$ rpki-client -vvf rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft File: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft (raw, json) Hash identifier: 3YBXxY7RLNTA+9vZxLVMybKDFUKG+cX6ms9RVVPRx2A= Subject key identifier: C2:9C:F8:8E:9D:10:33:A5:02:DF:FB:62:16:2B:AE:30:5F:43:55:17 Authority key identifier: E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A Certificate issuer: /CN=A9171560/serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Certificate serial: 0D25 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft Manifest number: 0D1A Signing time: Sun 10 Aug 2025 18:04:18 +0000 Manifest this update: Sun 10 Aug 2025 18:04:18 +0000 Manifest next update: Sun 17 Aug 2025 18:04:18 +0000 Files and hashes: 1: 6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl (hash: WC+M+KSVI9l/TWcBgul+ixgGmA23lnoE7TNt3t0u/zw=) 2: 65AF30D422D211EAB3ABA447C4F9AE02.roa (hash: N5g6jdfkVyESUIZ9NbhjHN5A/zAKL0uPzj31oHqn/fU=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3365 (0xd25) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9171560, serialNumber=E9C410C7DDD52670AB8F8216C87614B10EC3177A Validity Not Before: Aug 10 18:04:18 2025 GMT Not After : Aug 17 18:04:18 2025 GMT Subject: CN=6898df22-007a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d0:69:ea:14:1f:15:89:fb:d5:b3:14:31:ad: 12:c9:71:6a:1e:3f:fb:39:89:51:ce:48:82:f8:05: 61:bf:9a:6b:04:27:65:34:5f:9d:4d:d0:13:47:dd: da:21:17:e3:ca:15:77:51:df:f6:2c:04:d4:b1:e3: 5c:84:e9:98:3d:eb:fc:c3:7d:85:05:19:87:fc:9a: a6:a7:e9:9c:20:3a:2d:4d:b2:bb:99:c3:01:5f:7c: 3c:be:38:e7:a4:19:82:e2:26:98:80:be:24:1c:aa: 1e:62:23:94:0d:db:fc:00:5b:f3:08:b0:c9:16:ca: 8d:85:72:d6:85:57:8e:4d:de:d8:c3:c4:94:3d:14: 9f:ec:de:5f:c3:ad:c6:e3:19:e6:30:f9:18:24:a7: 07:6f:dc:6b:b9:f8:9b:26:e2:96:25:d4:b4:fc:f1: db:24:58:74:da:76:aa:3b:c7:4d:d3:c6:ec:3b:8a: ae:aa:66:fa:95:c0:d2:20:82:e0:93:44:75:83:8f: 6b:26:e0:63:1a:48:5f:d2:35:b1:a7:90:87:a0:f5: 6c:14:93:d1:be:a2:00:bc:7a:5b:00:e2:90:11:b0: 68:ce:1f:11:89:b2:88:34:63:2f:e7:60:19:0a:a4: 09:d5:ff:d6:3a:a1:71:b4:1d:db:c5:bf:c0:ad:9b: dd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:9C:F8:8E:9D:10:33:A5:02:DF:FB:62:16:2B:AE:30:5F:43:55:17 X509v3 Authority Key Identifier: keyid:E9:C4:10:C7:DD:D5:26:70:AB:8F:82:16:C8:76:14:B1:0E:C3:17:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6cQQx93VJnCrj4IWyHYUsQ7DF3o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171560/A7703E9EE41D11E98F5B9819C4F9AE02/6cQQx93VJnCrj4IWyHYUsQ7DF3o.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 3c:be:c5:5a:25:86:2d:be:f8:26:af:62:ed:d5:68:0f:23:ff: 11:4c:92:5d:27:8d:19:1e:53:52:84:98:56:17:99:e8:9c:5d: 3f:f0:1c:58:97:6a:f4:c4:18:52:d6:4c:1c:ca:01:b5:f9:d6: 04:4d:1e:0c:c5:77:e0:20:20:20:e3:0c:4f:df:87:08:90:be: 38:d8:9f:1f:33:8a:e5:4b:f7:34:6a:dd:c0:69:28:3c:c9:5c: 4d:6e:0f:9d:38:7b:0a:e0:37:06:a3:74:7b:2f:a5:25:f2:04: c9:57:c1:d1:78:27:c7:1c:bc:7a:f3:0f:1f:6e:5c:a2:d6:e8: 63:ae:2f:40:a5:b2:34:8f:db:a1:cb:b4:b0:26:4a:3a:fd:b4: 2a:ae:c9:61:09:85:c2:93:64:f7:ab:d2:db:6d:00:31:e3:19: b1:d0:ab:52:7e:36:35:92:96:2a:a1:98:df:b6:80:84:cf:40: 24:86:07:b4:6e:6c:78:0d:07:ca:1a:a6:42:dd:98:e3:ef:d2: cf:3b:5a:87:38:b4:0d:f3:4a:05:8b:9f:2a:80:cf:6c:39:27: 96:c5:8a:af:ef:6d:e1:0a:8b:99:80:99:5f:93:1c:fa:d7:b0: 50:3e:05:fd:c4:e7:0b:8f:2c:fb:2f:d2:81:c5:d2:d3:f0:d0: 91:b4:16:b2 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDSUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzE1NjAxMTAvBgNVBAUTKEU5QzQxMEM3RERENTI2NzBBQjhGODIxNkM4NzYxNEIx MEVDMzE3N0EwHhcNMjUwODEwMTgwNDE4WhcNMjUwODE3MTgwNDE4WjAYMRYwFAYD VQQDEw02ODk4ZGYyMi0wMDdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxtBp6hQfFYn71bMUMa0SyXFqHj/7OYlRzkiC+AVhv5prBCdlNF+dTdATR93a IRfjyhV3Ud/2LATUseNchOmYPev8w32FBRmH/Jqmp+mcIDotTbK7mcMBX3w8vjjn pBmC4iaYgL4kHKoeYiOUDdv8AFvzCLDJFsqNhXLWhVeOTd7Yw8SUPRSf7N5fw63G 4xnmMPkYJKcHb9xrufibJuKWJdS0/PHbJFh02naqO8dN08bsO4quqmb6lcDSIILg k0R1g49rJuBjGkhf0jWxp5CHoPVsFJPRvqIAvHpbAOKQEbBozh8RibKINGMv52AZ CqQJ1f/WOqFxtB3bxb/ArZvdvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFMKc+I6d EDOlAt/7YhYrrjBfQ1UXMB8GA1UdIwQYMBaAFOnEEMfd1SZwq4+CFsh2FLEOwxd6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MTU2MC9BNzcwM0U5RUU0 MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpuQ3JqNElXeUhZVXNRN0RG M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZjUVF4OTNWSm5Dcmo0SVd5SFlVc1E3REYzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MTU2MC9BNzcwM0U5RUU0MUQxMUU5OEY1Qjk4MTlDNEY5QUUwMi82Y1FReDkzVkpu Q3JqNElXeUhZVXNRN0RGM28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA8vsVaJYYtvvgmr2Lt1WgPI/8RTJJdJ40ZHlNShJhWF5nonF0/8BxY l2r0xBhS1kwcygG1+dYETR4MxXfgICAg4wxP34cIkL442J8fM4rlS/c0at3AaSg8 yVxNbg+dOHsK4DcGo3R7L6Ul8gTJV8HReCfHHLx68w8fblyi1uhjri9ApbI0j9uh y7SwJko6/bQqrslhCYXCk2T3q9LbbQAx4xmx0KtSfjY1kpYqoZjftoCEz0Akhge0 bmx4DQfKGqZC3Zjj79LPO1qHOLQN80oFi58qgM9sOSeWxYqv723hCouZgJlfkxz6 17BQPgX9xOcLjyz7L9KBxdLT8NCRtBay -----END CERTIFICATE-----Generated at Mon Aug 11 01:51:25 2025 by rpki-client