$ rpki-client -vvf rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft File: 6CbZQgvPRaEIfTATu05KhJYNYcc.mft (raw, json) Hash identifier: OGc2/qufLKPbBOOT+i+gjmew5f+y6EmwJMJ71lO0uXY= Subject key identifier: 47:F3:EE:52:AA:64:63:D7:AE:43:B1:72:4E:99:17:DB:95:6E:E3:16 Authority key identifier: E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 Certificate issuer: /CN=A914EAE4/serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Certificate serial: 1B34 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft Manifest number: 1B32 Signing time: Sun 10 Aug 2025 16:16:24 +0000 Manifest this update: Sun 10 Aug 2025 16:16:24 +0000 Manifest next update: Sun 17 Aug 2025 16:16:24 +0000 Files and hashes: 1: 6CbZQgvPRaEIfTATu05KhJYNYcc.crl (hash: RY4lBLre17VdZhSGumpZK98dnOKACFMRrdAUxR08lPw=) 2: D810AAAAB60B11EFB476C022C4F9AE02.roa (hash: W3khPMeaOIIvZA6XChV502z9D4IWV/QOl7ps2nePO0c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6964 (0x1b34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914EAE4, serialNumber=E826D9420BCF45A1087D3013BB4E4A84960D61C7 Validity Not Before: Aug 10 16:16:24 2025 GMT Not After : Aug 17 16:16:24 2025 GMT Subject: CN=6898c5d8-fce1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f0:b3:42:8b:54:cd:4b:e6:37:50:a7:2d:66: b4:a2:45:17:41:a6:43:ed:74:a5:fa:26:13:03:d4: ae:d9:5b:0a:4e:91:19:8c:66:17:f7:80:23:b6:0d: 19:61:d8:01:7a:09:7f:6c:98:7f:cd:0c:35:3c:0c: 5e:a5:13:bb:83:9d:24:22:6a:f8:53:08:a0:52:4d: f8:6c:ff:4a:19:6a:4b:f7:04:40:59:cb:ad:f7:ec: 4f:8a:24:32:a7:6d:59:90:4b:ce:0f:4a:43:2d:69: b9:7a:af:e1:bb:1b:0f:f0:5a:a6:50:22:66:7f:d1: af:dd:82:fe:75:bc:ed:da:7e:56:7a:14:36:d1:83: d0:18:ba:6f:b4:62:4a:7f:5e:e1:ff:22:01:a4:df: 0e:04:40:27:cb:96:fa:94:e7:0c:e9:6a:9e:af:09: 20:3d:e1:7d:17:ed:4d:70:c6:87:23:5a:8b:af:75: c2:75:7e:a7:0d:b7:98:0c:97:49:9a:93:dd:51:92: fa:dd:d1:1d:be:63:d9:ac:aa:75:c3:51:c0:99:e0: 5f:b9:5d:5b:f3:00:55:87:1a:bf:7a:ba:64:78:3c: 43:a8:79:d2:07:d7:50:cb:9c:0e:74:f8:1b:6b:25: fa:f1:f3:74:3c:32:83:a3:78:fa:30:4c:30:21:1a: f5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:EE:52:AA:64:63:D7:AE:43:B1:72:4E:99:17:DB:95:6E:E3:16 X509v3 Authority Key Identifier: keyid:E8:26:D9:42:0B:CF:45:A1:08:7D:30:13:BB:4E:4A:84:96:0D:61:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/6CbZQgvPRaEIfTATu05KhJYNYcc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914EAE4/764A0660257511E7AC0D172AC4F9AE02/6CbZQgvPRaEIfTATu05KhJYNYcc.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption a3:d4:f0:41:c3:16:76:9e:2b:88:4d:50:27:05:2b:36:a0:02: 77:f3:5c:06:4a:3f:c9:80:fc:b0:39:50:76:1b:d2:4f:96:4f: 35:4a:8c:f0:2d:b2:88:45:4e:5a:55:34:02:f7:bc:92:f2:fa: 9b:17:05:0c:f2:a9:92:dc:47:cc:0d:13:d6:ae:cf:71:27:70: 1c:57:ca:ad:25:8b:23:65:70:dd:07:b1:77:0e:c4:40:54:00: 68:5e:d1:9e:fc:6d:64:ef:91:d1:aa:63:be:1b:cf:bb:3e:ac: 04:f4:19:78:e9:2f:73:5e:7b:fc:db:a9:65:62:b5:fa:73:c8: 91:a4:ae:75:96:f3:0b:9b:38:94:40:f2:cd:9d:74:fa:f1:c7: db:06:7a:45:d6:01:1d:ae:b5:0a:96:7f:9d:da:66:f1:60:a2: e8:95:4e:48:9b:28:c2:bf:7a:8a:1e:d8:c2:e4:c0:48:99:18: a6:10:1c:84:98:0d:27:f3:bb:38:2f:9a:fd:56:cc:0b:65:cf: cb:cc:39:ea:64:65:5b:ef:a7:c8:23:24:09:94:e7:bd:12:1f: 2a:df:ce:33:1d:be:9b:d8:f2:59:9b:a7:9d:8f:78:50:d1:d0: eb:1f:d4:56:12:69:55:e1:00:68:ec:90:2b:f5:85:84:63:c2: 1b:77:46:32 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGzQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEVBRTQxMTAvBgNVBAUTKEU4MjZEOTQyMEJDRjQ1QTEwODdEMzAxM0JCNEU0QTg0 OTYwRDYxQzcwHhcNMjUwODEwMTYxNjI0WhcNMjUwODE3MTYxNjI0WjAYMRYwFAYD VQQDEw02ODk4YzVkOC1mY2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr/CzQotUzUvmN1CnLWa0okUXQaZD7XSl+iYTA9Su2VsKTpEZjGYX94Ajtg0Z YdgBegl/bJh/zQw1PAxepRO7g50kImr4UwigUk34bP9KGWpL9wRAWcut9+xPiiQy p21ZkEvOD0pDLWm5eq/huxsP8FqmUCJmf9Gv3YL+dbzt2n5WehQ20YPQGLpvtGJK f17h/yIBpN8OBEAny5b6lOcM6WqerwkgPeF9F+1NcMaHI1qLr3XCdX6nDbeYDJdJ mpPdUZL63dEdvmPZrKp1w1HAmeBfuV1b8wBVhxq/erpkeDxDqHnSB9dQy5wOdPgb ayX68fN0PDKDo3j6MEwwIRr1OwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFEfz7lKq ZGPXrkOxck6ZF9uVbuMWMB8GA1UdIwQYMBaAFOgm2UILz0WhCH0wE7tOSoSWDWHH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0RUFFNC83NjRBMDY2MDI1 NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJhRUlmVEFUdTA1S2hKWU5Z Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzZDYlpRZ3ZQUmFFSWZUQVR1MDVLaEpZTlljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 RUFFNC83NjRBMDY2MDI1NzUxMUU3QUMwRDE3MkFDNEY5QUUwMi82Q2JaUWd2UFJh RUlmVEFUdTA1S2hKWU5ZY2MubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCj1PBBwxZ2niuITVAnBSs2oAJ381wGSj/JgPywOVB2G9JPlk81Sozw LbKIRU5aVTQC97yS8vqbFwUM8qmS3EfMDRPWrs9xJ3AcV8qtJYsjZXDdB7F3DsRA VABoXtGe/G1k75HRqmO+G8+7PqwE9Bl46S9zXnv826llYrX6c8iRpK51lvMLmziU QPLNnXT68cfbBnpF1gEdrrUKln+d2mbxYKLolU5ImyjCv3qKHtjC5MBImRimEByE mA0n87s4L5r9VswLZc/LzDnqZGVb76fIIyQJlOe9Eh8q384zHb6b2PJZm6edj3hQ 0dDrH9RWEmlV4QBo7JAr9YWEY8Ibd0Yy -----END CERTIFICATE-----Generated at Mon Aug 11 07:28:28 2025 by rpki-client