$ rpki-client -vvf rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft File: 64P0iA8jV15XUXhcbgqyvgskm8M.mft (raw, json) Hash identifier: b1kGn+AeSZtQ0AsHeyjB/85IrOzGu2Grsz5dQbG5MTU= Subject key identifier: 35:EA:98:DB:D8:C4:01:D0:56:34:00:10:4B:4F:29:18:2E:A0:39:82 Authority key identifier: EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 Certificate issuer: /CN=A917C0F3/serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Certificate serial: 6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft Manifest number: 6C Signing time: Sat 09 Aug 2025 07:24:17 +0000 Manifest this update: Sat 09 Aug 2025 07:24:17 +0000 Manifest next update: Sat 16 Aug 2025 07:24:17 +0000 Files and hashes: 1: 64P0iA8jV15XUXhcbgqyvgskm8M.crl (hash: pLMMxbeOluPqMEykV423iQVKCwDD4H6jkdOD+s8jwEU=) 2: 028452F0D0BA11EFA8B5A526C4F9AE02.roa (hash: IREGMcYzyBbo6wcvGexVHMAjLf7W6LD1j2SfUrLribg=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917C0F3, serialNumber=EB83F4880F23575E5751785C6E0AB2BE0B249BC3 Validity Not Before: Aug 9 07:24:17 2025 GMT Not After : Aug 16 07:24:17 2025 GMT Subject: CN=6896f7a1-6f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cd:cd:11:d2:9b:f1:80:14:58:7f:dd:b6:fb: a5:0b:30:54:96:85:49:eb:40:d8:80:6d:d5:dd:14: e9:ff:e0:bd:60:f2:d9:f3:a5:47:c1:82:7a:3c:1c: bb:39:63:4a:72:0c:e5:df:2c:1f:8a:88:33:04:46: f3:a0:e4:02:0b:48:c8:3e:83:5f:52:55:51:d9:d4: 58:66:1c:2e:69:ca:40:bd:ac:1d:42:90:20:c9:28: cd:8c:03:95:2c:16:3b:68:d6:85:d4:d8:ee:da:b8: 46:4b:09:ba:70:a8:ba:75:a4:a5:29:d7:72:e9:ab: 97:d0:b6:dc:48:21:90:9a:0e:94:3d:13:30:86:bd: 7c:84:24:95:b7:0e:41:72:09:4a:0f:18:98:ac:9b: 87:17:2a:e5:fc:7b:37:0f:e0:25:e1:7c:c1:17:9b: a8:3c:5f:56:20:32:13:3c:ee:e1:aa:53:5a:b3:b0: d1:e9:44:29:20:50:b2:dc:d4:b0:79:53:90:d8:7a: 52:36:48:79:de:6c:5e:15:86:fc:ac:ba:d1:b6:65: 55:01:6a:70:4e:f4:d8:b3:e9:72:57:79:21:2f:0e: 2f:3e:fd:57:cd:d3:ad:9f:44:b9:dd:7f:ce:67:b1: 37:01:6b:07:2c:a0:af:55:52:2f:41:59:90:39:fd: 11:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EA:98:DB:D8:C4:01:D0:56:34:00:10:4B:4F:29:18:2E:A0:39:82 X509v3 Authority Key Identifier: keyid:EB:83:F4:88:0F:23:57:5E:57:51:78:5C:6E:0A:B2:BE:0B:24:9B:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/64P0iA8jV15XUXhcbgqyvgskm8M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C0F3/58FE74AED0B911EFA0848825C4F9AE02/64P0iA8jV15XUXhcbgqyvgskm8M.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 84:d9:ac:2c:fe:47:f2:25:27:55:2c:c0:8a:5a:2f:71:14:a1: e8:30:1b:31:1c:fb:a0:1a:3b:06:e4:f6:f9:51:d1:b8:68:7b: 72:85:c3:04:c1:e0:1c:d6:ca:d9:48:64:c3:7d:12:5c:89:8c: 89:bc:25:b4:47:c7:bf:9b:18:1e:d5:b3:24:d7:42:3d:86:59: df:05:0c:07:97:4f:11:5f:1f:3b:d4:de:8c:df:20:9a:c8:b3: 67:f9:8b:21:67:08:b6:cb:87:d0:da:54:92:07:02:93:26:0a: 37:0d:4e:de:75:27:bf:64:7b:a4:a6:7d:e8:b8:fd:55:10:0b: 04:ab:ae:ff:46:dd:42:ac:d7:da:7a:b2:52:32:bc:53:b0:98: ae:89:09:44:d2:dc:8f:6b:4b:69:d8:3a:e8:45:3b:df:65:75: a6:81:a6:b1:35:8d:4b:46:4b:55:45:ef:82:b9:b3:e3:7d:4c: 2b:9c:5b:b0:51:47:bc:a4:6c:93:94:44:ff:98:73:30:b6:fd: 89:09:45:86:33:29:ac:95:b0:49:77:0d:af:42:88:70:e6:17: 35:a6:bf:1b:07:21:22:26:82:88:e6:0b:53:f1:df:f0:b2:cb: 27:53:c4:9e:a1:bd:a7:66:a5:19:d6:40:ae:4f:6b:dd:b7:8f: 79:30:25:2f -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 QzBGMzExMC8GA1UEBRMoRUI4M0Y0ODgwRjIzNTc1RTU3NTE3ODVDNkUwQUIyQkUw QjI0OUJDMzAeFw0yNTA4MDkwNzI0MTdaFw0yNTA4MTYwNzI0MTdaMBgxFjAUBgNV BAMTDTY4OTZmN2ExLTZmNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9zc0R0pvxgBRYf922+6ULMFSWhUnrQNiAbdXdFOn/4L1g8tnzpUfBgno8HLs5 Y0pyDOXfLB+KiDMERvOg5AILSMg+g19SVVHZ1FhmHC5pykC9rB1CkCDJKM2MA5Us Fjto1oXU2O7auEZLCbpwqLp1pKUp13Lpq5fQttxIIZCaDpQ9EzCGvXyEJJW3DkFy CUoPGJism4cXKuX8ezcP4CXhfMEXm6g8X1YgMhM87uGqU1qzsNHpRCkgULLc1LB5 U5DYelI2SHnebF4VhvysutG2ZVUBanBO9Niz6XJXeSEvDi8+/VfN062fRLndf85n sTcBawcsoK9VUi9BWZA5/RG3AgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUNeqY29jE AdBWNAAQS08pGC6gOYIwHwYDVR0jBBgwFoAU64P0iA8jV15XUXhcbgqyvgskm8Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdDMEYzLzU4RkU3NEFFRDBC OTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1WFVYaGNiZ3F5dmdza204 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNjRQMGlBOGpWMTVYVVhoY2JncXl2Z3NrbThNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdD MEYzLzU4RkU3NEFFRDBCOTExRUZBMDg0ODgyNUM0RjlBRTAyLzY0UDBpQThqVjE1 WFVYaGNiZ3F5dmdza204TS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAITZrCz+R/IlJ1UswIpaL3EUoegwGzEc+6AaOwbk9vlR0bhoe3KFwwTB 4BzWytlIZMN9ElyJjIm8JbRHx7+bGB7VsyTXQj2GWd8FDAeXTxFfHzvU3ozfIJrI s2f5iyFnCLbLh9DaVJIHApMmCjcNTt51J79ke6Smfei4/VUQCwSrrv9G3UKs19p6 slIyvFOwmK6JCUTS3I9rS2nYOuhFO99ldaaBprE1jUtGS1VF74K5s+N9TCucW7BR R7ykbJOURP+YczC2/YkJRYYzKayVsEl3Da9CiHDmFzWmvxsHISImgojmC1Px3/Cy yydTxJ6hvadmpRnWQK5Pa923j3kwJS8= -----END CERTIFICATE-----Generated at Mon Aug 11 01:54:29 2025 by rpki-client