$ rpki-client -vvf rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft File: 6q7GCbncI1xGucXxvKPNvsf_7ig.mft (raw, json) Hash identifier: YGA1N3XXtt03EFMY+81rri7O7LS8Xhg66l+um55NuK4= Subject key identifier: DA:1B:A1:AC:24:B5:14:0D:48:F1:9D:48:28:BE:3E:69:F6:73:6D:7B Authority key identifier: EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 Certificate issuer: /CN=A917A82D/serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Certificate serial: 0C5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft Manifest number: 0C41 Signing time: Fri 08 Aug 2025 18:53:45 +0000 Manifest this update: Fri 08 Aug 2025 18:53:44 +0000 Manifest next update: Fri 15 Aug 2025 18:53:44 +0000 Files and hashes: 1: 6q7GCbncI1xGucXxvKPNvsf_7ig.crl (hash: yK2j13TP7rrRszFhareanhOs6geUy/YtE8DplM1hmFs=) 2: 403FDDD0DF3511ED8FBA823DC4F9AE02.roa (hash: n02qcDfoz5xfgtE3pmF9DuTrufYGzGxNykq63R1mDas=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3167 (0xc5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917A82D, serialNumber=EAAEC609B9DC235C46B9C5F1BCA3CDBEC7FFEE28 Validity Not Before: Aug 8 18:53:44 2025 GMT Not After : Aug 15 18:53:44 2025 GMT Subject: CN=689647b9-a86a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:58:19:ac:dc:47:14:ee:c3:46:00:21:8e:ca: 1d:94:34:16:f9:5a:6b:54:f7:ab:ef:f3:c8:89:8c: c9:c4:2f:ec:2f:fe:7f:e2:19:ca:5a:5d:0e:a4:44: c1:ca:2a:98:c1:8b:05:93:6f:e0:41:89:65:b3:20: 1f:92:a5:0c:cb:fa:73:61:4f:b9:c3:12:fe:83:fa: cb:b8:b9:e3:c3:d5:59:c9:7c:f8:d7:58:83:f9:cc: 16:0b:29:c9:a4:6c:f6:6c:19:a6:f4:16:c7:e7:44: 1c:ad:8a:b7:5e:5d:0f:34:36:87:73:9f:c0:ea:de: 79:23:9d:dc:8c:58:ac:32:48:c3:6d:91:75:ce:a4: a8:ee:64:b7:79:a1:cc:aa:87:ba:c3:1d:02:d0:d3: 5d:01:01:d9:55:60:62:ee:c9:f2:d8:92:c3:47:7c: 60:4d:71:25:fb:bb:63:a6:95:1b:92:51:97:eb:9d: af:1c:0e:18:e3:17:01:66:99:04:32:cf:56:ef:1d: 6a:3e:30:31:97:57:b7:71:cf:bd:39:62:e7:5a:b8: 83:f4:d2:69:c3:ae:94:49:48:f2:05:b0:41:9e:b6: 50:9b:92:1a:0d:e5:65:66:3b:ad:9b:de:5c:c0:13: 6e:97:f1:f7:69:ee:13:67:c6:bf:eb:f7:ea:ac:a1: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:1B:A1:AC:24:B5:14:0D:48:F1:9D:48:28:BE:3E:69:F6:73:6D:7B X509v3 Authority Key Identifier: keyid:EA:AE:C6:09:B9:DC:23:5C:46:B9:C5:F1:BC:A3:CD:BE:C7:FF:EE:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6q7GCbncI1xGucXxvKPNvsf_7ig.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A82D/ADF665C0127811EA9B8ED034C4F9AE02/6q7GCbncI1xGucXxvKPNvsf_7ig.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:aa:d3:cd:d7:eb:16:90:5d:aa:40:01:7d:e1:9a:4c:23:bd: 65:d7:c0:0a:26:2f:bb:92:f8:4e:30:09:de:63:a4:40:9b:8d: e8:25:c3:1c:bc:33:96:70:95:b7:5a:b5:38:06:5f:e3:6e:2c: 7d:86:8b:ab:08:3c:6b:48:ed:b1:19:da:bf:ca:2e:cd:4c:d7: 03:d4:da:19:a9:82:30:45:62:e3:71:ec:e6:14:73:07:63:46: 51:ed:55:50:3b:20:08:44:c8:c5:34:ac:12:9b:a4:49:b9:7b: d2:6f:70:c5:0d:50:a6:c3:98:12:12:18:42:68:62:4b:eb:68: fd:1c:8f:65:df:62:76:56:01:7e:8b:cc:56:16:93:7f:ab:b2: 2c:f1:5d:31:c1:34:15:d8:74:d6:83:55:1c:d3:f0:e4:fe:0a: 7a:b4:9d:90:e3:42:1e:be:47:2b:6b:15:fd:59:1f:2f:83:12: eb:c8:d6:d8:55:55:dc:53:b2:60:f4:f4:f1:68:86:b6:e1:8b: 76:86:04:fb:c9:a5:20:c3:9d:b0:85:20:19:20:f3:22:0d:ae: e9:68:fa:58:fd:51:4f:a5:49:74:be:b0:1b:53:d4:3c:09:05: f6:cb:26:c3:2d:4b:dc:c1:a4:ae:52:9b:44:08:a9:c4:ef:76: 35:9a:e7:b4 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICDF8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0E4MkQxMTAvBgNVBAUTKEVBQUVDNjA5QjlEQzIzNUM0NkI5QzVGMUJDQTNDREJF QzdGRkVFMjgwHhcNMjUwODA4MTg1MzQ0WhcNMjUwODE1MTg1MzQ0WjAYMRYwFAYD VQQDEw02ODk2NDdiOS1hODZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxFgZrNxHFO7DRgAhjsodlDQW+VprVPer7/PIiYzJxC/sL/5/4hnKWl0OpETB yiqYwYsFk2/gQYllsyAfkqUMy/pzYU+5wxL+g/rLuLnjw9VZyXz411iD+cwWCynJ pGz2bBmm9BbH50QcrYq3Xl0PNDaHc5/A6t55I53cjFisMkjDbZF1zqSo7mS3eaHM qoe6wx0C0NNdAQHZVWBi7sny2JLDR3xgTXEl+7tjppUbklGX652vHA4Y4xcBZpkE Ms9W7x1qPjAxl1e3cc+9OWLnWriD9NJpw66USUjyBbBBnrZQm5IaDeVlZjutm95c wBNul/H3ae4TZ8a/6/fqrKHSYwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFNoboawk tRQNSPGdSCi+Pmn2c217MB8GA1UdIwQYMBaAFOquxgm53CNcRrnF8byjzb7H/+4o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QTgyRC9BREY2NjVDMDEy NzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kxeEd1Y1h4dktQTnZzZl83 aWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZxN0dDYm5jSTF4R3VjWHh2S1BOdnNmXzdpZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 QTgyRC9BREY2NjVDMDEyNzgxMUVBOUI4RUQwMzRDNEY5QUUwMi82cTdHQ2JuY0kx eEd1Y1h4dktQTnZzZl83aWcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4qtPN1+sWkF2qQAF94ZpMI71l18AKJi+7kvhOMAneY6RAm43oJcMc vDOWcJW3WrU4Bl/jbix9hourCDxrSO2xGdq/yi7NTNcD1NoZqYIwRWLjcezmFHMH Y0ZR7VVQOyAIRMjFNKwSm6RJuXvSb3DFDVCmw5gSEhhCaGJL62j9HI9l32J2VgF+ i8xWFpN/q7Is8V0xwTQV2HTWg1Uc0/Dk/gp6tJ2Q40IevkcraxX9WR8vgxLryNbY VVXcU7Jg9PTxaIa24Yt2hgT7yaUgw52whSAZIPMiDa7paPpY/VFPpUl0vrAbU9Q8 CQX2yybDLUvcwaSuUptECKnE73Y1mue0 -----END CERTIFICATE-----Generated at Fri Aug 8 20:45:31 2025 by rpki-client