUpSM/r/89Y6TVx7/JMDwpmccmYUbh G15mUT+qqQsIYanTIwnsdaxW8ZfA7FAxyo5J6dSwBauaaJU6QEZ8LRfgY5PK4rXd 5so6+ny0TrphkMb/4P5tayZGbF8T5Zl2/bU1IVuq7kwIN4aU5M8DHjUNeKQSo3Ml U1UwIDGT98ZOBD57TPwu7V3Srl6ELeU9vLhv/xWoQEOYp6jr4e07ziB65taM3AwV T5bBG16NvaMSNZjyT1A+JeLnAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQU1XF+fmfL MFVhTEw7DikzE8tNfJIwHwYDVR0jBBgwFoAU6qSDu71coOErPsD25wxbqq40VSsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRCQUEyLzRERUNEMDgwRkU2 NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09FclBzRDI1d3hicXE0MFZT cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvNnFTRHU3MWNvT0VyUHNEMjV3eGJxcTQwVlNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRC QUEyLzRERUNEMDgwRkU2NjExRUY4OTJFNTIxNEM0RjlBRTAyLzZxU0R1NzFjb09F clBzRDI1d3hicXE0MFZTcy5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBABtKzb232YI0Tz2Da6yxca1fr60Pl7WTsQRX1Mbup+eM2vlfXioBH1tl nrd/JlyNuNbTCyQJdbCgbU9o/h4pzO/vb9rjEcRfiKROGugeRwoz/MnwGvBjzZTI L6Jx8X72o/Wh0R2ePFA9zPNJZtm2FFiIDMBqo/BZkcphu+pexPxj9uY4LBK8I5mF DLYxSVuSv7H8lD1ZH2Cj9zp+DY4JGlsHX/FxMGlS/Muvq7aXNmmPH7oRInfSs9pr 6vTwu0LMvaVLeuclZpuWWtrzDPCphGJuSfDYtY7vsIcBwDRtDEqLbRTjIGcaLJFf S/GlHSKVyw97BcKLr8apYjflCAS5Wag= -----END CERTIFICATE-----Generated at Sun Aug 10 16:10:51 2025 by rpki-client